last executing test programs: 6m45.727009361s ago: executing program 0 (id=177): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) getitimer(0x2, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="050000001a0000000100"/24]) dup(r0) r2 = socket(0x10, 0x80002, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x7000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x1601, 0x2000402) sendmsg$nl_route_sched(r6, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpeername$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 6m45.151486731s ago: executing program 0 (id=179): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x7000) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket(0x29, 0x2, 0x5) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRESOCT=r2]) chdir(&(0x7f0000000140)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x1601, 0x2000402) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) syz_emit_ethernet(0xd9, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800440100cb00640000060690780a010100ffffffff4414f640000000e2fffffffa0000000c0000007f004411eb2544720b7798b10605c9b7df0a0a010713b67f000001ac1414aa0a010102ac1e000100004e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8100000290780af222097e1dfc9a777542000000073ba9000b2983f1baec2c4dd3f6034fd337d164fdc78be2370afcc43c2ff38fe738be8d74905948aea2f4e9c47d52bcb719f07dc9f1e228cc2143c8a21b4b4f820baeb844b6fbfb21c9abe94408b5799599a0c8682f9c50db2531"], 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000240), 0xc7a, 0x8aa83) syz_init_net_socket$ax25(0x3, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 6m42.828096991s ago: executing program 0 (id=185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001400)=ANY=[], 0x118) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x81, 0x4000105, 0xdd6, 0x8002, 0x9]}, &(0x7f0000000400)=0x54) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2400000000000000290000003200eeff00000000000000000000ffffac1414aa", @ANYRES32=r0, @ANYBLOB="0000000014000000000000002900000043000000f9ffffff00000000"], 0x40}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x58}}], 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) (rerun: 64) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xf, 0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x521440, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0x4018aee2, &(0x7f00000000c0)=""/26) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000038ff4f40d31319326779f102030109021200010000000009040001005e8b1500"], 0x0) 6m41.840183064s ago: executing program 0 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0/../file0\x00', 0x80903) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x10) (async) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x10) dup2(r2, r2) (async) dup2(r2, r2) 6m41.515040272s ago: executing program 0 (id=193): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) ioctl$CEC_DQEVENT(r0, 0x40046109, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tee(r2, r1, 0x4, 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r4 = dup2(r3, r3) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x0, 0x9}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100) (async) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) (async) ioctl$CEC_DQEVENT(r0, 0x40046109, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) tee(r2, r1, 0x4, 0x8) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) dup2(r3, r3) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x0, 0x2, 0x1, 0x0, 0x9}) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') (async) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) (async) 6m41.285316305s ago: executing program 0 (id=194): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000d00)={'#! ', './bus', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xda\xfd$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9!\a\x12\xa9\x18\x93C\v79?L\x98e\f\xb5\x0f8\bH\xa8l\r\xfb\xd6>G\xf5\x11dV\xc9ty\xdaJ'}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqjG\xf5\x11dV\xc9ty\xdaJ'}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff}) setns(r0, 0x8000000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup2(r0, r1) 8.713821798s ago: executing program 1 (id=1865): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88080) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x400000}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)="ecb812fe4638809397cc1d6f3d952919a9dd128b55b8ae061a42e59338b1d5e13c18f3039af6a14187b423265497f6b7e983720e53dd0280f0d162e93d070fb2998563508a54489f2c211015fad080b0cfbe2ce2837cfcc727457e5a386c7bb8a6afdb102c1b50ff4f08bcbe9c0a81da98fea3c67ae133d0c685100d126d8db1ab58a3fda3b488eafc60f7612d7d92493e0d4fb4d4517612d9b4533c03023f6eb373c8e228fd404aed168ede22aabb586dcf0fcdbbd157accb8b", 0xba}, {&(0x7f0000000140)="7d14f4df236f46b41407dec24f369da1d3d6d46054b2e0d69e28cd14bb0edc252603641e2d5e74d7f1f466618c63d4914a855e529ac5f80de1b7", 0x3a}, {&(0x7f0000000180)="475f94252e3ff82f4bff4281d30438374fd1b3310872085dd779b4f221b44e3e9fa0d522b35ca0ad3b06ba2d23a33f99030beb1783730a76b25fb8911bfe3f1865a47c2f987e569623243819986a85563c90f059a4a554b829e7f28a1e4654adcbdc7361995e40787514a64309571269ee97c379a8b8db812e1c1e33dbfee18b17698480d2d1d182dd5a7bdd54c82c67b4f45b8e29b4f99fcdb8c15c14d516a186538c13b36eeb427afe95effce5d6b37e6f3c94640e712baa1b6e0773e761ac5dd595443c4eb1e5439e4d", 0xcb}, {&(0x7f0000000280)="349687147821c783d6f05d4c2ed8d45e8e971a613346df54f7424430d3660e6bfbb4aee753698a00f62b83df5ef4d549aab10078c20acee143ed610d1f3cc227b97ad67ca0b37f8d941cbafd59d37ea37c9ac6e2b6b93214ae1b5c16e7c3993e00fd3b7b0e4ca719e3eac1b770daf75c2e7cfd3485d2a98ab4f6b2e3ee544cba821df8982866bf4da563f58bbde19109", 0x90}, {&(0x7f0000000340)="20f5cd14905e66b66f20721eb613721c09719d7a433b5204cacd554a239af7fd2748985ae4d0cf85c912c07563b205b26c017a37bb55439131377d5d449a8f50f1fc6a40c2395df0570c0afc40f727b781", 0x51}, {&(0x7f00000003c0)="822d1825fd7b91b6232a550db7dbb74c0bbe4d3cd737be06c3ef1d6bf9df171ed44d55abbe8081219a1545a3998206d373db79ee0100b7c3d1bf85f848dec58f1e6246f618814a78e81f4ef0b2ea93d73d73bf0dacdd9f3fc35f399023227d623cb052bb1cdf77e88db3574b11fab4a75eb004626f1160b241f3b23867b68c8d936961fc32b40f91adfa0eda60a111b0c646425f98a8644058e892518f7f0b31fb247aeebfc4a5182b86ca7d8cbd56a6b77cf162370c90e6ca40a6ab0551fe3f1cee35df", 0xc4}, {&(0x7f00000004c0)="266df4b212f22b25fa1af17758bef8f0f889bd9e02e83fcb0c645a822e3e5a2dbfb47c17aa2e9b9af88d527867c94bd0e8e39bd620414ba010957b6244e2e22b51", 0x41}, {&(0x7f0000000540)}], 0x8, &(0x7f0000000600)=[@hopopts={{0x1178, 0x29, 0x36, {0x4, 0x22b, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x400}, @generic={0x4, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}, @generic={0x0, 0x8b, "1dc50bc080d2a0387f7640164042c55c412f807e6f77c0428bad653b04e92baf5eb4c4d0b38c04a285d94afb6cde368bb04e21875fb184d0a90b1ca9779d0315ec07eb510b7a73bcd6ff03f4db5f90fbb32143f972e69d79d9f99d2f506f22cc4ff9a51685a13334a83f7e9537e55aeb15828f0ffaedbce837a2c78e28b99cc2142dfac3ca47598b99c58b"}, @generic={0x0, 0xa4, "38a6ea1acb9b7403d1d1b8be6e2d4429fa52a79a9049757e4c0cb94461eb626e4e5a526845ad473062ac14e9b13d98d60b3b264aa0c7cd60e83144d86b326d2c1fde707b2b9ec124e08b05ef25d39c494f00df3ebc6dc6c5d8ba4b8c9dd242c4034587fb74288e389ebc0daf848748feb5d903b07f4b060dcfa973fed6256e755a965a9d082438baa18391071dc70091a88ca27b5a4273ace666b2d11b0d1b47a05eff3c"}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x32, 0xe, 0x0, 0x3, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, @loopback, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}], 0x1200}}], 0x1, 0x20) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) read$msr(r0, &(0x7f0000001840)=""/124, 0x7c) execve(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001940)={[&(0x7f0000001900)='\'&\x00']}, &(0x7f0000001a80)={[&(0x7f0000001980)='*\'\x00', &(0x7f00000019c0)='!!\x00', &(0x7f0000001a00)='\xff\xff', &(0x7f0000001a40)='#%\'/+{\xfb!\x00']}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001ac0)={0xaa, 0x140}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000001b40)={0x5, 0x3, {0xffffffffffffffff, 0x1, 0x6366, 0x1, 0x8}, 0x5}) r3 = syz_open_dev$vcsa(&(0x7f0000001bc0), 0xe1f0, 0x5a1723) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000001cc0)={&(0x7f0000001c00), 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x884) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000001d00)=0x5a, 0x4) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001d40), 0x34d1c0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001dc0)='htcp\x00', 0x5) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000023c0), 0x201, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002400)={0x0, 0x0}) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000002540)='./file0\x00', 0x2000, 0x100, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000002780)=[{{&(0x7f0000001e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001e80)="74199168a25e2ff61db0361a777f6463b7a5ab20f327929cc36628853526450360ec1c9227648a27f23e08aa703a42f51558800ccbc3a4fa9a2c58ba971e8b3727b2e543e38ac0708d24036c6299105ec4926423c0a81c9876071ca10ee4dbfb2dcbb163aa459562acafef2b50bf8d033c097e7bc269a1b2ce29b637efc05791a29f1343e0ed9a", 0x87}, {&(0x7f0000001f40)="1353c2003c40c7c1e092175a9d5d74acb69c93ccbe14379dcb9a0a6c852c55343b016c4532cbcbf1c146c55477b4a0f9cc94c9c6ddee390adc645519be465b929f7c4f6a00be6fb4b44c72a483de734b153bd2f50a734e6c0fe762b6ca1c81e8d1dc6f6d0a46f1e21c5c89bc4b957bea5fb8aeeb7caf121fbf1d807f737a3a376197036bec6de9ba6e8c66ddd275b65e64bf4e59f7f73853c5e50a45ec7adfe87a891d4c0c9bf1785966", 0xaa}, {&(0x7f0000002000)="890b2c27acd49ffbd21994daa712e4069f7ca32444cb091116b99667878aa204a9187ee1e50eb122bc471a3e322ac2a6f680dd96a72f24a08f71d5d849525d3302999e60bb4001aaeb30a139b1d5488682fecf7d74d7c379ba1b931a5856084a5dfe", 0x62}, {&(0x7f0000002080)="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", 0xfa}, {&(0x7f0000002180)="5789149363faa16d00d7fde21679d78101ca869337e7b356cce7f791037ae5c46473f013221efa36978e772a260ea1037fa8e69349d674f4c7e339d81b632cf267c44bb170a94618d03acf447115ee75b0f4671c6e87facca69132e93b267e0da23974d7928beee97229e3e0cf81a7920ff3b83e780674443bdcf26b097e5158c7f1abd1647117f00adb8deec4e7bdf9a42ba99150111995b51fd2198e13349cec5be8ab570d76e384465d165ecc", 0xae}, {&(0x7f0000002240)="f3575d84f608f752358d6a99d6744585d7656bee7a30d6c770197d75c6e1c07a2ae86d753579409ed765e7b82f4f80be0ee8b15b694c2c", 0x37}, {&(0x7f0000002280)="7746373e52d7328017db101979d5f4142210668f51684e1d70f15410531e58bfe97b1abfc4d39c551da479b338d58762a0e7bf925662e6d838b5f42ece94ff11ba38fafbc3", 0x45}], 0x7, &(0x7f0000002680)=[@rights={{0x34, 0x1, 0x1, [r4, r3, r0, r2, r1, r0, r3, r3, r5]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, r4, r3, r5, r1, r2, r3, r2]}}, @rights={{0x1c, 0x1, 0x1, [r6, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r12}}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0xc8, 0x42000}}], 0x1, 0x20000040) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000027c0)={0xffffffff, 0x3, 0x1, 0x0, 0x1}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000002900)=0x1) socket$rxrpc(0x21, 0x2, 0xa) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002940)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x80, 0x94, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7, 0x59, 0x1, {0x22, 0xcc0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xa, 0x1, 0x4}}}}}]}}]}}, &(0x7f0000002b40)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x110, 0xa, 0x2, 0x7, 0x0, 0xf2}, 0x15, &(0x7f00000029c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7fffff8, 0xf000, 0xd, [0x3f30]}]}, 0x2, [{0xde, &(0x7f0000002a00)=@string={0xde, 0x3, "cac2d48dd5489223322837e798280aeeda2d8fb012876d54af61be7e24d40599d0d172c4ae7c91429b52286b48d59bc7254b888ad7f0d76da7b599bc7ef94f3ea00558f62dd7a73eb727552d02124b31a023e9d6d298a6a621c0ef519711831d684d84432056dba11479bd056d4e12d1f466e3bcb2fbf058f447068c1dbcb7b759778b0218df67f39854446e42eb8901e10a45b68accb6f7b62c690287907976e21069f234733f0e94a732942828d88733f123139fdf6ff7e8fd677d2d0d24f887f130f4ec728b8875bf5d6b437fe92fae82463477948229e716e957"}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x44b}}]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000002b80)) r14 = syz_clone(0x20000000, &(0x7f0000002bc0)="81574355735c8237058663b471068124290a99d60b01f0620ad2ff60d7a2e6559e840a668cc14bbf78ad9d03df4ff7cb5af288750c5bb836702f52f7224b4c59467a9445e40565452396a3ad30f485d86da76d47aa8553a24c0bb098debb588e34c91d523db36c8fad6c81d6ecf57cf8503f22bc3b4dbb2e0afe7fc5ab6d463ba5839e2896e41686d1fccd30283fba7f304c8262a5517b465a65748e3fc0fd21d6b4a622c6bb7dad3b625c2478b9e33f18613ff94459357fd99941372ac01ec2cfa6852424292fa188c6ae03b8cc572e3c13f367137102cbcc24a9d801870c7b", 0xe0, &(0x7f0000002cc0), &(0x7f0000002d00), &(0x7f0000002d40)="ccdc44c093699cef04ba4904929786b654b957a628d15a") openat$mice(0xffffffffffffff9c, &(0x7f0000002d80), 0x800) syz_fuse_handle_req(r3, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000007940)={&(0x7f0000004dc0)={0x50, 0x0, 0xde, {0x7, 0x29, 0x2, 0x200200, 0x9, 0x1, 0x7f, 0x5, 0x0, 0x0, 0x20, 0x8}}, &(0x7f0000004e40)={0x18, 0xfffffffffffffffe, 0x6, {0x9dc}}, &(0x7f0000004e80)={0x18, 0x0, 0xe55, {0x2}}, &(0x7f0000004ec0)={0x18, 0xfffffffffffffffe, 0x81, {0x7}}, &(0x7f0000004f00)={0x18, 0x0, 0xbe47, {0x3}}, &(0x7f0000004f40)={0x28, 0x0, 0x6, {{0x7fff, 0x4, 0x2, r14}}}, &(0x7f0000004f80)={0x60, 0xffffffffffffffda, 0x1775, {{0x7, 0xfffffffffffff88c, 0x6, 0x2, 0x4, 0xfc53, 0x6, 0x5}}}, &(0x7f0000005000)={0x18, 0xffffffffffffffda, 0x8, {0x5}}, &(0x7f0000005040)={0x18, 0x0, 0x5, {'#%\'}@/+\x00'}}, &(0x7f0000005080)={0x20, 0x0, 0x6, {0x0, 0x8}}, &(0x7f00000050c0)={0x78, 0xfffffffffffffff5, 0x2, {0x81, 0x8, 0x0, {0x6, 0xfffffffffffffffb, 0xca, 0x8, 0xbe, 0x1, 0xe32, 0x1, 0xffffffde, 0x6000, 0xe0000, r11, r10, 0x3, 0x7}}}, &(0x7f0000005200)={0x90, 0x0, 0x9, {0x4, 0x0, 0x2, 0x9, 0x4, 0xd, {0x6, 0x2, 0x1000, 0x0, 0x9, 0x5, 0x2062, 0xffff, 0x1, 0x4000, 0x6, 0x0, 0x0, 0x300, 0x6}}}, &(0x7f00000052c0)={0x10, 0x0, 0x4a}, &(0x7f00000054c0)={0x1f8, 0x0, 0xbcc, [{{0x4, 0x2, 0x2, 0x2, 0xfff, 0x8, {0x5, 0x3, 0x0, 0xff, 0x6, 0xffffffffffffff7f, 0x80000000, 0xc2, 0xfffffffb, 0xa000, 0x80000001, 0x0, r10, 0x7, 0xb0f6}}, {0x4, 0x1, 0x10, 0x5, '/dev/input/mice\x00'}}, {{0x1, 0x2, 0xffffffe000000000, 0x45, 0xffffffff, 0x8, {0x4, 0x3, 0x3, 0x8, 0x7fff, 0xfa2, 0xe248, 0x7f, 0x7f, 0x1000, 0x101, r9, r12, 0x0, 0xffff}}, {0x0, 0x200, 0x4, 0x10001, '\'^}g'}}, {{0x4, 0x1, 0x401, 0x4, 0x8949, 0xe, {0x0, 0x6, 0x9, 0x101, 0x6, 0x8, 0x7, 0x3, 0xd, 0xa000, 0xffff, 0x0, 0x0, 0x4, 0xffffffff}}, {0x6, 0xe5c4, 0x5, 0x0, 'syz2\x00'}}]}, &(0x7f00000056c0)={0xa0, 0x0, 0x0, {{0x5, 0x2, 0x1, 0x100000000, 0xf8a, 0x7fffffff, {0x2, 0xffffffff, 0x4, 0x5, 0xffffffffffffff3d, 0x9, 0x4, 0x5, 0x200, 0x8000, 0x4, r11, r12, 0x7fffffff, 0x89b}}, {0x0, 0x6}}}, &(0x7f0000005780)={0x20, 0xfffffffffffffff5, 0x7, {0x7fffffff, 0x4, 0x5, 0x7}}, &(0x7f0000007800)={0x130, 0x0, 0x800, {0x0, 0x74, 0x0, '\x00', {0x2120, 0x3, 0x5, 0x9, r11, 0x0, 0x1000, '\x00', 0x100000001, 0x3, 0x9, 0x400, {0x7, 0x5}, {0xb6b, 0x9}, {0xa2b, 0x6}, {0x26445c5, 0x1}, 0x4ba, 0xf1c, 0x3, 0x3}}}}) 7.815038122s ago: executing program 5 (id=1874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x6, 0x10, 0x3, 0x1}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x8, 0x200, 0x5f2, 0x9, r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r8) 5.935209104s ago: executing program 5 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00410000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB], 0x2c}}, 0x0) 5.855150533s ago: executing program 5 (id=1886): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x76, 0x8, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0}, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r2 = dup(r1) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f044, 0x1}) 5.415557611s ago: executing program 2 (id=1888): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000030c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffb}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x161500) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000000000)="267600410f01b00000800066b88e000f00d066420f3a14ce5736430f0164b107b8050000001fb9060000000001c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x54}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.413125297s ago: executing program 1 (id=1889): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) read$msr(r0, &(0x7f00000001c0)=""/116, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rpc_stats_latency\x00', r0}, 0x18) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) move_pages(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x83, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x5, r3}) r4 = accept4$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000540)=0xe, 0x80000) connect$bt_l2cap(r4, &(0x7f0000000580)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe) set_tid_address(&(0x7f00000005c0)) mount(&(0x7f0000000600)=@nullb, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='ext4\x00', 0x4, &(0x7f00000006c0)='-.[&+&\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x174, r5, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7331, 0x3f}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x511}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xab00}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3000000, 0xe, 0x100, 0x7, 0x2, 0x5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x250}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x9b73, 0x2]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x0, 0x3a, 0x1, 0x3, 0x866, 0x0, 0x3, 0x0, 0x2e, 0xfffffffc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffcc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000980)={r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f00000009c0)={0x18, 0x1, 0x0, 0x0, r3, 0x1}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000a00), 0x34400, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000a40)={0x0, r6}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000a80)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r4, {0x5d2}}, './file0/../file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x1f4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20048888}, 0x40000) close_range(r2, r1, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000e00)={0x10, 0x0, "c1b844c2efc467c5b9b3d5b1d282cd90"}) bind$pptp(r6, &(0x7f0000000e40)={0x18, 0x2, {0x2, @loopback}}, 0x1e) madvise(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000e80)={0x14}, 0x14) sendmsg$NFT_BATCH(r6, &(0x7f00000017c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x728, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x124, 0x3, 0x0, 0x1, [{0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "c33945ee3a9e6bc2353f5d4d408a8fbc648e"}, @NFTA_DATA_VALUE={0x31, 0x1, "54cc9057ebb7a4b6bde738903e2070895784330e9c3b2d44d9832f80f584435e0f2d59b8a50c5e0186c07d3aec"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3ff}]}}}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "ad055962ed89d2a11e51832e99ea28d71bbb5c1dd53f0dd5242cbdb539a6e4dd286847c8d41d1871373bc95027e22db43cbb2fd8cca43e8953b351f376516cc21cb4"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5d8, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4d}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "feac326283735ee0f3d48cdd3bde11c535713f5d6b0305a5cb8ad8a00b8c11a02c24ab9ccc0ec554df2fc78faaedb89e280a2a7baf5e029275891e5fb476119b174201b6e92ab3e94a6a95f720fef384b5b1d1c111930e"}, @NFTA_DATA_VALUE={0x31, 0x1, "0304435a9fe7b783fe706bcdbdddc78ebb5f883d2898db00a7a013e095adbb39171bb0ab1c6e0aea406e6957c0"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4b2e}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "8b03e87c8939d5feb972e46771132ae37fa59466e571414c6f736b23125e3330034598b25d71ee7982af0c376ed611fd00f34bf1fdcf073bf829b8c68f0903f82de399b6722b45cdfd52bcf8bf9e21bbf109baf3ed7b54"}]}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x24, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "6deede1840bce38390856c629512d47f89c203f3"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x67, 0x1, "91b06e18212216117bf575d766e3e4f9a094ed05f759e59ccca9851e7b32fc02aec695972fcb8c194200ff4061ae4ae6e08eb1394089a827e8cefb556d7d3d55188c5b5b4e72c037803695d6d7ec6bd6eb5255e429d04d36a59ffa027127fa5dd80ea1"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x29, 0x1, "cf1ad0439140819721afb4e03fd4dc3f45bb6c60e76e71c26e209f79cd055e041daf13144b"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x74, 0x1, "be31e82419cdc16e9cd469bdbbedd3a81b2caf4e9b750604263b70fc8811773fcd579e0eb111f631a6167ba8422c7a087017fc8cad24129e95df4d2b78400faa2f032bd7f5056a2c7e7a3d48647d592b56aeb86038fd24e0dbe499b98409c80f6e9e4a886297b9a093e2ec6792018e86"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xfc, 0x6, 0x1, 0x0, "aacf5f42c96a0346f6eb006cafc4f4450f7537a5bf95959f2c1a3c8acfd053c51d5b30f1f4c43d4b5815a3e406acc09a3c41e2bbe1ee50cc534375d5490253bb49d148a92a4f88394092421e6209d06c545aa934b3d4367b3137a427830b4d422a62ae4d713a4e74b33d24fd22c6824b08e23512a5179d95d535e91407534fdcf1ea85e9558640500ac45f2c3e5154c74e4e52ef6e5919b47d68d482667e16823af73a75e92b8bf570d280ca81bca01fc7d06fa5a95a6df20be4a0b215bb78720dcfe4577dc19283e4e77c17e4c779426b5897e20cedb67c9f7c416829aed50f6308c4d4852ea78a0121f40a6af40e8013ec9d9590b2fc29"}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xa5, 0x6, 0x1, 0x0, "3c55bd99a6cab13883194bad6e123eab1a533e1ee1ccc16ca254159cb87f8adc60834f0745dea6151d2ea97c2ebf2c62fe8eb2667750a385ff5787ed392b7d57cb2eb150e2e9a9de176d5798c9e89224b931304055b56eafc1cd327fccb71f5a25536c010383a5fa3249cc2ec5d78698e1b54b43b40f42ea528c7b252f9ffc6801975cf61053a55e056aff3152ed22cdbd58fb336c8e2e09f4a218653bfd943ab0"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x85c}, 0x1, 0x0, 0x0, 0x1}, 0x40081) 5.411924954s ago: executing program 1 (id=1890): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x200, 0xffed, 0xd, 0x9afc, 0x8, 0xffffffff, 0x3, 0x4023, r2}, &(0x7f0000000040)=0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$kcm(0x10, 0x2, 0x10) r3 = fanotify_init(0x10, 0x2) fanotify_mark(r3, 0x80, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r8, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2) r9 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r9, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a20014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 5.251054392s ago: executing program 2 (id=1891): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = mq_open(&(0x7f0000000000)='ramfs\x00', 0x40, 0x91, &(0x7f0000000040)={0x8, 0x324, 0xc, 0x7ff}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000000c0)=""/182, 0xb6, 0x5, &(0x7f0000000180)={r2, r3+10000000}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r4 = socket(0x3, 0x80000, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r6, &(0x7f0000000280)='net/raw\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000f6a000/0x3000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c41000/0x3000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x53) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.742071628s ago: executing program 1 (id=1895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e000000080003001187cd15ca0e391efef6990958cfa5b94f17a371ef608cfeac9e5d2e27d0149549ccb9f7c298a3f357d195f88bfe7d14938d996ebea589811711195f5115b3dfd2635ae42401d9a0a265f0e2df2feb3294cb4ffec11310b8839fd5aca7c80b3f5d43ff3dff6340d1e35bfc194b6adcf99a54e0321c05e84961d2ac6f599f82ae2854b4748807aa32669cde788fa93661b1fb2a36fee8ed1c353127c96fe3f412ff4d7b9570e8ddce785ca8c471aeda1f8431209a7d5c0d338126a245bb644a3e9f5ed3b576d30aee161ba8b8e5c8a6", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a004f00ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e000000080003001187cd15ca0e391efef6990958cfa5b94f17a371ef608cfeac9e5d2e27d0149549ccb9f7c298a3f357d195f88bfe7d14938d996ebea589811711195f5115b3dfd2635ae42401d9a0a265f0e2df2feb3294cb4ffec11310b8839fd5aca7c80b3f5d43ff3dff6340d1e35bfc194b6adcf99a54e0321c05e84961d2ac6f599f82ae2854b4748807aa32669cde788fa93661b1fb2a36fee8ed1c353127c96fe3f412ff4d7b9570e8ddce785ca8c471aeda1f8431209a7d5c0d338126a245bb644a3e9f5ed3b576d30aee161ba8b8e5c8a6", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a004f00ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 4.500870764s ago: executing program 1 (id=1896): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r3, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000700000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.459146127s ago: executing program 4 (id=1898): syz_emit_ethernet(0x46, 0x0, 0x0) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffe, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000002340)={0x0, 0xc, 0x5, '\x00', &(0x7f0000002300)=0x6}) syz_io_uring_setup(0x1b7a, &(0x7f00000000c0)={0x0, 0xc318, 0x8000, 0x2, 0x264, 0x0, r1}, &(0x7f0000000040), &(0x7f00000001c0)) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x27a) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x10, 0x20, 0x7fffffff, 0x48, {{0xd, 0x4, 0x1, 0xc, 0x34, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @private=0xa010101, {[@end, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0x9, [{@local, 0xffffffff}, {@broadcast, 0x7}, {@broadcast, 0x7fffffff}]}]}}}}}) sendmmsg$inet6(r5, &(0x7f0000001200)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @private2, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="f4efba01f08189932c80f1a4c7b6b06b094734acbd1a5a13956fdd21dd2559090ac7947c49ef692ffa4b9ab3bea6bc4dc45381db8a8d422b2904b61fb8bc344090bb8054c4ab76329049", 0x4a}], 0x1, &(0x7f0000000480)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xcd7}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r6}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0xff, 0x7, '\x00', [@ra={0x5, 0x2, 0xfff7}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x6, [0x3, 0x0, 0x0, 0x7, 0x0]}}, @jumbo={0xc2, 0x4, 0x8}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x21, 0x8, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00', @local, @remote, @empty]}}}], 0xf0}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0xffff, @empty, 0x6}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000600)="5b9306b53817e247838d6aef7d4c023bbbd335ddf0aea369b13be30c4373239c1709fc77fa7592c29e63927cd3a05a13a6456d64530866e6bd9998e26238a73e446a0c166ed94cbe07a13d29901f0d7e3ffff1a01788acd63791715344920bad91e7d83d", 0x64}, {&(0x7f0000000680)="67e82edb2def6bbaa1f8cd58341ede67d936df5ef452d493d73683d81f75e9619242da6c7089bf3ab62a1c75d5bbc4599250f8989aed550166a71b0b4d1cf5b77515fa3988917d2e66853b32ca32c1aed3f0c6f016b56b45", 0x58}, {&(0x7f0000000700)="7681826e672a7daf316f994f3825d58dfa969cca1407c6139bd55601e114251f3349036238f56d15cca7303d3bb9233ace8a99e5bafa29c9557e2493a950692a4d44c90e74e5ed361ca05941e06f104b912f2711b11f1db2d75fdf384ef3bd4566625ee2526a2061a6ec53771fe0b7711c92e6d89670e8f76d9d43681da303107567b0edbc248c79e75c36e41432cb8795361a24f9057b3be1cde51074d22ab63281e98827d6e69f3382c255bdd0d2fc558926dcfb6c7692e4a69a3a13b637463c02757ef1dd3b49b94a820bd9546c75432959cb4a73eaae2147a15c34d9288abf58911c6ca28bf730612893e7b5", 0xee}, {&(0x7f0000001300)="9a25475debd2364bbf5032c79448cb51960891f7317e1307b18883e78ae16390e1e30cd94eb03a92242edaecc3addc4a674aa773f5d08eed65ff28e0432ccbc36acecfddebd70868711c44e783fc78194c4b7c75b0c341cb6aefaf8a3bd2e14d347ba1825875e0d75c13e559d619533da0473120767c71a6276bfd80c5fabcbe997a4bd0cc6e24ea5ddf7d66fb680aa6db87a739088b475a0735aa259adcebb7f814c87ca68f863dc3c3a94870c5d13cce4dfd6c7c93e52b5e19e74c2fa56094222f8cf2d911c9ab76f5e5f2d5d9ce7350feb99f99d0090fb847f44ebafca4ab8f0bdb64ae77d42c1c832a491ebe798cb102a589511428d7b167aedb74d8192bd6e13df3a433fc4b74f43440789c5d3d4dad7eae4519ad643a2b0bd4c062a1ff7075706b2e11dc075a851b5b1d0db98205cb459e1b291dab1ce4689017df22b2062ca339c4ee6828dabb018e885e3718e05f8644f3e51090faef4bab6dbf2f424c0dfa506677b35780d6346910294962cfa2e2ccff07a75071ac4b0a2f6313e9d96a5c39e7891747fc284d12a6e42d06c1fbb3403de23acb1b9a1b368a36379540c041a162d1e1c57f9adffb8fc42a30810788ae6adcab269705a41858bc570163e0fe1c8a2f6b440a9767db09740bc2f30482f6123ab8b6ffee15c6a947f6615a28942987903da65220649851ca710b5b7cc800f1285e306300985d14a554afa6d6fcab058df6f5bdc2db80052b0a9a145f0913d943667f0ecab2041374f1e66329a8ea24d8fd54fe753ec10b079ea474ef664da778ca278a655f70c89351e2dcd015b889c94b644c781942b8a19e7b43229846c5bc1eca516ea2b613875dd23e27bd72172931d0e12db6e0f43810c54bde042cce797f65e004bdbf4a74b92b46dc7b317d3a9acc7e4b990fb80bae7b3481de520975777d472509903e71a898d591d89f17464babe860829f33025083e1bc36f265a49c4bb52e251bcd70115eab2289e1234ab408397d5e7b32abf9f84895017599fbd592b008172dd5c633a43d3ed54f64362415967c54112fb4edd1e802619db5ceeb44dcfc46ff743d816a1f24f96f8f776622f40d480922e6e223fca443783eeab9550fa50e0b2565bf2ccaa151e225a3efdd75f4bc87dee2e841e51dc941ba2de8b69bf3c4f8bdafb32eb0505315c47ba4e6aab4ae7e2f411f03e5825a67cdb1a1fdcbfa548e1ad1cc755c81153d79c20792bf85af1a5371c5ab80bcd6038bc58d6cfbec0177429537813abb49333dab80d9ebfb60dacd04f6bff68b7b965b9ae6b6b1e7dcb0eedabeb4a7d8bba340729e513848b391ef768a88f75bd6cc8428d7459a330bef5e63459d90db0d9d6a19fc1d21ea98364417d3e1008eef89e9cb9a25b585888ddf4695d362a5cee8ffb142d2bbfd1abe1103ccf4a0f17f13319f0240b0b2b3df4767492e922aa3c46e96946adfbcf8d5c49f6d0371a8d3634c3b9dfd289926a0c57ae74603fbc1cea8aa2fc3ec778018803127b3314d97631cdd59efcb8bbb66ced543436a794751d2f8d43ad7008b15c22fba0fab7950453e23ac08e64311c32483f0c6dae12d5ff4c3a75ebfa67b59b9246ce1d46595ef80e041165d718ac28f455828d528a6fadc89198ce13aae0c7ee13aac70a109f1ab07d20a3f4b6b286e1ee6d2900c440460a6fe322fcb2994528d5502d7401e805f5f3df0c0daffc7194d49c8b0b4cdedf6b5f9b9725114ff276f28907b9507dc16e97edc22dfa9e3aafe4319be7bc06cc4839719714e9440998dc1c95440f7d85e762e89f7c48d582fba9ba286789096597c4beaa03251e7e298ea2beac91c09690be24a9905d7c646d6fd1825fb89f6ad0044d77b8714584cbf7230db05705bc97d3ce0cb04a455deb3d665f1069dfc9a41f2f06c209dea1bbca62c45cb17fc1fbe3db1371dff0053449ada34a4e8e0bca446a1152f4c34a907a7ed6b1d5a6c4aad18b603ceb1a0be795137822547ba9270bdb70a19f969a477863d469e6a6128c43fb57fa6336cbc320feafdc4b7cd6d50ee7dbfedc99a698e21cc54ea7311b601a3c92d835943661e03b283ed7d984267f2fc766ff55239def8c98486b859b28422f5a574c956945ff0634bc5c8448797c36ad883b977e7a1be39a439121b06aa3949004dfe831b574269a10fe4384afcc867d2ab557dcfba4393fd5c4514bf31c2e61eab22b04b28357b06f866862265290434313b1cdd19b7fda7158572c24826f95d0314f49fe192d5d5aaed700c0c50f7dde5c2b659aba87656701acf9b9c81a2a220ffe55265ea3956e9908593b4281c6d2ff3c49fc0470c820707341c5aa26f3b3cd012af904dabe82ceb02167a71052d84e632d2e62c83841a896497ec5f8943c580c83ee8bbf1b78def3c5afdff16b50abbf59b7741bb634e09f5f11958d5c0d1b0ee1e5a54fcae824a68d55d606370a8dd1268d300d81719dcfe78847d4f6e003284979107cdf12b8194e2cc10032f54814838ce0c610454b6744c5aa202b544ab2895ce744e45e83e72c204dc69142ae15011715a1aaabf8f439788ec8841d2736fca1882f347cb4a3bcab8ea353733aa4a1f74b8b0100ed47c70a1424ce3de14e51b21327579678149f55a629747f243ae8160abe616cd824be63b9648bc6b3ef270f54d2eefe607744ce78721d5f407e27d3c90d50273f2f99175fec12144f5399a9cd96d070cfeb53560311df650941cd122c129b05988b580535a3c09d1dac5e5a84b1d89221623a58adccba9e0b09b85e51400bdce890ffb97af3634b50b0e3a3651755f4c2ec69938bb6e040d065af5c647c01908ee9415ee14643122499b8bba0a82fd5fd36f6e363b8769676ad7fc1ece4e6c5c8daa5822818faa62c03d7a48b90926bc2223c43bd762ef7fdf15b6b79ac938b8faf47466ce0aed6d6e486f1423dd072857d2aa898462f83725ad4ec2e2077aff24fdbfedad90a901893fa910d70475d9535c14330c1bcf9d55fb87d95ad7af8b8287f32fa362e446755e06c4ca4cf6fa05cd48aea268f412e80eacb3884b8b34fbc6a50ecda6ccf7a4530ab2b797ce68fa155fba7a32f35c61d353519a80828c7ec0fe5b598f200b4434fe64f796d39ec994c1d04b3822cb8733708d1fa18ea3f1b2c0262d7feba9c50200701e6bea4d541dc324b31c662779aacf8242d47c67804b203ba7f6aad41fb5eb427130ed050b050f87f341e817541b81b73d8f9c87c36b5bcebf7f4ce930a9c0b71086db5b99e7a75739379a65585cb4bb031d5730b1143d1d109833a06dfe700bb3484b8320cf52d4c93eb2ca7fd71b6fed3bf6e426d05628d8f3632bbbbd3e5690d333fb9407cacff1dce42a49c20eb672dc592c4e9fb6b735c15f7bc5ebc9fb27a0c0edfe458cd099b88dc69687d060de740c853d9d553537e33a6781b3272fa7d016d670c67e904305d97742c4c7c263c8a5a2e56ab7a2065d1107427cf486c713e804d5741a60f2a18163b9c694a94a0d6356eab0cf581907a361bdf828bebc0e8895183d9947480273f38c433e914621dedc47e593c1e6d5615c611347a9f049e07a1cb6ab52589d463ff1f0d7ac6c228975ba8b5969c3fc13c2dc39c4cdd5c7b1b3aa68f53799695ffc85b58ed4b8cd54656b947f568e6eeca67493920631636986f64a4df88c15a539fa62c4b7cbcd513a1736bd6638fa60fb650b9125f1eb9aca53950792af425bce03b8db0da4fc2fc0a6ec2a4b5f9b3fa568c30ac8bf99987c4f13da8e1925403f907ca364c46059bae173ab5bdb8625fb0e069cf33ee69c6458e826da98301b6014d076093721cf3ad32fb32b20ed0663b7ecd59ec7d9a2f8fffa9ec3bdd6fb6602c9554f5d769f6b8cc9a4bec3d7e7f7c2c08a5ff540076923325e71c00d1a8c6f6aabb00a4842835bbd4b66ed14fa184696f6f628148ad8f2a69f0df4d932c230b465e12a73d65f3b1b1105e178a88b73ef54ce433fc153097c5ca5a1e6c79bf64dc7e36f636ba2666a8f22b6841325ff8625ad3fa21aa8822eb83273f49565504415d4dbadcaead11785f4ef37e9c4efe5a536e8b8d25d4026bdb1a82112b417e7c2cfb48e725d35af63c711fc2b8b77c370eb937f58c9a84d446383fa0098011d7f0ee517c949908c31eb274cc6ae3d018757ad0fe37a8a344874998d50a5d22975892e35cbc334ae10ffcefc5bd71d532606dd6a1d64429dffa40805184f25c5a2477b2005f198b6b1d4841c51c052ccc57cef1e639eb0189a3d76509d7d7e922169d302c6450679679655fb759b3f96995381201eb24ada4d8f6cc78c3cdd0d5959bfceb77043a949a66b06e0753f243b2df41277acd4557b04a662dc625108989fdca696ab03d9d475ac454785931f0c83f1f7f983dfffb2d7242a779f693e176bcf1e7f628d15f09e08d550f77998ed061ebc28e7a07d69de923677dab5c6921259712d8de9999081adbce3eeeedbb5979766411dc62ae6fc3071f9b141069728b9e7e5c35d27a4d2d16fa0752b9323b1714e9ec094dd85bd00cc86c11102b85224ff4afbb1489b806ffa89b6b1644f6774c9ff1f583c40c04129ca5e8ff960ca020d2bc3506ce95f3f48aa8013308d62e0149c55047344caf9c55be23df53089dd49d845115b7475c39c4bab831b865f4f6f661e2d2c5400c6715b8a6cb5a0d075515bf1e2fd056e7c722a4328b2ac213262c7b66ae16d067c666ce23e947499a3947d037678143edb8e599f22db678de0e410b9dd624b9583c7d1b7ef3fd016cc347b54412b66a0ec1f43be365f35407f59f771082d23e5773a9780abdf791779f41b6302b2824a573ac1ebc90a95d5521ac5370a453e32677558da3cb5bf24fb0308a788554c9d814396f83766b4d7cbd39067f1155a17c667d5f1ba4168fe5f3b386fd71ad275f5ea9175a7b739a00af75c8a216ef943a281afa19e733304f5e72635cebc0352bc6db54221ffe5f44a5ad6d41194d06c5a40e0ab9d933e7379aa5e2de2355e6b17c07399e3c44cde99c0c3627a59cf0e0314421dd5f9a4b5951b339bcd3e2c22fc214879dd92bb7d3a92b59d8fe1a20e7395c25009cbf9284138535f6c1cb5f122ce27bfae031164b707322d1c10b58a8e780bd83243453b90a729163345f8a191f862114e88925136eae7c52f8ebad267785c20cb8fb8f50f36ca3a1b51d48eeb58afd7a5e60c6e2af0a1efb97db629ad339d12f461aa727ce8c5c811dfbbeb77affbecf94939b01cf487e7a73a2c71c7f9e3ff364fd283f64a351e7de2b462ec175e4f89a84786ba8722d9ed41f864ab6dc4473c39c9921238854523b2f0a70086709d7c530bcb6a3604ec5fb4b933c3b51ef648b9289edc2f1e33fbb667a2dcfab60b3fc144afc1186af20b67f35e389e81849b9c1671dde3bb74aa15da3f088ccbf3812460197e943a8bd70efe6d4cc680d7723e5dbe8a6656050a7941e1561e15d680972dda3cde8d57d3b1e6afb77eb064b4df8defad8f4d438990867927da248ff3b8a395aaf6c657438745be12ed83cec6ee5908a292dcc9c334fd374592bc84d378b0eb57d6ed351c885851f5583aee6c197fb002a7f31768cdbc92b707d2bfee5bef8b568ca2a32b5c743fb24967ea2bc95f05e59749c8130eda18900bb7195f6b9052ddedbc3e4ca0c72c9d84980a2e03c0c07bd6eb258b6f8b4f9f6d588e51d20e1bacd8708f8b62e4581c5860ac533b7807ce72de8c42ac513a775aad555cfd91f4716c970f4956cd2e09b2ec704da7bfa3eafa87420cdedde848c913283bd43d216939", 0x1000}, {&(0x7f0000000980)="a4587cc0b82d6967b5285600a5ca0848da60bbda0109a2d75733a719603a689adae59b2236c9b369be0aa7849a0c6f8d311dfe702a17942801bd26af70f2c79c599e898e69f7f989986d38b0dd9293966faa42e05a666161826c949a57306bab654370cd07e2c550cca0f223ab365951d27a7b1f1c17e9f27d7d37b734d510281e584b0ac3df040333977f3280a2d5e923fe0638155ab673be1a96efcc5d7857cee14291ec2b83a917609f89a827d790202fb3844d5c3ef13a71eab11cc6a4a3429939833c804cf0fc448b0372a0816e474d5b08174459f58cec94fc555a86c66f1e19", 0xe3}, {&(0x7f0000000800)="e4a52f81873fa78a14f2fdb9ba4568017619942e7a2b0dd47483054289550d1050620467505aee7f928fd44b59023055aabc7280938d05922abd020e2471f9f7515b00f50fd63793361e017cc296d8420974ae6dcbbfee8d18d7", 0x5a}, {&(0x7f0000000a80)="9cf1afb3313f739a0a6be59cdc7798a716595d791eeab2eccdea6969a195ddf6096032d8a0be41f6faf15d3ae5ed46998ee2dd625c7da7ddd1b003090a388231f9d081ccc9806c2bc605775ea0ae977f252f53d3bd", 0x55}], 0x7, &(0x7f0000001040)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x11}}}], 0x48}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7873}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000010c0)="a8e0879a17a515cbdee38700a46f0270235591d22b451d6d94a187af24eb74b94f35815e74fbe5d6b5ba2a573fde722f79d955aa5116325fe40f55e1f6ae9c622271201428ca7d0bf4732c68b163dda8e6357a4e066b91d4d60f3c857e1f4f544fedf4677b6d47dd8cec2f867483", 0x6e}], 0x1, &(0x7f0000001140)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x62, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2c}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts={{0x38, 0x29, 0x36, {0xc, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffff138}}], 0x98}}], 0x3, 0x4001) write$uinput_user_dev(r4, &(0x7f0000000bc0)={'syz0\x00', {0x7, 0x6, 0x8, 0x6}, 0x4f, [0xe440, 0x1, 0x5, 0x8, 0xfff, 0x80000001, 0x5, 0x3, 0x5, 0x3, 0x8, 0x7, 0x4, 0x101, 0xfffffe01, 0x1, 0x601c, 0x6, 0x400, 0xa, 0x4cd, 0x10000, 0x7fffffff, 0x401, 0x6, 0xd8, 0x0, 0x6, 0x0, 0x8, 0x1, 0x2, 0x64, 0xf7, 0x200, 0x1ff, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x40000000, 0x8, 0x9, 0x800, 0x9f, 0xbd6, 0xd, 0x3, 0xffdf, 0xff, 0x1d8, 0x2, 0x400, 0xa055, 0x64e, 0x6, 0xa, 0x10, 0x0, 0xb, 0x2, 0x1], [0x0, 0x6, 0x6, 0xa, 0xfff, 0x3, 0xb, 0xb300, 0x9, 0x17, 0x2, 0x0, 0xfffffffe, 0xac3, 0x40, 0x20, 0x7, 0xc, 0x45, 0xfff, 0x8, 0x8, 0x3e, 0x4, 0x7ebc, 0x6, 0x8c26, 0x2, 0x7, 0xc9600000, 0x1, 0x8, 0xc80, 0x4, 0x10000, 0x3ff, 0x3, 0x8, 0x1000, 0x9, 0x278, 0x6, 0x401, 0x8, 0x8, 0x800, 0xf, 0x9de, 0x2, 0x1, 0x1, 0x9, 0xe11, 0xc681, 0x936, 0x5, 0x4, 0x0, 0x1000, 0x5, 0xde59, 0xfffffffc, 0xe, 0x5], [0x4, 0x3, 0xce2d9a9, 0x7, 0x3, 0x5, 0x4f, 0x2, 0xcb3e, 0x8, 0x2dd, 0x0, 0x7, 0x5, 0x4000, 0xb8e9, 0x5, 0x7fffffff, 0x5, 0x8, 0x9, 0xf8000000, 0x8, 0x2, 0x0, 0x3, 0x1bec80, 0x4, 0x8, 0x9598, 0x8001, 0x6, 0xe, 0x3, 0x4, 0xa2, 0x4f, 0x0, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0x2, 0x1, 0x6, 0x5, 0x6, 0x9, 0x0, 0xfffffff8, 0x7, 0x7ffe, 0x4, 0xf7, 0x1, 0x3, 0x4, 0x97c4, 0x9, 0xffffe097, 0xfffffda4, 0x800, 0x8], [0x8001, 0x8001, 0x80, 0x9, 0x7, 0xffff, 0x1, 0x84f2, 0x4, 0x7b00, 0x2, 0xe19, 0x7, 0x4, 0x5, 0x9, 0x28, 0x0, 0x3, 0x2322f958, 0x9, 0x3, 0xc00, 0x10001, 0x7, 0x0, 0xfff, 0x7fff, 0x6, 0xfffff9f2, 0xfffffffb, 0x3, 0xa11, 0xd, 0x2, 0x6, 0x0, 0xfc1d, 0x0, 0x4, 0x2, 0x572a, 0x5, 0xffffffff, 0x5, 0xff, 0xffffff01, 0x0, 0x4, 0x2, 0x400, 0x1, 0x6fa9, 0x7, 0x7, 0x1, 0x8, 0x1b, 0x3, 0xc000000, 0xc, 0x7, 0x5, 0x1]}, 0x45c) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000670000000000000095ae000000000000f40fe6ff552b6657d7a19d8e773765a651c1c09f43e38dda6334c9fdda0e1cd1db4e84e5b6f12a13148aa5e8e332ba9b14d7835110607f815214231b9c03f0e5bdcf3d490baff657aac5b5fa188107d99a7b333b16574ee43c6826f25aca7b2f786aaa5f7b9908e17fd62a4849f44caf0e09e84f96f2b3c48877f61f4fe1fce88701c26a7ab04ddf4588d0e5f6711370cae80ba4264e26f705557dd4f4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$video4linux(&(0x7f0000002380), 0x8, 0x250001) (async) write$qrtrtun(r4, &(0x7f0000000580)="d58f50", 0x3) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 3.259096326s ago: executing program 5 (id=1899): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102, 0x30}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x7, @raw_data="2b1c371e8a9b5db7e60e05c51bdee0a039252446cf4a670eb45d4f3085f1b38e4a453fe8524ee3b76d910342ee3d47d127d8a4e3d79ae4d0107783b5d038be26f7f8d813f5d81ecb48119e7a8c543378b0b5e81ae2e67a6318848bb55dc3df251349a83b4f9a958bd079dad90a8418ae1ed6a66b414adf6912b9242f20b9fdd795a40bb1e6168fb65fb9c3916f53ca232a7fb3e50e9e26af23cbcf1299d8eae5535843fc7a1e28af95458b9b397cc2385892eef022f9ed7b6807b2c253e6852988b791d60f924513"}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) write$uinput_user_dev(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009c323f08a5040330b23a010203010902120001000200000904"], 0x0) syz_usb_connect(0x6, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021fec3308da246f507c340102030109023700010807b0ba0904390400ffffff0131012207a356167a0e05240600000524000b000d240f011aa8000005000500000524150600"], &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x89, 0x8, 0x10, 0x20, 0x7}, 0x3f, &(0x7f00000000c0)={0x5, 0xf, 0x3f, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x2, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x6, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x5, 0x3, 0x29, 0x4a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "7c0dee4daf487cdaa871385849e68b10"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xb, 0x41, 0x4}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3401}}, {0x1d, &(0x7f0000000180)=@string={0x1d, 0x3, "f7b463385ce4ed03f511487eef6aa28af5f4730b6f57348cbcb837"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x441}}]}) io_setup(0x10000, &(0x7f00000003c0)) 2.970704693s ago: executing program 4 (id=1900): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c000280050016"], 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x4010, 0xffffffffffffffff, 0xc52d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x82840, 0x8) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="b10000001000010000000000000000000000000a14000000000a010200000000000000000100000018000000160a0101000b0000000000000100000004000380140000001000010000000000000000000000000a88112612eac52265b07767afce377b01164c63f91681f14553933843c98caef716454158f0841ac703c525e717f7b3c228d1a4651252c1a1b723f5b3773246cdda2641a9fce5df2117f24ca07360f041483e9bdc4d16c93e86be43795dc3f5d8bf21ac3e9afb32dce0009c86c46f2925265e0424326d1badec1409805ec7d6decca1dd7388d8a8c6483dac47406e917ef46d0573220df2e635ffbaa803e92821862cbf07b8c6c308ea3ccd6ac6bdb4ba76dae3ac9016c1de0a916df60748d3621d69b051a143b6aa8ad8d623eb59099204fb074bdf0ccd912eecb89367654b3b1cbb43086480c4693f5f3c0ecbdc1a529bf6ab4e069a31638f9b35a140da278749a2765b31bc45da892a144a2187dab887d382f746d5e57ce2cc5974e98f38a9"], 0x54}}, 0x801) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 2.824367471s ago: executing program 4 (id=1901): unshare(0x40020000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0xffffff2c) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000000000a0101000000000000000000000000000a0101000000000000000000000000004c89936a2a62095a000000000000000000003c000000000008000a0002001c000451947c3f0100feff4e244e230000f00100000000000000000000000000000000000000000000920dd5ffa6ba"], 0xbc}}, 0x0) (async) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = syz_io_uring_setup(0x50ca, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000003580)) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000000000000000000000000040"]) (async) io_uring_enter(r9, 0x291c, 0x0, 0x0, 0x0, 0x0) (async) sendto(r8, 0x0, 0x0, 0x20000810, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2.172352243s ago: executing program 2 (id=1904): r0 = syz_open_dev$cec(&(0x7f0000000580), 0x0, 0x181a42) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000005c0)={"cc4a8c14", 0x4370, 0x6, 0x4, 0x4, 0x4f54, "79ad2d2a133e85974163c62ab1d22f", "5a1c2c2b", "0aa0de6d", "0aae73e4", ["5e845db707b706f8296eb07d", "51fb04e63e68a7a8360c769b", "8ac2a163fad3aba6dfd72074", "6935b21881be8f6b46451517"]}) (fail_nth: 3) 1.809849693s ago: executing program 2 (id=1906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fc77f3c0f7827c4e1816617c4c225dd1c030f20e035000020000f22e00f01dfb8010000000f01c18fe978c6f80f0764314ef1", 0x33}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private2}, 0x1c) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @pic={0x8, 0xff, 0x8, 0xc2, 0x5, 0xfd, 0x8, 0x81, 0x6, 0x6, 0x8, 0x80, 0x44, 0xd3, 0x5, 0xc}}) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000000040)) (async, rerun: 32) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000040)={0xf, {{0xa, 0x4e22, 0x9cef, @remote, 0x5}}}, 0x88) (async, rerun: 32) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) listen(r3, 0x0) (async) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001ec0), 0x12080, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r8, &(0x7f0000000100)=""/107, 0x6b) write$nci(r8, &(0x7f0000000740)=ANY=[], 0x51) (async, rerun: 64) write$vga_arbiter(r8, &(0x7f0000000280)=@unlock_all, 0xb) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0xd, 0x21, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000fffffeff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901040004000000181100"/68, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000587b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001fcffff8500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x3800, 0xb0, &(0x7f0000000680)=""/176, 0x41000, 0x18, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001f00)=[0xffffffffffffffff, r0, r7, 0xffffffffffffffff, r8], &(0x7f0000001f40)=[{0x2, 0x1, 0x3, 0xb}, {0x0, 0x4, 0xc, 0x4}], 0x10, 0x7f, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x4) (async) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) (rerun: 32) mknodat(r11, &(0x7f0000000240)='./file0\x00', 0x400, 0x9) ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000040)) writev(r5, &(0x7f0000000740), 0x0) 1.787615927s ago: executing program 4 (id=1907): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x3, 0x6, @broadcast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@delqdisc={0x3c, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff3, 0x8}, {0xffe0, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x40) 1.670816581s ago: executing program 4 (id=1908): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fsopen(&(0x7f0000000040)='afs\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x880}) 1.595597866s ago: executing program 2 (id=1909): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x8926, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.267671076s ago: executing program 5 (id=1910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffd86}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x10012, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x0, 0x4b, 0x6, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109022400010000000009040000023c7f98000905030000000000000905e7"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x56d3, 0x1194, 0x4, &(0x7f0000000180)={[0x3]}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f00000002c0)=0xc7, 0x4) write$tcp_mem(r1, &(0x7f0000000240)={0x1ff, 0x20, 0x8, 0x20, 0x68}, 0x48) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4, 0x1, 0x46942656, {0x77359400}, {0x77359400}, {}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "80d188fc94743428"}}, 0x48}, 0x1, 0x0, 0x0, 0x4047}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, @echo}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) socket(0x10, 0x803, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x2c}, {0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd8}, {0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}, 0xe8) getdents64(r7, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000300)=0x90e3) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x1, 0x3}, 0x6) 1.228284229s ago: executing program 4 (id=1911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @remote, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffbfffbb9b"], 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000040), 0xfffffffffffffe6f}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000280)=""/21, 0x15}], 0x4, &(0x7f00000002c0)=""/43, 0x2b}, 0x10001) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) listen(r0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b00070066696c746572"], 0xc4}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.115112773s ago: executing program 1 (id=1913): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x28, 0x6, 0x0, @empty, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x90eb, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f78c5aaea555008d4434df8d965c0f70"}]}}}}}}}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESDEC=0x0], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x1, 0x9, 0x0, 0xfffffffc}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001c0000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x122, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x2, 0x1, 0x7, 0x120, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xe, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x16}, [@mdlm_detail={0xa5, 0x24, 0x13, 0x7, "a43480ca37ca0fe19a563ee78753f22afdad175e4ad09f02465588d6c47d88f976d48d7bb195138a17b046df39f79f392a2c7e2ca24e187097aa61c660f4a3c0d79eea55e63232610fbbe926ad13c5d528727380815b157f994dcd6e59ece3728b9fdf4ed35e555558518aece038ded336dac0539f87ff25d48b3e692167dfc0ffe2c5a9022efc67b6b2963db14eaf3ecf58f50edff889e69f5d28fba19af63cf2"}, @country_functional={0xa, 0x24, 0x7, 0xba, 0x101, [0xc79, 0x3]}, @obex={0x5, 0x24, 0x15, 0xf000}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xcc, 0xf, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0xf9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x21, 0x7a}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x9, 0x1, 0x9, 0x20, 0x10}, 0x2c, &(0x7f00000001c0)={0x5, 0xf, 0x2c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0xeebf, 0xff00, 0xff81, [0x30, 0xff000f, 0xff3fff, 0x0, 0xf, 0xff3f3f]}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) 1.08320151s ago: executing program 2 (id=1914): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0xfffffffffffffffc}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0xfffffffffffffffc}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r4, &(0x7f0000000400), 0x20000000}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r8, 0x200, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_open_dev$MSR(&(0x7f0000000100), 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) futex_waitv(&(0x7f0000003b80)=[{0x4, &(0x7f0000000300)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000010000000000000000085000000530000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000010000000000000000085000000530000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x23f}, &(0x7f00000000c0)=0x8) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000001c0)={0xfff, 0xbb}) 1.07356443s ago: executing program 3 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)={0x20, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) r1 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0xf5, 0x0, @dev}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001200)="daffc38b69363a52fe80040062100f4c7af35a91f64fddcf51f405595faeea41974e5559ea91f742", 0x28}], 0x1}, 0x4010) 975.255981ms ago: executing program 3 (id=1916): r0 = syz_open_dev$cec(&(0x7f0000000580), 0x0, 0x181a42) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000005c0)={"cc4a8c14", 0x4370, 0x6, 0x4, 0x4, 0x4f54, "79ad2d2a133e85974163c62ab1d22f", "5a1c2c2b", "0aa0de6d", "0aae73e4", ["5e845db707b706f8296eb07d", "51fb04e63e68a7a8360c769b", "8ac2a163fad3aba6dfd72074", "6935b21881be8f6b46451517"]}) (fail_nth: 4) 746.820221ms ago: executing program 3 (id=1917): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@updsa={0x180, 0x1a, 0xffffffffffffffff, 0x0, 0x0, {{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@local, 0x4d5, 0x6c}, @in6=@local, {0x100000000, 0x0, 0x0, 0x0, 0x970, 0x7fff, 0x9}, {0x80000000000000, 0x0, 0x0, 0x7fff}, {}, 0x0, 0x3503, 0x2, 0x0, 0x0, 0x23}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_crypt={0x48, 0x2, {{'essiv(xchacha20-simd,michael_mic-generic)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 716.406432ms ago: executing program 3 (id=1918): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x352, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x80, @mcast1, 0x20000}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001280)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x6, 0x4}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msync(&(0x7f0000421000/0x4000)=nil, 0x4000, 0x1) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) r7 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc}) r8 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000000)=r8, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) ioperm(0x9fda, 0xb3f, 0x6) lstat(0x0, 0x0) 468.981672ms ago: executing program 3 (id=1919): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x2c, 0x30]}}}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r4, 0x64e10, 0x36605}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60890}, 0x4004002) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @multicast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0xa6}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x1, 0x2, 0x8, "c7"}]}}, 0x0}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x2c, 0x30]}}}}]}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r4, 0x64e10, 0x36605}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60890}, 0x4004002) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @multicast}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0xa6}], 0x1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x1, 0x2, 0x8, "c7"}]}}, 0x0}, 0x0) (async) 0s ago: executing program 3 (id=1920): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xc42, 0x6, 0x1, 0x1, 0x0, "f6a6756c9832488c"}) writev(r0, &(0x7f0000000040), 0x0) kernel console output (not intermixed with test programs): pe=1400 audit(1740477916.907:843): avc: denied { bind } for pid=10905 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 341.293564][ T5870] usb 6-1: config 0 descriptor?? [ 341.304322][ T5870] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 341.436215][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 341.442950][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 341.454646][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.483992][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 341.499223][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.508313][ T5902] usb 5-1: Product: syz [ 341.512653][ T5902] usb 5-1: Manufacturer: syz [ 341.528148][ T5870] ssu100 6-1:0.0: probe with driver ssu100 failed with error -32 [ 341.535994][ T5902] usb 5-1: SerialNumber: syz [ 341.556186][ T5902] usb 5-1: config 0 descriptor?? [ 341.560661][ T5868] usb 6-1: USB disconnect, device number 43 [ 341.570299][ T5902] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 341.588041][ T5902] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 341.679269][ T29] audit: type=1400 audit(1740477917.291:844): avc: denied { write } for pid=10916 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 342.116408][ T5902] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 342.125592][ T5902] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 342.799813][ T5902] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 342.843334][ T5902] em28xx 5-1:0.0: No AC97 audio processor [ 343.000353][ T5902] usb 5-1: USB disconnect, device number 63 [ 343.006709][ T5902] em28xx 5-1:0.0: Disconnecting em28xx [ 343.019009][ T5902] em28xx 5-1:0.0: Freeing device [ 343.719187][T10937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10937 comm=syz.4.1203 [ 344.144711][T10947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.900270][ T29] audit: type=1326 audit(1740477920.303:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.1.1208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28a118d169 code=0x0 [ 344.965300][ T8] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 345.256822][ T8] usb 6-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 345.267621][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.279924][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 64 [ 345.293136][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 345.326204][ T8] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 345.336884][ T8] usb 6-1: Manufacturer: syz [ 345.344631][ T8] usb 6-1: config 0 descriptor?? [ 346.098780][T10945] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 347.551917][ T5837] iguanair 3-1:0.0: failed to get version [ 347.566488][ T5837] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 347.602791][ T5837] usb 3-1: USB disconnect, device number 60 [ 347.850531][ T5902] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 347.948098][ T29] audit: type=1400 audit(1740477923.156:846): avc: denied { write } for pid=10994 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 348.021642][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 348.236078][ T5833] block nbd2: Receive control failed (result -32) [ 348.245547][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 348.247351][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.256344][T10980] block nbd2: shutting down sockets [ 348.270255][ T5902] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 348.271566][ T8] usb 6-1: USB disconnect, device number 44 [ 348.286691][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.327105][ T5902] usb 5-1: config 0 descriptor?? [ 348.966134][ T29] audit: type=1400 audit(1740477924.110:847): avc: denied { append } for pid=11003 comm="syz.3.1221" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 349.220305][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.238295][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.256936][ T29] audit: type=1400 audit(1740477924.362:848): avc: denied { execute } for pid=11007 comm="syz.1.1223" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 349.309302][ T5902] kye 0003:0458:0087.0016: unknown main item tag 0x0 [ 349.325257][ T5902] kye 0003:0458:0087.0016: unknown main item tag 0x0 [ 349.342362][ T5902] kye 0003:0458:0087.0016: unknown main item tag 0x0 [ 349.352280][ T5902] kye 0003:0458:0087.0016: unknown main item tag 0x0 [ 349.359405][ T5902] kye 0003:0458:0087.0016: unknown main item tag 0x0 [ 349.380112][ T5902] kye 0003:0458:0087.0016: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 349.497014][ T6018] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 349.736675][ T5902] usb 5-1: USB disconnect, device number 64 [ 349.760499][ T6018] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 349.798028][ T6018] usb 3-1: config 0 interface 0 has no altsetting 0 [ 349.813733][ T6018] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 349.859953][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.895522][ T6018] usb 3-1: Product: syz [ 349.899795][ T6018] usb 3-1: Manufacturer: syz [ 349.905231][ T6018] usb 3-1: SerialNumber: syz [ 349.914366][ T6018] usb 3-1: config 0 descriptor?? [ 349.928073][ T6018] usb 3-1: selecting invalid altsetting 0 [ 349.941104][T11023] 9pnet_fd: Insufficient options for proto=fd [ 350.115934][ T29] audit: type=1326 audit(1740477925.176:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.1230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0db2d8d169 code=0x0 [ 350.160466][ T5902] usb 3-1: USB disconnect, device number 61 [ 350.959659][ T29] audit: type=1400 audit(1740477925.859:850): avc: denied { recv } for pid=11039 comm="syz.2.1233" saddr=10.128.0.169 src=42436 daddr=10.128.10.52 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 351.354331][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 351.434562][T11047] block device autoloading is deprecated and will be removed. [ 351.799972][ T5902] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 351.966601][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 352.013280][ T5902] usb 5-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 352.058390][ T5902] usb 5-1: too many endpoints for config 0 interface 0 altsetting 59: 189, using maximum allowed: 30 [ 352.144583][ T5902] usb 5-1: config 0 interface 0 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 189 [ 352.159082][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.172953][ T5902] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 352.182977][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.197108][ T5902] usb 5-1: config 0 descriptor?? [ 352.462521][T11038] »»»»»» speed is unknown, defaulting to 1000 [ 352.997503][T11077] »»»»»» speed is unknown, defaulting to 1000 [ 353.356138][ T8] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 353.539661][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 353.560771][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.584125][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.594494][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 353.604939][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.621230][ T8] usb 3-1: config 0 descriptor?? [ 355.244871][ T8] cmedia_hs100b 0003:0D8C:0014.0017: unknown main item tag 0x0 [ 355.273247][ T8] cmedia_hs100b 0003:0D8C:0014.0017: item fetching failed at offset 3/5 [ 355.312361][ T8] cmedia_hs100b 0003:0D8C:0014.0017: probe with driver cmedia_hs100b failed with error -22 [ 355.372684][ T8] usb 3-1: USB disconnect, device number 62 [ 355.456216][ T5902] usb 5-1: string descriptor 0 read error: -71 [ 355.491856][ T5902] usb 5-1: USB disconnect, device number 65 [ 356.089732][T11122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.670313][ T5902] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 356.871583][ T5902] usb 3-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 357.863866][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.880150][ T5902] usb 3-1: Product: syz [ 357.885422][ T5902] usb 3-1: Manufacturer: syz [ 357.891237][ T5902] usb 3-1: SerialNumber: syz [ 357.907503][ T5902] usb 3-1: config 0 descriptor?? [ 357.920237][ T5902] usbtest 3-1:0.0: EZ-USB device [ 357.926836][ T5902] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 358.140360][T11122] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 358.156716][ T5902] usb 3-1: USB disconnect, device number 63 [ 358.289033][T11173] input: syz0 as /devices/virtual/input/input38 [ 358.301082][T11173] input: failed to attach handler leds to device input38, error: -6 [ 359.484995][T11200] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1268'. [ 359.497187][T11200] team0: entered allmulticast mode [ 359.502393][T11200] team_slave_0: entered allmulticast mode [ 359.509761][T11200] team_slave_1: entered allmulticast mode [ 359.631615][ T6018] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 359.807285][ T29] audit: type=1400 audit(1740477934.237:851): avc: denied { create } for pid=11199 comm="syz.5.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 359.828373][ T6018] usb 3-1: Using ep0 maxpacket: 8 [ 359.839038][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.852399][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.879553][ T6018] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 359.891815][ T6018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.903811][ T6018] usb 3-1: config 0 descriptor?? [ 360.225067][ T29] audit: type=1400 audit(1740477934.649:852): avc: denied { getopt } for pid=11214 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 360.706557][ T6018] cmedia_hs100b 0003:0D8C:0014.0018: unknown main item tag 0x0 [ 360.720560][ T6018] cmedia_hs100b 0003:0D8C:0014.0018: item fetching failed at offset 3/5 [ 360.740837][ T6018] cmedia_hs100b 0003:0D8C:0014.0018: probe with driver cmedia_hs100b failed with error -22 [ 360.822613][T11224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.832332][T11224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.930830][ T6018] usb 3-1: USB disconnect, device number 64 [ 360.974527][T11226] »»»»»» speed is unknown, defaulting to 1000 [ 361.032204][ T5899] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 361.245795][ T5899] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 361.254875][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.295051][ T5899] usb 5-1: Product: syz [ 361.300661][ T5899] usb 5-1: Manufacturer: syz [ 361.300721][T11231] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 361.305253][ T5899] usb 5-1: SerialNumber: syz [ 361.310993][ T5899] usb 5-1: config 0 descriptor?? [ 361.312265][T11231] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 361.335614][ T5899] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 361.340768][T11231] vhci_hcd vhci_hcd.0: Device attached [ 361.410311][ T29] audit: type=1400 audit(1740477935.762:853): avc: denied { execute } for pid=11230 comm="syz.5.1276" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 361.716594][ T6018] usb 44-1: SetAddress Request (2) to port 0 [ 361.730632][ T6018] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 361.788692][T11242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.802841][T11242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.981740][T11233] vhci_hcd: connection reset by peer [ 362.037420][ T1335] vhci_hcd: stop threads [ 362.043469][ T1335] vhci_hcd: release socket [ 362.123283][ T1335] vhci_hcd: disconnect device [ 362.154841][ T51] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 362.246958][T11243] »»»»»» speed is unknown, defaulting to 1000 [ 362.411169][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 362.423553][ T51] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.440133][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.451347][ T51] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 362.463004][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.504602][ T51] usb 3-1: config 0 descriptor?? [ 362.602013][T11250] overlay: ./file0 is not a directory [ 363.458908][ T5899] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 363.644108][ T5899] usb 6-1: New USB device found, idVendor=07c9, idProduct=b100, bcdDevice=b2.2e [ 363.655459][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 363.665109][ T5899] usb 6-1: Product: syz [ 363.669407][ T5899] usb 6-1: Manufacturer: syz [ 363.674939][ T5899] usb 6-1: SerialNumber: syz [ 363.681539][ T5899] usb 6-1: config 0 descriptor?? [ 364.072903][ T5870] usb 5-1: USB disconnect, device number 66 [ 364.086355][T11259] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 364.227705][T11259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11259 comm=syz.3.1282 [ 364.745308][T11244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.785414][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 364.799669][ T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 364.810403][ T51] usb 3-1: USB disconnect, device number 65 [ 364.843384][T11269] netlink: 2095 bytes leftover after parsing attributes in process `syz.1.1285'. [ 364.852921][ T29] audit: type=1400 audit(1740477938.970:854): avc: denied { setopt } for pid=11268 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 364.924262][ T29] audit: type=1400 audit(1740477939.007:855): avc: denied { map } for pid=11271 comm="syz.2.1286" path="/proc/932" dev="proc" ino=30886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 364.954875][ T29] audit: type=1400 audit(1740477939.007:856): avc: denied { execute } for pid=11271 comm="syz.2.1286" path="/proc/932" dev="proc" ino=30886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 365.189648][ T5899] pegasus 6-1:0.0: can't reset MAC [ 365.195057][ T5899] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 365.222181][ T5899] usb 6-1: USB disconnect, device number 45 [ 365.348139][T11278] »»»»»» speed is unknown, defaulting to 1000 [ 365.468379][T11267] tipc: Started in network mode [ 365.473465][ T29] audit: type=1400 audit(1740477939.550:857): avc: denied { append } for pid=11281 comm="syz.1.1289" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 365.508462][T11267] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 365.581279][T11267] tipc: Enabled bearer , priority 0 [ 365.751790][ T29] audit: type=1400 audit(1740477939.821:858): avc: denied { write } for pid=11287 comm="syz.3.1290" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 366.033237][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1293'. [ 366.052549][T11297] team_slave_1: entered promiscuous mode [ 366.113653][ T29] audit: type=1400 audit(1740477940.158:859): avc: denied { accept } for pid=11290 comm="syz.2.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 366.195992][T11297] team0: Port device team_slave_1 removed [ 366.550015][T11301] afs: Unknown parameter 'dont_appraise' [ 366.776138][ T5870] tipc: Node number set to 8432298 [ 367.105424][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'. [ 367.160753][T11315] xt_connbytes: Forcing CT accounting to be enabled [ 367.167375][T11315] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 367.215329][T11317] 9pnet_virtio: no channels available for device syz [ 367.224053][ T6018] usb 44-1: device descriptor read/8, error -110 [ 367.232140][T11315] xt_bpf: check failed: parse error [ 367.264052][T11317] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 367.451868][ T29] audit: type=1400 audit(1740477941.411:860): avc: denied { cmd } for pid=11330 comm="syz.3.1305" path="socket:[31961]" dev="sockfs" ino=31961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 367.507094][T11332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.756108][T11332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.930947][ T6018] usb usb44-port1: attempt power cycle [ 367.952960][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 368.355243][ T5899] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 368.404530][ T5868] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 368.764824][ T6018] usb usb44-port1: unable to enumerate USB device [ 368.784990][ T5868] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 368.793609][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 368.851926][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.894833][ T29] audit: type=1400 audit(1740477942.674:861): avc: denied { create } for pid=11350 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 368.914903][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.010126][ T5868] usb 5-1: config 0 has no interface number 0 [ 369.016349][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.076454][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 369.086897][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.259271][T11361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.331380][ T5899] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.636749][ T29] audit: type=1400 audit(1740477943.217:862): avc: denied { ioctl } for pid=11359 comm="syz.3.1311" path="socket:[31064]" dev="sockfs" ino=31064 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 369.671253][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.119968][ T5868] usb 5-1: Product: syz [ 370.124183][ T5868] usb 5-1: Manufacturer: syz [ 370.128800][ T5868] usb 5-1: SerialNumber: syz [ 370.133511][ T5899] usb 6-1: Product: syz [ 370.137684][ T5899] usb 6-1: Manufacturer: syz [ 370.142866][ T5899] usb 6-1: SerialNumber: syz [ 370.149883][ T5868] usb 5-1: config 0 descriptor?? [ 370.167456][ T29] audit: type=1400 audit(1740477943.600:863): avc: denied { setopt } for pid=11359 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 370.612653][ T5868] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 370.619220][ T5868] usb 5-1: No valid video chain found. [ 370.644038][ T5868] usb 5-1: USB disconnect, device number 67 [ 370.708240][ T5899] usb 6-1: 0:2 : does not exist [ 370.736166][T11370] netlink: 'syz.2.1315': attribute type 14 has an invalid length. [ 370.976396][ T5899] usb 6-1: USB disconnect, device number 46 [ 371.054223][T11372] ip6gre1: entered allmulticast mode [ 371.286027][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.600066][ T5868] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 371.766735][T11394] syz.5.1321: attempt to access beyond end of device [ 371.766735][T11394] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 371.783301][T11394] XFS (nbd5): SB validate failed with error -5. [ 371.844517][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.908725][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.932942][ T29] audit: type=1400 audit(1740477945.593:864): avc: denied { ioctl } for pid=11392 comm="syz.4.1322" path="socket:[31103]" dev="sockfs" ino=31103 ioctlcmd=0x6103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.085089][T11402] ntfs3(nullb0): Primary boot signature is not NTFS. [ 372.096787][T11402] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 372.285111][ T5868] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 372.298774][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.329733][ T5868] usb 3-1: config 0 descriptor?? [ 372.666218][ T5868] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 372.673541][ T5868] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 372.689686][ T5868] isku 0003:1E7D:319C.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 372.954022][T11416] ntfs3(nullb0): Primary boot signature is not NTFS. [ 372.973289][ T5868] isku 0003:1E7D:319C.0019: couldn't init struct isku_device [ 372.997308][ T5868] isku 0003:1E7D:319C.0019: couldn't install keyboard [ 373.004144][T11416] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 373.005367][ T5868] isku 0003:1E7D:319C.0019: probe with driver isku failed with error -71 [ 373.316151][ T5902] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 373.562001][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 373.647510][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.647708][ T5868] usb 3-1: USB disconnect, device number 66 [ 373.733154][ T5902] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.742467][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.769274][ T5902] usb 6-1: config 0 descriptor?? [ 373.792663][T11424] cgroup: none used incorrectly [ 374.052600][ T5902] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 374.398891][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.571527][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.855515][T11429] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1328'. [ 374.866993][T11432] 9pnet_fd: Insufficient options for proto=fd [ 374.945491][T11424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.096164][ T5902] usb 6-1: USB disconnect, device number 47 [ 375.741095][T11452] workqueue: name exceeds WQ_NAME_LEN. Truncating to: êw)”Oí84ïÆk­oF¡g‘h¼ì`½½Ç9 [ 375.839555][T11458] 9pnet_fd: Insufficient options for proto=fd [ 376.073736][ T8] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 376.809705][ T8] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 376.842221][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.906987][ T8] usb 3-1: config 0 has no interface number 0 [ 376.934231][ T8] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 377.054464][ T8] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 377.101016][ T8] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.158893][T11468] »»»»»» speed is unknown, defaulting to 1000 [ 377.165320][ T8] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 377.202672][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.263335][ T8] usb 3-1: config 0 descriptor?? [ 377.318829][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 377.489794][ T8] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 377.505131][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 377.513704][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 377.576174][ T8] usb 3-1: USB disconnect, device number 67 [ 377.644619][T11465] Set syz1 is full, maxelem 65536 reached [ 378.299297][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.549658][ T29] audit: type=1400 audit(1740477951.785:865): avc: denied { listen } for pid=11477 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 378.570593][T11479] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1342'. [ 378.581771][T11481] netlink: 'syz.5.1341': attribute type 62 has an invalid length. [ 378.622212][ T6018] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 378.654718][T11484] netlink: 'syz.1.1343': attribute type 4 has an invalid length. [ 378.800627][ T6018] usb 5-1: Using ep0 maxpacket: 32 [ 378.812701][ T6018] usb 5-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 378.840394][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.877234][ T6018] usb 5-1: config 0 descriptor?? [ 379.125094][ T6018] usb 5-1: USB disconnect, device number 68 [ 379.329766][ T29] audit: type=1400 audit(1740477952.515:866): avc: denied { shutdown } for pid=11508 comm="syz.5.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.035913][T11530] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 380.044428][T11530] bond0: (slave wlan1): Opening slave failed [ 380.261479][ T29] audit: type=1400 audit(1740477953.385:867): avc: denied { connect } for pid=11536 comm="syz.5.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 380.628025][ T5899] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 380.731304][ T29] audit: type=1400 audit(1740477953.806:868): avc: denied { accept } for pid=11546 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 380.755686][T11549] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 380.764363][T11549] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 380.772993][T11549] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 380.863379][ T5899] usb 6-1: device descriptor read/64, error -71 [ 381.017658][ T29] audit: type=1400 audit(1740477953.806:869): avc: denied { mounton } for pid=11546 comm="syz.2.1365" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 381.194598][ T5899] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 382.333396][ T5899] usb 6-1: device descriptor read/64, error -71 [ 382.550607][ T29] audit: type=1400 audit(1740477955.527:870): avc: denied { watch } for pid=11567 comm="syz.3.1372" path="/282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 382.595205][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.617752][ T5899] usb usb6-port1: attempt power cycle [ 382.627827][ T29] audit: type=1400 audit(1740477955.527:871): avc: denied { watch_sb watch_reads } for pid=11567 comm="syz.3.1372" path="/282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 382.673350][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.691577][ T5902] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 382.737499][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 382.904399][ T5902] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.986831][ T5902] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.053529][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 383.053540][ T5899] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 383.098583][ T5899] usb 6-1: device descriptor read/8, error -71 [ 383.099586][ T5902] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 383.115318][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.186611][ T5902] usb 3-1: config 0 descriptor?? [ 383.273443][T11579] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 383.283590][T11578] IPVS: stopping backup sync thread 11579 ... [ 383.401501][T11585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.410493][T11585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.422778][ T5902] hid-retrode 0003:0403:97C1.001A: item fetching failed at offset 6/7 [ 383.440027][ T5902] hid-retrode 0003:0403:97C1.001A: probe with driver hid-retrode failed with error -22 [ 383.505309][T11583] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1378'. [ 383.522492][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 383.569251][ T5899] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 383.635655][ T5899] usb 6-1: device descriptor read/8, error -71 [ 383.638428][ T5902] usb 3-1: USB disconnect, device number 68 [ 383.692527][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 383.701951][ T29] audit: type=1400 audit(1740477956.602:872): avc: denied { append } for pid=11590 comm="syz.4.1381" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 383.725226][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.771192][ T5899] usb usb6-port1: unable to enumerate USB device [ 383.914952][T11604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1384'. [ 384.500496][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.665676][ T51] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 384.893696][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 384.950167][ T51] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 385.034646][ T51] usb 6-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 385.142689][ T51] usb 6-1: config 0 has no interface number 0 [ 385.219426][ T51] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 385.242979][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.259911][ T51] usb 6-1: Product: syz [ 385.268524][ T51] usb 6-1: Manufacturer: syz [ 385.278828][ T51] usb 6-1: SerialNumber: syz [ 385.290229][ T51] usb 6-1: config 0 descriptor?? [ 385.303135][ T51] usb 6-1: Found UVC 0.00 device syz (046c:14e8) [ 385.316082][ T51] usb 6-1: No valid video chain found. [ 385.520693][ T5899] usb 6-1: USB disconnect, device number 52 [ 385.785369][T11632] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1391'. [ 385.823727][ T8] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 385.998938][ T8] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 386.012810][ T8] usb 5-1: config 0 has no interface number 0 [ 386.022563][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.040387][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.055162][ T8] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 386.068963][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.080641][ T8] usb 5-1: config 0 descriptor?? [ 386.575630][T11638] »»»»»» speed is unknown, defaulting to 1000 [ 386.842571][ T8] usbhid 5-1:0.2: can't add hid device: -71 [ 386.853918][ T8] usbhid 5-1:0.2: probe with driver usbhid failed with error -71 [ 386.912110][ T8] usb 5-1: USB disconnect, device number 69 [ 386.980341][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 387.093534][T11646] »»»»»» speed is unknown, defaulting to 1000 [ 387.308019][T11656] geneve0: entered promiscuous mode [ 387.314426][T11656] geneve0: entered allmulticast mode [ 387.380857][ T5195] udevd[5195]: worker [5974] terminated by signal 33 (Unknown signal 33) [ 387.637192][ T29] audit: type=1400 audit(1740477960.288:873): avc: denied { rename } for pid=11661 comm="syz.4.1399" name="file1" dev="overlay" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 387.725586][ T29] audit: type=1400 audit(1740477960.325:874): avc: denied { setattr } for pid=11661 comm="syz.4.1399" name="#29" dev="tmpfs" ino=1560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 387.788706][ T29] audit: type=1400 audit(1740477960.344:875): avc: denied { read } for pid=11663 comm="syz.2.1400" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.850590][ T29] audit: type=1400 audit(1740477960.344:876): avc: denied { open } for pid=11663 comm="syz.2.1400" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.972337][ T29] audit: type=1326 audit(1740477960.597:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 388.024068][ T29] audit: type=1326 audit(1740477960.597:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 388.047895][ T29] audit: type=1326 audit(1740477960.597:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 388.078002][ T29] audit: type=1326 audit(1740477960.597:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 388.108865][ T29] audit: type=1326 audit(1740477960.597:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 388.170448][ T29] audit: type=1326 audit(1740477960.597:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 388.637808][T11687] tmpfs: Unknown parameter 'usrquota·' [ 389.754837][ T5870] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 389.798430][T11716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.832614][ T51] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 389.929317][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 389.937544][ T5870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.938166][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.948004][ T5870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.967269][ T5870] usb 3-1: New USB device found, idVendor=1d6b, idProduct=ec01, bcdDevice= 0.2e [ 389.969432][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.984426][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.992622][ T5870] usb 3-1: Product: syz [ 389.997821][ T5870] usb 3-1: Manufacturer: syz [ 390.004656][ T5870] usb 3-1: SerialNumber: syz [ 390.014379][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 390.021183][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.032553][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.050393][ T51] usb 6-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 390.070037][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.091993][ T51] usb 6-1: config 0 descriptor?? [ 390.095103][T11724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.110686][T11724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.136199][T11716] bond2 (unregistering): Released all slaves [ 390.438130][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.446748][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.596126][ T5870] usb 3-1: 0:2 : does not exist [ 390.607546][ T51] lenovo 0003:04B3:3100.001B: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.5-1/input0 [ 390.822009][ T5870] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 390.853613][ T5870] usb 3-1: USB disconnect, device number 69 [ 390.856063][ T5899] usb 6-1: USB disconnect, device number 53 [ 391.996755][T11758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.850046][T11769] erofs (device nbd5): cannot find valid erofs superblock [ 393.667298][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 393.667313][ T29] audit: type=1400 audit(1740477965.928:896): avc: denied { ioctl } for pid=11781 comm="syz.3.1431" path="socket:[33144]" dev="sockfs" ino=33144 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 393.710609][T11783] sock: sock_set_timeout: `syz.3.1431' (pid 11783) tries to set negative timeout [ 393.766926][ T29] audit: type=1400 audit(1740477965.984:897): avc: denied { connect } for pid=11781 comm="syz.3.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 393.798744][ T8] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 393.888377][ T29] audit: type=1804 audit(1740477966.003:898): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1431" name="/newroot/296/file0/file0" dev="ramfs" ino=33151 res=1 errno=0 [ 394.034901][T11791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.041979][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 394.051340][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 394.076537][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.097347][ T8] usb 5-1: config 0 descriptor?? [ 394.198390][T11798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.210776][T11799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.222333][T11798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.242043][ T29] audit: type=1400 audit(1740477966.461:899): avc: denied { search } for pid=11796 comm="syz.5.1434" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.242312][T11801] tipc: Can't bind to reserved service type 1 [ 394.271598][T11799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.306925][ T29] audit: type=1400 audit(1740477966.461:900): avc: denied { watch watch_reads } for pid=11796 comm="syz.5.1434" path="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.341499][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 394.968962][ T29] audit: type=1400 audit(1740477967.144:901): avc: denied { ioctl } for pid=11814 comm="syz.2.1442" path="socket:[33974]" dev="sockfs" ino=33974 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.012026][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 395.028319][ T29] audit: type=1400 audit(1740477967.144:902): avc: denied { ioctl } for pid=11814 comm="syz.2.1442" path="socket:[33975]" dev="sockfs" ino=33975 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 395.028609][ T51] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 395.060196][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 395.094199][ T29] audit: type=1400 audit(1740477967.144:903): avc: denied { write } for pid=11814 comm="syz.2.1442" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 395.121650][ T8] asix 5-1:0.0: probe with driver asix failed with error -71 [ 395.144401][ T8] usb 5-1: USB disconnect, device number 70 [ 395.158595][ T29] audit: type=1400 audit(1740477967.144:904): avc: denied { ioctl } for pid=11814 comm="syz.2.1442" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 395.295728][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 395.302259][ T51] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.312588][ T51] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.325163][ T51] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.334484][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.348826][ T51] usb 6-1: Product: syz [ 395.353019][ T51] usb 6-1: Manufacturer: syz [ 395.379502][ T51] usb 6-1: SerialNumber: syz [ 395.980294][T11811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.993731][T11811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.427906][ T51] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 396.527463][ T51] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 396.562311][ T51] usb 6-1: USB disconnect, device number 54 [ 397.059395][ T51] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 397.247922][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.320023][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.411744][ T51] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 397.543408][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.573584][ T51] usb 6-1: config 0 descriptor?? [ 397.636086][T11857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1451'. [ 398.605587][ T5870] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 399.147407][ T5870] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 399.157200][ T5870] usb 5-1: config 0 has no interface number 0 [ 399.164005][ T5870] usb 5-1: too many endpoints for config 0 interface 136 altsetting 68: 199, using maximum allowed: 30 [ 399.182123][T11893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.183605][ T5870] usb 5-1: config 0 interface 136 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 199 [ 399.206884][ T51] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001C/input/input40 [ 399.237782][T11893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.242528][ T51] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001C/input/input41 [ 399.259535][ T5870] usb 5-1: config 0 interface 136 has no altsetting 0 [ 399.313578][ T5870] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 399.363003][ T51] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001C/input/input42 [ 399.375747][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.391742][ T5870] usb 5-1: Product: syz [ 399.404198][ T51] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001C/input/input43 [ 399.417692][ T5870] usb 5-1: Manufacturer: syz [ 399.442643][ T5870] usb 5-1: SerialNumber: syz [ 399.454345][ T5870] usb 5-1: config 0 descriptor?? [ 399.469791][ T51] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 399.492709][ T51] usb 6-1: USB disconnect, device number 55 [ 399.832995][ T5870] i2c-tiny-usb 5-1:0.136: version 6d.cc found at bus 005 address 071 [ 399.846159][ T5870] (null): failure setting delay to 10us [ 399.853140][ T5870] i2c-tiny-usb 5-1:0.136: probe with driver i2c-tiny-usb failed with error -5 [ 399.867021][ T5870] usb 5-1: USB disconnect, device number 71 [ 401.544723][T11933] syz.1.1471: attempt to access beyond end of device [ 401.544723][T11933] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 401.593859][T11933] XFS (nbd1): SB validate failed with error -5. [ 402.249818][T11952] afs: Unknown parameter 'dyŽ' [ 404.712467][T11968] trusted_key: encrypted_key: insufficient parameters specified [ 406.458205][T11982] »»»»»» speed is unknown, defaulting to 1000 [ 407.098631][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 407.353476][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1491'. [ 407.419126][T12013] overlayfs: missing 'workdir' [ 407.973983][ T6018] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 408.616041][ T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 408.797713][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 408.824099][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.844154][ T8] usb 3-1: config 0 has no interface number 0 [ 408.850304][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.062112][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 409.071436][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.081067][ T8] usb 3-1: config 0 descriptor?? [ 409.092868][ T8] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 409.163431][T12032] overlayfs: failed to resolve './file1': -2 [ 409.222102][T12033] bpf: Bad value for 'gid' [ 409.677840][T12004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.920792][T12004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.953936][T12004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.829226][T12004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.990855][ T5868] usb 3-1: USB disconnect, device number 70 [ 411.272943][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'. [ 411.424291][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.450750][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.737588][ T5868] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 411.897975][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 411.913123][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.924293][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.945981][ T5868] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 411.977340][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.003384][ T5868] usb 5-1: config 0 descriptor?? [ 412.223264][T12089] x_tables: duplicate underflow at hook 1 [ 412.237343][ T29] audit: type=1400 audit(1740477983.299:905): avc: denied { setopt } for pid=12088 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 412.261812][ T6018] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 412.912709][ T6018] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 412.931332][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 413.031114][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.043741][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 413.055065][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.065990][ T6018] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 413.070385][ T29] audit: type=1400 audit(1740477984.075:906): avc: denied { write } for pid=12088 comm="syz.3.1512" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 413.073417][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 413.110151][ T29] audit: type=1400 audit(1740477984.075:907): avc: denied { accept } for pid=12088 comm="syz.3.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.216569][ T5868] cmedia_hs100b 0003:0D8C:0014.001D: unknown main item tag 0x0 [ 413.223507][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.227206][ T5868] cmedia_hs100b 0003:0D8C:0014.001D: item fetching failed at offset 3/5 [ 413.242446][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 413.242476][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.245383][ T6018] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 413.260921][ T5868] cmedia_hs100b 0003:0D8C:0014.001D: probe with driver cmedia_hs100b failed with error -22 [ 413.273087][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 413.273121][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.273222][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 413.273341][ T6018] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.276298][ T6018] usb 3-1: string descriptor 0 read error: -22 [ 413.511318][ T5868] usb 5-1: USB disconnect, device number 72 [ 413.655826][ T6018] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 413.668007][ T29] audit: type=1400 audit(1740477984.636:908): avc: denied { watch_mount } for pid=12102 comm="syz.5.1516" path="/263" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 413.720821][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.753907][ T6018] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 413.760054][T12107] x_tables: duplicate underflow at hook 2 [ 413.997307][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 414.009856][ T6018] usb 3-1: USB disconnect, device number 71 [ 414.529615][T12133] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 414.671819][ T6018] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 414.987591][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 414.994013][ T6018] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 415.002378][ T6018] usb 6-1: config 0 has no interface number 0 [ 415.011638][ T6018] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 415.020918][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.029267][ T6018] usb 6-1: Product: syz [ 415.033770][ T6018] usb 6-1: Manufacturer: syz [ 415.038375][ T6018] usb 6-1: SerialNumber: syz [ 415.044658][ T6018] usb 6-1: config 0 descriptor?? [ 415.051211][ T6018] smsc95xx v2.0.0 [ 415.112834][ T29] audit: type=1400 audit(1740477985.983:909): avc: denied { getopt } for pid=12146 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 415.848190][ T6018] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 415.868783][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1528'. [ 415.887568][ T29] audit: type=1326 audit(1740477986.704:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.4.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2d8d169 code=0x7fc00000 [ 415.891326][ T6018] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 416.669219][T12125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.677896][T12125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.688835][ T29] audit: type=1400 audit(1740477987.461:911): avc: denied { listen } for pid=12167 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.818557][T12175] »»»»»» speed is unknown, defaulting to 1000 [ 416.904181][ T6018] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 416.920711][ T6018] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 417.004587][ T6018] usb 6-1: USB disconnect, device number 57 [ 417.431241][T12195] tipc: Enabled bearer , priority 10 [ 418.943178][ T6018] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 419.215837][ T6018] usb 5-1: Using ep0 maxpacket: 8 [ 419.266780][ T6018] usb 5-1: config index 0 descriptor too short (expected 65298, got 18) [ 419.348130][ T6018] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 419.375424][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.391707][ T6018] usb 5-1: Product: syz [ 419.406653][ T6018] usb 5-1: Manufacturer: syz [ 419.411756][ T6018] usb 5-1: SerialNumber: syz [ 419.424981][ T6018] usb 5-1: config 0 descriptor?? [ 419.679161][ T6018] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 419.680755][ T8] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 419.918507][ T8] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 419.918541][ T8] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.921072][ T8] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 419.921097][ T8] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 419.921115][ T8] usb 6-1: Manufacturer: syz [ 419.921128][ T8] usb 6-1: SerialNumber: syz [ 419.992480][ T5868] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 420.151090][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 420.158767][ T8] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 420.176745][ T5868] usb 3-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 420.202491][ T8] usb 6-1: USB disconnect, device number 58 [ 420.211445][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 59: 189, using maximum allowed: 30 [ 420.235477][ T5868] usb 3-1: config 0 interface 0 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 189 [ 420.252211][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 420.271757][ T5868] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 420.281065][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.291654][ T5868] usb 3-1: config 0 descriptor?? [ 420.565716][T12247] »»»»»» speed is unknown, defaulting to 1000 [ 420.716541][ T6018] gspca_sunplus: reg_w_riv err -71 [ 420.721789][ T6018] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 420.731039][ T6018] usb 5-1: USB disconnect, device number 73 [ 420.839069][T12272] fuse: Bad value for 'fd' [ 421.605059][ T8] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 421.754698][T12291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.763256][T12291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.052851][ T29] audit: type=1400 audit(1740477992.447:912): avc: denied { listen } for pid=12286 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 422.411570][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.423488][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.446598][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.456939][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.470132][ T8] usb 5-1: SerialNumber: syz [ 422.705948][ T8] usb 5-1: 0:2 : does not exist [ 422.737562][ T8] usb 5-1: USB disconnect, device number 74 [ 423.409560][ T5837] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 423.604157][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 423.616350][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.636249][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.657115][ T5837] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 423.683629][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.718388][ T5837] usb 6-1: config 0 descriptor?? [ 423.882104][ T8] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 423.912486][ T5868] usb 3-1: string descriptor 0 read error: -71 [ 423.934703][ T5868] usb 3-1: USB disconnect, device number 72 [ 424.022681][ T8] usb 5-1: device descriptor read/64, error -71 [ 424.199102][ T5837] corsair 0003:1B1C:1B02.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 424.288362][ T8] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 424.591768][ T5837] corsair 0003:1B1C:1B02.001E: Read invalid backlight brightness: 7d. [ 424.694620][ T8] usb 5-1: device descriptor read/64, error -71 [ 424.708180][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.737562][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.843463][ T6018] usb 6-1: USB disconnect, device number 59 [ 424.862633][ T8] usb usb5-port1: attempt power cycle [ 424.910109][T12326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.918622][T12326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.926196][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 424.947542][ T29] audit: type=1400 audit(1740477995.188:913): avc: denied { setopt } for pid=12333 comm="syz.2.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 425.073468][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'. [ 425.186747][ T29] audit: type=1400 audit(1740477995.421:914): avc: denied { accept } for pid=12342 comm="syz.1.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.271891][ T8] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 425.297856][ T8] usb 5-1: device descriptor read/8, error -71 [ 426.191281][ T8] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 426.213038][ T8] usb 5-1: device descriptor read/8, error -71 [ 426.341612][ T8] usb usb5-port1: unable to enumerate USB device [ 426.384462][ T29] audit: type=1400 audit(1740477996.535:915): avc: denied { read } for pid=12371 comm="syz.1.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.415236][ T5837] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 426.428310][T12374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.452797][T12374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.684598][ T5837] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.692934][ T5837] usb 6-1: config 0 has no interface number 0 [ 426.699236][ T5837] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 426.708585][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.718490][ T5837] usb 6-1: config 0 descriptor?? [ 426.726415][ T5837] usb 6-1: selecting invalid altsetting 1 [ 426.735264][ T5837] dvb_ttusb_budget: ttusb_init_controller: error [ 426.741717][ T5837] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 427.086294][ T5837] DVB: Unable to find symbol cx22700_attach() [ 427.175727][ T5837] DVB: Unable to find symbol tda10046_attach() [ 427.183587][T12391] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 427.194656][ T5837] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 427.228019][ T5837] usb 6-1: USB disconnect, device number 60 [ 429.426939][ T5871] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 429.611954][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 429.638616][T12428] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 429.756061][ T5871] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 429.765305][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.774711][ T5871] usb 3-1: config 0 descriptor?? [ 429.779583][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 429.781558][ T5871] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 430.030844][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 430.085513][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.100482][ T5871] gp8psk: usb in 128 operation failed. [ 430.170481][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.498250][ T29] audit: type=1326 audit(1740478000.379:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 430.521697][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.968171][ T29] audit: type=1326 audit(1740478000.576:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.056261][ T29] audit: type=1326 audit(1740478000.576:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.191946][ T29] audit: type=1326 audit(1740478000.594:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.215351][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.258649][ T29] audit: type=1326 audit(1740478000.594:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.378620][ T29] audit: type=1326 audit(1740478000.594:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.447827][ T29] audit: type=1326 audit(1740478000.884:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.494130][ T5871] gp8psk: usb in 137 operation failed. [ 431.499921][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 431.513548][ T29] audit: type=1326 audit(1740478000.884:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.536936][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.546378][ T5871] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 431.560863][ T5871] usb 3-1: media controller created [ 431.578195][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.585726][T12453] ALSA: seq fatal error: cannot create timer (-19) [ 431.586881][ T29] audit: type=1326 audit(1740478000.931:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.624485][ T5871] gp8psk_fe: Frontend attached [ 431.629931][ T5871] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 431.644195][ T29] audit: type=1326 audit(1740478000.931:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.4.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1db2d8d169 code=0x7ffc0000 [ 431.668728][ T5871] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 431.702727][ T5871] gp8psk: usb in 138 operation failed. [ 431.708418][ T5871] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 431.717990][ T5871] gp8psk: found Genpix USB device pID = 203 (hex) [ 431.768024][ T5871] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 431.790650][ T5871] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 432.962645][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.971828][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.136650][T12472] 9pnet_virtio: no channels available for device syz [ 433.148658][T12472] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 433.221205][T12474] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 433.246666][T12475] program syz.4.1619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.246666][T12474] program syz.4.1619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.271627][T12474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=12474 comm=syz.4.1619 [ 433.548832][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 433.706448][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.781118][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.880381][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.893296][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.065057][T12492] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1623'. [ 434.074622][ T5870] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 434.092395][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 434.316418][ T5870] usb 5-1: Invalid ep0 maxpacket: 64 [ 434.476900][ T5870] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 434.679693][ T5870] usb 5-1: Invalid ep0 maxpacket: 64 [ 434.754051][ T5870] usb usb5-port1: attempt power cycle [ 435.571176][T12512] 9pnet_virtio: no channels available for device syz [ 435.590500][T12512] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 435.598989][ T5870] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 436.066492][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 436.066583][ T29] audit: type=1400 audit(1740478005.589:987): avc: denied { ioctl } for pid=12516 comm="syz.3.1632" path="socket:[36271]" dev="sockfs" ino=36271 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 436.128534][ T5871] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 436.134724][ T5870] usb 5-1: Invalid ep0 maxpacket: 64 [ 436.293949][ T5870] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 436.311387][ T29] audit: type=1400 audit(1740478005.814:988): avc: denied { remount } for pid=12532 comm="syz.1.1636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 436.315263][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 436.342371][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 436.353652][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.366885][ T5871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.377498][ T5871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 436.393654][ T5871] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 436.414537][ T5870] usb 5-1: Invalid ep0 maxpacket: 64 [ 436.420637][ T5870] usb usb5-port1: unable to enumerate USB device [ 436.432640][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.564576][ T5871] usb 6-1: config 0 descriptor?? [ 436.720128][T12519] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 437.032932][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.041437][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.229245][T12551] overlay: ./file0 is not a directory [ 437.529778][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'. [ 437.997347][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.079637][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.088320][T12554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 438.094847][T12554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 438.105259][T12555] vhci_hcd: connection closed [ 438.105708][T12554] vhci_hcd vhci_hcd.0: Device attached [ 438.125249][ T3498] vhci_hcd: stop threads [ 438.131582][ T3498] vhci_hcd: release socket [ 438.152443][ T3498] vhci_hcd: disconnect device [ 438.160504][ T5837] usb 6-1: USB disconnect, device number 61 [ 438.167139][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 438.214328][T12561] hub 9-0:1.0: USB hub found [ 438.221822][T12561] hub 9-0:1.0: 1 port detected [ 438.390631][T12564] 9pnet_virtio: no channels available for device syz [ 438.403788][T12564] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 438.404280][T12567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.418383][T12567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.198223][T12578] netlink: 'syz.1.1650': attribute type 39 has an invalid length. [ 439.206439][T12580] netlink: 'syz.1.1650': attribute type 39 has an invalid length. [ 439.453316][ T29] audit: type=1400 audit(1740478008.760:989): avc: denied { read } for pid=12579 comm="syz.2.1651" laddr=::ffff:172.20.20.187 lport=45510 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 439.479212][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.907790][ T5871] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 439.957751][T12591] sctp: [Deprecated]: syz.3.1653 (pid 12591) Use of int in max_burst socket option deprecated. [ 439.957751][T12591] Use struct sctp_assoc_value instead [ 440.050075][ T29] audit: type=1400 audit(1740478009.321:990): avc: denied { name_bind } for pid=12596 comm="syz.3.1656" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 440.057548][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'. [ 440.080419][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 440.086777][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 440.167180][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.180039][ T5871] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 440.189456][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.198596][ T5871] usb 5-1: Product: syz [ 440.202777][ T5871] usb 5-1: Manufacturer: syz [ 440.204946][T12598] team1: entered promiscuous mode [ 440.207398][ T5871] usb 5-1: SerialNumber: syz [ 440.220615][ T5871] usb 5-1: config 0 descriptor?? [ 440.226047][T12598] 8021q: adding VLAN 0 to HW filter on device team1 [ 440.237529][ T5871] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 440.263310][ T5871] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 440.880954][ T5871] em28xx 5-1:0.0: chip ID is em2874 [ 441.238722][ T29] audit: type=1400 audit(1740478010.425:991): avc: denied { watch } for pid=12624 comm="syz.3.1664" path="/354/file1" dev="tmpfs" ino=1905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 442.144846][T12633] syz.3.1665 (12633): /proc/12631/oom_adj is deprecated, please use /proc/12631/oom_score_adj instead. [ 442.716504][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.889401][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.966288][ T5868] usb 5-1: USB disconnect, device number 83 [ 442.972813][ T5868] em28xx 5-1:0.0: Disconnecting em28xx [ 443.134890][ T5868] em28xx 5-1:0.0: Freeing device [ 443.724277][ T6018] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 443.958485][ T6018] usb 5-1: Using ep0 maxpacket: 16 [ 443.972216][ T6018] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 443.991128][ T6018] usb 5-1: config 0 has no interface number 0 [ 443.997248][ T6018] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.025236][ T6018] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 444.044751][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.052784][ T6018] usb 5-1: Product: syz [ 444.068553][ T6018] usb 5-1: Manufacturer: syz [ 444.073189][ T6018] usb 5-1: SerialNumber: syz [ 444.091671][ T6018] usb 5-1: config 0 descriptor?? [ 444.111997][ T6018] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 444.327177][ T11] usb 5-1: Failed to submit usb control message: -71 [ 444.334551][ T5902] usb 5-1: USB disconnect, device number 84 [ 444.341352][ T11] usb 5-1: unable to send the bmi data to the device: -71 [ 444.349349][ T11] usb 5-1: unable to get target info from device [ 444.357172][ T11] usb 5-1: could not get target info (-71) [ 444.365415][ T11] usb 5-1: could not probe fw (-71) [ 444.382910][T12663] »»»»»» speed is unknown, defaulting to 1000 [ 444.438949][T12666] dccp_invalid_packet: pskb_may_pull failed [ 446.216180][T12696] nilfs2: Unknown parameter 'macvtap0' [ 447.110224][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 447.123964][T12722] IPVS: Error joining to the multicast group [ 448.118369][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1692'. [ 448.127266][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 448.136279][T12732] netlink: 'syz.5.1692': attribute type 13 has an invalid length. [ 448.877003][T12742] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 448.885487][T12742] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 448.892189][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.015352][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.024156][T12742] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 449.024313][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.040683][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.947177][ T6018] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 450.540453][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.769740][T12758] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1700'. [ 450.778810][T12756] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1700'. [ 450.843916][ T6018] usb 5-1: Using ep0 maxpacket: 8 [ 450.853686][ T6018] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.907964][ T6018] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 450.922980][ T29] audit: type=1400 audit(1740478019.471:992): avc: denied { getopt } for pid=12762 comm="syz.5.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 450.971455][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 451.010694][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 451.044797][ T6018] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 451.083025][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.122422][ T6018] usb 5-1: config 0 descriptor?? [ 451.140695][T12763] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.141107][ T6018] metro_usb 5-1:0.0: Metrologic USB to Serial converter detected [ 451.198239][ T6018] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 451.326523][T12763] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.382244][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1706'. [ 451.504781][T12763] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.516303][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1706'. [ 451.979115][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1706'. [ 451.998532][T12763] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.396383][ T29] audit: type=1326 audit(1740478020.864:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12788 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1d8d169 code=0x7ffc0000 [ 452.501099][ T5868] usb 5-1: USB disconnect, device number 85 [ 452.511623][ T5868] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 452.521417][ T5868] metro_usb 5-1:0.0: device disconnected [ 452.630781][T12797] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1709'. [ 452.648893][T12763] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.816888][T12763] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.964723][T12763] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.995934][T12763] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.132133][T12821] netlink: 'syz.2.1715': attribute type 25 has an invalid length. [ 454.147968][T12821] netlink: 'syz.2.1715': attribute type 6 has an invalid length. [ 454.382524][ T5868] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 454.542856][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 454.554829][ T5868] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 454.574631][ T5868] usb 5-1: config 0 has no interface number 0 [ 454.581199][ T5868] usb 5-1: config 0 interface 194 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 454.593651][ T5868] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=3d.96 [ 454.602911][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.612543][ T5868] usb 5-1: config 0 descriptor?? [ 454.618302][T12822] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 454.661207][T12830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.669667][T12830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.942101][ T5868] ath6kl: Failed to submit usb control message: -71 [ 454.955116][ T5868] ath6kl: unable to send the bmi data to the device: -71 [ 454.964352][ T5868] ath6kl: Unable to send get target info: -71 [ 455.022579][ T5868] ath6kl: Failed to init ath6kl core: -71 [ 455.028968][ T5868] ath6kl_usb 5-1:0.194: probe with driver ath6kl_usb failed with error -71 [ 455.141614][ T5868] usb 5-1: USB disconnect, device number 86 [ 455.304852][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.338340][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.355498][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.363423][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.374783][T12844] tmpfs: Unknown parameter 'mpVl' [ 456.561189][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 456.578608][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1725'. [ 456.606338][T12861] netlink: 'syz.2.1725': attribute type 13 has an invalid length. [ 456.614190][T12861] netlink: 'syz.2.1725': attribute type 12 has an invalid length. [ 459.106723][T12888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.123128][ T29] audit: type=1400 audit(1740478027.160:994): avc: denied { read } for pid=5180 comm="acpid" name="event8" dev="devtmpfs" ino=3425 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 459.129427][T12888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.169639][ T29] audit: type=1400 audit(1740478027.160:995): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3425 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 459.194432][ T29] audit: type=1400 audit(1740478027.160:996): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3425 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 459.257380][ T6018] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 459.312958][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.327620][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.606333][ T29] audit: type=1400 audit(1740478027.609:997): avc: denied { node_bind } for pid=12898 comm="syz.1.1737" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 459.958423][ T6018] usb 6-1: device descriptor read/64, error -71 [ 460.382860][T12924] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1738'. [ 460.420592][ T6018] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 460.617138][ T6018] usb 6-1: device descriptor read/64, error -71 [ 460.771888][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.780447][T12922] syz.3.1738: attempt to access beyond end of device [ 460.780447][T12922] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 460.811339][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.855667][ T6018] usb usb6-port1: attempt power cycle [ 461.287789][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.297803][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.366703][ T29] audit: type=1400 audit(1740478029.255:998): avc: denied { setopt } for pid=12938 comm="syz.3.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 461.417615][ T6018] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 461.452020][ T6018] usb 6-1: device descriptor read/8, error -71 [ 461.627238][T12945] No source specified [ 461.634833][T12945] NILFS (nbd4): device size too small [ 461.705818][ T6018] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 461.753578][ T6018] usb 6-1: device descriptor read/8, error -71 [ 461.884497][ T6018] usb usb6-port1: unable to enumerate USB device [ 461.916037][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1749'. [ 463.152752][T12976] bridge0: port 3(netdevsim2) entered blocking state [ 463.166445][T12976] bridge0: port 3(netdevsim2) entered disabled state [ 463.174503][T12976] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 463.183627][T12976] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 463.198607][T12976] bridge0: port 3(netdevsim2) entered blocking state [ 463.205479][T12976] bridge0: port 3(netdevsim2) entered forwarding state [ 463.736436][T12991] syzkaller0: entered promiscuous mode [ 463.753870][T12991] syzkaller0: entered allmulticast mode [ 463.784621][T12987] tipc: Enabled bearer , priority 0 [ 463.880717][T12987] tipc: Resetting bearer [ 463.937659][T12987] tipc: Disabling bearer [ 464.271968][ T5868] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 464.323314][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 464.688212][ T5868] usb 5-1: device descriptor read/64, error -71 [ 464.944829][ T5868] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 465.083701][ T5868] usb 5-1: device descriptor read/64, error -71 [ 465.436926][ T5868] usb usb5-port1: attempt power cycle [ 465.479327][ T5837] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 466.150553][ T5837] usb 6-1: device descriptor read/64, error -71 [ 466.157554][ T29] audit: type=1400 audit(1740478033.277:999): avc: denied { write } for pid=13026 comm="syz.3.1765" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 466.216966][ T5868] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 466.271356][ T5868] usb 5-1: device descriptor read/8, error -71 [ 466.464536][ T5837] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 466.655474][ T5868] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 466.692613][T13042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.701576][T13042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.715406][ T5837] usb 6-1: device descriptor read/64, error -71 [ 466.993210][ T5837] usb usb6-port1: attempt power cycle [ 466.999334][ T5868] usb 5-1: device descriptor read/8, error -71 [ 467.115296][ T5868] usb usb5-port1: unable to enumerate USB device [ 467.247667][T13047] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1770'. [ 467.360796][ T5837] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 467.432604][ T5837] usb 6-1: device descriptor read/8, error -71 [ 468.160602][ T5837] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 469.982912][T13020] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.1763'. [ 470.069687][ T5837] usb 6-1: device descriptor read/8, error -71 [ 470.183501][ T5837] usb usb6-port1: unable to enumerate USB device [ 470.236868][ T29] audit: type=1400 audit(1740478037.552:1000): avc: denied { create } for pid=13057 comm="syz.4.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 470.299557][T13068] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.314827][T13066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1775'. [ 470.546669][ T5837] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 471.211093][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 471.229860][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.257515][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.289291][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.322488][ T5837] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.345482][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.387205][ T5837] usb 6-1: config 0 descriptor?? [ 471.406379][T13089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.415131][T13089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.609767][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.632404][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.651124][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.680569][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.690580][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.699774][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.744450][T13095] lo speed is unknown, defaulting to 1000 [ 471.750731][T13095] lo speed is unknown, defaulting to 1000 [ 471.757962][T13095] lo speed is unknown, defaulting to 1000 [ 471.775672][T13095] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 472.244245][T13095] lo speed is unknown, defaulting to 1000 [ 472.251294][T13095] lo speed is unknown, defaulting to 1000 [ 472.257959][T13095] lo speed is unknown, defaulting to 1000 [ 472.264420][T13095] lo speed is unknown, defaulting to 1000 [ 472.270932][T13095] lo speed is unknown, defaulting to 1000 [ 472.289807][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.298286][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.306760][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.315342][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.334996][ T5837] HID 045e:07da: Invalid code 65791 type 1 [ 472.371246][ T5837] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0020/input/input46 [ 472.428988][ T5837] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 472.563598][T13101] input: syz1 as /devices/virtual/input/input47 [ 472.888969][ T51] usb 6-1: USB disconnect, device number 70 [ 473.014522][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1789'. [ 473.203316][ T5837] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 473.436237][ T5837] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 473.454432][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.470809][ T5837] usb 5-1: Product: syz [ 473.513583][ T5837] usb 5-1: Manufacturer: syz [ 473.523307][ T5837] usb 5-1: SerialNumber: syz [ 473.531764][ T5837] usb 5-1: config 0 descriptor?? [ 473.631105][ T51] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 473.833495][ T51] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 473.865894][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.906534][ T51] usb 6-1: Product: syz [ 473.928856][ T51] usb 6-1: Manufacturer: syz [ 473.953366][ T51] usb 6-1: SerialNumber: syz [ 473.991585][ T51] usb 6-1: config 0 descriptor?? [ 474.089314][ T5837] usb 5-1: ignoring: probably an ADSL modem [ 474.238417][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.250274][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.339177][ T5837] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 474.366918][ T51] usb-storage 6-1:0.0: USB Mass Storage device detected [ 474.611433][ T51] usb 6-1: USB disconnect, device number 71 [ 474.612541][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.710084][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.710199][T13124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.743981][T13124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.753255][ T5902] usb 5-1: USB disconnect, device number 91 [ 474.834391][T13124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.842912][T13124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.908777][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.917244][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.927195][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.936253][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.582201][ T5902] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 475.886113][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.931682][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 475.951979][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 475.975733][T13138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.977134][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 475.999461][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.008502][ T5902] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 476.013946][T13138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.027799][ T5902] usb 5-1: Manufacturer: syz [ 476.034361][ T5902] usb 5-1: config 0 descriptor?? [ 476.084753][T13138] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 476.091309][T13138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.114305][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.134235][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.181174][T13138] vhci_hcd vhci_hcd.0: Device attached [ 476.543988][T13143] vhci_hcd: connection closed [ 476.549358][ T9640] vhci_hcd: stop threads [ 476.568099][ T9640] vhci_hcd: release socket [ 476.582931][ T9640] vhci_hcd: disconnect device [ 476.648121][ T5902] rc_core: IR keymap rc-hauppauge not found [ 476.659050][ T5902] Registered IR keymap rc-empty [ 476.665158][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.695772][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.729565][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 476.742603][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input48 [ 476.757970][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.781180][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.800782][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.832861][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.865105][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.897054][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.918474][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.939664][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.961041][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.982409][ T5870] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 476.990147][ T5902] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.005754][T13166] Invalid logical block size (768) [ 477.027013][ T5902] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 477.035052][ T5902] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 477.054591][ T5902] usb 5-1: USB disconnect, device number 92 [ 477.166020][ T5870] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 477.174223][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.184505][ T5870] usb 6-1: config 0 has no interface number 0 [ 477.192313][ T5870] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.203518][ T5870] usb 6-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.218413][ T5870] usb 6-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 477.227465][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.235639][ T5870] usb 6-1: Product: syz [ 477.242579][ T5870] usb 6-1: Manufacturer: syz [ 477.248079][ T5870] usb 6-1: SerialNumber: syz [ 477.249141][ T29] audit: type=1326 audit(1740478044.109:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.3.1806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0db2d8d169 code=0x0 [ 477.275767][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.281134][ T5870] usb 6-1: config 0 descriptor?? [ 477.288770][ T29] audit: type=1326 audit(1740478044.146:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.3.1806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0db2d8d169 code=0x0 [ 477.311752][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.390488][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 477.538220][ T5870] usb 6-1: Found UVC 0.00 device syz (05ac:8600) [ 477.544614][ T5870] usb 6-1: No valid video chain found. [ 477.574742][ T5870] usb 6-1: USB disconnect, device number 72 [ 478.445975][T13256] misc userio: No port type given on /dev/userio [ 478.525796][ T5870] kernel write not supported for file /dsp (pid: 5870 comm: kworker/1:4) [ 478.624213][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 479.003074][ T5870] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 479.188039][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 479.197548][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 479.208648][ T5870] usb 6-1: config 168 has an invalid interface number: 125 but max is 0 [ 479.224379][ T5870] usb 6-1: config 168 has no interface number 0 [ 479.231377][ T5870] usb 6-1: config 168 interface 125 has no altsetting 0 [ 479.243957][ T5870] usb 6-1: New USB device found, idVendor=0409, idProduct=8024, bcdDevice=64.0f [ 479.255767][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.264408][ T5870] usb 6-1: Product: syz [ 479.268903][ T5870] usb 6-1: Manufacturer: syz [ 479.274084][ T5870] usb 6-1: SerialNumber: syz [ 479.364761][T13333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.384323][T13333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.392768][ T5837] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 480.852310][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.888294][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.911228][ T5837] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.924643][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.936250][ T5837] usb 5-1: Product: syz [ 480.951378][ T5837] usb 5-1: Manufacturer: syz [ 480.958145][ T5837] usb 5-1: SerialNumber: syz [ 482.169957][ T5870] cdc_ether 6-1:168.125: More than one union descriptor, skipping ... [ 482.274380][ T5870] usb 6-1: bad CDC descriptors [ 482.314298][ T5870] usb 6-1: USB disconnect, device number 73 [ 482.323064][T13355] netlink: 'syz.3.1825': attribute type 32 has an invalid length. [ 482.334245][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 482.359988][T13355] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 482.841565][ T5870] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 483.029051][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.198494][ T5870] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 483.239000][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.282670][ T5870] usb 6-1: config 0 descriptor?? [ 483.295613][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 483.457456][ T5837] usb 5-1: 0:2 : does not exist [ 483.477014][ T5837] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 483.517172][ T5837] usb 5-1: USB disconnect, device number 93 [ 483.556277][T13357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.594262][T13357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.730554][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 485.051883][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00 [ 485.168874][T13396] bridge2: entered allmulticast mode [ 485.231430][T13396] overlayfs: missing 'lowerdir' [ 485.378612][T13396] overlayfs: missing 'lowerdir' [ 485.388132][ T5870] pwc: recv_control_msg error -71 req 04 val 1300 [ 485.396888][ T5870] pwc: recv_control_msg error -71 req 04 val 1400 [ 485.404152][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 486.081448][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 486.089055][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 486.096693][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 486.104503][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 486.111986][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 486.119644][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 486.128680][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 486.136628][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 486.144150][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 486.315755][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.324462][ T5870] pwc: Registered as video103. [ 486.337170][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 486.374065][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.402848][ T5870] usb 6-1: USB disconnect, device number 74 [ 486.847743][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1842'. [ 493.059260][T13478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.411767][T13488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.429006][T13488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.449386][T13484] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 493.638556][ T5902] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 493.841820][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 493.950293][ T5902] usb 6-1: unable to get BOS descriptor or descriptor too short [ 493.973788][ T5902] usb 6-1: config 86 has an invalid interface number: 94 but max is 0 [ 493.984792][ T5902] usb 6-1: config 86 has no interface number 0 [ 493.991126][ T5902] usb 6-1: config 86 interface 94 has no altsetting 0 [ 494.015640][ T5902] usb 6-1: New USB device found, idVendor=0af0, idProduct=6971, bcdDevice=13.e9 [ 494.026613][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.035712][ T5902] usb 6-1: Product: syz [ 494.039933][ T5902] usb 6-1: Manufacturer: syz [ 494.138909][ T5902] usb 6-1: SerialNumber: syz [ 494.840348][ T5902] usb-storage 6-1:86.94: USB Mass Storage device detected [ 494.924456][ T5902] usb 6-1: USB disconnect, device number 75 [ 495.506914][T13527] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1873'. [ 495.696130][T13524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.709675][T13524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.818545][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.827381][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.952647][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.961214][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.007292][T13524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.065306][T13524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.612596][ T29] audit: type=1400 audit(1740478062.200:1003): avc: denied { connect } for pid=13543 comm="syz.4.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 496.774429][T13551] FAULT_INJECTION: forcing a failure. [ 496.774429][T13551] name failslab, interval 1, probability 0, space 0, times 0 [ 496.791347][T13551] CPU: 0 UID: 0 PID: 13551 Comm: syz.3.1880 Not tainted 6.14.0-rc4-syzkaller #0 [ 496.791373][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 496.791382][T13551] Call Trace: [ 496.791387][T13551] [ 496.791393][T13551] dump_stack_lvl+0x16c/0x1f0 [ 496.791421][T13551] should_fail_ex+0x50a/0x650 [ 496.791447][T13551] ? fs_reclaim_acquire+0xae/0x150 [ 496.791473][T13551] ? tomoyo_realpath_from_path+0xb9/0x720 [ 496.791497][T13551] should_failslab+0xc2/0x120 [ 496.791516][T13551] __kmalloc_noprof+0xcb/0x510 [ 496.791534][T13551] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 496.791564][T13551] tomoyo_realpath_from_path+0xb9/0x720 [ 496.791587][T13551] ? tomoyo_path_number_perm+0x235/0x590 [ 496.791609][T13551] ? tomoyo_path_number_perm+0x235/0x590 [ 496.791632][T13551] tomoyo_path_number_perm+0x248/0x590 [ 496.791656][T13551] ? tomoyo_path_number_perm+0x235/0x590 [ 496.791679][T13551] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 496.791724][T13551] ? __pfx_lock_release+0x10/0x10 [ 496.791746][T13551] ? trace_lock_acquire+0x14e/0x1f0 [ 496.791768][T13551] ? lock_acquire+0x2f/0xb0 [ 496.791789][T13551] ? __fget_files+0x40/0x3a0 [ 496.791809][T13551] ? __fget_files+0x206/0x3a0 [ 496.791829][T13551] security_file_ioctl+0x9b/0x240 [ 496.791854][T13551] __x64_sys_ioctl+0xb7/0x200 [ 496.791879][T13551] do_syscall_64+0xcd/0x250 [ 496.791902][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.791924][T13551] RIP: 0033:0x7f0db2d8d169 [ 496.791938][T13551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.791953][T13551] RSP: 002b:00007f0db3ccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.791969][T13551] RAX: ffffffffffffffda RBX: 00007f0db2fa5fa0 RCX: 00007f0db2d8d169 [ 496.791978][T13551] RDX: 00004000000005c0 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 496.791987][T13551] RBP: 00007f0db3ccd090 R08: 0000000000000000 R09: 0000000000000000 [ 496.791996][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.792004][T13551] R13: 0000000000000000 R14: 00007f0db2fa5fa0 R15: 00007ffd694ef168 [ 496.792026][T13551] [ 497.007300][T13551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.104832][ T5902] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 497.410549][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.424952][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.431575][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 497.448838][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.456763][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 497.468165][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 497.479145][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.493897][ T5902] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 497.503176][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.511547][ T5902] usb 5-1: Product: syz [ 497.515926][ T5902] usb 5-1: Manufacturer: syz [ 497.520784][ T5902] usb 5-1: SerialNumber: syz [ 497.526216][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.539292][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.540917][ T5902] usb 5-1: config 0 descriptor?? [ 497.552580][T13544] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 497.588790][T13560] vlan0: entered promiscuous mode [ 497.616330][ T5902] rc_core: IR keymap rc-xbox-dvd not found [ 497.622284][ T5902] Registered IR keymap rc-empty [ 497.632931][ T5902] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 497.643561][ T5902] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 497.644462][T13564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.669226][T13564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.773555][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.786574][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.795687][ T5902] usb 5-1: USB disconnect, device number 94 [ 497.801634][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 497.989445][ T8] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 498.132305][ T29] audit: type=1400 audit(1740478063.650:1004): avc: denied { setcurrent } for pid=13575 comm="syz.2.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 498.175375][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 498.186169][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.196434][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.210026][ T8] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 498.222363][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.232943][ T8] usb 6-1: config 0 descriptor?? [ 498.382998][T13586] FAULT_INJECTION: forcing a failure. [ 498.382998][T13586] name failslab, interval 1, probability 0, space 0, times 0 [ 498.395769][T13586] CPU: 0 UID: 0 PID: 13586 Comm: syz.3.1892 Not tainted 6.14.0-rc4-syzkaller #0 [ 498.395791][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 498.395803][T13586] Call Trace: [ 498.395809][T13586] [ 498.395815][T13586] dump_stack_lvl+0x16c/0x1f0 [ 498.395832][T13586] should_fail_ex+0x50a/0x650 [ 498.395849][T13586] ? fs_reclaim_acquire+0xae/0x150 [ 498.395865][T13586] ? tomoyo_encode2+0x100/0x3e0 [ 498.395880][T13586] should_failslab+0xc2/0x120 [ 498.395893][T13586] __kmalloc_noprof+0xcb/0x510 [ 498.395903][T13586] ? d_absolute_path+0x137/0x1b0 [ 498.395918][T13586] ? rcu_is_watching+0x12/0xc0 [ 498.395930][T13586] tomoyo_encode2+0x100/0x3e0 [ 498.395946][T13586] tomoyo_encode+0x29/0x50 [ 498.395961][T13586] tomoyo_realpath_from_path+0x19d/0x720 [ 498.395980][T13586] tomoyo_path_number_perm+0x248/0x590 [ 498.395992][T13586] ? tomoyo_path_number_perm+0x235/0x590 [ 498.396006][T13586] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.396030][T13586] ? __pfx_lock_release+0x10/0x10 [ 498.396045][T13586] ? trace_lock_acquire+0x14e/0x1f0 [ 498.396058][T13586] ? lock_acquire+0x2f/0xb0 [ 498.396072][T13586] ? __fget_files+0x40/0x3a0 [ 498.396083][T13586] ? __fget_files+0x206/0x3a0 [ 498.396095][T13586] security_file_ioctl+0x9b/0x240 [ 498.396111][T13586] __x64_sys_ioctl+0xb7/0x200 [ 498.396126][T13586] do_syscall_64+0xcd/0x250 [ 498.396140][T13586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.396155][T13586] RIP: 0033:0x7f0db2d8d169 [ 498.396168][T13586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.396179][T13586] RSP: 002b:00007f0db3ccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.396189][T13586] RAX: ffffffffffffffda RBX: 00007f0db2fa5fa0 RCX: 00007f0db2d8d169 [ 498.396195][T13586] RDX: 00004000000005c0 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 498.396201][T13586] RBP: 00007f0db3ccd090 R08: 0000000000000000 R09: 0000000000000000 [ 498.396207][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.396213][T13586] R13: 0000000000000000 R14: 00007f0db2fa5fa0 R15: 00007ffd694ef168 [ 498.396225][T13586] [ 498.396931][T13586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 498.722953][ T8] holtek 0003:1241:5015.0021: unknown main item tag 0x0 [ 498.730728][ T8] holtek 0003:1241:5015.0021: unknown main item tag 0x0 [ 498.744572][ T8] holtek 0003:1241:5015.0021: unknown main item tag 0x0 [ 498.770131][ T8] holtek 0003:1241:5015.0021: unknown main item tag 0x0 [ 498.790742][ T8] holtek 0003:1241:5015.0021: unknown main item tag 0x0 [ 498.858502][ T8] holtek 0003:1241:5015.0021: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 498.884570][ T8] holtek 0003:1241:5015.0021: no inputs found [ 498.917317][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1895'. [ 498.974617][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1895'. [ 499.038782][ T5870] usb 6-1: USB disconnect, device number 76 [ 499.242061][ T29] audit: type=1400 audit(1740478064.585:1005): avc: denied { mounton } for pid=13594 comm="syz.3.1894" path="/418/bus" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 500.636114][ T29] audit: type=1400 audit(1740478065.979:1006): avc: denied { ioctl } for pid=13612 comm="syz.5.1899" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 500.696115][T13615] VFS: could not find a valid V7 on nullb0. [ 500.706748][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 500.715664][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 500.807063][T13617] Failed to initialize the IGMP autojoin socket (err -2) [ 500.889054][ T8] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 501.079080][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 501.107158][ T8] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 501.136237][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.145304][ T8] usb 6-1: Product: syz [ 501.149537][ T8] usb 6-1: Manufacturer: syz [ 501.158041][ T8] usb 6-1: SerialNumber: syz [ 501.168798][ T8] usb 6-1: config 0 descriptor?? [ 501.271436][ T29] audit: type=1400 audit(1740478066.577:1007): avc: denied { read write } for pid=13620 comm="syz.3.1902" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 501.331958][ T29] audit: type=1400 audit(1740478066.577:1008): avc: denied { open } for pid=13620 comm="syz.3.1902" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 501.437610][ T29] audit: type=1400 audit(1740478066.615:1009): avc: denied { ioctl } for pid=13620 comm="syz.3.1902" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 501.479219][ T8] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 501.497529][T13626] FAULT_INJECTION: forcing a failure. [ 501.497529][T13626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.518864][ T8] gspca_sunplus: reg_w_riv err -71 [ 501.524034][T13626] CPU: 1 UID: 0 PID: 13626 Comm: syz.2.1904 Not tainted 6.14.0-rc4-syzkaller #0 [ 501.524054][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.524063][T13626] Call Trace: [ 501.524068][T13626] [ 501.524076][ T8] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 501.524074][T13626] dump_stack_lvl+0x16c/0x1f0 [ 501.524101][T13626] should_fail_ex+0x50a/0x650 [ 501.524127][T13626] _copy_from_user+0x2e/0xd0 [ 501.524142][T13626] cec_ioctl+0x2cf/0x2920 [ 501.524159][T13626] ? __pfx_cec_ioctl+0x10/0x10 [ 501.524175][T13626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 501.524199][T13626] ? do_vfs_ioctl+0x513/0x1990 [ 501.524219][T13626] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 501.524243][T13626] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 501.524265][T13626] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 501.524288][T13626] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 501.524313][T13626] ? __pfx_lock_release+0x10/0x10 [ 501.524341][T13626] ? selinux_file_ioctl+0x180/0x270 [ 501.524361][T13626] ? selinux_file_ioctl+0xb4/0x270 [ 501.524382][T13626] ? __pfx_cec_ioctl+0x10/0x10 [ 501.524397][T13626] __x64_sys_ioctl+0x190/0x200 [ 501.524418][T13626] do_syscall_64+0xcd/0x250 [ 501.524436][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.524456][T13626] RIP: 0033:0x7f65a1d8d169 [ 501.524468][T13626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.524482][T13626] RSP: 002b:00007f65a2b81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.524497][T13626] RAX: ffffffffffffffda RBX: 00007f65a1fa5fa0 RCX: 00007f65a1d8d169 [ 501.524506][T13626] RDX: 00004000000005c0 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 501.524515][T13626] RBP: 00007f65a2b81090 R08: 0000000000000000 R09: 0000000000000000 [ 501.524524][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.524532][T13626] R13: 0000000000000000 R14: 00007f65a1fa5fa0 R15: 00007ffec1f6cf48 [ 501.524551][T13626] [ 501.746111][T13629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.768687][ T8] usb 6-1: USB disconnect, device number 77 [ 502.080768][T13642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1909'. [ 502.099536][T13642] erspan0: entered promiscuous mode [ 502.111764][T13642] erspan0: left promiscuous mode [ 502.467710][T13648] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 502.563796][T13658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.585373][T13663] FAULT_INJECTION: forcing a failure. [ 502.585373][T13663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.605010][T13663] CPU: 1 UID: 0 PID: 13663 Comm: syz.3.1916 Not tainted 6.14.0-rc4-syzkaller #0 [ 502.605034][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.605045][T13663] Call Trace: [ 502.605050][T13663] [ 502.605056][T13663] dump_stack_lvl+0x16c/0x1f0 [ 502.605082][T13663] should_fail_ex+0x50a/0x650 [ 502.605110][T13663] _copy_to_user+0x32/0xd0 [ 502.605129][T13663] cec_ioctl+0x65b/0x2920 [ 502.605149][T13663] ? __pfx_cec_ioctl+0x10/0x10 [ 502.605169][T13663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.605197][T13663] ? do_vfs_ioctl+0x513/0x1990 [ 502.605221][T13663] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 502.605249][T13663] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 502.605277][T13663] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 502.605304][T13663] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 502.605334][T13663] ? __pfx_lock_release+0x10/0x10 [ 502.605367][T13663] ? selinux_file_ioctl+0x180/0x270 [ 502.605391][T13663] ? selinux_file_ioctl+0xb4/0x270 [ 502.605417][T13663] ? __pfx_cec_ioctl+0x10/0x10 [ 502.605434][T13663] __x64_sys_ioctl+0x190/0x200 [ 502.605459][T13663] do_syscall_64+0xcd/0x250 [ 502.605482][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.605505][T13663] RIP: 0033:0x7f0db2d8d169 [ 502.605519][T13663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.605536][T13663] RSP: 002b:00007f0db3ccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.605553][T13663] RAX: ffffffffffffffda RBX: 00007f0db2fa5fa0 RCX: 00007f0db2d8d169 [ 502.605564][T13663] RDX: 00004000000005c0 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 502.605574][T13663] RBP: 00007f0db3ccd090 R08: 0000000000000000 R09: 0000000000000000 [ 502.605584][T13663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.605594][T13663] R13: 0000000000000000 R14: 00007f0db2fa5fa0 R15: 00007ffd694ef168 [ 502.605616][T13663] [ 502.803297][ T8] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 502.859547][T13658] bridge0: port 3(netdevsim2) entered disabled state [ 502.889167][T13658] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 502.898013][T13658] netdevsim netdevsim2 netdevsim2 (unregistering): left promiscuous mode [ 502.908551][T13658] bridge0: port 3(netdevsim2) entered disabled state [ 502.919056][T13658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.076556][T13658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.077747][T13670] tmpfs: Bad value for 'mpol' [ 503.091843][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 503.101487][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 503.110610][T13670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.118357][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 503.131201][T13670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.135488][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 166, changing to 11 [ 503.151965][ T8] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 503.168449][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.350195][ T8] usb 6-1: Product: syz [ 503.357284][ T8] usb 6-1: Manufacturer: syz [ 503.368952][ T8] usb 6-1: SerialNumber: syz [ 503.371389][T13658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.378845][ T8] usb 6-1: config 0 descriptor?? [ 503.567983][ T8] smsusb:smsusb_probe: board id=2, interface number 0 [ 503.578274][ T8] smsusb:siano_media_device_register: media controller created [ 503.591578][ T8] ------------[ cut here ]------------ [ 503.597062][ T8] usb 6-1: BOGUS urb xfer, pipe 3 != type 1 [ 503.603605][ T8] WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 [ 503.612999][ T8] Modules linked in: [ 503.616929][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.14.0-rc4-syzkaller #0 [ 503.625919][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 503.636505][ T8] Workqueue: usb_hub_wq hub_event [ 503.641565][ T8] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 503.647202][ T8] Code: 84 3c 02 00 00 e8 15 a4 a6 fa 4c 89 ef e8 7d d9 d8 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 80 8c 2f 8c e8 96 d4 66 fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 e7 a3 a6 fa 49 81 c4 c0 05 00 00 e9 [ 503.666933][ T8] RSP: 0018:ffffc900000d6d78 EFLAGS: 00010282 [ 503.673027][ T8] RAX: 0000000000000000 RBX: ffff888032d13000 RCX: ffffc9001a079000 [ 503.681125][ T8] RDX: 0000000000100000 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 503.689339][ T8] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 503.697335][ T8] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 503.705366][ T8] R13: ffff888033f400a8 R14: ffff88802807e240 R15: ffff888032d1307c [ 503.713367][ T8] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 503.722380][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.728968][ T8] CR2: 000055558e689588 CR3: 000000000df80000 CR4: 00000000003526f0 [ 503.736994][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.744999][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.753003][ T8] Call Trace: [ 503.756295][ T8] [ 503.759219][ T8] ? __warn+0xea/0x3c0 [ 503.763302][ T8] ? preempt_schedule_notrace+0x62/0xe0 [ 503.768840][ T8] ? usb_submit_urb+0xe4b/0x1730 [ 503.773817][ T8] ? report_bug+0x3c0/0x580 [ 503.778334][ T8] ? handle_bug+0x54/0xa0 [ 503.782682][ T8] ? exc_invalid_op+0x17/0x50 [ 503.787394][ T8] ? asm_exc_invalid_op+0x1a/0x20 [ 503.792409][ T8] ? __warn_printk+0x1a6/0x350 [ 503.797285][ T8] ? usb_submit_urb+0xe4b/0x1730 [ 503.802253][ T8] ? usb_submit_urb+0xe4a/0x1730 [ 503.807345][ T8] ? trace_kmalloc+0x20/0xd0 [ 503.811951][ T8] smsusb_submit_urb+0x288/0x410 [ 503.816898][ T8] ? usb_init_urb+0x38/0x130 [ 503.821486][ T8] smsusb_init_device+0x856/0xe10 [ 503.826586][ T8] ? __pfx_smsusb_init_device+0x10/0x10 [ 503.832134][ T8] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 503.837727][ T8] ? usb_clear_halt+0x61/0x160 [ 503.842501][ T8] smsusb_probe+0x5e2/0x10b0 [ 503.847122][ T8] ? __pfx_smsusb_probe+0x10/0x10 [ 503.852220][ T8] ? mark_held_locks+0x9f/0xe0 [ 503.857002][ T8] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.862841][ T8] ? __pm_runtime_set_status+0x13c/0x9a0 [ 503.868478][ T8] usb_probe_interface+0x300/0x9c0 [ 503.873649][ T8] ? __pfx_usb_probe_interface+0x10/0x10 [ 503.879292][ T8] really_probe+0x23e/0xa90 [ 503.883828][ T8] __driver_probe_device+0x1de/0x440 [ 503.889105][ T8] driver_probe_device+0x4c/0x1b0 [ 503.894154][ T8] __device_attach_driver+0x1df/0x310 [ 503.899522][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 503.905425][ T8] bus_for_each_drv+0x157/0x1e0 [ 503.910274][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 503.915680][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.920865][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.926740][ T8] __device_attach+0x1e8/0x4b0 [ 503.931499][ T8] ? __pfx___device_attach+0x10/0x10 [ 503.936821][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 503.942019][ T8] bus_probe_device+0x17f/0x1c0 [ 503.946895][ T8] device_add+0x114b/0x1a70 [ 503.951393][ T8] ? __pfx_device_add+0x10/0x10 [ 503.956279][ T8] ? preempt_schedule_thunk+0x1a/0x30 [ 503.961670][ T8] usb_set_configuration+0x10cb/0x1c50 [ 503.967172][ T8] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 503.973246][ T8] usb_generic_driver_probe+0xb1/0x110 [ 503.978725][ T8] usb_probe_device+0xec/0x3e0 [ 503.983471][ T8] ? __pfx_usb_probe_device+0x10/0x10 [ 503.988905][ T8] really_probe+0x23e/0xa90 [ 503.993406][ T8] __driver_probe_device+0x1de/0x440 [ 503.998754][ T8] ? usb_driver_applicable+0x1c7/0x220 [ 504.004217][ T8] driver_probe_device+0x4c/0x1b0 [ 504.009279][ T8] __device_attach_driver+0x1df/0x310 [ 504.014650][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 504.020561][ T8] bus_for_each_drv+0x157/0x1e0 [ 504.025416][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 504.030830][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.036026][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 504.041884][ T8] __device_attach+0x1e8/0x4b0 [ 504.046663][ T8] ? __pfx___device_attach+0x10/0x10 [ 504.051990][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 504.057188][ T8] bus_probe_device+0x17f/0x1c0 [ 504.062278][ T8] device_add+0x114b/0x1a70 [ 504.066849][ T8] ? __pfx_device_add+0x10/0x10 [ 504.071702][ T8] ? add_device_randomness+0xb8/0xf0 [ 504.077007][ T8] usb_new_device+0xd09/0x1a20 [ 504.081758][ T8] ? __pfx_usb_new_device+0x10/0x10 [ 504.086972][ T8] hub_event+0x2d9a/0x4e10 [ 504.091404][ T8] ? __pfx_hub_event+0x10/0x10 [ 504.096220][ T8] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 504.101860][ T8] ? rcu_is_watching+0x12/0xc0 [ 504.106640][ T8] ? trace_lock_acquire+0x14e/0x1f0 [ 504.111831][ T8] ? process_one_work+0x921/0x1ba0 [ 504.117011][ T8] ? lock_acquire+0x2f/0xb0 [ 504.121517][ T8] ? process_one_work+0x921/0x1ba0 [ 504.126715][ T8] process_one_work+0x9c5/0x1ba0 [ 504.131671][ T8] ? __pfx_hcd_resume_work+0x10/0x10 [ 504.136999][ T8] ? __pfx_process_one_work+0x10/0x10 [ 504.142398][ T8] ? assign_work+0x1a0/0x250 [ 504.146990][ T8] worker_thread+0x6c8/0xf00 [ 504.151615][ T8] ? __pfx_worker_thread+0x10/0x10 [ 504.156718][ T8] kthread+0x3af/0x750 [ 504.160827][ T8] ? __pfx_kthread+0x10/0x10 [ 504.165403][ T8] ? lock_acquire+0x2f/0xb0 [ 504.169980][ T8] ? __pfx_kthread+0x10/0x10 [ 504.174571][ T8] ret_from_fork+0x45/0x80 [ 504.178975][ T8] ? __pfx_kthread+0x10/0x10 [ 504.183583][ T8] ret_from_fork_asm+0x1a/0x30 [ 504.188348][ T8] [ 504.191418][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 504.198691][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.14.0-rc4-syzkaller #0 [ 504.207456][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.217495][ T8] Workqueue: usb_hub_wq hub_event [ 504.222515][ T8] Call Trace: [ 504.225776][ T8] [ 504.228691][ T8] dump_stack_lvl+0x3d/0x1f0 [ 504.233270][ T8] panic+0x71d/0x800 [ 504.237149][ T8] ? __pfx_panic+0x10/0x10 [ 504.241551][ T8] ? show_trace_log_lvl+0x29d/0x3d0 [ 504.246748][ T8] ? usb_submit_urb+0xe4b/0x1730 [ 504.251676][ T8] check_panic_on_warn+0xab/0xb0 [ 504.256599][ T8] __warn+0xf6/0x3c0 [ 504.260479][ T8] ? preempt_schedule_notrace+0x62/0xe0 [ 504.266010][ T8] ? usb_submit_urb+0xe4b/0x1730 [ 504.270939][ T8] report_bug+0x3c0/0x580 [ 504.275255][ T8] handle_bug+0x54/0xa0 [ 504.279397][ T8] exc_invalid_op+0x17/0x50 [ 504.283903][ T8] asm_exc_invalid_op+0x1a/0x20 [ 504.288750][ T8] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 504.294288][ T8] Code: 84 3c 02 00 00 e8 15 a4 a6 fa 4c 89 ef e8 7d d9 d8 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 80 8c 2f 8c e8 96 d4 66 fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 e7 a3 a6 fa 49 81 c4 c0 05 00 00 e9 [ 504.313883][ T8] RSP: 0018:ffffc900000d6d78 EFLAGS: 00010282 [ 504.319937][ T8] RAX: 0000000000000000 RBX: ffff888032d13000 RCX: ffffc9001a079000 [ 504.327894][ T8] RDX: 0000000000100000 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 504.335850][ T8] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 504.343810][ T8] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 504.351766][ T8] R13: ffff888033f400a8 R14: ffff88802807e240 R15: ffff888032d1307c [ 504.359729][ T8] ? __warn_printk+0x1a6/0x350 [ 504.364481][ T8] ? usb_submit_urb+0xe4a/0x1730 [ 504.369409][ T8] ? trace_kmalloc+0x20/0xd0 [ 504.373990][ T8] smsusb_submit_urb+0x288/0x410 [ 504.378915][ T8] ? usb_init_urb+0x38/0x130 [ 504.383497][ T8] smsusb_init_device+0x856/0xe10 [ 504.388516][ T8] ? __pfx_smsusb_init_device+0x10/0x10 [ 504.394063][ T8] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 504.399600][ T8] ? usb_clear_halt+0x61/0x160 [ 504.404350][ T8] smsusb_probe+0x5e2/0x10b0 [ 504.408930][ T8] ? __pfx_smsusb_probe+0x10/0x10 [ 504.413939][ T8] ? mark_held_locks+0x9f/0xe0 [ 504.418694][ T8] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 504.424488][ T8] ? __pm_runtime_set_status+0x13c/0x9a0 [ 504.430112][ T8] usb_probe_interface+0x300/0x9c0 [ 504.435215][ T8] ? __pfx_usb_probe_interface+0x10/0x10 [ 504.440839][ T8] really_probe+0x23e/0xa90 [ 504.445332][ T8] __driver_probe_device+0x1de/0x440 [ 504.450603][ T8] driver_probe_device+0x4c/0x1b0 [ 504.455614][ T8] __device_attach_driver+0x1df/0x310 [ 504.460974][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 504.466862][ T8] bus_for_each_drv+0x157/0x1e0 [ 504.471705][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 504.477067][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.482263][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 504.488074][ T8] __device_attach+0x1e8/0x4b0 [ 504.492851][ T8] ? __pfx___device_attach+0x10/0x10 [ 504.498121][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 504.503307][ T8] bus_probe_device+0x17f/0x1c0 [ 504.508151][ T8] device_add+0x114b/0x1a70 [ 504.512645][ T8] ? __pfx_device_add+0x10/0x10 [ 504.517483][ T8] ? preempt_schedule_thunk+0x1a/0x30 [ 504.522850][ T8] usb_set_configuration+0x10cb/0x1c50 [ 504.528307][ T8] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 504.534364][ T8] usb_generic_driver_probe+0xb1/0x110 [ 504.539816][ T8] usb_probe_device+0xec/0x3e0 [ 504.544571][ T8] ? __pfx_usb_probe_device+0x10/0x10 [ 504.549929][ T8] really_probe+0x23e/0xa90 [ 504.554422][ T8] __driver_probe_device+0x1de/0x440 [ 504.559692][ T8] ? usb_driver_applicable+0x1c7/0x220 [ 504.565141][ T8] driver_probe_device+0x4c/0x1b0 [ 504.570156][ T8] __device_attach_driver+0x1df/0x310 [ 504.575514][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 504.581391][ T8] bus_for_each_drv+0x157/0x1e0 [ 504.586233][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 504.591597][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.596779][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 504.602571][ T8] __device_attach+0x1e8/0x4b0 [ 504.607319][ T8] ? __pfx___device_attach+0x10/0x10 [ 504.612589][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 504.617776][ T8] bus_probe_device+0x17f/0x1c0 [ 504.622622][ T8] device_add+0x114b/0x1a70 [ 504.627114][ T8] ? __pfx_device_add+0x10/0x10 [ 504.631953][ T8] ? add_device_randomness+0xb8/0xf0 [ 504.637234][ T8] usb_new_device+0xd09/0x1a20 [ 504.641989][ T8] ? __pfx_usb_new_device+0x10/0x10 [ 504.647178][ T8] hub_event+0x2d9a/0x4e10 [ 504.651597][ T8] ? __pfx_hub_event+0x10/0x10 [ 504.656347][ T8] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 504.661969][ T8] ? rcu_is_watching+0x12/0xc0 [ 504.666717][ T8] ? trace_lock_acquire+0x14e/0x1f0 [ 504.671902][ T8] ? process_one_work+0x921/0x1ba0 [ 504.677002][ T8] ? lock_acquire+0x2f/0xb0 [ 504.681491][ T8] ? process_one_work+0x921/0x1ba0 [ 504.686593][ T8] process_one_work+0x9c5/0x1ba0 [ 504.691545][ T8] ? __pfx_hcd_resume_work+0x10/0x10 [ 504.696872][ T8] ? __pfx_process_one_work+0x10/0x10 [ 504.702361][ T8] ? assign_work+0x1a0/0x250 [ 504.706948][ T8] worker_thread+0x6c8/0xf00 [ 504.711542][ T8] ? __pfx_worker_thread+0x10/0x10 [ 504.716644][ T8] kthread+0x3af/0x750 [ 504.720713][ T8] ? __pfx_kthread+0x10/0x10 [ 504.725287][ T8] ? lock_acquire+0x2f/0xb0 [ 504.729781][ T8] ? __pfx_kthread+0x10/0x10 [ 504.734357][ T8] ret_from_fork+0x45/0x80 [ 504.738785][ T8] ? __pfx_kthread+0x10/0x10 [ 504.743426][ T8] ret_from_fork_asm+0x1a/0x30 [ 504.748214][ T8] [ 504.751423][ T8] Kernel Offset: disabled [ 504.755790][ T8] Rebooting in 86400 seconds..