last executing test programs: 7m14.492579504s ago: executing program 3 (id=519): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e02025d60270009050202000002000109058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5501, &(0x7f0000000400)=0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x40, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x16, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4000004}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 7m11.087171303s ago: executing program 3 (id=530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000f51000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) 7m10.049693977s ago: executing program 3 (id=531): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fbffbfff00443600030000008500000036000000850000000f0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0xc, 0x0, 0x10001, 0xfa11, 0xfffffeeb}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fe000000fcffffff000000002abd70000435"], 0xf0}, 0x1, 0x0, 0x0, 0x48841}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r7, 0x300}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) 7m4.770577236s ago: executing program 3 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) close(0x3) getsockopt$sock_int(r6, 0x1, 0x48, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="72a9fd872a8a00000000000000fffa00000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000800) 7m1.584126486s ago: executing program 3 (id=554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="030025bd7000fedbdf25010000000800020002000000080001000100000008000200"], 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 7m0.404042058s ago: executing program 3 (id=556): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, 0x0) ioctl(r1, 0x8b22, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xd41, 0x0, 0x0, 0x0, 0x41}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 7m0.232599381s ago: executing program 32 (id=556): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, 0x0) ioctl(r1, 0x8b22, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xd41, 0x0, 0x0, 0x0, 0x41}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 8.661835075s ago: executing program 5 (id=1746): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000006940), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000006980)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000270c0)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x121002, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r3, 0x0, 0x0) 8.135253472s ago: executing program 1 (id=1747): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000900000000850000005010006a9500000000000001000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000170a01080000000000000000050000040900010073797a31000000000c0005400000000000000002080007080001400000000008000240000000010000005ee800000000"], 0x48}}, 0x20040080) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r3, &(0x7f0000000300)={0x78, 0x0, 0x0, {0xc41, 0xdbf, 0x0, {0x5, 0xb, 0x4, 0x6, 0x1, 0xa, 0x5, 0x8, 0x3, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x9}}}, 0x78) r7 = syz_io_uring_setup(0x3827, &(0x7f0000000080)={0x0, 0x13ea, 0x2, 0x3, 0x3b2}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r7, 0x2241, 0x1b86, 0x1, 0x0, 0x0) 7.910041285s ago: executing program 5 (id=1748): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = eventfd2(0x80000000, 0x80000) io_submit(r2, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r1, 0x0, 0x0, 0x400, 0x0, 0x1, r3}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r9) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r10, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r12, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) 6.93526628s ago: executing program 1 (id=1749): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000000001"], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180100"/12, @ANYRESDEC=r0, @ANYBLOB="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"/441, @ANYRESDEC=0x0, @ANYBLOB="bbc3b059563fbaffcad9fb21b804f7702ee9cb3394b6848c582d57185e5b217648d9806af6e276284b1afefc263d5098179897d0840a89669c270daef06d945fbf5acf24d3416544b68adc2a3f2227647cf500c5f1635c99464ba9fc0f77a38da8a67440034f230efb1379c7a4c129c151d67fb18f705ce433599c10ae2fa94a7b14a9e3e72fc77df95828fc03ba4a2fafdc62334ef99d4a2991065497840e424123cc91dbde1f9c500e914e007db18e1f0eb4d3dc1831d4c0f751c7903d83318e612b1584a6264b2963c8b6adb07702d3e2993b6dd2e3696f4cfa08520ad3131aefc71c953839"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) 6.675735612s ago: executing program 5 (id=1754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x4c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x4, &(0x7f0000000500)=[{0x7, 0x6, 0x9, 0x3}, {0x1, 0x7, 0x9, 0xffff}, {0xf, 0x9, 0x3, 0x1000}, {0x4, 0x0, 0x0, 0x90cc}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0000100, 0x0, 0x2}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000200)={0x6, 'team0\x00', {0xf}, 0xa}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 6.048425214s ago: executing program 4 (id=1758): syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "56b3927402c3b092", 'x\x00', "38934ee1", "0b6209690d37e9a9"}, 0x28) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timerfd_create(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) 6.017227353s ago: executing program 1 (id=1759): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000900000000850000005010006a9500000000000001000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000170a01080000000000000000050000040900010073797a31000000000c0005400000000000000002080007080001400000000008000240000000010000005ee800000000"], 0x48}}, 0x20040080) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r3, &(0x7f0000000300)={0x78, 0x0, 0x0, {0xc41, 0xdbf, 0x0, {0x5, 0xb, 0x4, 0x6, 0x1, 0xa, 0x5, 0x8, 0x3, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x9}}}, 0x78) r7 = syz_io_uring_setup(0x3827, &(0x7f0000000080)={0x0, 0x13ea, 0x2, 0x3, 0x3b2}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r7, 0x2241, 0x1b86, 0x1, 0x0, 0x0) 5.97171808s ago: executing program 5 (id=1760): r0 = socket$alg(0x26, 0x5, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000057c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x20000000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.321151489s ago: executing program 5 (id=1762): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x410101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xc, 0x0, 0x20) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r7 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0xd2ea, 0x40, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b0800034000000008"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYBLOB="ecaa723a022cff5a7a81443d3d043071da9193c0d9bca1ef2787aef727d9f4d67b18c2eb005d9325ef869ebe97cee90c4f02", @ANYRES64=r9], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x20000000) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.131634519s ago: executing program 4 (id=1763): r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x115f, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], &(0x7f0000001540)=[0x2]}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0xfffffffa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a80), r6) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x14, r7, 0x81, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44050}, 0x48000) r8 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, 0x0, r9, &(0x7f0000000480)) r10 = getpgid(r3) r11 = syz_open_procfs(r10, &(0x7f0000000440)='net/netstat\x00') getdents(r11, &(0x7f0000001000)=""/4085, 0xff5) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000100)={0x9a0000, 0xbe, 0x1, r11, 0x0, &(0x7f0000000080)={0x9a0910, 0x8000, '\x00', @value=0x2}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x1, 0xa000, 0x1000, &(0x7f00003b0000/0x1000)=nil}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 5.09871937s ago: executing program 1 (id=1764): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x40, 0x0, 0x2, 0x0, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r1, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000340)={0x0, 0x12, 0x80, 0x4000, 0x3c, 0x38000000, &(0x7f0000000300)="4157b66656634005676f5dddc01b201dd638242c30d8c395194b7605d15dff6fa2ff433e25b6f04389c7d5874fb8b600ce7970b6b90088086966b41c"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ff7f000000000000f2ef00009500000000000000e13ddd8899dd78448b8835637bfcdf20bf726809a0e9397d5180c7a501000000000000000000000077863b9f0c557218cc939101"], &(0x7f00000000c0)='syzkaller\x00'}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r4, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000140)='\x00') 4.316287464s ago: executing program 0 (id=1767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3fffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f00000002c0)=0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0xec80, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xf, '\x00', 0xfe}, {0xf, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x75, 0x0, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x6, '\x00', 0x6}, {0xd, 0x4, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x3, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x9, 0x10}, 0xc) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', r6}, 0x18) socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0xa000}) 4.095467772s ago: executing program 2 (id=1769): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200f2ffffffffffffff"], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x90, 0x4040041}, 0x80d0) openat$dsp(0xffffffffffffff9c, 0x0, 0x103042, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20004080) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) connect$inet6(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) timer_create(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 3.943705357s ago: executing program 4 (id=1770): io_uring_setup(0x41c8, &(0x7f0000000580)={0x0, 0x8000ddf4, 0x8000, 0xfffffdfe, 0x7f}) (async) r0 = io_uring_setup(0x41c8, &(0x7f0000000580)={0x0, 0x8000ddf4, 0x8000, 0xfffffdfe, 0x7f}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="2ad8b58a9e6c3b9e06d61656e2a64eef9766b6136565d6c87434d0a2e1d1b9a49d861bf1be4c0949036a8668c274a86b559f38f236b0ee178503adee0fffbdd67d961b1e555c89404f1839c66707e38d927c27a3090f40a2d2270f3b81700b2e9f0b032963620b15d6a344ffea854859ecb811efb10e6473fe792291415d6d86ade0e9d646202330c161f141a03c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r2, 0x0, 0x0) (async) read(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000400), 0x800, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x800, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, 0x0, 0x4) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$devlink(0x0, r6) (async) syz_genetlink_get_family_id$devlink(0x0, r6) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x6, 0x2, 0xa) (async) socket(0x6, 0x2, 0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r7 = socket(0x2, 0x6, 0xfa) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a310000000009"], 0xdc}, 0x1, 0x0, 0x0, 0x24088050}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 3.546778189s ago: executing program 2 (id=1771): ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x40046103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$media(&(0x7f0000000180), 0xfffffffffffffffb, 0x169502) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4c010) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 2.267936753s ago: executing program 0 (id=1772): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x23}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x98, 0x0, 0x130, 0x288, 0x288, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0xffffffff, 0xff, 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {}, 0x32, 0x1, 0x8}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xff, 0x3, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf2}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x3, 0x3}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)="f5135e2c98"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='mm_collapse_huge_page_isolate\x00', r0}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.112003943s ago: executing program 2 (id=1773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0xf403, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0xff, 0x1}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], @ipv4=@remote, [0x0, 0xff000000, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xff, 0xffffffff], 0xffff, 0x5, 0x2b, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x2, 0x517}, 0x80, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e8) 2.066096536s ago: executing program 2 (id=1774): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0xb, &(0x7f0000001b40)=ANY=[@ANYBLOB="1800000000c148e423ed340000000000c2c4880b25556967031b30380000ec8b00001800000407000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183b00000100000000000000000000009500000000000000"], &(0x7f0000001800)='GPL\x00', 0x8, 0x46, &(0x7f0000001840)=""/70, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x64b5, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0xa, 0x0, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001940)=[0xffffffffffffffff], &(0x7f0000001980)=[{0x5, 0x1, 0x5, 0x5}, {0x1, 0x2, 0x2, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_ext={0x1c, 0x20, &(0x7f00000005c0)=ANY=[@ANYBLOB="2874f0fffeffffffb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000003996f8ffffffffffb2080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x2, 0x5, 0xfff, 0x7}, 0x10, 0x293b, r3, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) prlimit64(r6, 0xa, &(0x7f00000000c0)={0xd35, 0x6}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xe, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x995, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x101, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0xfc74, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0xff, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xd064, 0x10000005, 0x4, 0x10000, 0xd, 0x0, 0x9, 0x10, 0x4000e, 0x9, 0x87, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffff9], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7b, 0xa, 0x0, 0xffd, 0xf1, 0x5a56, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x6, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7e2, 0x2, 0x10, 0x8, 0x2, 0x2, 0x6, 0x4, 0x7, 0x401, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0002, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x2, 0x9]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000bc0)=""/38, 0x26}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000000280)}], 0x9}, 0x4a8}, {{&(0x7f0000000780)=@qipcrtr, 0x80, &(0x7f0000000280)=[{&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000c00)=""/246, 0xf6}, {&(0x7f0000000d00)=""/224, 0xe0}, {&(0x7f0000000e00)=""/113, 0x71}], 0x4, &(0x7f0000000840)=""/57, 0x39}, 0xfffffff9}, {{&(0x7f0000000880)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000900)=""/11, 0xb}], 0x1}, 0x37}, {{&(0x7f0000000980)=@in, 0x80, &(0x7f0000000a80)}, 0xff}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) io_setup(0x3, &(0x7f0000000340)) r6 = io_uring_setup(0x168f, &(0x7f0000000700)={0x0, 0x631d, 0x102, 0x1, 0x2d5}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) 1.868105618s ago: executing program 5 (id=1777): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000380)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) pipe2$9p(&(0x7f0000000200), 0x4d00) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0x20004804) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, 0x0) 1.387418781s ago: executing program 1 (id=1778): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0xb, &(0x7f0000001b40)=ANY=[@ANYBLOB="1800000000c148e423ed340000000000c2c4880b25556967031b30380000ec8b00001800000407000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183b00000100000000000000000000009500000000000000"], &(0x7f0000001800)='GPL\x00', 0x8, 0x46, &(0x7f0000001840)=""/70, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x64b5, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0xa, 0x0, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001940)=[0xffffffffffffffff], &(0x7f0000001980)=[{0x5, 0x1, 0x5, 0x5}, {0x1, 0x2, 0x2, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_ext={0x1c, 0x20, &(0x7f00000005c0)=ANY=[@ANYBLOB="2874f0fffeffffffb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000003996f8ffffffffffb2080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x2, 0x5, 0xfff, 0x7}, 0x10, 0x293b, r3, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) prlimit64(r6, 0xa, &(0x7f00000000c0)={0xd35, 0x6}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xe, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x995, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x101, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0xfc74, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0xff, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xd064, 0x10000005, 0x4, 0x10000, 0xd, 0x0, 0x9, 0x10, 0x4000e, 0x9, 0x87, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffff9], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7b, 0xa, 0x0, 0xffd, 0xf1, 0x5a56, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x6, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7e2, 0x2, 0x10, 0x8, 0x2, 0x2, 0x6, 0x4, 0x7, 0x401, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0002, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x2, 0x9]}, 0x45c) r9 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000140001002cbd7000fedbdf250a8003c8", @ANYRES32=0x0, @ANYBLOB="14000600cc000100030000000c0000000100000014000200fe880000000000000000040000000101"], 0x40}}, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffffffff, 0x0, 0x1, 0x4) 723.949812ms ago: executing program 2 (id=1781): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 685.88906ms ago: executing program 4 (id=1782): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setrlimit(0x6, &(0x7f0000000000)={0x3, 0xfff}) iopl(0x3) syz_open_dev$audion(0x0, 0x589, 0x100) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x9, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x25, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r2}) getpid() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) 684.149782ms ago: executing program 2 (id=1783): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="000001a7ff25e2"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0x0, 0xeb04) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xfffffffc, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cca67b171f10622e1233"}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x2, 0x1, 0x0) bind$unix(r4, &(0x7f0000000280)=@abs={0xa}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x5, &(0x7f0000000000)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000280)) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 369.573722ms ago: executing program 1 (id=1784): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/105, 0x69, 0xfff) (async) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/105, 0x69, 0xfff) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x2, &(0x7f00000007c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x270, r4, 0x28, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x717f9f1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67b7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd730}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fe58b2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6923}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c5d3c76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56cd9b3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a472425}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb48c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x213dfa38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11024540}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18dd10c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x423c2ed5}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x303752b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8c4515a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18b00fc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f88f4ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e6e512}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x655ffa29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x227e9beb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bb43c1e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x229019d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x102}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x767c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b678ba6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31e49cda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3c2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66e97749}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba93a43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x496eda39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa358}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe8114f6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f56ae3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35616748}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf74e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e22ed77}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x213464d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x382b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22e3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73ba0348}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78fdb83d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb29}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1589}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b2538e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd628}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1af8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cca}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe40d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd116}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a85b867}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x238c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9982}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x45}, 0x4008080) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x270, r4, 0x28, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x717f9f1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67b7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd730}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fe58b2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6923}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c5d3c76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56cd9b3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a472425}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb48c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x213dfa38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11024540}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18dd10c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x423c2ed5}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x303752b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8c4515a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18b00fc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f88f4ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e6e512}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x655ffa29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x227e9beb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bb43c1e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x229019d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x102}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x767c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b678ba6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31e49cda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3c2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66e97749}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba93a43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x496eda39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa358}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe8114f6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f56ae3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35616748}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf74e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e22ed77}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x213464d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x382b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22e3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73ba0348}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78fdb83d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb29}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1589}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b2538e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd628}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1af8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cca}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe40d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd116}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a85b867}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x238c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9982}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x45}, 0x4008080) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r9, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r9, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x24008050) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x24008050) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r10, 0x8010500d, &(0x7f0000000000)) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003afe0620e60405000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r11) r13 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r13, 0x0, 0xffda) (async) write$dsp(r13, 0x0, 0xffda) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x58, r12, 0x401, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004890}, 0x20040080) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x406f818714f01c5c}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r12, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x20008000) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) ioctl$SNDCTL_DSP_STEREO(r10, 0xc0045003, &(0x7f0000000280)=0x1) 175.592629ms ago: executing program 4 (id=1785): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp, @timestamp], 0x7) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x4) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000180)="a9d45d4f49db2c12868e6a7ce1d0c8953560286f34eaff30363ba648e0b80fec2573dd75fcc149a4850a10d38cb9468b67b0aff4d827c787c2de4bfb753deb8e874e8987518bb48cda61145790256c8fe3f05c7f68e69911320daca03543b834ee85ace3f4a391978cbad56a5e91a418e1f208b32fbadcca161d3c5cd6b97ab1e8eca35f97c05ede47e24096291dea1762214644fc0de7421f37470e2736bce40384391229ddbb6ebd10791f6667118d5fb08ca2c44e972319c026c34a1e3892e8aa1d8eef38ca1b9883c5bdf3c1a65deb01e2394acd4412c55211270e6b9e14cea597a2206f4f3238e9b4805226152ba25c973d88ec29072d3d41bac68f799b6a82ef3f515ba067275ba5ce321193771fb5b97db4083ebc29803878b1e8440900e716d61b1e90517fb461c3b2b0bda970425bff9f980a0df65e820d60761b67b1d6ea28cad69f800b278bbaac9d4a635af7f83296602bc439166acdeeb6b31991f0dfea5d2ee44487e175829b9eaac9ca6b332d2d8614c0e808e1656e7e498843cc24e719087d22099ecb3226dda3a19dc6020a4c335ec50fa3bf8b77d1c1cc26cdcc1d6b579b5df7059546cf99e3f1ddede3449ac21746275ca81e1648dab5db0c7c840e2e55c65a37e88da89d18f69b8d76fd5a08700cde5c4fa10d247fdba3038b3094631ea3adb8243a7c96a2c61c98b6db60a83281229b5b2c5691ffdbb7feca8833fb4a44d72495cd277235ef6c5784fa87aa3baa2995622aab5dc57ed9e768c212ab5a097d516a2557ce581293928b7fff5c23a4e75647fb04ed8325a549e9c7ff86ce01c61011064f58cd26708d736ddf58846fa237bf67255015f338b746410dc372b253a4934c9db64be87ab95f13d45c5e1b7f2d29553aab8acf3ca8e02fee772b99cbf9db6d1eb509b039f2c1fc0fe08f3f00549a4070116b2bf0274d549601c0392624fb50b1e461a5bc824c34040468cd6ba3a6ca8988cdd27689d1d8e72c59a301fcc606b0ba60bba7e3c0ac3feaf86be39794be46224e00e23eec0dbdb8e6b8ee1ef379bef83ce2fdea48873e7ba63ddaf5c74c71387ba64b55abdfb91c17ef929cbbc193681f5f8c43a08ed6ca1e6305fde8dfeb5f051d9989e5743252c5d42eef5355ec52bab07fbc20b29057be1f5b8f797990f6e227b72b34acef4e8f5b8d9bd699211a1925813d8771b4288efc3e07cad896c8f337a860ccc5c980c0abca4806f178b8c734a9f135fb4a4b7f9c338b1d4535e1c04cd090907b3265adddd0e1f1dc05f855fb1297a77fc8f88421f84d063be43a1cba87231a8bd2ae609a678c0f47ddba75c622e959e4b4c1c5fa5091f1e90664fef2959c6da962e949efafe02641693451973daab6ff5efcec42ace3623585fa43a488cccbd9b4bc0d020aaec9bb9ceac4ecc7e54939411c7df55caeaa6a4a80c562afc907b3ded9d99d43703c96e5542a58942e9a46a2d0633f4b3abbd10a6e1dfa6c09c8afbd2c90799bed8a907d0356a1aa0f873f7ca35ea4317e90617a6c2e5eb40bedb516aefa6cd880caf51033bdfec06e07955421d0b1f7e8c72d2b21f6d1244bc5ba6cfe6c6520d3d4f24bcbb85f8f2d5a546f052be9412c73b24e3d37a11c12b447a7a455fdee9db075138df453de5b108fd85509943317dcf5ca891dfa45fb5fa60697fa4b3109535694b1608d47fa90fae4561e03d226f33497f2aead7d682b67a82773199fe3dd8fa0514c78acf5b04105c104c91dd93661edf3048e401edaa5768a95b73c875181ea8eaa7c9749c8dbb944fc0e56a5ee3acc0815b5141539df3a0255a41957fe5b4fab2582e5fbfe0bb847a74541ea3bc61fb226a0e165068272fc74643c12416b8c6a29c5de2cb50799b69874102facd1b3cb0439e0961d44f8625c4dc224f74f59b74e2b48fd922b31bcecd5619fcc3b2e8bda08546b4dc0b16c11624eb2aa5b964a818315c5da9c858b62716309b3c05250e851e974a18da635d959d895825f0509eeb65e3cc5449f65c3b18c6717416cf6b4ab7f1207ffde67b1972f0ab1fe10e3ae9f37cc6c14ce95933852fce2ea1f87e909ee14c05a7aa402e94bd8186cec5e27589fb26475b327c3a6a4bd281271619e1d093c70e3a7b39fd5aa0eb63b5a42ef1626e79ea29efbab8e0442c335bb0749329fb2d49b8a1ade649b65ecccf542ce379e6dfaeea100fda6350b4104bf4d9ebb1e52a561f402375726672ba4fa704a644b9864657e5e3f20489e47c665cf0fb291a9066ac4a7b8a222daea48bb78b8cc1e2ad05f617657b9fb6c8f41d01e19fdf550b071050a5a30469e36b29058e36e37eeb2ef9114ab5d9d0984b4c9b345ed8cdd7498c81605fd5eed9a30c4a8f1926170b41d3105d90ad869f6fdcb3368a2c24bf2dbf29ad29c31575d277529f4751986a75c20af19a87ff738dc1f07b4d2eafd87d9123bfbb40c27ef2db5d7e7783748692f5fa58e4415be8b67aa2300436a54fa0b190824b14455333ca065b57c7919cc4839b047d3ec870480c4783c3512858ea4399846dd97589957e71c94902c30adb8f2a81db18b8e9a84bfa4f04ca0c9d4a21514199d89129ae2560cc54ab0cf94ab22f9cb55315cc91898fefe8a82253ddaef14167ba8991f3255104ba6fb5a84bfaec1b50f481114b750d02dcce2580a0b62b71a7110f9c8deedf5a0fef9f35c69b9ad4f9b1a81645564b6f9c5d33d7124ec0679e76fdf75101ff379231a42e50e4e608a152c0abf4efcc9e1d2297eb5ac808d529c2fcfb94fb41a5fb19f54772397de70343bfe928cb24f3149e1674659c93212675b2a52cf27a18ac998c5990c6574ac5ebdbfe8417e9d28d0edd8d60f6538ff67d9981e907198da5e802f989a71ddb9b1195b969f325511348f8019abafea4777de9d861563731774027e9a5d3acdd198da7a42b8dfd02682a5ec8a275df491698aa4fb86e3e6fc90ff043f87cad8bbbe5ab2250c43f429cf8620b23b5ec1ce7663e798235a8715247220c7dcd59ba21abe6ccfdb399e42eb58d0f50fda8d26507535de09fa1f08cc3add46ab0b5f5d4f7c52fe872b8bb1bf509f54506bf005760345255fc6af1b445d38a3ef832b26c186b7a6dadf2ea50acc20aca9b50603adef17537ac6b49500fcf9de1722d8464e09be11896ecd17540150c67c2df10eb6d271b022e496bd69389357d86d748faf71dfdf1b836c8f16a70c5d62226a710b4c57f0acea70308a41a1f607153e43d7d0d095eac3d93b9ca9720b8b344379eb0876830cc927ca2aba37dd395ac992c76f177aa61d184602718958ac983581ddc0c9a7f88fc6495dcb0e1ce9cdeb38a728150ba5aae32a66e4f9105990ef8aff138deec572f871a2e85269ebeca695bafd68675c9b97bd27aa00c501741b793a7357c4b7f8ce2f6f1b0589e7b7f83fb1df0fb99dadea6ba8960f7f5bc025fce76217345494f1d5618ee54a7749374536d2cc5ebd5dc4399d699b13930399a6cf5ba5e9fbeb2bd4a06551e05b6b6b164cbf04cfa34bf3817858060540ce3d495748d19cff7e0ecc11485dba7f2a7d8d283736c615d9de5b91a7a9b843dee65cfe8ee6effe0efc90a9588c1aabc2ac7f9e150ba6ec75cc425908f74d769568db72a789204904228bdbf12095a36aa477b5e99b02365bfb70ab920190a66b6c31edf2c1e6a247a7e2dec70b96be2144933f9da80a2596b8973636a21e8122cd52123f47a67d3d8541aa967d94823749a0a45baa2d201a832c012301fd19d6341e7358847ecbd0b20bbfa5445dffce46b453b4b60fa4881f50d55ca62de6dc4962c956db969c83aa7a6aadd5964a347be3579a88247849bdc05c814120a83917ada91d6af0b84572e9abbe3077e92ea6b4643c2b81229a2d172d715a60bae991bc8b819d0ec9c253c0bb559fb1119f2c8cc6a94659c88a2fce1db09dae26702ff3916e5d968dc4f422b8ca4a983b6e05a8e2b534c1cf2db3075dc90535d0b2c65a6fb668856ca10bcc3e53e70e704edbb7e431b8128e171c778d2bb89dc395795b4a269abee7cc1964a83ee9d9fe1bfb1ca2cdd1dd690fd6be89eb256db828934fdf978d54f496c642d9d72caa34c066a423e2d5316a577822eb1da108c9c6b034a91bdfb6f647e5aee638013b58e268fc8d8ad32a9be317b57d48fef1f5344f23741c5cae9e6ad17c1ce47890fbd214f18adf6280417fae105e64bd2f2739bf7bf7e4884d9670bb60a9aeeb2d0c4fced2ab1285c78b50029994ac8332ec05a7e028bb00e27af0c99c3333fa4218b328439c9a3a3abcb42efb56cad5fa71369c13efdede9bedb960915d02fb14f85db565c65dcc1af351fd928c54dddd9cd514d503889f30acfb01546caeaa61a03bc8121974850cd060228425455827ddad9833ffb5cdb7919ce42dbfeae638c74122a29281edaf97c527aa0b52f62cb7e478f9aa89bdcfec659f7f171506d03065a83265eb3d79cac0d8204bd025a33f9d9bd94cad021f358de253140cb344736e3e661e451e1511f1b89040e7c8a8a7c41356ee4f70767143c6f57c89debc123ac88ec01c278245560208b3be02fab2c8242731d285dfbdc6c158a6dbf8406670d964d7a111a968199dbc84abac0404416d412b2f9051973e5cc23fd909830032b9fa95decaa46a99419ef8d961e11e6215f2997731d6be662e98a82b611f2fed1af3ad770356e4ab7abc139e23a44d100b5f83304e8560663ba950bdccc60b438978112e0ac1cad9122fc5c70f654b32f85393b6824fcf2420ddd9c4f66ac7093a5fdc450f9542c16a01de5c990da8f635b310ef177a738ce8e07555eb329abd8d5aafdf4a8dfca06dfc491d4bd683f7bf18e8ce71a91ad68d177332df95f21b54800a04bf903752046f7fccaa76d9ecc9888db80306e22a5561cf29c1c7c3a2e0b624bf2dd98548014fe0a1f797e5a58aa8254d711c180b98dbdfdf6837bb196d48090603ef3736e9ad7648e4c20617a5837fb65707f14dc784f485e604e76d3dfbcbfe592b35aef3da0a3ecaffb84f562e17f18d690f3c165e8271695cb33353a0d1fbf772566c778dfc665b8858ee6911d736c599c79f0c236bfecc30f31be2b67109f7dad56300d055d4efb8ccb324b234121184b294764563c00a2818747594eecef13e03fd1f76a8aebf68a0631d293ebbe0fc4fa353c804d971916a5d5cfb11dd0a0bcc711e743552338807af9290e34e10f688fef4d9abf37eec124b0ad98c6eda42093c5ab35ccc5abd428b4e5336d8bc512d1b7fc45a660471b8fc8e5b097a689acb0ad560b3c65679ab3b9c8b3fe18f193f25c71964e67227fc8ed8f09363c73bddf02be3ac0582a8d457f2b9f50c26397c198afdba298d5730457dc4c89ecc69f8a9dd076cbd2d8ec9fbc32b4a3c75cb6efba47063e9fbdd3a80de174b3e73d2c01144c91c856c1c25d85a847257dbb53917c51d69f5a7c1f9325340b3e9df2db3655b90ce1803d171615c0ee6025a8f18312540a95f57efeb85aeb991feb77b1ef3326f1fc4a1288a2d660f0b1fa4afa53196c8a209ceee56bb57cba14112c5a8c9606666277dbea176bce02c5f636b72081b6f3101193fcb9128a4bfed10dbd09b2ebaa1bb58c91e0a9f9e8f0fbda9662a1a3377533621c67cea2b99456dff13981d5e21f373ad68edb09f4b21f5db27b4eb4bb69ef8f13638964c6b8a6e8cb9ac221136b0bdf51fbca6c0be040ce1126a089f168b9a75c328d7fcbeb59d5d8b818909ca64a06644f9cd0a7ccba4af944e0aad312d84f131aab1e8eb7716fa13704a8512", 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan0\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000001200)=0x442) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x80) sendmmsg(r2, &(0x7f0000005c80)=[{{&(0x7f00000013c0)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001440)="63d355d785e46670b96aaebd7387a6302dcd36f1c97b915520db89af6c85827d6e5bb5bd672bf8377c093c98292c2e917f274c1570b1afc42c76207f65f3a5e7f355637e70c374ea7a5982550d4443e7e602daa764820c9c", 0x58}, {&(0x7f00000014c0)="6f197a5299911d59ff041ef128d8fcfe6e3b4da4452cb7634090e6b7cb12e23a2888d6be8b5930ff8018e1948e3fc045bbe46805c8d23692133043b4526af4b382cf9c10a56ba0a8d55c6e4c90b7a2b600551cd46f9ea4a3aaae1131f2f23d4e43cdb1251393ddaf486bf93eea8603ccc749b6512654c7a51521e0c09e", 0x7d}, {&(0x7f0000001540)="5a21b728f191c96d8966ab575292b96928895e7ebbdae1c72542ed42ad4038a095b8a2920f5aeb3c1553427a1a63966a67d7e37c3e461372a0f87bc08e24a4b5645c6b78dd69c31aa17c38074a0242edc05f297aa13a141c73c1740d0aa285a85324c4a1f1ba56240aca0d0e3b46b57febe3055ae9e1c060e04a147208388506b4839235759198eac51f7a7d1f0dd4688fca9a5ad55eba22bdbc5faad081c520a7f4f874d9d84d1beeb6d7f9a3eed81ea0763f8497", 0xb5}, {&(0x7f0000001600)="f68b0a", 0x3}, {&(0x7f0000001640)="29105b70025343772f", 0x9}, {&(0x7f0000001680)="5ed2f25f762532f72eac4fe8206653f4c43504c5095797887670304d6cddaeac400b4d0fb2d07d415fd703d2600cb1af46d3a39f73cf31fba1272bab81f68e395b198f11a4d9f97bdb9d1ae1d5262459d96ec6", 0x53}, {&(0x7f0000001700)="e4d36dcfbd4f796f33a690aeea33e1fb83cc757a18f30014238f96001d80c4b8a2fa5cc1870330d5eff6243d0ed44dc4534d836b19a6333cb51dfd3092f98910f275fbf9bccad0484b0b09", 0x4b}], 0x7, &(0x7f0000001800)=[{0x1010, 0x29, 0x6, "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"}, {0x80, 0x10f, 0x9413, "324aeca3d96b0545f9021756fb5b77cb3b7a2cb7d14640ed7efe84eefefec4ee425d9d83b02cb0a3f514fde3604cb5ed85c280891ed84baf026b3940b94ec388158e616be8f14895882252454b566fbe76dafb4ab130f2d78c8fe1ddb8fe2f1e89972b4a2d15e8f5dea4c0ab513f"}, {0x60, 0x103, 0x5b7, "df65fefa9ddb12bdec13e95627f81e754c009c66e62fd3abe997f9fbec7b7fcf8342a395aea08d97c3627c212f010e531da3e148591634545872c1f713c7732bc951592ca708f4e4c1ad39"}, {0xe0, 0x29, 0x4, "ab43c09400c023467ff97d105988350f1bf9f55737206e7425625ba6214389e49639e2b5e71453cec516e7085c9fbff470723262875f120b1db29f1b88aa19d72c184c43ea324fc3ef9c72115aa10cd4326b13a4605c6772b3b7e1fa8a4f90e43ae66cc25f6f1be6cb2002e3c0b366225bd4723e75d3dcbe9d76dc54a9e85bec2cb105400e4542b62e22d91ca27b08cd9e94b11ffbb174384f19dfc5fe7e01b8b44a12123a887d16122875ca7306c7632cfb5c424676bda5cd09e3e1ff977e18ef61031b884237dc69795ad7a77b"}, {0x100, 0x10c, 0xdab, "9de32ee3d52141c9348d3b09c31da0d4002072b256bb40ddca02f5c6f1b323107186c475edd577187ca951b9f5edd3e26f498277907f41554b8716bd20da095406b09729813f0009a30e058c4cec26ddd31ac3ccac9727c280161cf5e14c1e77174b6a2c3298f3463bac418c08dd3ba701a0e15b8827931c23ca086f73d3f985e28db88ef6fd48cf8506d04540aea9301060e9a9fd82f22046b99ca06c07c58013c63b555387acc8653abbc423ec79845d7d03578d361955deab148b3cb84678d47819474347ca4b82663c9ef236d308ddc4c26d431552cec23feb2c722a0f0bd61629f34d25ac857b"}], 0x12d0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002b00)="499d2fc31f94a6", 0x7}], 0x1, &(0x7f0000002b80)=[{0xd0, 0x2, 0x9, "a16e6d4ac83673a29c124d6c6d4d8cf6497630e868dd4c2640076da3137e8aced238cfbeabfe03766f8162510093642b650079b213621fe30caf68a6642b2bec448302399faa8c97a94645ca0ed7c46b2030348e5a404380b4621ce2e0eb8035420d2fbd5578e8c970771134277cb4f3744e83807c93466a41efaf06cce8271de4ed4fee6d510ade6ac3c7a9f0f29f06a574446aa30a505153eacd3f3765a8085b0c6b6583efcdddb38530c6c5ba0e4fc54cc7e2d68b940c0897db84a583"}, {0x1010, 0x107, 0x7ff, "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"}, {0x58, 0x10f, 0x3a2, "094e47ef241d3f091154e2e77776848e8376533ca793fc023afdacac70d5ed924e3b1baebb8b7ebd04625c4a2cf3d1145b719432991333126c872461ef8229b088b0191d07"}], 0x1138}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000003cc0)="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", 0xfb}, {&(0x7f0000003dc0)="2ec8bb200893fa79692b8910111a317e7fc4abe46875ba268678ce75a0d6e76bdf30bf43cf3dc21ae141cbe7b013d5ad0963aec59734ebfbae198b4449e6c1ae3f6f71b20e8a7c739de6e299ba9080149f348d1f6c67b56c043ecff08deb9ea3940313760e4d3bbaac2bda29dab0e5c0d9bb144a2c790bc3aae78ea360d89a754dcf387aef1f", 0x86}, {&(0x7f0000003e80)="3b06820ae42ab3d914cb239a5850a4c2c15f2a5418e47510f37dea1719cdbd01bdf64ccbc502da781ce3bb310aa8186fa6adc3321c6ee8661dbb85df2f3a3df309a428999fc1be82e1137d5f7aa359861faf3f88bd9c333d2557d42a1d7d3e452946ac79", 0x64}, {&(0x7f0000003f00)="07ab0af20833cb2f56dc400caeac34e4cb9f4994d084c0027347f99fd9d5107640047c3c0e4e9d49c05850a6501a2b8661663c2168f7f83179c3206271a211e5178ba09430618cfd3690fd56666d183709538fa297ab905c90e0b39f775b5348d2a05ef3dcbe122c8cbbee2a1143e7cc1066a3eee89c23daaf7e7ea6bded44d9ef9259c8e92d68791468c98a1338809bc0e1d0d7a54c3f2a675b69055e36f5a87142ec912df1913f74e4", 0xaa}, {&(0x7f0000003fc0)="7332cbc4c20bb5682afc7eede4b68c0f9cf8c59318", 0x15}, {&(0x7f0000004000)="e87bdce2f52576cd266ca4ced301f5ad0d0edffa1ecdba7e4c9da63718ccea8e4aec71a83ac68794641cecbf6c35f8ebbf844fc0378a3aef05482f1fe6dff62adad76fa9ec37b576a6b20e8e29d9814998cc747beae8e0db0ce76e5a6cb0fb6827cf572093835aaa322240e3342cda8db136f816473f4eebae943adb2a60cecf70d649c764552ff6b547e87b38dd4b85eda3126fc4e472dd556093455c48587ae82291df4c963b60c2e181108ec16687d6377b5816ccff4442c26791bb4b0c64a3c2aa", 0xc3}, {&(0x7f0000004100)="1e7ca559230aafd52805ab484abbdf50799ee9e68aff6ea7670c9048ed43f39fb2eb1fe53517e2f5fa1ba9642f25567d62a89687d1ff51e1771d1d9600bdbcd54378ad408cc8a78e9f31ffa32707bd1eff26b3e64660e21d2d6fb8d1b8c788c12d9318c1eb756f93bc0ae42251acafbdd06cbe18f5008a8fd0503b6446111f61df53d47b58239dd1f610f798d82ca039027a79802a2b71e50a8cf1b13b1b28ae1afc4af44e8c15f2902ba264c361c4bb1dfa6bf1a421f6b18b54310abc17c686c80c87e2d15f33ff8aeb4cae1b730e11cf2bf0604e94852be57e511cf9efb0d0921f12392b328ff019dc3bea96d8d9eb6f1071", 0xf3}, {&(0x7f0000004200)="8ccacfb5251ff8d4a9bd1c1a70c923cdcdddb4035dd43c6d74e164c18e8a71aeaa43058a91a87edab936b6e7b720f0de8e113e139cecd8cef692160d3e68b7d676d6d1b92ed6f1ea14818ea690629838a340ca1440f8457e3b639331bc86301f226f77cd9979b790d0483138a74ea72730b9c27aafe23813308d1f6489c1322e6101c0ad9b", 0x85}], 0x8, &(0x7f0000004340)=[{0x50, 0x114, 0x8, "f8fa4db9512bc7ac707b4b990f70b58095de8bd47bcd52160629e61d4ffe2c6792189ad1ab59e8e32c679af02c67590080db17130dfe274c50811657b01057ef"}, {0xc8, 0x114, 0xd, "02b83e2a2965c2bc5808abc38775deffee776d07747e4ac697e4d790ac9f06809498e38b5940ac920b295c3496a232b11c56b1675780eb1d363f14f7a9cbafaaa54e2e9cac24d9a79ca1c3a3d71a087705a98cf6c9f32ea41843bf2b130b484a664c27e78b26362dcc246432f3d9efc0794597dd5ea7f0aa2f08b614c5d168f7f35383afa56ed6eb4cc4725ae0388adf90dff44b752315e43496e04ae71a1e314d15cf98c652c29d262cb3e2793f49bed915235c1d6912"}], 0x118}}, {{&(0x7f0000004480)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf3}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004500)="62b6ff55b19482b3dc38eb523db9102d7e321b5ad64be95398331b1576442885659cfa150a65fe69c0bdbbf7b90f9a0c583ba0273fd8af1f91ea5581544949acdb9f89353a21fd9ae8f941ae3d00f6082a5f5c7793652f86e1bf92f28cf693550da98a74b6fba570f4cfe5792e0294d7d313083dbc898ba734fcc6dc0431ad800ad84db987f9d3f51aabb292cfc87b570b8bd472751b0f2793c913514a2545747df63d40c3c611cc06a610d442651311450510669283c7e97ed8c5d32f369b8bc5c03137b202431359c0a5d71b6ec2fb8e3b22fad506cc94", 0xd8}, {&(0x7f0000004600)="97329e3b0f0fdc260dab623f9a6b1dbfcaf0b8a701944fecf4164b4004b55d70415e02ca63a92c6f63979d0ed6ccb271943ce0a4ecf7842577224b0d3943ac801c8ae408b755aeecddd5852e2267c8c13a79ff065bb3c79dbac2a689969e16858e3b589976c4637b99228d92004b5997c6fca0e3581d90201e14c5f579683b1048d7241e450757c7ef902e37dadfc9a2be5926e7bfbc66aa0b50ce0fb36e1c1b35fb455a45e72a02a588950a569bd6fd3caa58e8b0394903771e4ab52cfdc56e3908adc769ce789249f0bfe1a7", 0xcd}, {&(0x7f0000004700)="c0f151a6d90c6081968070591cf662daa77775173068f76d68e67da0fd2892d06e9edee140daf35ddd5c8ca9dfb41c647cf123e5c8a51b32eced03abe4d77e19e1a37be8a25c36c3b234e1900bbfd04fb2a4e07820462c2c4a", 0x59}, {&(0x7f0000004780)="6f0c6b713613c7f9beb72ddb14d26e885a9b3f0c51ccc6c035cbeccf9a9a382f42d023f76837a91655cd2446b2309722544e1aab3a7ac3bedf71d624ba24d471d28451cff7f606c922a55de6d8afb3da090e4c64bbe4b978450f1de5d2b39678d1b1538d4d01e7519c7722b29d3a7981cf0efadf190381ac4d5bb67bb4704e37d0702a13d5449552b2808852427e37b59c41f1575286f305c450c27e3d981ce59e253f73ac3afeb6f2c92bf026ae2046c2679d5de6b784a7b48397d5389226e04decdbdc09a90c4ceb43703429f17225d4faef6ed49f4c5eeb1927ace4d72f82c38b67af33446c7af0537a8da707fd2b3eadebd064", 0xf5}, {&(0x7f0000004880)="66989976877946ae96b2cfa59218b7f1be265792bfce63f07447d13fa06cae53bf7fe8648e161582e21a401628bf8fc24f71eee6a5a166ccee309dba2a0672b82532f331f2146f318e720de49bf221c4532f5dcb3a0664d92730f5932df9c16a734e14c17e76bd89a7bc7fe0a09c89a56fca3594071ec0d0bb7e32701732099ea64b63008723699be898cf35591909dd5f15f9713e5bfae4d5e6f6b84f2ddd0c1615fc2174cf103800f5d8b854f2694c235470e193038e954dd935874ad05943bd4a901b8055e6fb258c0a5cb70d9e44631a2da22506a1d94e690811d74f035134154615bdbefbc8c0aaf82b182c88", 0xef}], 0x5, &(0x7f0000004a00)=[{0xf8, 0x3a, 0x3ff, "0cd64968e6c37e67e9a536aa07abc1b6adc3fbc61a30f7f7d263a4f98d771d0730e75ab594bf793c6e6119061740dd7f4def2db3dcc6c01bc0f436fe7fbc084ba458676aa3dbd4a94c4ba36d497e5ea5ef14145cf5a666d4a57bf15fc1c0897b6a420b7f5ca86741fcd3e593a22ba7f5f27f21a02a2893edff1825e6c9d0ad675dbf715b9acf2e404e03a0df769aa7c1485f6bcb9215301e46beea034309af1dd8e94e3639b49513cdcc6927b5edae55f700b174fcd5d027aa1a464d59949d0d6aaf5b40394394297b5f47a06783893222f5bbe0fc2e56fad6b509206c235f38b9"}, {0x60, 0x29, 0x3, "787ddd566ca1b5d2bc678994f5749709b2014ab10c314c4d5ab45a38e7142b80bffca5dbb697fe9f75590d729eadab0cd408ed62455d6246929c52c21ed7204f80d5962029531b2bcaea"}, {0x1010, 0x119, 0xfffffff8, "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"}, {0x110, 0xff, 0x6b1, "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"}], 0x1278}}], 0x4, 0x4000084) r6 = socket(0xa, 0x80000, 0x8) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000005d80)={0xe}) r8 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r9 = socket(0xa, 0x6, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000005dc0)={0x3ff, 0x2, 0x3, 0x0, 0x9}) ioctl$TIOCSIG(r6, 0x40045436, 0x38) connect$pppoe(r9, &(0x7f0000005e00)={0x18, 0x0, {0x3, @random="5f96be831233", 'ip6gre0\x00'}}, 0x1e) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_SCRNMAP(r10, 0x4b41, &(0x7f0000005e40)="4f14f7b94fe463bc9434902e39bc1a7ed95c42fd13f2fe2215e81a8fde83344346b1053df7b1147699f930e576d6ddc7e917fa8d4b398c31b914da2f0cfd09f9a89968ee38826484765786450d70e168aa364c067d120f41227ebf355eae2fc17c640ede4eff568837dc18ff1cf47ef96ae1") ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000005ec0)=0xffffffff) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005f40), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000006080)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006040)={&(0x7f0000005f80)={0xc0, r11, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x500}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa69f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb9}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4080}, 0x400c1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000006100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000060c0)="599b799bae01c077310aca5406f2a45eabc8f4f371599b6197db", 0x1a, r2}, 0x68) 0s ago: executing program 4 (id=1786): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x4}) (fail_nth: 1) kernel console output (not intermixed with test programs): avc: denied { append } for pid=10866 comm="syz.0.1250" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 455.113872][ T5804] usb 2-1: USB disconnect, device number 44 [ 455.138642][T10196] udevd[10196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.803923][T10889] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1254'. [ 455.878225][T10889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.005174][ T30] audit: type=1400 audit(1767469510.552:772): avc: denied { getopt } for pid=10866 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 456.103931][ T30] audit: type=1400 audit(1767469510.622:773): avc: denied { connect } for pid=10892 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 456.130953][ T5804] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 456.267697][ T30] audit: type=1400 audit(1767469510.912:774): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.320193][ T5931] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 456.327736][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 456.344118][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 456.356267][ T30] audit: type=1400 audit(1767469510.912:775): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.357271][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 102, changing to 7 [ 456.401398][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41897, setting to 1024 [ 456.415742][ T5804] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 456.425133][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.433379][ T5804] usb 5-1: Product: syz [ 456.437621][ T5804] usb 5-1: Manufacturer: syz [ 456.442489][ T5804] usb 5-1: SerialNumber: syz [ 456.505500][ T30] audit: type=1400 audit(1767469510.912:776): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.531415][ T30] audit: type=1400 audit(1767469511.062:777): avc: denied { bpf } for pid=10899 comm="syz.1.1258" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 456.580095][ T5804] usb 5-1: config 0 descriptor?? [ 456.600331][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.638767][ T5804] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 457.055685][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.075874][ T5804] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 457.087158][ T5931] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 457.098111][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.107075][ T30] audit: type=1400 audit(1767469511.752:778): avc: denied { perfmon } for pid=10904 comm="syz.2.1259" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.130341][ T5931] usb 6-1: config 0 descriptor?? [ 457.452493][T10915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=10915 comm=syz.2.1263 [ 457.849688][ T5804] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 458.510199][T10923] loop6: detected capacity change from 0 to 2640 [ 458.519383][T10923] buffer_io_error: 11 callbacks suppressed [ 458.519396][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.533270][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.537002][ T5931] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0025/input/input47 [ 458.572702][ T30] audit: type=1400 audit(1767469513.142:779): avc: denied { append } for pid=10916 comm="syz.0.1264" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.616915][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.625051][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.633114][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.668603][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.681218][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.689595][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.697536][T10923] ldm_validate_partition_table(): Disk read failed. [ 458.704479][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.712543][T10923] Buffer I/O error on dev loop6, logical block 0, async page read [ 458.720754][T10923] Dev loop6: unable to read RDB block 0 [ 458.727574][T10923] loop6: unable to read partition table [ 458.735288][T10923] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 458.925732][ T5931] sony 0003:054C:03D5.0025: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 459.108993][ T5931] usb 6-1: USB disconnect, device number 23 [ 459.281044][T10928] fido_id[10928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 459.722029][ T5804] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 459.820516][ T5804] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 459.853894][ T5804] em28xx 5-1:0.0: No AC97 audio processor [ 459.924618][ T5804] usb 5-1: USB disconnect, device number 45 [ 459.946389][T10939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1267'. [ 459.955166][ T5804] em28xx 5-1:0.0: Disconnecting em28xx [ 459.957833][T10939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.982736][ T5804] em28xx 5-1:0.0: Freeing device [ 460.259501][ T791] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 460.299414][ T5879] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 460.410677][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 460.421752][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.431503][ T791] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 460.440624][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.449450][ T5879] usb 1-1: device descriptor read/64, error -71 [ 460.449974][ T791] usb 2-1: config 0 descriptor?? [ 460.699401][ T5879] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 460.829478][ T5879] usb 1-1: device descriptor read/64, error -71 [ 460.874637][ T791] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0026/input/input48 [ 460.939793][ T5879] usb usb1-port1: attempt power cycle [ 460.955377][ T791] sony 0003:054C:03D5.0026: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 461.068143][ T791] usb 2-1: USB disconnect, device number 45 [ 461.319421][ T5879] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 461.779815][ T5879] usb 1-1: device descriptor read/8, error -71 [ 461.993061][ T30] audit: type=1400 audit(1767469516.632:780): avc: denied { shutdown } for pid=10967 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.013306][ T30] audit: type=1400 audit(1767469516.632:781): avc: denied { read } for pid=10967 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.326256][ T5879] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 462.349795][ T5879] usb 1-1: device descriptor read/8, error -71 [ 462.459651][ T5879] usb usb1-port1: unable to enumerate USB device [ 465.253109][T11001] ubi: mtd0 is already attached to ubi31 [ 465.709644][ T10] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 465.822692][T11012] dlm: non-version read from control device 4112 [ 465.973999][ T10] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 466.290413][ T10] usb 3-1: config 0 has no interface number 0 [ 466.305788][ T10] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 466.346985][ T10] usb 3-1: config 0 interface 128 has no altsetting 0 [ 466.371708][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 466.393319][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.410740][ T10] usb 3-1: Product: syz [ 466.419068][ T10] usb 3-1: Manufacturer: syz [ 466.434179][ T10] usb 3-1: SerialNumber: syz [ 466.451659][ T10] usb 3-1: config 0 descriptor?? [ 466.467833][ T10] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 466.486860][ T10] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 466.514678][ T10] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 466.693329][T11028] xt_l2tp: v2 doesn't support IP mode [ 466.702671][ T10] usb 3-1: USB disconnect, device number 42 [ 467.870367][ T5879] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 468.019467][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 468.582415][ T5879] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 468.609821][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.622282][ T5879] usb 5-1: config 0 has no interface number 0 [ 468.632217][ T5879] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 468.641562][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.650148][ T5879] usb 5-1: Product: syz [ 468.654525][ T5879] usb 5-1: Manufacturer: syz [ 468.659318][ T5879] usb 5-1: SerialNumber: syz [ 468.670210][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1300'. [ 468.691380][ T5879] usb 5-1: config 0 descriptor?? [ 468.713047][ T5879] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 468.724637][ T5879] uvcvideo 5-1:0.105: No valid video chain found. [ 469.170772][ T5804] usb 5-1: USB disconnect, device number 46 [ 469.211679][T11067] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1302'. [ 469.223904][T11067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.544773][ T5879] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 469.726226][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 469.819529][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.949408][ T5804] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 469.961193][ T5879] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 469.990223][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.029178][ T5879] usb 3-1: config 0 descriptor?? [ 470.249455][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 470.255865][ T5804] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 470.265234][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.276027][ T5804] usb 6-1: config 0 descriptor?? [ 470.285280][ T5804] as10x_usb: device has been detected [ 470.291337][ T5804] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 470.365845][ T5804] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 470.837824][ T5879] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0027/input/input50 [ 470.944839][ T5804] as10x_usb: error during firmware upload part1 [ 470.960115][ T5804] Registered device nBox DVB-T Dongle [ 470.981202][ T5879] sony 0003:054C:03D5.0027: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 471.123506][ T5879] usb 3-1: USB disconnect, device number 43 [ 471.176396][T11089] fido_id[11089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 471.935884][T11104] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1308'. [ 472.801890][T11114] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1312'. [ 473.337336][ T5804] usb 6-1: USB disconnect, device number 24 [ 473.388170][T11118] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1313'. [ 473.397148][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 473.438547][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1314'. [ 473.458648][ T5804] Unregistered device nBox DVB-T Dongle [ 473.468614][ T5804] as10x_usb: device has been disconnected [ 500.881636][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.887921][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 545.024400][T11137] lo speed is unknown, defaulting to 1000 [ 545.052727][T11137] lo speed is unknown, defaulting to 1000 [ 545.510542][T11155] xt_TPROXY: Can be used only with -p tcp or -p udp [ 545.959499][ T5804] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 546.136457][T11160] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1322'. [ 546.264152][ T5804] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 546.336785][ T5804] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.386385][ T5804] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 546.402114][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.419385][ T5804] usb 6-1: Product: syz [ 546.449413][ T5804] usb 6-1: Manufacturer: syz [ 546.458379][ T5804] usb 6-1: SerialNumber: syz [ 546.486619][ T5804] usb 6-1: config 0 descriptor?? [ 546.504765][ T5804] usb 6-1: selecting invalid altsetting 0 [ 546.513495][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1325'. [ 546.583183][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'. [ 546.616432][ T5825] Bluetooth: hci1: SCO packet too small [ 546.616456][ T30] audit: type=1400 audit(1767469601.262:782): avc: denied { getopt } for pid=11173 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 546.789596][ T791] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 546.864277][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1329'. [ 546.900407][ T5804] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 546.937186][ T5879] usb 6-1: USB disconnect, device number 25 [ 546.957678][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.969811][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.013290][ T791] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 547.038508][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.064516][ T791] usb 2-1: config 0 descriptor?? [ 547.090937][ T5804] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 547.100488][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.119830][ T5804] usb 3-1: config 0 descriptor?? [ 547.134369][ T5804] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 547.147651][ T5804] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 547.167226][T11189] pim6reg9: entered allmulticast mode [ 547.366046][ T5879] usb 3-1: USB disconnect, device number 44 [ 547.865308][ T791] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0028/input/input51 [ 547.891593][ T791] sony 0003:054C:03D5.0028: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 548.218026][T11205] loop6: detected capacity change from 0 to 2640 [ 548.226500][T11205] buffer_io_error: 11 callbacks suppressed [ 548.226526][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.240459][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.248396][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.256389][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.265568][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.283062][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.291635][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.294119][ T791] usb 2-1: USB disconnect, device number 46 [ 548.305904][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.314073][T11205] ldm_validate_partition_table(): Disk read failed. [ 548.321608][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.329634][T11205] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.338094][T11205] Dev loop6: unable to read RDB block 0 [ 548.345879][T11205] loop6: unable to read partition table [ 548.352843][T11205] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 548.555985][T11208] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1334'. [ 548.849052][T11215] overlay: filesystem on ./bus is read-only [ 548.858196][ T30] audit: type=1400 audit(1767469603.492:783): avc: denied { mounton } for pid=11213 comm="syz.0.1337" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 549.031493][ T30] audit: type=1400 audit(1767469603.682:784): avc: denied { setopt } for pid=11220 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 549.393655][T11232] netlink: 840 bytes leftover after parsing attributes in process `syz.5.1340'. [ 550.019616][T11243] loop6: detected capacity change from 0 to 2640 [ 550.028116][T11243] ldm_validate_partition_table(): Disk read failed. [ 550.036371][T11243] Dev loop6: unable to read RDB block 0 [ 550.042447][T11243] loop6: unable to read partition table [ 550.051035][T11243] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 550.224240][T11242] lo speed is unknown, defaulting to 1000 [ 550.651429][T11242] lo speed is unknown, defaulting to 1000 [ 550.695678][ T30] audit: type=1400 audit(1767469605.342:785): avc: denied { read } for pid=11248 comm="syz.5.1346" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 550.756646][ T30] audit: type=1400 audit(1767469605.372:786): avc: denied { open } for pid=11248 comm="syz.5.1346" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 550.805089][ T30] audit: type=1400 audit(1767469605.372:787): avc: denied { ioctl } for pid=11248 comm="syz.5.1346" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 551.543389][ T30] audit: type=1400 audit(1767469606.192:788): avc: denied { block_suspend } for pid=11250 comm="syz.5.1348" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.665405][ T30] audit: type=1400 audit(1767469606.312:789): avc: denied { create } for pid=11263 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 551.733359][ T30] audit: type=1400 audit(1767469606.342:790): avc: denied { bind } for pid=11263 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 551.861925][ T30] audit: type=1400 audit(1767469606.502:791): avc: denied { write } for pid=11263 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 551.938462][ T30] audit: type=1400 audit(1767469606.582:792): avc: denied { setopt } for pid=11263 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 552.024566][ T30] audit: type=1400 audit(1767469606.612:793): avc: denied { ioctl } for pid=11263 comm="syz.0.1350" path="socket:[34123]" dev="sockfs" ino=34123 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 552.111913][T11276] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.739927][ T791] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 552.848861][T11280] binder: 11279:11280 ioctl c0306201 200000000440 returned -14 [ 552.912610][ T791] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 552.929644][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.982067][ T791] usb 6-1: Product: syz [ 552.986277][ T791] usb 6-1: Manufacturer: syz [ 553.021567][ T791] usb 6-1: SerialNumber: syz [ 553.032641][ T791] usb 6-1: config 0 descriptor?? [ 553.061174][ T791] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 553.372391][T11300] erspan0: entered promiscuous mode [ 553.663131][ T30] audit: type=1400 audit(1767469608.272:794): avc: denied { accept } for pid=11293 comm="syz.0.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 554.192528][ T791] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 554.227005][ T5879] usb 6-1: USB disconnect, device number 26 [ 554.282368][T11294] lo speed is unknown, defaulting to 1000 [ 554.288714][T11294] lo speed is unknown, defaulting to 1000 [ 554.376636][ T30] audit: type=1400 audit(1767469609.022:795): avc: denied { getopt } for pid=11293 comm="syz.0.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 554.658249][T11322] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1364'. [ 554.752424][ T791] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 554.889603][ T5879] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 554.910670][ T791] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 554.926480][ T791] usb 5-1: config 0 has no interface number 0 [ 554.932927][ T791] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 554.945536][ T791] usb 5-1: config 0 interface 128 has no altsetting 0 [ 554.956595][ T791] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 554.965976][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.974180][ T791] usb 5-1: Product: syz [ 554.978409][ T791] usb 5-1: Manufacturer: syz [ 554.983240][ T791] usb 5-1: SerialNumber: syz [ 555.014534][ T791] usb 5-1: config 0 descriptor?? [ 555.019575][T11330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1368'. [ 555.034913][ T791] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 555.042627][ T791] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 555.051970][ T791] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 555.139399][ T5931] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 555.161875][ T5879] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 555.170444][ T5879] usb 6-1: config 0 has no interface number 0 [ 555.176565][ T5879] usb 6-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 555.187845][ T5879] usb 6-1: config 0 interface 128 has no altsetting 0 [ 555.196861][ T5879] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 555.206290][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.214349][ T5879] usb 6-1: Product: syz [ 555.218563][ T5879] usb 6-1: Manufacturer: syz [ 555.270091][ T791] usb 5-1: USB disconnect, device number 47 [ 555.352488][T11334] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 555.399530][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 555.468313][ T5931] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 555.550881][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.573192][ T5931] usb 2-1: Product: syz [ 555.577619][ T5931] usb 2-1: Manufacturer: syz [ 555.579036][ T5879] usb 6-1: SerialNumber: syz [ 555.584457][ T5931] usb 2-1: SerialNumber: syz [ 555.599803][ T5931] r8152-cfgselector 2-1: Unknown version 0x0000 [ 555.606261][ T5931] r8152-cfgselector 2-1: config 0 descriptor?? [ 555.621630][ T5879] usb 6-1: config 0 descriptor?? [ 555.634169][ T5879] radio-si470x 6-1:0.128: could not find interrupt in endpoint [ 555.642147][ T5879] radio-si470x 6-1:0.128: probe with driver radio-si470x failed with error -5 [ 555.651322][ T5879] usbhid 6-1:0.128: couldn't find an input interrupt endpoint [ 555.887158][ T791] usb 6-1: USB disconnect, device number 27 [ 556.469394][ T791] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 556.700482][ T791] usb 5-1: Using ep0 maxpacket: 8 [ 556.713641][ T791] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 556.783664][ T791] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 556.810496][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.818936][ T791] usb 5-1: Product: syz [ 556.823941][ T791] usb 5-1: Manufacturer: syz [ 556.828848][ T791] usb 5-1: SerialNumber: syz [ 556.857554][ T791] usb 5-1: config 0 descriptor?? [ 556.880197][ T791] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 556.888725][ T791] usb 5-1: setting power ON [ 556.893484][ T791] dvb-usb: bulk message failed: -22 (2/0) [ 556.901996][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 556.919199][ T791] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 556.927857][ T791] usb 5-1: media controller created [ 556.949056][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.977170][T11344] overlayfs: statfs failed on './file0' [ 556.992429][ T791] usb 5-1: selecting invalid altsetting 6 [ 557.006686][ T791] usb 5-1: digital interface selection failed (-22) [ 557.029360][ T791] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 557.057536][ T791] usb 5-1: setting power OFF [ 557.072967][ T791] dvb-usb: bulk message failed: -22 (2/0) [ 557.081410][T11348] dvb-usb: bulk message failed: -22 (3/0) [ 557.087404][T11348] dvb-usb: bulk message failed: -22 (4/0) [ 557.097036][T11371] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 557.097036][T11371] The task syz.0.1379 (11371) triggered the difference, watch for misbehavior. [ 557.099011][ T791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 557.124315][ T791] (NULL device *): no alternate interface [ 557.126512][T11348] cxusb: i2c read failed [ 557.169821][T11372] dvb-usb: bulk message failed: -22 (3/0) [ 557.182159][ T30] audit: type=1400 audit(1767469611.832:796): avc: denied { map } for pid=11369 comm="syz.0.1379" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 557.194930][T11348] netlink: 'syz.4.1373': attribute type 10 has an invalid length. [ 557.214633][ T30] audit: type=1400 audit(1767469611.832:797): avc: denied { execute } for pid=11369 comm="syz.0.1379" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 557.313928][T11348] team0: Port device dummy0 added [ 558.340793][T11381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 558.598990][ T5931] r8152-cfgselector 2-1: USB disconnect, device number 47 [ 558.762465][T11386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.786024][ T10] lo speed is unknown, defaulting to 1000 [ 558.791821][ T10] syz2: Port: 1 Link DOWN [ 558.869267][ T791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 558.902414][ T791] usb 5-1: USB disconnect, device number 48 [ 559.069553][T11390] loop6: detected capacity change from 0 to 2640 [ 559.081001][T11390] buffer_io_error: 32 callbacks suppressed [ 559.081030][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.095271][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.103659][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.111825][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.120528][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.128562][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.136608][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.144626][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.152577][T11390] ldm_validate_partition_table(): Disk read failed. [ 559.159255][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.167274][T11390] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.175358][T11390] Dev loop6: unable to read RDB block 0 [ 559.181548][T11390] loop6: unable to read partition table [ 559.187875][T11390] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 559.464725][T11395] team0: Device gtp0 is up. Set it down before adding it as a team port [ 559.564813][T11397] loop6: detected capacity change from 0 to 2640 [ 559.577420][T11397] ldm_validate_partition_table(): Disk read failed. [ 559.585138][T11397] Dev loop6: unable to read RDB block 0 [ 559.592012][T11397] loop6: unable to read partition table [ 559.599055][T11397] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 559.830831][ T5189] ldm_validate_partition_table(): Disk read failed. [ 559.837982][ T5189] Dev loop6: unable to read RDB block 0 [ 559.850981][ T5189] loop6: unable to read partition table [ 560.010092][T11406] i2c i2c-0: Invalid block write size 58 [ 560.310366][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 560.967121][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 560.995076][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.037111][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.045180][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 561.065938][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.088381][T11420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.114484][T11416] Process accounting resumed [ 561.239686][T11418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1393'. [ 561.248755][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 561.297158][ T10] usb 2-1: config 0 descriptor?? [ 561.676220][ T5879] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 562.139413][ T5879] usb 6-1: device descriptor read/64, error -71 [ 562.292676][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 562.299488][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 562.805100][ T10] usb 2-1: USB disconnect, device number 48 [ 562.834201][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.841553][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.859386][ T5879] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 562.937154][T11438] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1397'. [ 562.989405][ T5879] usb 6-1: device descriptor read/64, error -71 [ 563.104587][T11441] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 563.121477][ T5879] usb usb6-port1: attempt power cycle [ 563.482792][T11447] overlayfs: failed to resolve './file0': -2 [ 563.489667][ T5879] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 563.520001][ T5879] usb 6-1: device descriptor read/8, error -71 [ 563.634053][ T30] audit: type=1400 audit(1767469618.282:798): avc: denied { create } for pid=11455 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 563.692915][ T30] audit: type=1400 audit(1767469618.342:799): avc: denied { write } for pid=11455 comm="syz.0.1404" lport=40250 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 563.726904][T11460] FAULT_INJECTION: forcing a failure. [ 563.726904][T11460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.740532][T11460] CPU: 0 UID: 0 PID: 11460 Comm: syz.2.1400 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.740558][T11460] Tainted: [L]=SOFTLOCKUP [ 563.740564][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.740575][T11460] Call Trace: [ 563.740580][T11460] [ 563.740587][T11460] dump_stack_lvl+0x16c/0x1f0 [ 563.740614][T11460] should_fail_ex+0x512/0x640 [ 563.740645][T11460] _copy_from_user+0x2e/0xd0 [ 563.740673][T11460] vga_arb_write+0xf5/0x1510 [ 563.740694][T11460] ? __pfx_vga_arb_write+0x10/0x10 [ 563.740725][T11460] ? bpf_lsm_file_permission+0x9/0x10 [ 563.740743][T11460] ? security_file_permission+0x71/0x210 [ 563.740769][T11460] ? rw_verify_area+0xcf/0x6c0 [ 563.740789][T11460] ? __pfx_vga_arb_write+0x10/0x10 [ 563.740808][T11460] vfs_write+0x2a0/0x11d0 [ 563.740835][T11460] ? __pfx_vfs_write+0x10/0x10 [ 563.740855][T11460] ? find_held_lock+0x2b/0x80 [ 563.740882][T11460] ? __fget_files+0x204/0x3c0 [ 563.740910][T11460] ? __fget_files+0x20e/0x3c0 [ 563.740941][T11460] ksys_write+0x12a/0x250 [ 563.740962][T11460] ? __pfx_ksys_write+0x10/0x10 [ 563.740993][T11460] do_syscall_64+0xcd/0xf80 [ 563.741018][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.741036][T11460] RIP: 0033:0x7fb2fc38f749 [ 563.741051][T11460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.741071][T11460] RSP: 002b:00007fb2fd247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.741089][T11460] RAX: ffffffffffffffda RBX: 00007fb2fc5e5fa0 RCX: 00007fb2fc38f749 [ 563.741102][T11460] RDX: 000000000000000f RSI: 0000200000000100 RDI: 0000000000000003 [ 563.741112][T11460] RBP: 00007fb2fd247090 R08: 0000000000000000 R09: 0000000000000000 [ 563.741122][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.741138][T11460] R13: 00007fb2fc5e6038 R14: 00007fb2fc5e5fa0 R15: 00007ffeb6691838 [ 563.741164][T11460] [ 563.809362][ T791] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 563.809842][ T5879] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 563.979876][ T5879] usb 6-1: device descriptor read/8, error -71 [ 564.091999][ T5879] usb usb6-port1: unable to enumerate USB device [ 564.120994][ T791] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 564.136035][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.166928][ T791] usb 2-1: config 0 descriptor?? [ 564.186843][ T791] cp210x 2-1:0.0: cp210x converter detected [ 564.982319][ T791] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 564.993539][T11470] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 565.000218][T11470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 565.010849][T11470] vhci_hcd vhci_hcd.0: Device attached [ 565.036730][ T791] usb 2-1: cp210x converter now attached to ttyUSB0 [ 565.045392][T11474] vhci_hcd: connection closed [ 565.047496][ T1529] vhci_hcd vhci_hcd.5: stop threads [ 565.071180][ T1529] vhci_hcd vhci_hcd.5: release socket [ 565.076690][ T1529] vhci_hcd vhci_hcd.5: disconnect device [ 565.356331][ T5879] usb 2-1: USB disconnect, device number 49 [ 565.819693][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 565.842478][ T5879] cp210x 2-1:0.0: device disconnected [ 566.766259][T11489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=11489 comm=syz.1.1412 [ 567.721490][T11515] netlink: 'syz.5.1418': attribute type 12 has an invalid length. [ 569.031300][T11527] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 569.783716][T11548] ceph: No mds server is up or the cluster is laggy [ 569.856960][T11557] netlink: 'syz.4.1426': attribute type 4 has an invalid length. [ 569.989371][ T791] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 570.229371][ T791] usb 3-1: Using ep0 maxpacket: 32 [ 570.315844][ T791] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 570.331858][T11557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.391177][ T791] usb 3-1: config 0 has no interface number 0 [ 570.397260][ T791] usb 3-1: config 0 interface 192 has no altsetting 0 [ 570.431445][ T791] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=52.05 [ 570.457504][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.472696][ T791] usb 3-1: Product: syz [ 570.479747][ T791] usb 3-1: Manufacturer: syz [ 570.488920][ T791] usb 3-1: SerialNumber: syz [ 570.554356][ T791] usb 3-1: config 0 descriptor?? [ 570.714673][ T6078] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 570.743141][ T791] ipw 3-1:0.192: IPWireless converter converter detected [ 571.394482][ T6078] usb 5-1: Using ep0 maxpacket: 16 [ 571.433805][ T6078] usb 5-1: config 0 has no interfaces? [ 571.490607][ T6078] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 571.540818][ T6078] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 571.580973][ T6078] usb 5-1: Manufacturer: syz [ 571.789213][ T6078] usb 5-1: config 0 descriptor?? [ 572.237248][T11557] trusted_key: syz.4.1426 sent an empty control message without MSG_MORE. [ 572.692475][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1434'. [ 573.158551][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1434'. [ 573.298928][ T6078] usb 3-1: USB disconnect, device number 45 [ 573.316359][ T6078] ipw 3-1:0.192: device disconnected [ 573.980633][T11599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 574.008578][ T30] audit: type=1400 audit(1767469628.652:800): avc: denied { watch_mount } for pid=11597 comm="syz.0.1438" path="/300" dev="tmpfs" ino=1569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 574.270572][ T6078] usb 5-1: USB disconnect, device number 49 [ 574.331440][T11606] lo speed is unknown, defaulting to 1000 [ 574.366212][T11606] lo speed is unknown, defaulting to 1000 [ 575.070722][ T5879] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 575.095124][ T5825] Bluetooth: hci2: command 0x0405 tx timeout [ 575.109172][T11621] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1440'. [ 575.128646][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 575.269561][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 575.276494][ T5879] usb 2-1: config 0 has no interfaces? [ 575.282046][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 575.288584][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 575.304466][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.318266][ T5879] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 575.329108][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 575.383476][ T5879] usb 2-1: Manufacturer: syz [ 575.400669][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=ea.40 [ 575.413761][ T5879] usb 2-1: config 0 descriptor?? [ 575.456500][ T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 575.472693][ T10] usb 3-1: Product: syz [ 575.478146][ T10] usb 3-1: SerialNumber: syz [ 575.543279][T11625] syz_tun: entered allmulticast mode [ 575.554688][T11625] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 575.563355][T11625] mroute: pending queue full, dropping entries [ 575.664607][T11606] befs: (nullb0): No write support. Marking filesystem read-only [ 575.689957][T11606] befs: (nullb0): invalid magic header [ 575.702293][ T10] usb 3-1: 0:2 : does not exist [ 575.709171][ T10] usb 3-1: unit 9 not found! [ 575.731124][ T10] usb 3-1: USB disconnect, device number 46 [ 575.756436][T11206] udevd[11206]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.660150][T11647] i2c i2c-0: Invalid block write size 58 [ 576.879419][ T6078] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 576.939363][ T791] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 577.025203][T11654] netlink: 'syz.0.1453': attribute type 3 has an invalid length. [ 577.033069][T11654] netlink: 'syz.0.1453': attribute type 3 has an invalid length. [ 577.573507][ T5931] usb 2-1: USB disconnect, device number 50 [ 577.619393][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 577.627810][ T6078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.643267][ T791] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.671959][ T6078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.688400][ T791] usb 5-1: config 0 interface 0 has no altsetting 0 [ 577.699853][ T791] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 577.708912][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.717191][ T6078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.734059][ T6078] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.752044][ T791] usb 5-1: config 0 descriptor?? [ 577.757699][ T6078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.796449][ T6078] usb 3-1: config 0 descriptor?? [ 578.124681][T11661] loop6: detected capacity change from 0 to 2640 [ 578.134087][T11661] buffer_io_error: 48 callbacks suppressed [ 578.134221][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.148196][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.156337][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.165256][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.225390][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.249409][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.257665][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.266614][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.274623][T11661] ldm_validate_partition_table(): Disk read failed. [ 578.298855][ T791] nzxt-smart2 0003:1E71:2009.0029: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 578.312686][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.320832][T11661] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.352036][T11661] Dev loop6: unable to read RDB block 0 [ 578.356316][ T6078] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 578.373411][T11661] loop6: unable to read partition table [ 578.409448][T11661] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 578.708049][ T791] usb 3-1: USB disconnect, device number 47 [ 578.765729][ T10] usb 5-1: USB disconnect, device number 50 [ 578.797353][T11671] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 578.841971][T11668] fido_id[11668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 579.053255][ T30] audit: type=1400 audit(1767469633.702:801): avc: denied { ioctl } for pid=11664 comm="syz.0.1456" path="socket:[36838]" dev="sockfs" ino=36838 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 579.424877][ T30] audit: type=1400 audit(1767469633.922:802): avc: denied { associate } for pid=11684 comm="syz.5.1458" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 579.921180][T11687] No control pipe specified [ 580.020758][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 580.169396][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 580.310608][T11683] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 581.009399][ T10] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 581.186798][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 581.305074][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.669932][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 581.691979][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.748849][T11703] netlink: 840 bytes leftover after parsing attributes in process `syz.2.1467'. [ 582.143051][ T10] usb 5-1: config 0 descriptor?? [ 582.244735][T11712] netlink: 'syz.0.1466': attribute type 3 has an invalid length. [ 582.252670][T11712] netlink: 'syz.0.1466': attribute type 3 has an invalid length. [ 582.419446][ T6078] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 582.839364][ T6078] usb 2-1: Using ep0 maxpacket: 16 [ 582.933166][ T6078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.935011][ T10] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.002B/input/input53 [ 583.006603][T11715] netlink: 840 bytes leftover after parsing attributes in process `syz.2.1469'. [ 583.070568][ T6078] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 583.081191][ T6078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.104635][ T10] sony 0003:054C:03D5.002B: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 583.140483][ T10] usb 5-1: USB disconnect, device number 51 [ 583.165840][ T6078] usb 2-1: config 0 descriptor?? [ 583.284470][T11717] fido_id[11717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 583.665409][ T6078] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.002C/input/input54 [ 583.772136][ T6078] uclogic 0003:28BD:0933.002C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 584.035130][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 584.044461][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 584.212671][T11734] blktrace: Concurrent blktraces are not allowed on sg0 [ 584.424473][T11736] loop6: detected capacity change from 0 to 2640 [ 584.432539][T11736] buffer_io_error: 11 callbacks suppressed [ 584.432562][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.446418][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.454303][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.462368][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.470454][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.562171][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.658871][ T30] audit: type=1400 audit(1767469639.302:803): avc: denied { read } for pid=11738 comm="syz.0.1476" path="socket:[38047]" dev="sockfs" ino=38047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 584.667415][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.724981][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.733269][T11736] ldm_validate_partition_table(): Disk read failed. [ 584.740723][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.748855][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 584.757008][T11736] Dev loop6: unable to read RDB block 0 [ 584.762969][T11736] loop6: unable to read partition table [ 584.769369][T11736] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 585.587381][ T10] usb 2-1: USB disconnect, device number 51 [ 585.829058][T11757] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1482'. [ 585.869017][T11757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.359500][ T6078] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 586.653984][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 586.999700][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.037679][ T6078] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 587.083910][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.125705][ T6078] usb 5-1: config 0 descriptor?? [ 587.332834][ T30] audit: type=1400 audit(1767469641.982:804): avc: denied { relabelfrom } for pid=11771 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 587.380111][ T30] audit: type=1400 audit(1767469641.982:805): avc: denied { relabelto } for pid=11771 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 587.637162][ T6078] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.002D/input/input55 [ 587.786240][ T6078] sony 0003:054C:03D5.002D: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 587.890951][ T6078] usb 5-1: USB disconnect, device number 52 [ 587.944137][T11778] fido_id[11778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 588.448445][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 591.312040][T11811] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1497'. [ 591.616050][T11823] overlayfs: failed to clone upperpath [ 591.634955][T11823] netlink: 'syz.0.1501': attribute type 10 has an invalid length. [ 591.649910][T11823] team0: Port device dummy0 added [ 591.892644][ T5833] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 591.989468][ T6078] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 592.549432][ T6078] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.561861][ T6078] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.575245][ T6078] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 592.591541][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.599635][ T791] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 592.824796][ T6078] usb 5-1: usb_control_msg returned -32 [ 592.831739][ T6078] usbtmc 5-1:16.0: can't read capabilities [ 592.838336][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.852418][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.864757][ T791] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 592.873824][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.883708][ T791] usb 3-1: config 0 descriptor?? [ 592.899827][ T5928] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 593.129374][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 593.135808][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 593.147415][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.271785][ T5928] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 593.325027][ T791] hid_parser_main: 1 callbacks suppressed [ 593.325042][ T791] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 593.379545][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.381073][ T791] arvo 0003:1E7D:30D4.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 593.394129][ T5928] usb 2-1: Product: syz [ 593.433622][ T5928] usb 2-1: Manufacturer: syz [ 593.779916][ T5928] usb 2-1: SerialNumber: syz [ 593.788239][ T5928] usb 2-1: config 0 descriptor?? [ 593.796584][ T5928] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 593.805883][ T5928] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 593.822922][T11854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1507'. [ 593.832064][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 594.622406][ T5928] em28xx 2-1:0.0: unknown em28xx chip ID (151) [ 594.657886][ T30] audit: type=1400 audit(1767469649.302:806): avc: denied { watch } for pid=11863 comm="syz.0.1510" path="/318/file0" dev="tmpfs" ino=1674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 594.767155][ T5928] em28xx 2-1:0.0: Config register raw data: 0xe4 [ 594.775061][ T5928] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 594.782247][ T5928] em28xx 2-1:0.0: No AC97 audio processor [ 594.825733][ T10] usb 5-1: USB disconnect, device number 53 [ 595.011062][T11841] can: request_module (can-proto-0) failed. [ 595.028685][ T5928] usb 2-1: USB disconnect, device number 52 [ 595.066995][ T5879] usb 3-1: USB disconnect, device number 48 [ 595.101516][T11883] tipc: Started in network mode [ 595.106389][T11883] tipc: Node identity e0000002, cluster identity 4711 [ 595.114897][T11883] tipc: Enabling of bearer rejected, failed to enable media [ 595.267529][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 596.199453][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 596.209190][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.219383][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.230046][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.240945][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.248976][ T10] usb 5-1: Product: syz [ 596.253588][ T10] usb 5-1: Manufacturer: syz [ 596.258250][ T30] audit: type=1400 audit(1767469650.902:807): avc: denied { setopt } for pid=11892 comm="syz.0.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 596.281927][ T10] usb 5-1: SerialNumber: syz [ 596.429672][ T791] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 596.497355][ T10] usb 5-1: 0:2 : does not exist [ 596.519132][ T10] usb 5-1: USB disconnect, device number 54 [ 596.557234][T11141] udevd[11141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.601056][ T791] usb 3-1: config 15 has no interfaces? [ 596.608762][ T791] usb 3-1: New USB device found, idVendor=10c4, idProduct=8056, bcdDevice=14.72 [ 596.618193][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.628554][ T791] usb 3-1: Product: syz [ 596.632943][ T791] usb 3-1: Manufacturer: syz [ 596.637594][ T791] usb 3-1: SerialNumber: syz [ 596.646498][ T791] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 596.655808][ T791] usb 3-1: no configuration chosen from 1 choice [ 597.143758][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1524'. [ 597.368679][T11925] loop6: detected capacity change from 0 to 2640 [ 597.377662][T11925] buffer_io_error: 11 callbacks suppressed [ 597.377688][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.391494][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.399466][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.407374][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.415705][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.427039][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.435075][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.443037][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.450956][T11925] ldm_validate_partition_table(): Disk read failed. [ 597.457762][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.465726][T11925] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.473727][T11925] Dev loop6: unable to read RDB block 0 [ 597.480349][T11925] loop6: unable to read partition table [ 597.486830][T11925] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 597.644240][ T791] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 597.891136][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.903230][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.915614][ T791] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 597.925360][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.943228][ T791] usb 2-1: config 0 descriptor?? [ 598.150984][ T6078] usb 3-1: USB disconnect, device number 49 [ 598.289382][ T5931] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 598.539386][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 598.552459][T11940] openvswitch: netlink: IP tunnel TTL not specified. [ 598.620081][ T5931] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 598.655409][ T791] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.002F/input/input56 [ 598.785749][ T5931] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 598.914614][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.939804][ T5931] usb 6-1: Product: syz [ 598.948136][ T5931] usb 6-1: Manufacturer: syz [ 598.950629][T11942] mmap: syz.0.1538 (11942): VmData 37482496 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 598.958100][ T5931] usb 6-1: SerialNumber: syz [ 598.983945][ T791] sony 0003:054C:03D5.002F: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 599.008927][ T5931] usb 6-1: config 0 descriptor?? [ 599.028146][ T5931] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 599.040827][ T791] usb 2-1: USB disconnect, device number 53 [ 599.058444][ T5931] usb 6-1: setting power ON [ 599.068528][ T5931] dvb-usb: bulk message failed: -22 (2/0) [ 599.079033][T11943] fido_id[11943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 599.082834][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.130911][ T5931] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 599.142146][ T5931] usb 6-1: media controller created [ 599.166632][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.185081][ T5931] usb 6-1: selecting invalid altsetting 6 [ 599.190886][ T5931] usb 6-1: digital interface selection failed (-22) [ 599.197470][ T5931] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 599.206839][ T5931] usb 6-1: setting power OFF [ 599.212823][ T5931] dvb-usb: bulk message failed: -22 (2/0) [ 599.218538][ T5931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 599.234889][ T5931] (NULL device *): no alternate interface [ 599.240020][T11930] dvb-usb: bulk message failed: -22 (3/0) [ 599.286455][T11930] dvb-usb: bulk message failed: -22 (4/0) [ 599.292603][T11930] cxusb: i2c read failed [ 599.304827][T11930] netlink: 'syz.5.1534': attribute type 10 has an invalid length. [ 599.322210][T11930] team0: Port device dummy0 added [ 599.399284][ T30] audit: type=1400 audit(1767469654.042:808): avc: denied { read } for pid=11949 comm="syz.4.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 599.770167][ T5931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 599.772032][T11965] loop6: detected capacity change from 0 to 2640 [ 599.791004][ T5931] usb 6-1: USB disconnect, device number 32 [ 599.802817][T11965] ldm_validate_partition_table(): Disk read failed. [ 600.387939][T11965] Dev loop6: unable to read RDB block 0 [ 600.395306][T11965] loop6: unable to read partition table [ 600.403319][T11965] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 600.726882][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 601.362151][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 601.900680][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 601.911279][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 601.923459][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 601.935602][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 601.949924][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.440998][ T10] usb 2-1: Product: syz [ 602.445173][ T10] usb 2-1: Manufacturer: syz [ 602.449794][ T10] usb 2-1: SerialNumber: syz [ 602.463427][ T10] usb 2-1: config 0 descriptor?? [ 602.468928][T11977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 602.478283][T11977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 602.489930][ T10] usb 2-1: ucan: probing device on interface #0 [ 602.656465][ T791] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 602.906728][ T10] usb 2-1: ucan: failed to retrieve device info [ 602.991621][ T5879] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 603.006180][ T10] usb 2-1: ucan: probe failed; try to update the device firmware [ 603.189684][ T10] usb 2-1: USB disconnect, device number 54 [ 603.253528][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 603.335241][ T5879] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 603.371326][ T5879] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 603.398325][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.407598][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.421183][ T791] usb 6-1: unable to get BOS descriptor or descriptor too short [ 603.424594][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.433125][ T791] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 603.438429][ T5879] usb 5-1: Product: syz [ 603.450335][ T791] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 603.450941][ T5879] usb 5-1: Manufacturer: syz [ 603.465495][ T5879] usb 5-1: SerialNumber: syz [ 603.470477][ T791] usb 6-1: can't read configurations, error -71 [ 603.482122][ T5879] usb 5-1: config 0 descriptor?? [ 603.495900][ T5879] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 603.504653][ T5879] usb 5-1: setting power ON [ 603.509218][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 603.530644][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.631198][ T5879] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 603.639921][ T5879] usb 5-1: media controller created [ 603.659353][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.691010][T11997] dvb-usb: bulk message failed: -22 (3/0) [ 603.703968][T11997] dvb-usb: bulk message failed: -22 (4/0) [ 603.710208][T11997] cxusb: i2c read failed [ 603.715820][ T5879] usb 5-1: selecting invalid altsetting 6 [ 603.723837][ T5879] usb 5-1: digital interface selection failed (-22) [ 603.739445][ T5879] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 603.740433][T11997] dvb-usb: bulk message failed: -22 (3/0) [ 603.750149][ T5879] usb 5-1: setting power OFF [ 603.775623][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 603.780639][T11997] netlink: 'syz.4.1553': attribute type 10 has an invalid length. [ 603.791748][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 603.826775][ T5879] (NULL device *): no alternate interface [ 604.557389][T12023] FAULT_INJECTION: forcing a failure. [ 604.557389][T12023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.576754][T12023] CPU: 1 UID: 0 PID: 12023 Comm: syz.2.1559 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.576778][T12023] Tainted: [L]=SOFTLOCKUP [ 604.576782][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.576789][T12023] Call Trace: [ 604.576793][T12023] [ 604.576797][T12023] dump_stack_lvl+0x16c/0x1f0 [ 604.576815][T12023] should_fail_ex+0x512/0x640 [ 604.576834][T12023] _copy_from_user+0x2e/0xd0 [ 604.576851][T12023] video_usercopy+0xee2/0x16c0 [ 604.576867][T12023] ? __pfx___video_do_ioctl+0x10/0x10 [ 604.576879][T12023] ? selinux_kernel_read_file+0xf0/0x120 [ 604.576894][T12023] ? __pfx_video_usercopy+0x10/0x10 [ 604.576916][T12023] v4l2_ioctl+0x1bd/0x250 [ 604.576928][T12023] ? __pfx_v4l2_ioctl+0x10/0x10 [ 604.576940][T12023] __x64_sys_ioctl+0x18e/0x210 [ 604.576955][T12023] do_syscall_64+0xcd/0xf80 [ 604.576970][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.576981][T12023] RIP: 0033:0x7fb2fc38f749 [ 604.576990][T12023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.577001][T12023] RSP: 002b:00007fb2fd205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.577011][T12023] RAX: ffffffffffffffda RBX: 00007fb2fc5e6180 RCX: 00007fb2fc38f749 [ 604.577018][T12023] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000007 [ 604.577024][T12023] RBP: 00007fb2fd205090 R08: 0000000000000000 R09: 0000000000000000 [ 604.577030][T12023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.577036][T12023] R13: 00007fb2fc5e6218 R14: 00007fb2fc5e6180 R15: 00007ffeb6691838 [ 604.577050][T12023] [ 604.997037][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 605.494145][ T5879] usb 5-1: USB disconnect, device number 55 [ 606.281047][T12039] netlink: 840 bytes leftover after parsing attributes in process `syz.2.1564'. [ 606.540978][T12048] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1567'. [ 610.728678][ T5879] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 610.919122][T12095] overlayfs: failed to clone upperpath [ 610.924650][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 610.937457][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.955680][ T5879] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 610.957922][T12095] netlink: 'syz.0.1580': attribute type 10 has an invalid length. [ 610.964441][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.993865][ T5879] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.009187][ T5879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.018313][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.069388][ T5879] usb 5-1: Product: syz [ 611.077712][ T5879] usb 5-1: Manufacturer: syz [ 611.083642][ T5879] usb 5-1: SerialNumber: syz [ 611.265135][T12098] i2c i2c-0: Invalid block write size 58 [ 611.624752][T12105] netlink: 444 bytes leftover after parsing attributes in process `syz.4.1579'. [ 612.097896][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 612.259873][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 612.270970][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.284252][T12105] netlink: 444 bytes leftover after parsing attributes in process `syz.4.1579'. [ 612.302097][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 612.310219][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 612.323623][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.336680][ T10] usb 2-1: config 0 descriptor?? [ 612.355927][T12115] NILFS (nullb0): couldn't find nilfs on the device [ 612.376248][T12115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 612.385628][T12115] team0: Port device batadv1 added [ 612.394832][T12115] hfs: can't find a HFS filesystem on dev nullb0 [ 612.752134][ T10] nzxt-smart2 0003:1E71:2009.0030: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 612.869480][ T5928] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 613.030876][ T5928] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 613.049172][ T5928] usb 3-1: config 1 has no interface number 1 [ 613.065500][ T5928] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 613.114636][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.128881][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.141795][ T5928] usb 3-1: Product: syz [ 613.149053][ T5928] usb 3-1: Manufacturer: syz [ 613.157356][ T5928] usb 3-1: SerialNumber: syz [ 613.254164][ T791] usb 2-1: USB disconnect, device number 55 [ 613.380131][ T30] audit: type=1400 audit(1767469668.032:809): avc: denied { write } for pid=12120 comm="syz.2.1586" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 613.430292][ T5879] cdc_ncm 5-1:1.0: skipping garbage [ 613.435485][ T5879] cdc_ncm 5-1:1.0: skipping garbage [ 613.444948][ T5879] cdc_ncm 5-1:1.0: skipping garbage [ 613.459403][ T5879] cdc_ncm 5-1:1.0: skipping garbage [ 613.464685][ T5879] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 613.488204][ T5879] cdc_ncm 5-1:1.0: bind() failure [ 613.509556][ T5879] usb 5-1: USB disconnect, device number 56 [ 613.656853][T12134] i2c i2c-0: Invalid block write size 58 [ 614.558054][ T30] audit: type=1400 audit(1767469669.202:810): avc: denied { ioctl } for pid=12120 comm="syz.2.1586" path="socket:[38997]" dev="sockfs" ino=38997 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 614.593301][T12120] delete_channel: no stack [ 614.602795][ T5879] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 614.713672][ T5928] usb 3-1: found format II with max.bitrate = 26774, frame size=1 [ 614.723042][ T5928] usb 3-1: found format II with max.bitrate = 26774, frame size=1 [ 614.740360][ T5928] usb 3-1: failed to enable PITCH for EP 0x82 [ 614.787253][ T5928] usb 3-1: USB disconnect, device number 50 [ 614.834216][T12128] udevd[12128]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.889439][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 614.897621][ T5879] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.917691][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 614.942385][ T5879] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 614.952770][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.988856][ T5879] usb 5-1: config 0 descriptor?? [ 614.993900][ T10] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 615.171887][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.183477][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.193610][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 615.203205][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.227343][ T10] usb 2-1: config 0 descriptor?? [ 615.457977][ T30] audit: type=1400 audit(1767469670.102:811): avc: denied { map } for pid=12155 comm="syz.2.1594" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 615.470796][ T5879] nzxt-smart2 0003:1E71:2009.0031: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 615.499460][ T30] audit: type=1400 audit(1767469670.132:812): avc: denied { execute } for pid=12155 comm="syz.2.1594" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 615.687331][ T10] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0032/input/input58 [ 615.795441][ T10] sony 0003:054C:03D5.0032: input,hidraw1: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 615.932373][ T10] usb 2-1: USB disconnect, device number 56 [ 615.970496][ T5879] usb 5-1: USB disconnect, device number 57 [ 616.476059][T12171] overlayfs: failed to clone upperpath [ 616.486882][T12170] netlink: 840 bytes leftover after parsing attributes in process `syz.5.1596'. [ 616.512603][T12171] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 617.342849][T12182] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1599'. [ 617.888143][T12182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.209398][ T5928] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 618.245928][T12194] FAULT_INJECTION: forcing a failure. [ 618.245928][T12194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.259920][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.4.1602 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.259947][T12194] Tainted: [L]=SOFTLOCKUP [ 618.259953][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.259964][T12194] Call Trace: [ 618.259970][T12194] [ 618.259977][T12194] dump_stack_lvl+0x16c/0x1f0 [ 618.260004][T12194] should_fail_ex+0x512/0x640 [ 618.260036][T12194] _copy_to_user+0x32/0xd0 [ 618.260064][T12194] simple_read_from_buffer+0xcb/0x170 [ 618.260091][T12194] proc_fail_nth_read+0x197/0x240 [ 618.260111][T12194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.260131][T12194] ? rw_verify_area+0xcf/0x6c0 [ 618.260149][T12194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.260167][T12194] vfs_read+0x1e4/0xcf0 [ 618.260189][T12194] ? __pfx___mutex_lock+0x10/0x10 [ 618.260216][T12194] ? __pfx_vfs_read+0x10/0x10 [ 618.260246][T12194] ? __fget_files+0x20e/0x3c0 [ 618.260279][T12194] ksys_read+0x12a/0x250 [ 618.260301][T12194] ? __pfx_ksys_read+0x10/0x10 [ 618.260331][T12194] do_syscall_64+0xcd/0xf80 [ 618.260355][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.260372][T12194] RIP: 0033:0x7f82f1b8e15c [ 618.260386][T12194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 618.260403][T12194] RSP: 002b:00007f82f29f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 618.260419][T12194] RAX: ffffffffffffffda RBX: 00007f82f1de5fa0 RCX: 00007f82f1b8e15c [ 618.260430][T12194] RDX: 000000000000000f RSI: 00007f82f29f40a0 RDI: 0000000000000004 [ 618.260440][T12194] RBP: 00007f82f29f4090 R08: 0000000000000000 R09: 0000000000000000 [ 618.260450][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.260460][T12194] R13: 00007f82f1de6038 R14: 00007f82f1de5fa0 R15: 00007fff75b30748 [ 618.260485][T12194] [ 618.550186][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 618.561375][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.571293][ T5928] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 618.583383][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.593434][ T5928] usb 2-1: config 0 descriptor?? [ 619.176901][ T5928] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0033/input/input59 [ 619.271862][ T5928] sony 0003:054C:03D5.0033: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 619.607300][ T791] usb 2-1: USB disconnect, device number 57 [ 620.769673][T12235] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1613'. [ 622.361930][ T5928] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 622.599499][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 623.124892][ T5928] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 623.159016][ T5928] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 623.174433][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.190642][ T5928] usb 6-1: Product: syz [ 623.205774][ T5928] usb 6-1: Manufacturer: syz [ 623.210818][ T5928] usb 6-1: SerialNumber: syz [ 623.240785][ T5928] usb 6-1: config 0 descriptor?? [ 623.251566][ T5928] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 623.263625][ T5928] usb 6-1: setting power ON [ 623.268348][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 623.277710][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 623.422910][ T5928] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 623.926521][ T5928] usb 6-1: media controller created [ 623.929743][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.943014][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.956116][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.964829][T12251] dvb-usb: bulk message failed: -22 (3/0) [ 623.975682][T12251] dvb-usb: bulk message failed: -22 (4/0) [ 624.000008][T12251] cxusb: i2c read failed [ 624.012073][T12251] dvb-usb: bulk message failed: -22 (3/0) [ 624.057903][ T5928] usb 6-1: selecting invalid altsetting 6 [ 624.063038][T12277] netlink: 'syz.5.1617': attribute type 10 has an invalid length. [ 624.096447][ T5928] usb 6-1: digital interface selection failed (-22) [ 624.123411][ T5928] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 624.147321][ T5928] usb 6-1: setting power OFF [ 624.170818][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 624.176573][ T5928] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 624.284992][ T5928] (NULL device *): no alternate interface [ 624.551116][ T5928] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 624.571276][T12286] i2c i2c-0: Invalid block write size 58 [ 624.608602][ T5928] usb 6-1: USB disconnect, device number 35 [ 624.692509][T12289] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1628'. [ 624.829403][ T791] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 624.869345][ T30] audit: type=1400 audit(1767469679.512:813): avc: denied { listen } for pid=12291 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 624.889704][ T30] audit: type=1400 audit(1767469679.542:814): avc: denied { accept } for pid=12291 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 624.989374][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 624.996536][ T791] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.007540][ T791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 625.014361][ T791] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 625.023571][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.056816][ T791] usb 3-1: config 0 descriptor?? [ 625.466083][T12301] random: crng reseeded on system resumption [ 625.466441][ T30] audit: type=1400 audit(1767469680.112:815): avc: denied { write } for pid=12294 comm="syz.5.1630" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 625.500064][ T30] audit: type=1400 audit(1767469680.112:816): avc: denied { open } for pid=12294 comm="syz.5.1630" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 625.545574][ T791] nzxt-smart2 0003:1E71:2009.0034: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 625.558991][ T30] audit: type=1400 audit(1767469680.202:817): avc: denied { prog_load } for pid=12302 comm="syz.0.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 625.652111][ T30] audit: type=1400 audit(1767469680.232:818): avc: denied { prog_run } for pid=12302 comm="syz.0.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 626.629342][ T5931] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 626.656645][ T791] usb 3-1: USB disconnect, device number 51 [ 626.669411][ T6078] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 626.758302][ T30] audit: type=1400 audit(1767469681.402:819): avc: denied { map_create } for pid=12319 comm="syz.1.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 626.778356][ T30] audit: type=1400 audit(1767469681.402:820): avc: denied { map_read map_write } for pid=12319 comm="syz.1.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 626.819562][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 626.826225][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 626.838161][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 102, changing to 7 [ 626.849483][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41897, setting to 1024 [ 626.863222][ T6078] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.876275][ T5931] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 626.885559][ T6078] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.896603][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.904670][ T5931] usb 5-1: Product: syz [ 626.909067][ T6078] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 626.925705][ T5931] usb 5-1: Manufacturer: syz [ 626.930316][ T5931] usb 5-1: SerialNumber: syz [ 626.940126][ T6078] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.949375][ T5931] usb 5-1: config 0 descriptor?? [ 626.955254][ T6078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.965679][ T5931] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 626.975284][ T6078] usb 6-1: Product: syz [ 626.979630][ T6078] usb 6-1: Manufacturer: syz [ 626.984287][ T5931] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 626.991661][ T6078] usb 6-1: SerialNumber: syz [ 627.449561][ T6078] cdc_mbim 6-1:1.0: skipping garbage [ 627.668748][ T5931] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 627.976250][T12333] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1639'. [ 628.006275][T12329] syzkaller0: entered promiscuous mode [ 628.014506][T12329] syzkaller0: entered allmulticast mode [ 628.030503][T12335] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1641'. [ 628.239575][ T791] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 628.369765][ T5804] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 628.389394][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 628.395557][ T791] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 628.405383][ T791] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 628.414426][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.422477][ T791] usb 3-1: Product: syz [ 628.426764][ T791] usb 3-1: Manufacturer: syz [ 628.431396][ T791] usb 3-1: SerialNumber: syz [ 628.438090][ T791] usb 3-1: config 0 descriptor?? [ 628.448263][ T791] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 628.456370][ T791] usb 3-1: setting power ON [ 628.461045][ T791] dvb-usb: bulk message failed: -22 (2/0) [ 628.468446][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 628.478290][ T791] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 628.486806][ T791] usb 3-1: media controller created [ 628.498066][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.513418][ T791] usb 3-1: selecting invalid altsetting 6 [ 628.519151][ T791] usb 3-1: digital interface selection failed (-22) [ 628.525839][ T791] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 628.534967][ T791] usb 3-1: setting power OFF [ 628.539667][ T791] dvb-usb: bulk message failed: -22 (2/0) [ 628.545705][ T791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 628.555256][ T791] (NULL device *): no alternate interface [ 628.555647][ T5804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 628.584393][ T791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 628.594188][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 628.615022][ T5804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 628.631383][ T5804] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 628.645068][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.661926][T12332] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 628.671525][T12332] team0: Port device dummy0 added [ 628.722404][ T5931] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 628.731510][ T5804] usb 2-1: Product: syz [ 628.745884][ T5804] usb 2-1: Manufacturer: syz [ 628.751122][ T5931] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 628.760532][ T5804] usb 2-1: SerialNumber: syz [ 628.770901][ T5931] em28xx 5-1:0.0: No AC97 audio processor [ 628.786684][ T5804] usb 2-1: config 0 descriptor?? [ 628.799462][T12339] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 628.806683][T12339] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 628.848718][ T5928] usb 5-1: USB disconnect, device number 58 [ 628.886383][ T5928] em28xx 5-1:0.0: Disconnecting em28xx [ 628.911039][ T5804] usb 2-1: ucan: probing device on interface #0 [ 628.920116][ T5928] em28xx 5-1:0.0: Freeing device [ 628.948126][ T6078] cdc_mbim 6-1:1.0: bind() failure [ 628.986032][ T6078] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 629.019382][ T6078] cdc_ncm 6-1:1.1: bind() failure [ 629.047686][ T6078] usb 6-1: USB disconnect, device number 36 [ 629.068269][ T30] audit: type=1400 audit(1767469683.712:821): avc: denied { wake_alarm } for pid=12344 comm="syz.4.1644" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 629.334701][ T5804] usb 2-1: ucan: device reported invalid device info [ 629.345852][ T5804] usb 2-1: ucan: probe failed; try to update the device firmware [ 629.449543][ T6078] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 629.649323][ T6078] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 629.800092][ T6078] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 629.829909][ T6078] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 629.842483][ T5804] usb 2-1: USB disconnect, device number 58 [ 629.848484][ T6078] usb 6-1: config 220 has no interface number 2 [ 629.861746][ T6078] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 629.878725][ T6078] usb 6-1: config 220 interface 0 has no altsetting 0 [ 629.894122][ T6078] usb 6-1: config 220 interface 76 has no altsetting 0 [ 629.910204][ T6078] usb 6-1: config 220 interface 1 has no altsetting 0 [ 629.923103][ T5931] usb 3-1: USB disconnect, device number 52 [ 629.934325][ T6078] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 629.946377][ T6078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.956902][ T6078] usb 6-1: Product: syz [ 629.961304][ T6078] usb 6-1: Manufacturer: syz [ 629.966378][ T6078] usb 6-1: SerialNumber: syz [ 630.671184][T12373] loop6: detected capacity change from 0 to 2640 [ 630.681487][T12373] buffer_io_error: 32 callbacks suppressed [ 630.681517][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.695744][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.703866][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.711871][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.722761][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.730820][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.738845][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.746814][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.779952][T12373] ldm_validate_partition_table(): Disk read failed. [ 630.786961][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.794998][T12373] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.803677][T12373] Dev loop6: unable to read RDB block 0 [ 630.810245][T12373] loop6: unable to read partition table [ 630.816528][T12373] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 631.179424][T12380] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1652'. [ 631.526840][ T5189] ldm_validate_partition_table(): Disk read failed. [ 631.533824][ T5189] Dev loop6: unable to read RDB block 0 [ 631.550428][ T5189] loop6: unable to read partition table [ 631.674394][ T30] audit: type=1400 audit(1767469686.322:822): avc: denied { accept } for pid=12385 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 631.707530][T12390] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1656'. [ 631.720686][T12390] netlink: 'syz.0.1656': attribute type 4 has an invalid length. [ 631.730481][ T5804] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 631.914446][ T5931] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 631.929391][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 631.938045][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 631.949914][T12375] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.951134][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 102, changing to 7 [ 631.957164][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.969429][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41897, setting to 1024 [ 632.072800][ T5804] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 632.083099][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.095695][T12375] team0: Port device dummy0 removed [ 632.104472][ T5804] usb 5-1: Product: syz [ 632.115609][ T5804] usb 5-1: Manufacturer: syz [ 632.180806][ T5931] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 632.189864][ T5931] usb 2-1: config 0 has no interface number 0 [ 632.196250][ T5931] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 632.208934][ T5804] usb 5-1: SerialNumber: syz [ 632.245625][ T5804] usb 5-1: config 0 descriptor?? [ 632.261881][ T5931] usb 2-1: config 0 interface 128 has no altsetting 0 [ 632.275457][T12375] bridge_slave_0: left allmulticast mode [ 632.282140][T12375] bridge_slave_0: left promiscuous mode [ 632.284142][ T5804] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 632.301654][ T5931] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 632.310799][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.310816][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.333012][ T5804] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 632.347112][ T5931] usb 2-1: Product: syz [ 632.355898][ T5931] usb 2-1: Manufacturer: syz [ 632.364923][ T5931] usb 2-1: SerialNumber: syz [ 632.376557][T12375] bridge_slave_1: left allmulticast mode [ 632.382287][T12375] bridge_slave_1: left promiscuous mode [ 632.388287][ T5931] usb 2-1: config 0 descriptor?? [ 632.397240][ T5931] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 632.416273][ T5931] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 632.426316][T12375] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.443272][ T5931] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 632.514290][T12375] bond0: (slave bond_slave_0): Releasing backup interface [ 632.546623][T12375] bond0: (slave bond_slave_1): Releasing backup interface [ 632.577388][T12375] team0: Port device team_slave_0 removed [ 632.609766][T12375] team0: Port device team_slave_1 removed [ 632.617650][T12375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.627127][T12375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.647928][T12375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.670177][ T5931] usb 2-1: USB disconnect, device number 59 [ 632.690298][T12375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.702193][T12375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 632.720321][ T10] lo speed is unknown, defaulting to 1000 [ 632.734562][ T10] syz0: Port: 1 Link DOWN [ 632.753695][ T6078] usb 6-1: selecting invalid altsetting 0 [ 632.762097][ T6078] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 632.769590][ T6078] uvcvideo 6-1:220.0: No valid video chain found. [ 632.790687][ T6078] usb 6-1: selecting invalid altsetting 0 [ 632.796476][ T6078] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 632.807493][ T6078] usb 6-1: USB disconnect, device number 37 [ 632.942912][ T5804] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 634.205661][ T5804] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 634.221835][ T5804] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 634.228829][ T5804] em28xx 5-1:0.0: No AC97 audio processor [ 634.463444][T12417] i2c i2c-0: Invalid block write size 58 [ 634.521650][ T5928] usb 5-1: USB disconnect, device number 59 [ 634.537960][ T5928] em28xx 5-1:0.0: Disconnecting em28xx [ 634.548424][ T5928] em28xx 5-1:0.0: Freeing device [ 634.647133][T12421] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1664'. [ 634.979755][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 635.139548][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 635.145806][ T10] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.157422][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 635.164272][ T10] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 635.173569][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.188374][ T10] usb 6-1: config 0 descriptor?? [ 635.189370][ T5804] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 635.342303][ T30] audit: type=1400 audit(1767469689.992:823): avc: denied { write } for pid=12437 comm="syz.1.1670" name="file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 635.367701][ T30] audit: type=1400 audit(1767469689.992:824): avc: denied { open } for pid=12437 comm="syz.1.1670" path="/322/file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 635.369547][ T5804] usb 5-1: Using ep0 maxpacket: 8 [ 635.391071][ T30] audit: type=1400 audit(1767469690.012:825): avc: denied { ioctl } for pid=12437 comm="syz.1.1670" path="/322/file0" dev="tmpfs" ino=1701 ioctlcmd=0x4c07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 635.422328][ T5804] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 635.434040][ T5804] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 635.443441][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.451563][ T5804] usb 5-1: Product: syz [ 635.455887][ T5804] usb 5-1: Manufacturer: syz [ 635.461630][ T5804] usb 5-1: SerialNumber: syz [ 635.469114][ T5804] usb 5-1: config 0 descriptor?? [ 635.477201][ T5804] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 635.485972][ T5804] usb 5-1: setting power ON [ 635.490748][ T5804] dvb-usb: bulk message failed: -22 (2/0) [ 635.501130][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 635.511590][ T5804] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 635.520250][ T5804] usb 5-1: media controller created [ 635.532512][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 635.553058][ T5804] usb 5-1: selecting invalid altsetting 6 [ 635.558894][ T5804] usb 5-1: digital interface selection failed (-22) [ 635.565812][ T5804] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 635.574983][ T5804] usb 5-1: setting power OFF [ 635.580066][ T5804] dvb-usb: bulk message failed: -22 (2/0) [ 635.585873][ T5804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 635.596148][ T5804] (NULL device *): no alternate interface [ 635.685991][T12423] dvb-usb: bulk message failed: -22 (3/0) [ 635.699511][T12423] dvb-usb: bulk message failed: -22 (4/0) [ 635.720210][T12423] cxusb: i2c read failed [ 635.754838][T12423] dvb-usb: bulk message failed: -22 (3/0) [ 635.921816][T12423] netlink: 'syz.4.1665': attribute type 10 has an invalid length. [ 636.929788][ T10] nzxt-smart2 0003:1E71:2009.0035: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 637.096992][T12454] FAULT_INJECTION: forcing a failure. [ 637.096992][T12454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.110146][T12454] CPU: 1 UID: 0 PID: 12454 Comm: syz.2.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.110172][T12454] Tainted: [L]=SOFTLOCKUP [ 637.110178][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.110189][T12454] Call Trace: [ 637.110195][T12454] [ 637.110202][T12454] dump_stack_lvl+0x16c/0x1f0 [ 637.110229][T12454] should_fail_ex+0x512/0x640 [ 637.110258][T12454] _copy_to_user+0x32/0xd0 [ 637.110284][T12454] sw_sync_ioctl+0x937/0xfe0 [ 637.110307][T12454] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 637.110330][T12454] ? selinux_file_ioctl+0x180/0x270 [ 637.110353][T12454] ? selinux_file_ioctl+0xb4/0x270 [ 637.110376][T12454] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 637.110398][T12454] __x64_sys_ioctl+0x18e/0x210 [ 637.110421][T12454] do_syscall_64+0xcd/0xf80 [ 637.110445][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.110463][T12454] RIP: 0033:0x7fb2fc38f749 [ 637.110477][T12454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.110494][T12454] RSP: 002b:00007fb2fd226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.110511][T12454] RAX: ffffffffffffffda RBX: 00007fb2fc5e6090 RCX: 00007fb2fc38f749 [ 637.110522][T12454] RDX: 00002000000007c0 RSI: 00000000c0285700 RDI: 0000000000000003 [ 637.110534][T12454] RBP: 00007fb2fd226090 R08: 0000000000000000 R09: 0000000000000000 [ 637.110545][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.110555][T12454] R13: 00007fb2fc5e6128 R14: 00007fb2fc5e6090 R15: 00007ffeb6691838 [ 637.110579][T12454] [ 637.134266][ T10] usb 6-1: USB disconnect, device number 38 [ 637.470183][T12461] netlink: 840 bytes leftover after parsing attributes in process `syz.5.1677'. [ 637.687021][T12457] fido_id[12457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 638.510013][ T5804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 638.523132][ T5804] usb 5-1: USB disconnect, device number 60 [ 638.680248][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 638.859707][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 638.903644][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 638.995969][ T10] usb 6-1: config 0 has no interface number 0 [ 639.013395][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.039360][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 639.062407][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 639.071666][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 639.079865][ T10] usb 6-1: Product: syz [ 639.084090][ T10] usb 6-1: SerialNumber: syz [ 639.121207][ T10] usb 6-1: config 0 descriptor?? [ 639.129010][ T10] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 639.140732][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input60 [ 639.181185][ T30] audit: type=1326 audit(1767469693.832:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.224273][ T30] audit: type=1326 audit(1767469693.832:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.248007][ T30] audit: type=1326 audit(1767469693.852:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.273583][ T30] audit: type=1326 audit(1767469693.852:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.297340][ T30] audit: type=1326 audit(1767469693.852:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.320803][ T30] audit: type=1326 audit(1767469693.852:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.344471][ T30] audit: type=1326 audit(1767469693.852:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.355711][ T5804] usb 6-1: USB disconnect, device number 39 [ 639.367949][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 639.380660][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 639.393175][ T30] audit: type=1326 audit(1767469693.852:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.396921][ T5804] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 639.417139][ T30] audit: type=1326 audit(1767469693.852:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.448760][ T30] audit: type=1326 audit(1767469693.852:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82f1b8f749 code=0x7ffc0000 [ 639.636850][T12491] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1686'. [ 639.674388][T12493] i2c i2c-0: Invalid block write size 58 [ 639.940834][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 640.053685][T12501] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1690'. [ 640.170287][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 640.400281][ T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.442951][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.467936][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 640.490323][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 640.524154][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.541222][ T10] usb 5-1: config 0 descriptor?? [ 640.996695][ T10] nzxt-smart2 0003:1E71:2009.0036: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 641.229353][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 641.384849][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 641.511393][ T5804] usb 5-1: USB disconnect, device number 61 [ 641.548912][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.557052][ T10] usb 3-1: Product: syz [ 641.561236][ T10] usb 3-1: Manufacturer: syz [ 641.565817][ T10] usb 3-1: SerialNumber: syz [ 641.598143][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 641.618673][ T5928] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 641.804120][T12544] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1702'. [ 642.185580][ T10] usb 3-1: USB disconnect, device number 53 [ 642.290904][T12547] tmpfs: Unknown parameter 'grpquota_i ' [ 642.318292][T12547] netlink: 'syz.1.1703': attribute type 2 has an invalid length. [ 642.400459][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 642.724229][ T5928] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 642.739510][ T5928] ath9k_htc: Failed to initialize the device [ 642.757552][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 643.704021][T12578] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1713'. [ 645.652571][T12609] loop6: detected capacity change from 0 to 2640 [ 645.661684][T12609] buffer_io_error: 27 callbacks suppressed [ 645.661711][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.675789][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.683824][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.692065][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.700078][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.708240][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.716371][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.719657][T12611] fuse: Bad value for 'fd' [ 645.728944][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.737067][T12609] ldm_validate_partition_table(): Disk read failed. [ 645.744420][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.754568][T12609] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.763589][T12609] Dev loop6: unable to read RDB block 0 [ 645.769435][T12609] loop6: unable to read partition table [ 645.779587][T12609] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 646.062781][T12598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.180408][ T5189] ldm_validate_partition_table(): Disk read failed. [ 646.189210][ T5189] Dev loop6: unable to read RDB block 0 [ 646.205517][ T5189] loop6: unable to read partition table [ 647.379396][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 647.464535][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 647.464549][ T30] audit: type=1400 audit(1767469702.112:986): avc: denied { ioctl } for pid=12618 comm="syz.1.1726" path="socket:[41386]" dev="sockfs" ino=41386 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 647.496612][T12637] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1726'. [ 647.505920][T12637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1726'. [ 647.566181][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 647.582226][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 647.617811][T12637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1726'. [ 647.619515][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 102, changing to 7 [ 647.695765][ T30] audit: type=1400 audit(1767469702.142:987): avc: denied { shutdown } for pid=12618 comm="syz.1.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 647.899345][ T5928] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 648.000028][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41897, setting to 1024 [ 648.022070][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 648.036278][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.048920][ T10] usb 3-1: Product: syz [ 648.054753][ T10] usb 3-1: Manufacturer: syz [ 648.071007][ T10] usb 3-1: SerialNumber: syz [ 648.145846][ T5928] usb 2-1: device descriptor read/64, error -71 [ 648.334445][ T10] usb 3-1: config 0 descriptor?? [ 648.341275][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 648.356926][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 648.426215][ T5928] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 648.444065][ T30] audit: type=1400 audit(1767469703.092:988): avc: denied { getopt } for pid=12654 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 648.609916][ T5928] usb 2-1: device descriptor read/64, error -71 [ 648.727853][ T5928] usb usb2-port1: attempt power cycle [ 649.100908][ T5928] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 649.112056][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 649.120380][ T5928] usb 2-1: device descriptor read/8, error -71 [ 650.126092][ T5928] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 650.159685][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 650.167942][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 650.217491][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 650.264360][ T5928] usb 2-1: device descriptor read/8, error -71 [ 650.288211][T12677] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1740'. [ 650.343262][T12677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.419685][ T5928] usb usb2-port1: unable to enumerate USB device [ 650.589353][ T6078] usb 3-1: USB disconnect, device number 54 [ 650.595861][ T6078] em28xx 3-1:0.0: Disconnecting em28xx [ 650.616163][ T6078] em28xx 3-1:0.0: Freeing device [ 650.729349][ T5804] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 651.549410][ T5928] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 651.775340][ T5928] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 651.795413][ T5928] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 651.799830][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.814600][ T5928] usb 3-1: config 1 has no interface number 1 [ 651.838349][ T5928] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 651.872606][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.882404][ T5804] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 651.884453][ T5928] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 651.891673][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.916055][ T5804] usb 5-1: config 0 descriptor?? [ 651.957582][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.973421][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.998369][ T5928] usb 3-1: Product: syz [ 652.006794][ T5928] usb 3-1: Manufacturer: syz [ 652.016651][ T5928] usb 3-1: SerialNumber: syz [ 652.153464][ T30] audit: type=1400 audit(1767469706.792:989): avc: denied { write } for pid=12699 comm="syz.5.1746" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 652.693941][ T5804] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0037/input/input61 [ 652.741511][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1747'. [ 652.756129][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 652.765088][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 652.899935][ T5928] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 652.941917][ T5928] usb 3-1: USB disconnect, device number 55 [ 652.953964][ T5804] sony 0003:054C:03D5.0037: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 653.005862][ T5804] usb 5-1: USB disconnect, device number 62 [ 653.683192][T12710] fido_id[12710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 654.153774][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'. [ 654.158845][T12726] loop6: detected capacity change from 0 to 2640 [ 654.175315][T12726] buffer_io_error: 27 callbacks suppressed [ 654.175346][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.179061][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 654.181324][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.181353][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.213864][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.216190][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.221855][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.229126][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.236762][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.251913][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.259905][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.267975][T12726] ldm_validate_partition_table(): Disk read failed. [ 654.274837][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.282877][T12726] Buffer I/O error on dev loop6, logical block 0, async page read [ 654.291098][T12726] Dev loop6: unable to read RDB block 0 [ 654.297741][T12726] loop6: unable to read partition table [ 654.313152][T12726] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 654.506564][ T5189] ldm_validate_partition_table(): Disk read failed. [ 654.513589][ T5189] Dev loop6: unable to read RDB block 0 [ 654.519235][ T5189] loop6: unable to read partition table [ 654.542060][T12732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1755'. [ 654.551142][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 654.711254][T12738] overlayfs: failed to clone upperpath [ 654.874438][T12738] netlink: 'syz.0.1756': attribute type 10 has an invalid length. [ 654.956199][T12741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 655.436116][T12735] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1758'. [ 655.882972][ T5928] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 656.039424][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 656.051696][ T5928] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.088966][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 656.095967][ T5928] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 656.106507][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.184385][ T5928] usb 2-1: config 0 descriptor?? [ 656.686319][ T5928] nzxt-smart2 0003:1E71:2009.0038: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 656.833915][T12775] loop6: detected capacity change from 0 to 2640 [ 656.850190][T12775] ldm_validate_partition_table(): Disk read failed. [ 656.859564][T12775] Dev loop6: unable to read RDB block 0 [ 656.866701][T12775] loop6: unable to read partition table [ 656.874509][T12775] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 657.087257][ T5804] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 657.295206][ T6078] usb 2-1: USB disconnect, device number 64 [ 657.309404][ T5804] usb 5-1: device descriptor read/64, error -71 [ 658.291335][T12778] fido_id[12778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 658.409380][ T5804] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 658.669353][ T5804] usb 5-1: device descriptor read/64, error -71 [ 658.782526][ T5804] usb usb5-port1: attempt power cycle [ 659.171224][ T5804] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 659.269874][ T5804] usb 5-1: device descriptor read/8, error -71 [ 659.289402][ T6078] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 659.911430][ T6078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 659.934190][ T6078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.954986][ T6078] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 659.972610][ T6078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.990824][ T6078] usb 6-1: config 0 descriptor?? [ 660.409373][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 660.555018][ T6078] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0039/input/input62 [ 660.575332][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 660.586022][ T6078] sony 0003:054C:03D5.0039: input,hidraw0: USB HID vff.ff Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 660.624848][ T10] usb 3-1: config 0 has no interface number 0 [ 660.664445][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 660.668460][T12841] FAULT_INJECTION: forcing a failure. [ 660.668460][T12841] name failslab, interval 1, probability 0, space 0, times 0 [ 660.673674][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.673697][ T10] usb 3-1: Product: syz [ 660.673712][ T10] usb 3-1: Manufacturer: syz [ 660.673726][ T10] usb 3-1: SerialNumber: syz [ 660.700620][ T10] usb 3-1: config 0 descriptor?? [ 660.704082][ T5931] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 660.709215][T12841] CPU: 0 UID: 0 PID: 12841 Comm: syz.4.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.709248][T12841] Tainted: [L]=SOFTLOCKUP [ 660.709254][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.709263][T12841] Call Trace: [ 660.709269][T12841] [ 660.709275][T12841] dump_stack_lvl+0x16c/0x1f0 [ 660.709300][T12841] should_fail_ex+0x512/0x640 [ 660.709324][T12841] ? fs_reclaim_acquire+0xae/0x150 [ 660.709348][T12841] should_failslab+0xc2/0x120 [ 660.709369][T12841] __kmalloc_noprof+0xeb/0x910 [ 660.709394][T12841] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 660.709421][T12841] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 660.709442][T12841] tomoyo_realpath_from_path+0xc2/0x6e0 [ 660.709466][T12841] ? tomoyo_profile+0x47/0x60 [ 660.709492][T12841] tomoyo_path_number_perm+0x245/0x580 [ 660.709510][T12841] ? tomoyo_path_number_perm+0x237/0x580 [ 660.709530][T12841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 660.709551][T12841] ? find_held_lock+0x2b/0x80 [ 660.709594][T12841] ? find_held_lock+0x2b/0x80 [ 660.709617][T12841] ? hook_file_ioctl_common+0x144/0x410 [ 660.709647][T12841] ? __fget_files+0x20e/0x3c0 [ 660.709673][T12841] security_file_ioctl+0x9b/0x240 [ 660.709696][T12841] __x64_sys_ioctl+0xb7/0x210 [ 660.709716][T12841] do_syscall_64+0xcd/0xf80 [ 660.709738][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.709754][T12841] RIP: 0033:0x7f82f1b8f749 [ 660.709768][T12841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.709783][T12841] RSP: 002b:00007f82f29f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.709798][T12841] RAX: ffffffffffffffda RBX: 00007f82f1de5fa0 RCX: 00007f82f1b8f749 [ 660.709809][T12841] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004 [ 660.709819][T12841] RBP: 00007f82f29f4090 R08: 0000000000000000 R09: 0000000000000000 [ 660.709828][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.709838][T12841] R13: 00007f82f1de6038 R14: 00007f82f1de5fa0 R15: 00007fff75b30748 [ 660.709860][T12841] [ 660.710120][T12841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.753621][ T6078] usb 6-1: USB disconnect, device number 40 [ 660.763784][T12841] [ 660.944906][T12841] ============================================ [ 660.951026][T12841] WARNING: possible recursive locking detected [ 660.957150][T12841] syzkaller #0 Tainted: G L [ 660.963098][T12841] -------------------------------------------- [ 660.969220][T12841] syz.4.1786/12841 is trying to acquire lock: [ 660.975259][T12841] ffff88814ce408f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x3e0 [ 660.984112][T12841] [ 660.984112][T12841] but task is already holding lock: [ 660.991446][T12841] ffff88814caf70f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x167/0x2eb0 [ 661.001080][T12841] [ 661.001080][T12841] other info that might help us debug this: [ 661.009108][T12841] Possible unsafe locking scenario: [ 661.009108][T12841] [ 661.016531][T12841] CPU0 [ 661.019788][T12841] ---- [ 661.023040][T12841] lock(&dev->mutex#4); [ 661.027261][T12841] lock(&dev->mutex#4); [ 661.031483][T12841] [ 661.031483][T12841] *** DEADLOCK *** [ 661.031483][T12841] [ 661.039599][T12841] May be due to missing lock nesting notation [ 661.039599][T12841] [ 661.047889][T12841] 1 lock held by syz.4.1786/12841: [ 661.052972][T12841] #0: ffff88814caf70f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x167/0x2eb0 [ 661.063047][T12841] [ 661.063047][T12841] stack backtrace: [ 661.068912][T12841] CPU: 0 UID: 0 PID: 12841 Comm: syz.4.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.068933][T12841] Tainted: [L]=SOFTLOCKUP [ 661.068938][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.068946][T12841] Call Trace: [ 661.068951][T12841] [ 661.068957][T12841] dump_stack_lvl+0x116/0x1f0 [ 661.068977][T12841] print_deadlock_bug+0x225/0x2f0 [ 661.068994][T12841] __lock_acquire+0x1497/0x2890 [ 661.069013][T12841] lock_acquire+0x179/0x330 [ 661.069029][T12841] ? comedi_do_insn+0x2e/0x3e0 [ 661.069044][T12841] ? __pfx___might_resched+0x10/0x10 [ 661.069060][T12841] __mutex_lock+0x1aa/0x1ca0 [ 661.069079][T12841] ? comedi_do_insn+0x2e/0x3e0 [ 661.069094][T12841] ? comedi_do_insn+0x2e/0x3e0 [ 661.069109][T12841] ? __pfx___mutex_lock+0x10/0x10 [ 661.069129][T12841] ? __pfx___might_resched+0x10/0x10 [ 661.069142][T12841] ? __up_read+0x2d1/0x700 [ 661.069160][T12841] ? down_read+0x13d/0x460 [ 661.069181][T12841] ? comedi_do_insn+0x2e/0x3e0 [ 661.069195][T12841] comedi_do_insn+0x2e/0x3e0 [ 661.069209][T12841] comedi_dio_bitfield2+0x3c4/0x420 [ 661.069225][T12841] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 661.069244][T12841] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 661.069259][T12841] ? rcu_is_watching+0x12/0xc0 [ 661.069272][T12841] ? trace_sched_exit_tp+0xd1/0x110 [ 661.069292][T12841] ? __schedule+0x10b9/0x6150 [ 661.069312][T12841] bonding_dio_insn_bits+0x2bd/0x570 [ 661.069331][T12841] ? __lock_acquire+0x436/0x2890 [ 661.069347][T12841] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 661.069365][T12841] ? __lock_acquire+0x436/0x2890 [ 661.069382][T12841] insn_rw_emulate_bits+0x29b/0x5f0 [ 661.069405][T12841] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 661.069427][T12841] ? rcu_read_unlock+0x17/0x60 [ 661.069446][T12841] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 661.069466][T12841] ? comedi_check_chanlist+0x2d6/0x380 [ 661.069488][T12841] parse_insn+0xf4c/0x1a70 [ 661.069505][T12841] ? __pfx_parse_insn+0x10/0x10 [ 661.069520][T12841] ? __might_fault+0xe3/0x190 [ 661.069533][T12841] ? do_insn_ioctl+0xda/0x4e0 [ 661.069553][T12841] do_insn_ioctl+0x152/0x4e0 [ 661.069571][T12841] comedi_unlocked_ioctl+0x153d/0x2eb0 [ 661.069593][T12841] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 661.069615][T12841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 661.069632][T12841] ? do_vfs_ioctl+0x128/0x14f0 [ 661.069649][T12841] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 661.069664][T12841] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 661.069688][T12841] ? hook_file_ioctl_common+0x144/0x410 [ 661.069712][T12841] ? selinux_file_ioctl+0x180/0x270 [ 661.069730][T12841] ? selinux_file_ioctl+0xb4/0x270 [ 661.069749][T12841] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 661.069768][T12841] __x64_sys_ioctl+0x18e/0x210 [ 661.069784][T12841] do_syscall_64+0xcd/0xf80 [ 661.069803][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.069818][T12841] RIP: 0033:0x7f82f1b8f749 [ 661.069828][T12841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.069842][T12841] RSP: 002b:00007f82f29f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.069855][T12841] RAX: ffffffffffffffda RBX: 00007f82f1de5fa0 RCX: 00007f82f1b8f749 [ 661.069865][T12841] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004 [ 661.069874][T12841] RBP: 00007f82f29f4090 R08: 0000000000000000 R09: 0000000000000000 [ 661.069883][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.069891][T12841] R13: 00007f82f1de6038 R14: 00007f82f1de5fa0 R15: 00007fff75b30748 [ 661.069905][T12841] [ 661.440569][ T5931] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 661.448781][ T5931] usb 2-1: config 0 has no interface number 0 [ 661.455090][ T5931] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 661.470190][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 661.479148][ T10] usb 3-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 661.481806][ T5931] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 661.488658][ T10] usb 3-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 661.532423][ T5931] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 661.557231][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.565312][ T5931] usb 2-1: Product: syz [ 661.569487][ T5931] usb 2-1: Manufacturer: syz [ 661.574060][ T5931] usb 2-1: SerialNumber: syz [ 661.579638][ T5931] usb 2-1: config 0 descriptor?? [ 661.584897][T12828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 661.592738][ T5931] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 661.660055][ T5931] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 661.794154][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 661.803325][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 663.417499][ T5931] usb 2-1: USB disconnect, device number 65