last executing test programs: 2m48.80532786s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x55, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x9, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x15, 0x0, 0x4e, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xffff8443}}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0xf, 0x4}, {0x2, 0x4}, {0x9, 0x4}, {0xd, 0x3}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0x1}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @union={0x7, 0x2, 0x0, 0x5, 0x1, 0x9, [{0xb, 0x4, 0x3}, {0x6, 0x3, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x30, 0x61, 0x30]}}, &(0x7f0000000140)=""/6, 0xed, 0x6, 0x0, 0x7fffffff, 0x10000, @value=r1}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x44, 0x80000002, 0x7c, 0x25, 0x20000004, 0x8, 0x44230, 0x80000, 0x81, 0x9be, 0x2, 0x1005, 0xc, 0x6], 0xdddd1000, 0xa0302}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m48.39321775s ago: executing program 2 (id=33): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x40) 2m48.271885581s ago: executing program 2 (id=36): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f00000000c0)=@caif=@util, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/138, 0x8a}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000140)=""/33, 0x21}], 0x4, &(0x7f0000000480)=""/130, 0x82}}, {{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/126, 0x7e}, {&(0x7f0000000640)=""/75, 0x4b}, {&(0x7f00000006c0)=""/152, 0x98}], 0x3, &(0x7f00000007c0)=""/4081, 0xff1}, 0xffff}, {{&(0x7f00000017c0)=@x25, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/160, 0xa0}], 0x1, &(0x7f0000001940)=""/214, 0xd6}, 0x8}, {{&(0x7f0000001a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/14, 0xe}], 0x1}, 0x3}, {{&(0x7f0000001b40)=@alg, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001bc0)=""/102, 0x66}, {&(0x7f0000001c40)=""/164, 0xa4}], 0x2, &(0x7f0000001d40)=""/21, 0x15}, 0x800}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)=""/101, 0x65}, {&(0x7f0000001e00)=""/73, 0x49}, {&(0x7f0000001e80)=""/204, 0xcc}, {&(0x7f0000001f80)=""/71, 0x47}, {&(0x7f0000002000)=""/42, 0x2a}, {&(0x7f0000002040)=""/1, 0x1}], 0x6, &(0x7f0000002100)=""/26, 0x1a}, 0x5}, {{&(0x7f0000002140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/218, 0xffffffffffffff2b}, {&(0x7f00000022c0)=""/37, 0x25}, {&(0x7f0000002300)=""/111, 0x6f}, {&(0x7f0000002380)=""/14, 0xe}], 0x4}, 0x6d}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x5, @private2, 0x0, 0x4}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 2m46.630006791s ago: executing program 2 (id=43): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001300e99925b22e94b846bd700000000000fc000000100000000000000000000000ac1e000100224fe2d3bcf7604f000000000000000000000000000000000000000a0030803c00000071210b904d77107a773a79402a4abdd22e37ef651a000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020800"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x100000000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x4}, @hyper, 0x0, 0x200da13, 0x5e, 0x200000000000, 0x100000000000006, 0xfffffffe, 0x10001}) 2m43.962625028s ago: executing program 2 (id=48): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09088da50fb5000000080000000000740100000066e3e024ba7283a1c9e6279dcd458015991c79837020ed4e01bb48bdb366143859c61d7c3098765f51a663ec585fe94d8a1b15e51f0d47c874fe2099ab6cae6ceed8f11e5b223df0c0c6de1b1584d668c049b374ee5b90668a79a20ab3fe42468c1aab67127731a4c8742d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0xfd85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="3ce9d6d27cb62f0f743d69c26e710e26316aaf224e4e5c400eaa534542d5598fb934c11af93b32397b5db116683aef1696b9ca19d503c012dfe4253c6d88b916e1c58b2bde727f864440d34c78000000009f00"/96, @ANYRESHEX=r2, @ANYRES8=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peek(0x2, r3, &(0x7f0000000340)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(0x0, 0x1) socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = socket$inet6(0xa, 0x2, 0x100005) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r8 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@rdma_args={0x48, 0x114, 0x1, {{0x49, 0x2}, {&(0x7f0000000240)=""/43, 0x2b}, &(0x7f00000004c0), 0x0, 0x52, 0x1000}}], 0x48, 0x840}, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) 2m40.607888231s ago: executing program 2 (id=54): r0 = socket(0x200000100000011, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002a000305000000c9e7526328ac07ecaccaf5bfc04fd40b99d100000000040008001000ac1414bb00100000000000"], 0x28}], 0x1}, 0x14008010) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x5, 0x4002) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000003) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e8508"], 0x34}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) 2m25.320007595s ago: executing program 32 (id=54): r0 = socket(0x200000100000011, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002a000305000000c9e7526328ac07ecaccaf5bfc04fd40b99d100000000040008001000ac1414bb00100000000000"], 0x28}], 0x1}, 0x14008010) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x5, 0x4002) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000003) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e8508"], 0x34}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) 14.419483078s ago: executing program 1 (id=533): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100008, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES8]) chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x490500, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x40}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) exit(0x7) unshare(0x42000000) 10.702666021s ago: executing program 1 (id=546): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000002240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7, 0x8}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000022c0)={0x48, 0x6, 0x0, 0x0, r2}) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 10.077485228s ago: executing program 0 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0xfffffff9) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x4c}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 8.752814391s ago: executing program 5 (id=552): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0xf, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0x9, 0x0, 0x6001, 0x7, 0xe70b, {0x6}, 0x1}) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x48, 0x46d, 0xc08a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x7a, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8e, 0x10, 0x1, {0x22, 0xa65}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x2, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xc, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x2, 0xf9, 0x40, 0x40}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x5, 0xb7}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1801}}, {0x2f, &(0x7f0000000140)=@string={0x2f, 0x3, "0553bbf283a74f71b9bd401f54306633ed8de82d4adf4f4fc39990290cfe546aa6959a31563c41d06ccca491a2"}}, {0x88, &(0x7f0000000180)=@string={0x88, 0x3, "40b19ee53eb5277ac0a3b6843ef78251dcc24817997339325d73467560673f182e770c751911add29dfaa28f10d3f129fb0a3fdbdcda2ca83062129b07a2fb9043ac9a88b40cd12f801fe2154962aca472fb5ea5fe7aba11637b4e8a941984d7c0f41d19b36e5a8029dc2703381d8691321237f186250c8b3b4890f4c889962aa9fb812d923a"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, &(0x7f0000000280)={0x0, 0x1, 0x5f, {0x5f, 0x4, "9c9447d4f8d2eba1c003b310c470d22469189197dff1df2f1223757e2e5c741075f0265b9bff07746157d67c2c6ee562362975ac9a362ca050fa443aaac7662b6ead6bfabbe4678565b3596464e779f7fd28c0985dbdec4c954c439812"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000340)={0x0, 0x22, 0x25, {[@global=@item_4={0x3, 0x1, 0xd, "fe5ce375"}, @local=@item_4={0x3, 0x2, 0x3, "95f1f954"}, @main=@item_012={0x1, 0x0, 0x8, "14"}, @main=@item_4={0x3, 0x0, 0xa, "c037742f"}, @global=@item_4={0x3, 0x1, 0x1, "50733f02"}, @global=@item_4={0x3, 0x1, 0x8, "0fa3932e"}, @global=@item_4={0x3, 0x1, 0xa, "02589128"}, @local=@item_4={0x3, 0x2, 0x7, "467c4aac"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x7a4}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x20, 0x10, 0x31, "35b504a621d22500776289f187c029b5d35e31dc92a8201ec6cc11934d778c5ee3cee099080363a9adc634ad8279d43d29"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x1, 0xed, "272f92af5f2af20f0f4a6a8749e3ca56b0472887e4fea9c3440ccf2d4d268b87f01faed0183f8f124ab6aa2ec523319f74e0293b207b0b6d86cf0ed57536d9ccd6b692e6c265f3e0d9f49bc3c659442e3f2bb28afddbe1c21eef8da247f2d051e47cfb7200ae1fde1968e46b475778ca66f84d109a735ac79e3cc4eaf081600e03c9c98d91c67e103df34faf82a547a0f8238630c3d5cf4749b31a90e94213fd7c52007691c385770ad97737638fa58252f164bd345ae65126c3d792ecb4e4873e9fb99a5aa5b8ebccc0499fef16b7ccd03db9b3f201a6205977d35433659cb1320430564db9849a1456a6add1"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x8}}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @stop_pts=0x3b1}) 8.248198606s ago: executing program 0 (id=553): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 'id0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge0\x00'}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x0, @dev}}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {0x9}, 0x1, 0x40, &(0x7f0000000100)="23f27deb55ee3b60f8fdbd93325924f846564deaa869d48ba13c753e52db9b35690075b067facb1ab2043483555f0427d39960320dc80676eaeff796ddc3f0cac1cf7f897b76e0fca1a378ff4d6c65f9210a663664fb7bff03935e700791e67540c742f9eeed3f1a5dba8d39a1b269920f84a522a911d0578bf7aeb646a7245a2840478f10e41a47e2b6c5136a1b95f2ffdba642", 0x94, 0x8, 0x9, 0x7b, 0x63184812, 0x10, &(0x7f00000001c0)="e1ddb667e6299d68d98384c02b7c29201ce1f9059057ed64be04f2ff4ab8e6cde8a8559dced85ab4567c1546ad5b969b37686b09b8d0cd4a1e2e2505dc1a5133d9d2b60ebf3d40a04375531cac05016be4ee757a2f76212902f56e5c48", [{0x4, 0x2, 0x8000}, {0x0, 0x1, 0x9}, {0x0, 0x1, 0xffff}, {0x6, 0x5, 0x6}, {0x0, 0x6, 0x6}, {0x4, 0x9, 0x7}, {0x1ff8, 0x7, 0x3ff}, {0xffff, 0x7, 0x5}, {0x1, 0xe, 0xc064}, {0x5, 0x0, 0x8}, {0x5, 0x8b, 0x80}, {0x4, 0x5, 0x5}, {0x6, 0x5b3, 0x6}, {0xa, 0x7fff, 0x6}, {0x3, 0x6, 0x1}, {0x10000, 0xffff, 0x3}, {0x0, 0x5, 0x105}, {0x2b94c5e6, 0x10001, 0x2}, {0x1, 0x40, 0x8}, {0xfafb, 0x7, 0xffff48eb}, {0x7, 0x8, 0x3}, {0x21, 0x8}, {0x3, 0xa, 0x8}, {0x10, 0x1, 0x3}, {0xe, 0xffffffff, 0x6}, {0x9e, 0x2, 0x2}, {0x1, 0x2, 0x2}, {0x6a4, 0x75e2}, {0xffffffff, 0x22873d71}, {0x3, 0x7fff, 0x8}, {0x1, 0x3ff, 0x4}, {0x0, 0xb7db, 0x9}, {0x5, 0x6d}, {0xb, 0x4, 0x8}, {0x1, 0x80, 0xca}, {0x1, 0x5, 0x7}, {0x3, 0x0, 0x7fff}, {0x7, 0x2, 0x1}, {0x1, 0x31a9, 0x9}, {0x9, 0x3, 0x1}, {0xfffffff7, 0xa6e, 0x1}, {0x2, 0xf, 0x1}, {0x5, 0x5, 0x6}, {0xffffff7f, 0x7fffffff, 0xd}, {0x6, 0x400}, {0xe, 0x200, 0x1}, {0x2, 0xfffffffb, 0x36800}, {0x24, 0x6, 0x8}, {0x3475, 0x101, 0xffffffab}, {0x401, 0x3, 0x7}, {0x9, 0x9, 0x6}, {0x4612, 0xcc9, 0x5}, {0x8, 0x3000}, {0x9, 0x9, 0x7fff}, {0x7ff, 0xdb39, 0x1}, {0x7, 0x0, 0x7f}, {0x6430, 0x3, 0x38000000}, {0x6, 0x3, 0x5}, {0x2, 0x1, 0x7}, {0xc, 0xd8, 0x9}, {0x1, 0x3, 0x1}, {0x9, 0x61, 0x400}, {0x4a, 0x7ff, 0x5}, {0x6ae48410, 0x8, 0x8}, {0x4, 0x1ff, 0x8}, {0x7fff, 0x7fffffff, 0x100}, {0xfffffffe, 0x5, 0x1ff}, {0x2, 0x9, 0x5}, {0x6, 0x7, 0x10000}, {0x0, 0x4, 0x5b3}, {0x8, 0x6c79, 0x9}, {0x3ff, 0x8, 0x8}, {0x570, 0x9, 0xfffffffb}, {0x4, 0xfb1, 0x8}, {0x3, 0x8, 0x4}, {0x8, 0x4, 0x2}, {0x2, 0x9, 0x7}, {0x9, 0x2, 0x6}, {0x156, 0x9, 0x4}, {0x1, 0xeb, 0x7}, {0x80000000, 0x5, 0x5}, {0x7, 0x0, 0x4}, {0x5, 0x40, 0x200}, {0x3, 0x5, 0x7}, {0x6, 0xf, 0x9}, {0x100, 0x8, 0x2}, {0x6, 0x1, 0x3}, {0x3, 0x7, 0x6}, {0xfffffff8, 0xdba, 0x401}, {0x6, 0xfffffffc, 0x2770}, {0x2, 0x7ca4, 0x40}, {0x5, 0x0, 0x81}, {0x9, 0xd48, 0x8001}, {0x8, 0xffffffff, 0x1ff}, {0x800, 0xf4, 0x1000}, {0x7, 0x4, 0xc5}, {0x7, 0x603e42ab, 0x2}, {0x4, 0xfff, 0x10000}, {0x9, 0x5, 0x2}, {0x5, 0x2, 0x86d}, {0x3, 0xa0cc, 0x7ff}, {0x101, 0x3, 0xfffffffa}, {0x1000, 0xa, 0xdf71}, {0x101, 0x4, 0xfae}, {0xfffffff8, 0x4497, 0x1}, {0x8}, {0xfc, 0x200, 0x8000}, {0x1, 0x6, 0x5}, {0xffffffff, 0xfffffffd, 0x7ff}, {0x3312, 0x3, 0x74cc}, {0x1, 0x3ff, 0x7}, {0x8, 0x2, 0xfffffffb}, {0x1ff, 0x1, 0x824}, {0x7129, 0x0, 0x7fff}, {0x7fff, 0x6, 0x1bd}, {0x7, 0x0, 0xee8}, {0xfffffffc, 0x7f, 0x10000}, {0x7ff6342, 0x5, 0x80000000}, {0x7e, 0x2, 0x2cd}, {0x3d3, 0x5, 0x2}, {0x7ff, 0x0, 0xa324}, {0x200000, 0x9296, 0x3}, {0x80000001, 0xbc6, 0x7}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000940)=@urb_type_control={0x2, {0x2, 0x1}, 0x9d29, 0x20, &(0x7f0000000840)={0x0, 0x1, 0x7, 0x3, 0xfff}, 0x8, 0x3, 0x5, 0x0, 0x80000000, 0x8, &(0x7f0000000880)="fe5e451922138b201f8b27fe19ab716230d9a7cd6b0683e35ed547cc5a48d6da33ff1c53d8f9d7cdd3a0513b57ff352689778f582b143faff12a1df0b79ac6453a38488ef3fac9bbefd443f525aec4d99cb121a360effff39e6b78c02e2f0f3856cc3efc084e8ccbee56e18c03bc4c092fb831dacbaf0ac9ddb582761b2fb261ab5e589d15d5ce29427f8065dda5b491985b90a5d3cee90174"}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000009c0)={0x1, 0x0, {0x2, 0xc39e, 0x2022, 0x6, 0x6, 0x8, 0x1, 0x1}}) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000e00)=0x6) write$tun(r0, &(0x7f0000000e40)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @remote, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x34) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000f40)={0x0, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}}}, &(0x7f0000001000)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001040)={r2, 0x95ea}, 0x8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000001080)={0x4, 0x3, "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"}) syz_usb_connect(0x3, 0x723, &(0x7f00000011c0)={{0x12, 0x1, 0x310, 0x99, 0x80, 0xf0, 0x40, 0x2040, 0x2400, 0x24a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x711, 0x3, 0x4, 0x6, 0xe0, 0xbf, [{{0x9, 0x4, 0xd5, 0x31, 0x3, 0x87, 0x76, 0x85, 0x5, [], [{{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x83, 0x7, 0x5}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x9, 0x1, 0x2, [@generic={0x86, 0xe, "7b44f44c41f3ff9375d05d93b49ec0fbd2137a3f69cb55c9e5abfee3b7a00b4ceeec2bfbe172024ae1cadcf9654160286a03f84127ff688bd208862213ee906a3fe199683145f8876b8eeb4d92104979987c7b10edcf01772f8ccd1f26151be1a8cf78b6ac8b7de7e652aa6595156805cc544aa526e67a7a414dd229c822c78a713836d4"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x80, 0x4, 0x0, [@generic={0x69, 0x31, "46a468b0607d16fce130a5d82f431be8dd268f84d90e894cf0302d5f712b9ec9f6b0a0988b52f58664e49b10154c1f97b213e5e8add299d5170ac4dcf584c366ab4db3a6442557f65438f90be449914a08170f51b30224dfd70983e68135c726ad220e51c999cd"}, @generic={0x38, 0x22, "90ca2dc2286ce637ad431cb090179a29ee376d94add2112fe8256d81476edb698ff944d7ead2497ccbccf74ba03d28af3fad7d57b560"}]}}]}}, {{0x9, 0x4, 0xf9, 0x2, 0x5, 0x17, 0x2, 0x32, 0x6, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "bcd8de981e"}, {0x5, 0x24, 0x0, 0x7cd9}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x4, 0x1, 0xc4}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@country_functional={0xc, 0x24, 0x7, 0x2, 0xfff7, [0x2b2, 0x185, 0x4]}, @mdlm_detail={0x35, 0x24, 0x13, 0x1, "17876e77fbde71416d285401a50a7f41c5a1cd129e3e6358fc8bdf02a38df1c0ef2b794f5b34ab6b0126aac677d659c2df"}, @mbim={0xc, 0x24, 0x1b, 0x7ff, 0x7, 0x7f, 0x5, 0x0, 0xee}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x9, 0xaf}, @mdlm={0x15, 0x24, 0x12, 0xcce8}, @obex={0x5, 0x24, 0x15, 0xa90c}]}], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x14, 0xdb, 0x1, [@generic={0xd, 0x1, "76fe6df06576fb19f7ae0c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0xd, 0x7f}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xb2, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x3, 0x23, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x0, 0x1, 0x6, [@generic={0xa9, 0x1, "d47af912f2c17685989f29e3924a2e403a60cb672acd4dadfef6b86d595a0562d242fef5aac2dbce6453f511a11572a9606ab72ad8ee910712ca906e3a4b61eaf17c8a867c91e64b837c1320e4d37635e9b34dc2698aa33fc904933b71fc13623ac88f37d983729bed78b0410feee33958459909f674599034da482081f24f1a8ea825886248d1bb3455f1e3c9795befc913e2a3130f06821f415b41898ee7a1c93d75fdf5e185"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0x79, 0x9d, 0x10, 0x14, 0xbd, 0x10, 0x3, [@generic={0x97, 0x10, "5535ed645ee73fb484c8b5fa6a5b57d1b1870b1b391b088435b21b79301b142e87a5a848e14e784e1786623f2e83a6631cb9377a7f5d796b4f99cccc01a1f54d694929d6f1ffea856f8c6906ffe4aa313780a4001a88e453b0ac21e0f51ea3030d7db2c7644edf3b468087ad6bc9d390ee194a017634ae5296ecff1c8cf1de14f69a732443e6f2d9d273422f8545a02855cb8ab76e"}], [{{0x9, 0x5, 0x1, 0x3, 0x20, 0x3, 0xc, 0xa1}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8a, 0x43, 0x6, [@generic={0x2c, 0x24, "ace3c10f8838e6808de615a9a7423be365feeeae74dcca7f524ee96878a19a92744b735556c156b583f0"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x9, 0xff, 0x6}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1c, 0xd, 0x0, [@generic={0x8b, 0x23, "46399a1ac71271cc41a2c4b8c615f077b1ecac6a605a3e729ffd3b5197b588bc2be4b2e47ebaf99c5e0444dcf78bc9e8610ff800e08b365de0f74465dcac7ce970938617045d7772729c26c1d074e063b697f2e23b3bb534c616d6bf643f41bfbad72b8c49c1b423ada0d90d9809b21ea10e84083ebf70eb1b9fe267b876d58fd95332134f112165f7"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0xc, 0xfe}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x9, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x871f}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0xff, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xd}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x7e, 0x21, 0x81}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x2, 0x2, 0x0, [@generic={0xaf, 0x1, "0189cc03dc799c0a6c01ab6107b7b17ac68eec6256a70bf562674dbe71823c7a6b850834ab5a0ba2e129f8cb69a384b8b791565deb382bd345cd6d6f02fe96180528e495a8271e3ef3f42eb5363bcf8caf7f3c9957130a7d12956efe7f3250033ed1b35b5f8b7614fb12197e60eac501dfa0f889107f58d0fe05f8578f96a409efad3cac93e86daeae9373278db064acf999f78fb06728f79187b9a9e4d00805574db352988318076fc2921854"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x1, 0x6}, @generic={0x52, 0xb, "f7cef9d213a14d5bffac614d9773560da6a03163205c795c4db42112d504018b5f92f8a2aaeb2378a32467ba3565216739f036032eab1259da62a36543eeee36552f9d087fc1b6dd0389169b757c9b57"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x83, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x62, 0x6}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x1, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1, 0x1, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x63, 0x1}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0xc, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x96, 0x401}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x3, 0xf9, 0x0, [@generic={0xfd, 0x2, "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"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x5, 0x8, 0x3}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x110, 0x2, 0x5, 0x1, 0x20, 0xb1}, 0x5, &(0x7f0000001940)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x80c8db91ede35a74}}, {0x27, &(0x7f0000001a00)=@string={0x27, 0x3, "b856d88844537d02869a9a9d50647f6ce15a7f0c8d0b2f00bb8689fcfb5cc95be0735f7ff8"}}, {0x70, &(0x7f0000001a40)=@string={0x70, 0x3, "a20f2958eae7459de1ab591cd6ebf269c1506150c6b94298b85db987227ac6e4a4aa2c006528a9cb6430882d05e0f74a7b2af56a1f72673edb8626490003ddfbd2db2d0ef0ecaf5456ce46d5b45740e34098a240116dff863ba1da67d86180f7cb79529fa4932a3019da3a0b8f0e"}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x413}}, {0xfa, &(0x7f0000001b00)=@string={0xfa, 0x3, "0c0731aa04900e2e69cb42c9b57564a350388ae115b708b0be0fb91fac078df23e732d45beb8ddf61ea4419fd4385598d9d7442de18565e4f6905107dede2ae3b48600c8b43b836f1f10d7546375613acc48ab68e1547da6beb41d2800569d3152bce18eda765db6cf2fff0293ac2f27a7619944db38e636994134fe3334ec043b30c4e2391281329c23267b9783802f655b7302609a4a1ab3add4ee0295bce9357186fa8a2f893a032b116dc660fcf41d28e7b6d7c83c17fe62342dbcf8888600a23494619448873e2f5e5531d6ad9d97b099c8041907322705c4c779a668c6625e5e334c6dcf9b9c444a7076e0d004893dbcefc57dffcc"}}]}) socket$inet(0x2, 0x80000, 0x6) r3 = signalfd(r1, &(0x7f0000001d00)={[0x5]}, 0x8) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000001d80)={0x6, 0x9, 0x7ff, 0xfffffffb, 0x7, "0f992dbd115f36b6aa21aaf91e2a6e6996ca96"}) r4 = syz_open_dev$sg(&(0x7f0000001dc0), 0x4, 0x202000) ioctl$SG_BLKTRACESTOP(r4, 0x1275, 0x0) 7.384531685s ago: executing program 1 (id=556): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100008, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES8]) chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x490500, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x40}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) exit(0x7) unshare(0x42000000) 5.244410039s ago: executing program 5 (id=560): r0 = getpgrp(0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, r3) 4.86085623s ago: executing program 3 (id=562): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000046110180000000000d4540000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd9d, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 4.612558203s ago: executing program 3 (id=564): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x20004080}, 0x4040) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x3, 0xb, {{0x1c, 0x4, 0x1, 0x2, 0x70, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x40, 0x0, 0xd, [0x40]}, @ssrr={0x89, 0x13, 0xdc, [@broadcast, @multicast1, @empty, @multicast1]}, @noop, @ssrr={0x89, 0x27, 0xf1, [@multicast1, @remote, @broadcast, @empty, @rand_addr=0x64010101, @empty, @rand_addr=0x64010101, @broadcast, @local]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x6, 0x11, "bdb67a3d4af248fbb4821a1a80423c"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x2000c011) socket$netlink(0x10, 0x3, 0xa) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.154910192s ago: executing program 1 (id=566): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000002240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7, 0x8}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000022c0)={0x48, 0x6, 0x0, 0x0, r2}) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 4.073306747s ago: executing program 0 (id=567): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000500), 0x0, 0x20044020) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x300, 0xffffffe4}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) fstatfs(r2, &(0x7f00000007c0)=""/4096) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0x4018aee3, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@delqdisc={0xb0, 0x25, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xa}, {0xfff4, 0xfff3}, {0xa, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3e, 0x3, 0x6, 0x6, 0x0, 0xd9b, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x5e, 0x2, 0x1, 0x0, 0xffff0000, 0x2}}, {0x8, 0x2, [0x4, 0x7fff]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @TCA_RATE={0x6, 0x5, {0x1d, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffbe}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000800) socketpair(0xf, 0x5, 0xffffffd1, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xfffd, 0x9}, &(0x7f0000000140)=0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x5f) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 3.992820309s ago: executing program 3 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)={0x0, 0x1, [@local]}) sendto$packet(r2, &(0x7f0000000140)="8000000000006a9a9b80d96a8a12", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1b, 0x0, 0x1, 0xd4, 0x6, @broadcast}, 0x14) 3.08262843s ago: executing program 4 (id=570): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) shutdown(r1, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x57, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0x0, 0x0) r8 = eventfd(0x3) unshare(0x2040400) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8, 0xd1, 0x2, r7}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x72bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x7}]}}]}, 0x3c}}, 0x24044092) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000040)={r8, 0xd1, 0x3, r8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 3.059830542s ago: executing program 0 (id=571): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c00"], 0x250}}, 0x2000c000) 2.948596082s ago: executing program 3 (id=572): socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') write$cgroup_subtree(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1534c3, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000640)=0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2c00, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f0000003780)=[{0x6000004, 0x0, 0x0, 0x7f, 0x10001}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2) syz_open_dev$usbmon(0x0, 0x7, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000001a000309000017004e23"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES16=r6], 0x5c}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x20101, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r8, 0x3304) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 2.912795176s ago: executing program 0 (id=573): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x1, 0x80000000, 0xba8f, 0x4, 0x6, 0x2}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000006001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3b, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f0000000300)="c0962741674ca35631555b3debd2ba16bbc5ec7834d9e74295f8035dc2920d48d5ed129c9ac53f64e22a8f8e341f0b50ca58113191a7b55a0e454995e42d3c55fb4ceb475e3f9b8b6fbb122913085ca1aa31cc69d08356394f33dfecadad1b177c6219d2ea23c16f5415a3eb", 0x6c, 0x20004081, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) readv(r6, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}}, 0x40) splice(r3, 0x0, r0, 0x0, 0x80, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) 2.511022755s ago: executing program 4 (id=574): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 'pim6reg\x00'}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="dab099c7cf6132c9f815621dcab55fc7ecadbe28841ba6f3418f97127d0f26d74c2438c85b47478bfc6056d921ad815eeb22af1bd1bb53d5aacb189b855309a524cfd3ff9604a1bb17895992f8bd10f7561becfc85c691c654eddb39b41e6bc609cdd24f5bffe0e1aafa67a1abe1a2db9e75d0bbe33d473c13f239ad36b669791aec278e88f750f473a34d2da435eafafb2521c15611ae81dd23aa366e14426a71a170035eeac4916f3e1d52f1", 0xad}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1001000000a35298bffc7bbe4db8e59c808183940dd0f450c1c0efd67005e69f14125661ecca6ffd27df532b70cf2a9487de2b62b8db588fd31e7b8c792e20b56c68d3324eedb4bae0927dadd8a102cd473b6f02b66ed29322a6391a5835ffc179fab3b53cc01f34b2242db609f12f855b7681744493de3cfa804ed42b8cc7763b8ba968d7310593bca746f52dc1613037c6a910e4b4d7092ef9d8c14a9ddf197fd0a81591e33fe517cef68580078c29851b7adfdff3dbb3ac19e11e4135f5b3476174fb4fd21cf822a629fbb45931e2abfbd61acbd671b4ed1ae9407bd8a27c9ead9863f2e9e19b102e01fabbb7bae1bb8122f3ea92019286b8620efe1171000000000000"], 0x110}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="d3fd0ca25b331185ab1d74e71dd0b866049194e40244d39b2744f7384ba4e761f9ab91921fb02835888f4cb1ba08aaa4b3cbe1278cf4e0777ab13b457cd0b860319edc99f6250896d41a3b", 0x4b}, {&(0x7f00000004c0)="73c858002d24bb79a108e228b97736e31cbec96782a1e57bf07c0906fb3494238730080e6dec9767b06c557a1768aeb39e3a5f91204a5c07269607", 0x3b}, {&(0x7f0000000500)="431766c20333ef3070cbab66fbb11696add846e1500b62e4dcd4895a116d414c48c9bd78afadf544debaa344a88ba7d0795d0a76f271ebda84", 0x39}, {&(0x7f0000000540)="0a903cfbd25dd55229f4ca7980914babd02bec3681a6a232675bc4be933eb8137b6ea61e59c422bd84e29eab07841de7b73d817282d50fce234620fe4cc230e14d6d71a09dfb97a0ec7fdeae7df9a9e2418e5bbb2331", 0x56}, {&(0x7f00000005c0)="3a48fe5e1c30fa2ab03c472dbf47358f9ee07b", 0x13}, {&(0x7f0000000600)="4af6dfa0fb32982b55da21df2392fe95517ad89b00d6ec0ed6b2235cfcf3d57404e2173f3e2efb35161bf1bf299f79c75a8291a93bfbcaf0edb31a284291bbebf663a81a0d8bf60f519f05364c40c2d87f96ea01f594106b7a92ee643fc5e88154b7bdcf420d75655377be1481ad1da44c68c9f95206b08fb4b4e42d091ef62cbe5ad3e63b00fe067e98e45f0b7195c495732ee61d52eea19d552e6c6b295992921e81cbc8a43b340658bcb072c075bf0d0c0062b3e0918a560a7089be96548955f395ee77c66f5606fd69f96da28d042473e1c39d", 0xd5}], 0x6}}, {{&(0x7f0000000780)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000800), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1358}}, {{&(0x7f0000000840)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x4}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)="79ab9b582bf5fe350b929bb855ec8bbf2d8a89253b1ef3209c46ba52dd8d9652a2dbac1a4618535b4088c1fe491a482be9a41971f935199b3db0e5878dba700f133b4beacfc644e5f25a656f0c67a49ffa5f0b9dd91bc969cd1c34bc79da8f90f2d4ccb6546694367da1e655a9a3a81aff1becf54a8ee486d2e17e115b8016349227da2ecc47838c21e795cdc1a35f9f7865c7958527159569b7ef9061ac17a7c7dd831c31067a6095e13e1c70d43f078db8f5af8a2b73869eac6c0fae6449a108a80031480ecf8026518115b82e9ce504c8e97ca3107bf5bb66fc6b9fbd3c1ef111846781086020d50aefeb26baa48b56f21b", 0xf3}, {&(0x7f00000024c0)="9aa8ebafe9239bf4c5f312604afd40cf3573c6c8272f5b1dd6f532eca20435832ed3a7efab175638f5328f53082e06e08f8ee3fc8d5633be2445b443a2855849184e03ee3c5978722b898588f57d1ae36b2ecd0b21af9d531471425eefd9c4933fb8b610e01b494d7ebe2087028919c25f95ee442e827dde12202cf884f4ed856d4aaa499be285db971e53faa74467bcb5f90584ae756f01ca17dda0a78390e9407c6c41229fc8d54ac8208d041a1c361dfd5421b78e5cd2fc309c96fb14ddd10cdf09a0d538ddb6588712348fe93ea3d0805b4e56901947e58d15763410851af9e3c972e7195e8f158a65a0f03c39dfcd96a5f1feba042fd48dc7138d51dc7cc4f56d63a8667e1855acc6b60e8eed1ac6eeb087eeaa72dde6fc227f19206ab6cfe4461b4e59418479bb18b81342e36065ed01e922aa69f8c194208258f29220962967c5cbfdf7ee5f047585f70f55e0af84764242df123ce7f006a1ccaf53a63de221febe97b190334d767fb00ec4e1bfad91338dd2fe8a31a0d83f473675ff1d4a06fcf450bc609764985777bbe7137a4dd30dcbe5e6084efa22a5247a8b63279e0f35ec3d542eedb8bec53a7401f0bd60420b3f53ac2f7205da4efb7f3a65f9ae3a17c12162bc3ab9713e42f7f5bbaac24c7a333460df600bdb0a3a58249889cb1565472c355de40d004b9f5a83fdda84848a90e7a9cd234c0de67ff3e510c9fbba0e07aef8b565743c9709ecf1b2c8ab798750021e121cf1778c51392a7a951ce8257f00604257c4f455c550013763852065822968ea60d608a5a58b138d38103086a05d0bf19ef3f4be668f9850618a6c7c6d5354730d231dfc34e695ef899b345f65ddd4d82ffa50509f0c7e891a03aa482e19b48885653a1983e692f3b4669c3d4ae40bf4bcc1f4e06e4d16058d01479353280fe1a64ba73bddcf04ff627d3c0f6743581191d38317233f5ef692f4a930e48990699f2f17ae9eff0740a97371232789a12bed928dddd8154199fae8f268993fff75dd66b1f532307c6305540be85cb90ff8feb305824ea114da928e4fc4dab72dff74c2ada8cf2f44c47a46c6a72958bcf49544d912019b2a020e1e1d729d6381f5e5020a38ace7befe92d24b4ec02db8779a2f26067690dcfafaf16a3fb5984846cf6d3a28664b6afb1a2cf7077ee0b87d74c577f9e1df6be023dd022f40a58de07e66078110420c5d46cfee15e2eb6ca920d3d92b8b22005bde3922220ad7bbbbd4517a6a710ac24e6d601ff9a2709d2e449e1e4d5b6646f8e0b54fbfe7b4ddcc88dc434dd2016eac2ef4c712904b166fe61cd09e4b32b0b484d8bf7eee797f3f0298754fc777e59bd9b3f367c8961ac3b615aec7bc62e0c7ed3aa7fff62613d2cbc5d2d4134d145fe400e5e7b9569f96d975be28b11943f7b1d862d6ce42c15ef2205929fcda053b79a1c33c012fe51ab73387e81cd0200125bc5205fad6882ffa7093d5913b0124b14835df930020bbae56404d2fa1a268c0df4c7f83200d18827539615e9b2865c61056b26beaf52d53d0b9d983e948447f9fb687ef28aedcc982acf6edc7f035dcdeec09dd395af354bbfe106e01f5d408bf563e1701fe899a97602b65b69c9578c75ea2236a1a137fc9a73fba724125d38ec5a2220a5afd054d43c4d86ff37e08113cf01cf2a57bc07c9baadd6b51d0379b703466e4be239204190584e022394fb838255cc252ae3a52e8155c4600ff9f83fc21817d1e9f29f02f31ad4f55942e8977f2e3011acf93c0a640222952a1612b933810c83746e281b09bf8b519a675ede8c91a2654533276387c695bd1983022d2a8c691988549cee125e72411c97596e0798e9b0176c1874d6bebd3d5fb0ca3b1ce1e9375fd225f4c737eac05a8bdccc7a83893190bcc88f887027376bbf416d4316999ea6aef01788809c8aec28b4546e0dfac1c4320a395ae9218c9fe53fa51896c5e2e3ff55ff3aaf82dff87a6540e176cd07899b8c19ed6bb41b19787e206143a6bb0ea80baf10e8a256d5b52ca954482db88cfc37c4624a44450175b0a407d96a9d323e2c7feabece9c9979f25b05320d38ddff76b30a428853c007372da42fd177d2700b4bd591f1e946d60bf7c9f911fac633d483d8a98f447364a7e495fa6c0cea2abd70d794190d68096283e248326381e62b320fbcea86a9e7e346cd7439a6657eba7c500f34ef7aa4b238a9b3ee0554e9af8969e88c8ebfe031d95d69fa26dcd3c945b60b8ff33bafbf18b6b24be294f73e188fd8dc1a3b6811fa395ebfaf10c2c25b2f56208aeef5db852d5604fb3a29d77e9945929c9d37fdd4b40b668db16b4b37827ea933c7a4788d9e58a8d1adc9636ad224c9b95c066f3d391387ae9fa0ef122fd72e4a777a7de9472ff309804ba399475f8d36aedfb0951846c30b85252707234eb94792df548141db6f09c27dfe0d86dade1bed257f664c8541e5c28775897955ac41bb4c7d214fead172bfdf0a8f477cc604467fb25619faaec1cb1b0810d16fa8b724f47876e65524b3c8e1f4781eae493600d1c075ca409424aca227bb9a5dcf0e2ba56b75ac89a9549a0aad4bd2147f44e962d48450b185d7f7f3fc92a43eede5d1a887b0f79d7b971018ee2d57e8a0aa194e58f2a9b345c040cd1247c80b3a66718a36ae8bdbc404d238265a21b5033a0df112f611867f8d4fd717f9dd1b86af23f695f56dadcb8de9d9e011e63fabf8e491ef957f778008a3d3ce2a92bcf5143538d2e9b0b255186b58207792570e89f9c8d7b0ffe0be99a880632c29d3da695f53342e931308874d8f5e81e044cb592cc2746d1807ce4309287d28bd09aad696526660dd099ccb714ea152f53d70b5ba296cee64f695e01acb8e1b67e9d3abc9632916ae37b32bce02df7a5b15b4ba2ce5a8805050f256f1e551ef36ed4ad2a0033cd5a7d77962242365220e12a18f1552c31f957e018bc4a55672edc40db61ae55aae7d72ac5c0bdc77c54c2383514a898d1dab53aa55c1dd99b5b160f608b37bc23b4adc26c7a67bff1204b291d44e64d10412b58239739cb4766966947ddec039ccb9ff8bc466ff5071e259aa468f55cff35f67c4a851a31fa61d7632d7a8a3aaa647bb5a24ffe1ec4e036ed7207c57230c48605165db2db34fcdc2e1fd7fc55df516f4ebf8c38fff0c71cc6077915d27f82a0990c9f288c6e0f08988930da55002b5c0e96c1c7c834f5d76b306ecf58faf8454a82c7c6060c12a1377f8303802b40e67f0263bbe54c57ae520728b8a08316d61433840e51a02b9145d57898176ea5bbf5ac4d4eff2d8ba050937f82f69796af9bd3bf999acde77ba545ccb928412fa76f0b16acf249dffa3d85435dd4b64991c34776703ed5934f4eab855c2f07372c0176347c645a863faa6f6ea83e19c8bdf00c369ce27897fc3b0bd79b9da8d9dcc1a1c4410d8969ad8ab8de0b3548a8e4fc773c85391f4b0c03f7bef1706b780dafed4b13fc0678ebe205c25f1a644598d8baae21239b4593dd558bab2f5aee81c6533adf187d504c0fcefee92cb6f7b86723bcfdb79cc18086b846e27429595f5877a93d2aabd209c826d24fd3acf8a45c99d3feaa7260c429af83fbfef3061d96d0384ace80328389d71b107f8f2a4cd01a8b69eea8ea9455e8fc5cfa89b5475f890b7af770a57846d8a2a0dfe9ef22a0263ed4218afe254eb9f8a6e803682f7c53e8a9afc920be8701e863870f91990570b7ce8ea9c87c35fa1c75ef3e9ac4c47f28a467e486ef9af179dfe4340c46517095899a57c95aedd570a17599964054124f6cef0359c1152d6104cd97ffb9f47deb19a83b65aa88eb6633b51c1fd2a9bc3504028ee18341189f57c24a21b3b20c0b24af571d874c6e3c7f83ce12070453216d1243e66eb1223bd9bb718646a45d8c06277e13b994ecbb0285f755ef75ad92b204d6c25b24efada2e2aa1fd5a9de91db378b82353743b10df93828ae46ac97f2c28aa94d373174f52cc27a0b34f483147fca5c60a261d471efd0fe780b5c528a59b5c4b09bcefdcfdb7d2a4e53feb298e806793d0177b3f7a10b45fdb862ed060916626a56bc8951a0e049b3b2431aefb6c26a583e0a04688ec8f5119c682c9d1be5581a835db2bcf90514aef7488e79449375cbc41389904e89f002f29fbf94b725f819ed6c5766390b49321413ace93ad67eff07e2e78946fd3f6ec50a2ade628736a330cc493beafeaee31a1f2d73d996de302ec774cf5ef9772329e6886f7f3597c8f7ba167b984c8b03143bf004e6aa40227a89bdd981954d47e7689e998f912c9e7172f7f04b2ddb5267b133ccd250e2c653e3e01e0e5bb8cfc3f5f28de2b077643afaa2cc713ed10068f4cdba8d081e86a2c3dca4501a43415f6fd49c91cf176b2fa14a0127e789669bc8590a271a354b69e1b172f934dc82c6fd3cdc43ba104163d4c687a499afa1968c60977969db8c19d9b88745a6fde084ea8ee86fe945f4305a1a83f8b915c52b27d11b46057aad0280b9ad46ae4c733803c285e9e90bbca466b368793dac91283073e01fb64b47d3e613406aa13ac586fcbd5bb35b950501ef456f98d89644df7dd9b8872a046b9e4c41387984c3726342c495575f857821a8a658046a40c994bf7022c74890849d675b8b152f8ce01563a8df07406b564fdc8e8b71814e42c5d28147d5f53cb589d8a6ad0d6b00850f9cb5365bb4d424def23aa369300e6bdbce19a1e50038c3d37779269a8446d6548962e0fe7377cfa8de9c9815d760e89eeb75fb1ba589ac58eaa3d0f97dd7ff142e7a5ee0e9765a3a1784931d180a866157d87468c5f0478515e1bfbfcc47f64d2e7e232222b612bd8ecfe44abfb231d407fe0db3cc49e85604cb0a54f73120227eb22bd00ab6157b004f942a70fda072ea9bab8c62260d33575e5474bf3b64f315377cf78220a1035c37b320b454ed09a1eb741d1eb4d4100558d4378ee933ad0c1bf49ee04587c951093b3d8e33bbbbf2bb0828cc2b498baa39f5e2f46c326853532848c0627df1f5ce95975e62a0f3c24ce3b6863f73383665d488b0f0144cefb1e4cf0b996c81d31390acbb4e1aa53c108fcc39e402eb52c2999ce1533851643e99d77cc82f7ee9f3127226875a11448d488a3f95f15866b81e2d631f48503d85058d4744fa1e50daeefed5cf3eb047fa4cafc3afc93d1b3593eed5e8cd7b53e5bb25df2a2a4128e153fe90cdafea1ae90c2b40a859d69a3320fe8e0011a1a8a490dcca387989a106f2f1dd5dcce87c88d94506551ff72c7248c907f3c39dafc6df659ca48ae1fade02ed2360d2f154adb1e5d20e3a7bbce47c5a1e94d8d7978a5b5d6312e42e2a89508d4d54145a7f2761fa188d470883fe4fe98a016bbf7e78a5f23489cfb03f13b3338e869563dc3473de9307356404353836d223e89db11d003e4b8b41627da5fead1ff5cf9126a7380ed37737b8c30b8c146f2db25d69d168ee51b105ab92abc603dcaae7f7c28605e267006597da750841ff069dbeb9239589f695e5cee7f1299f7ca5e41bd2855afbc9fcced3c4fde759ff5adedb667d550083e78ebc78be9fc3fc40c39c95f5cabb5da3fda2bb4e7cd7456621394dfae77fa3105137723349f75f769ffd16a4bf36657690632d72ff6fc8dc71fb63da68c3bc6090367cc08f61d38d541b76232ea455e429a0c2ba9ece3519ae007077d0d39ce5ccc94ba02e3c0c5068e0d6a43d27a74b68e9f935dd47bf6d76930daaf76cb02d0947581728c0e62a74555b2904071941bc270e9387", 0x1000}], 0x2}}], 0x4, 0x20040000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x11) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) chdir(&(0x7f0000000800)='./file0\x00') setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0xffffffff}, 0xa7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002a000000b7080000000000007b8af8ff00000000b7080000850000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="000085000000a50000009500"/32], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 2.290902362s ago: executing program 5 (id=575): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000001c0)={0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010000000000fedbdf060300000004400180"], 0x18}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) 1.68874079s ago: executing program 0 (id=576): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x100008, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x490500, 0x61) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x8082, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x40}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) exit(0x7) unshare(0x42000000) 1.145013907s ago: executing program 4 (id=577): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000200)={0x80, 0x6, 0x2fe, 0xe5, 0x300, 0x6, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0xfe8a, 0x0, 0x1}, 0x28) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1c0, 0x1c0, 0x1c0, 0xd0, 0x488, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private0, 0x21, 0x3, 0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0xffffffff, 0xff], [0x80ffff7f, 0xffffffff, 0xff, 0xff000000], 'lo\x00', 'macvtap0\x00', {}, {0xff}, 0x3c, 0xd, 0x4, 0x10}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x8003, 0x5, 0x4, 0x1, 'syz0\x00', 0x8, [0xff, 0xff, 0xffffffff, 0xff000000]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xffffffff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@empty, 0x40, 0xd, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r6, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000840)="88", 0x1}], 0x1, &(0x7f0000002940)=[{0x10, 0x1, 0x1}], 0x10}}], 0x2, 0x40002) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="3f311348ea00000083a0000020001280dc0b0001006272692467650000100002800a001400ffffff"], 0x40}}, 0x0) r8 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) connect$phonet_pipe(r8, &(0x7f0000000180)={0x23, 0x1, 0x9, 0x4}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 1.040020565s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r4, 0x100000000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x4}, @hyper, 0x0, 0x200da13, 0x5e, 0x200000000000, 0x100000000000006, 0xfffffffe, 0x10001}) 833.078538ms ago: executing program 5 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 416.773462ms ago: executing program 1 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x61000004, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_setup(0x2b26, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 382.070601ms ago: executing program 3 (id=581): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0xc0104d04, &(0x7f00000001c0)={0x2, 0x300, 0x0, 0x0}) 257.317479ms ago: executing program 5 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)={0x0, 0x1, [@local]}) sendto$packet(r3, &(0x7f0000000140)="8000000000006a9a9b80d96a8a12", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1b, r2, 0x1, 0xd4, 0x6, @broadcast}, 0x14) 125.678963ms ago: executing program 4 (id=583): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000500), 0x0, 0x20044020) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x300, 0xffffffe4}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) fstatfs(r2, &(0x7f00000007c0)=""/4096) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0x4018aee3, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@delqdisc={0xb0, 0x25, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0xa}, {0xfff4, 0xfff3}, {0xa, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3e, 0x3, 0x6, 0x6, 0x0, 0xd9b, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x5e, 0x2, 0x1, 0x0, 0xffff0000, 0x2}}, {0x8, 0x2, [0x4, 0x7fff]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @TCA_RATE={0x6, 0x5, {0x1d, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffbe}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000800) socketpair(0xf, 0x5, 0xffffffd1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0xfffffff9}]}, &(0x7f0000000300)=0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x5f) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 77.607596ms ago: executing program 3 (id=584): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0xffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 49.528035ms ago: executing program 5 (id=585): r0 = getpgrp(0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, r3) 1.609614ms ago: executing program 1 (id=586): munmap(&(0x7f0000cb1000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 1) 0s ago: executing program 4 (id=587): accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) kernel console output (not intermixed with test programs): ing to 1024 [ 111.707419][ T5950] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.728052][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.748275][ T5950] usb 1-1: Product: syz [ 111.757293][ T5950] usb 1-1: Manufacturer: syz [ 111.787836][ T5950] cdc_wdm 1-1:1.0: skipping garbage [ 111.793180][ T5950] cdc_wdm 1-1:1.0: skipping garbage [ 111.812121][ T5950] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 111.854075][ T5950] cdc_wdm 1-1:1.0: Unknown control protocol [ 112.006483][ T30] audit: type=1400 audit(1769418284.413:321): avc: denied { create } for pid=6473 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.044518][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 112.051225][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 112.057560][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 112.064128][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 112.070379][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 112.076945][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 112.083174][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 112.089737][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 112.095982][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 112.102549][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 112.108769][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 112.115331][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 112.121490][ T5950] usb 1-1: USB disconnect, device number 11 [ 112.121557][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 112.121567][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 112.121575][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 112.161510][ T30] audit: type=1400 audit(1769418284.443:322): avc: denied { read write } for pid=6461 comm="syz.0.120" name="cdc-wdm0" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 112.228412][ T30] audit: type=1400 audit(1769418284.443:323): avc: denied { open } for pid=6461 comm="syz.0.120" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 115.156859][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 115.156876][ T30] audit: type=1400 audit(1769418287.553:336): avc: denied { create } for pid=6500 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 115.241776][ T30] audit: type=1400 audit(1769418287.563:337): avc: denied { write } for pid=6500 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 115.277457][ T6504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=6504 comm=syz.5.133 [ 115.564610][ T30] audit: type=1400 audit(1769418287.973:338): avc: denied { write } for pid=6513 comm="syz.4.138" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.678487][ T30] audit: type=1400 audit(1769418287.973:339): avc: denied { open } for pid=6513 comm="syz.4.138" path="/31/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.748706][ T30] audit: type=1400 audit(1769418287.973:340): avc: denied { ioctl } for pid=6513 comm="syz.4.138" path="/31/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 115.827824][ T30] audit: type=1400 audit(1769418288.093:341): avc: denied { create } for pid=6525 comm="syz.5.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.868190][ T30] audit: type=1400 audit(1769418288.263:342): avc: denied { write } for pid=6528 comm="syz.0.144" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.944924][ T30] audit: type=1400 audit(1769418288.323:343): avc: denied { read } for pid=6531 comm="syz.5.145" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.070592][ T30] audit: type=1400 audit(1769418288.473:344): avc: denied { write } for pid=6533 comm="syz.5.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.273490][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 116.338907][ T30] audit: type=1400 audit(1769418288.733:345): avc: denied { read write } for pid=6537 comm="syz.0.147" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.381689][ T1207] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.575321][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 116.583068][ T1207] usb 5-1: config 2 has an invalid descriptor of length 239, skipping remainder of the config [ 116.679667][ T1207] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 116.725841][ T1207] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 116.740568][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.261493][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.438917][ T10] usb 4-1: config 4 has an invalid interface number: 213 but max is 2 [ 117.448955][ T10] usb 4-1: config 4 has an invalid interface number: 249 but max is 2 [ 117.491347][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 117.505445][ T6535] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.506580][ T5950] IPVS: starting estimator thread 0... [ 117.522926][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 117.525053][ T6553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.543774][ T6551] (syz.4.148,6551,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 117.555387][ T6551] (syz.4.148,6551,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 117.562993][ T10] usb 4-1: config 4 has an invalid interface number: 121 but max is 2 [ 117.571330][ T6551] (syz.4.148,6551,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 117.571365][ T6551] (syz.4.148,6551,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 117.591855][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.613080][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.653692][ T1207] usb 5-1: string descriptor 0 read error: -71 [ 117.655705][ T6552] IPVS: using max 44 ests per chain, 105600 per kthread [ 117.661130][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 117.686729][ T1207] usb 5-1: USB disconnect, device number 6 [ 117.707641][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 117.726900][ T10] usb 4-1: config 4 has no interface number 0 [ 117.750179][ T10] usb 4-1: config 4 has no interface number 1 [ 117.763412][ T10] usb 4-1: config 4 has no interface number 2 [ 117.771900][ T10] usb 4-1: config 4 interface 213 altsetting 49 endpoint 0x5 has an invalid bInterval 131, changing to 7 [ 117.783218][ T10] usb 4-1: config 4 interface 213 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 117.799005][ T10] usb 4-1: config 4 interface 213 altsetting 49 endpoint 0xE has an invalid bInterval 128, changing to 7 [ 117.810519][ T10] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 117.821697][ T10] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 117.832769][ T10] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 117.843908][ T10] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 117.855025][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 117.867948][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 117.890614][ T10] usb 4-1: config 4 interface 121 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 117.901927][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 117.912910][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x9, skipping [ 117.923931][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 117.935152][ T10] usb 4-1: config 4 interface 121 altsetting 157 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 117.946670][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 117.957817][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 117.972758][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xD, skipping [ 117.983740][ T10] usb 4-1: config 4 interface 121 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 117.995978][ T10] usb 4-1: config 4 interface 121 altsetting 157 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 118.007202][ T10] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 118.018166][ T10] usb 4-1: config 4 interface 213 has no altsetting 0 [ 118.024959][ T10] usb 4-1: config 4 interface 249 has no altsetting 0 [ 118.031789][ T10] usb 4-1: config 4 interface 121 has no altsetting 0 [ 118.040456][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=24.a6 [ 118.049759][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.057792][ T10] usb 4-1: Product: 嚸裘卄ɽ骆鶚摐汿嫡౿஍/蚻ﲉ峻寉珠罟 [ 118.066569][ T10] usb 4-1: Manufacturer: 婴 [ 118.071243][ T10] usb 4-1: SerialNumber: ྡྷ堩鵅ꯡ᱙槲僁偡맆顂嶸螹稢ꪤ,⡥쮩つⶈ䫷⩻櫵爟㹧蛛䤦̀ﯝอ咯칖핆垴顀䂢洑蛿ꄻ柚懘秋齒鎤〪଺ຏ [ 118.351363][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 118.865993][ T10] usb 4-1: selecting invalid altsetting 0 [ 118.876696][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 118.889113][ T10] usb 4-1: selecting invalid altsetting 0 [ 118.938241][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 118.970726][ T10] usb 4-1: selecting invalid altsetting 0 [ 119.009815][ T10] usb 4-1: USB disconnect, device number 8 [ 119.075223][ T10] pvrusb2: Device being rendered inoperable [ 119.124252][ T10] pvrusb2: Device being rendered inoperable [ 119.144198][ T10] pvrusb2: Device being rendered inoperable [ 119.165990][ T6578] netlink: 52 bytes leftover after parsing attributes in process `syz.5.159'. [ 119.675210][ T6588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.753352][ T5879] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 120.007083][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 120.223702][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 120.223717][ T30] audit: type=1400 audit(1769418292.633:353): avc: denied { write } for pid=6595 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.224907][ T6597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.164'. [ 120.234207][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.289776][ T5879] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 120.299275][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.301228][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 120.310940][ T5879] usb 1-1: Product: syz [ 120.322464][ T5879] usb 1-1: Manufacturer: syz [ 120.327070][ T5879] usb 1-1: SerialNumber: syz [ 120.343076][ T30] audit: type=1400 audit(1769418292.743:354): avc: denied { name_connect } for pid=6589 comm="syz.3.162" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 120.356877][ T6590] binder: 6589:6590 ioctl 5382 200000000140 returned -22 [ 120.366457][ T5879] usb 1-1: config 0 descriptor?? [ 120.379013][ T6600] netlink: 56 bytes leftover after parsing attributes in process `syz.5.165'. [ 120.399988][ T30] audit: type=1400 audit(1769418292.783:355): avc: denied { map } for pid=6589 comm="syz.3.162" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.539920][ T30] audit: type=1400 audit(1769418292.943:356): avc: denied { setopt } for pid=6608 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.559499][ T30] audit: type=1400 audit(1769418292.953:357): avc: denied { ioctl } for pid=6608 comm="syz.4.168" path="socket:[12510]" dev="sockfs" ino=12510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.584353][ T30] audit: type=1400 audit(1769418292.953:358): avc: denied { write } for pid=6608 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.751321][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.809732][ T5879] usb 1-1: USB disconnect, device number 12 [ 120.923762][ T24] usb 6-1: config 4 has an invalid interface number: 213 but max is 2 [ 120.936043][ T24] usb 6-1: config 4 has an invalid interface number: 249 but max is 2 [ 120.945847][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 120.954969][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 120.963912][ T24] usb 6-1: config 4 has an invalid interface number: 121 but max is 2 [ 120.972634][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 120.981768][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 120.990470][ T24] usb 6-1: config 4 has no interface number 0 [ 120.996590][ T24] usb 6-1: config 4 has no interface number 1 [ 121.002964][ T24] usb 6-1: config 4 has no interface number 2 [ 121.010118][ T24] usb 6-1: config 4 interface 213 altsetting 49 endpoint 0x5 has an invalid bInterval 131, changing to 7 [ 121.023047][ T24] usb 6-1: config 4 interface 213 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 121.047806][ T24] usb 6-1: config 4 interface 213 altsetting 49 endpoint 0xE has an invalid bInterval 128, changing to 7 [ 121.059381][ T24] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 121.071728][ T24] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 121.093219][ T24] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 121.106127][ T24] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 121.120574][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 121.132349][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 121.163594][ T24] usb 6-1: config 4 interface 121 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 121.177078][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 121.188770][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x9, skipping [ 121.200995][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 121.212239][ T24] usb 6-1: config 4 interface 121 altsetting 157 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 121.223966][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 121.259489][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 121.286489][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xD, skipping [ 121.298859][ T24] usb 6-1: config 4 interface 121 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 121.311773][ T24] usb 6-1: config 4 interface 121 altsetting 157 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 121.323449][ T24] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 121.334871][ T24] usb 6-1: config 4 interface 213 has no altsetting 0 [ 121.428774][ T24] usb 6-1: config 4 interface 249 has no altsetting 0 [ 121.436236][ T24] usb 6-1: config 4 interface 121 has no altsetting 0 [ 121.448475][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=24.a6 [ 121.457950][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.466062][ T24] usb 6-1: Product: 嚸裘卄ɽ骆鶚摐汿嫡౿஍/蚻ﲉ峻寉珠罟 [ 121.475011][ T24] usb 6-1: Manufacturer: 婴 [ 121.480525][ T24] usb 6-1: SerialNumber: ྡྷ堩鵅ꯡ᱙槲僁偡맆顂嶸螹稢ꪤ,⡥쮩つⶈ䫷⩻櫵爟㹧蛛䤦̀ﯝอ咯칖핆垴顀䂢洑蛿ꄻ柚懘秋齒鎤〪଺ຏ [ 122.221252][ T6624] netlink: 'syz.4.172': attribute type 10 has an invalid length. [ 122.233488][ T30] audit: type=1400 audit(1769418294.643:359): avc: denied { setopt } for pid=6622 comm="syz.0.171" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.254102][ T6624] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 122.345090][ T6634] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[6634] [ 122.371323][ T30] audit: type=1400 audit(1769418294.763:360): avc: denied { setopt } for pid=6627 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.491777][ T24] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 122.507978][ T24] usb 6-1: selecting invalid altsetting 0 [ 122.518921][ T24] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 122.529034][ T24] usb 6-1: selecting invalid altsetting 0 [ 122.541407][ T5872] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 122.542056][ T24] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 122.573064][ T6642] FAULT_INJECTION: forcing a failure. [ 122.573064][ T6642] name failslab, interval 1, probability 0, space 0, times 1 [ 122.589590][ T30] audit: type=1400 audit(1769418295.003:361): avc: denied { write } for pid=6639 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.610045][ T24] usb 6-1: selecting invalid altsetting 0 [ 122.637993][ T24] usb 6-1: USB disconnect, device number 2 [ 122.645430][ T24] pvrusb2: Device being rendered inoperable [ 122.651557][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.4.177 Not tainted syzkaller #0 PREEMPT(full) [ 122.651580][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 122.651588][ T6642] Call Trace: [ 122.651593][ T6642] [ 122.651598][ T6642] dump_stack_lvl+0x100/0x190 [ 122.651625][ T6642] should_fail_ex.cold+0x5/0xa [ 122.651654][ T6642] should_failslab+0xc2/0x120 [ 122.651676][ T6642] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 122.651701][ T6642] ? __alloc_skb+0x156/0x410 [ 122.651721][ T6642] ? __alloc_skb+0x35d/0x410 [ 122.651745][ T6642] ? __alloc_skb+0x156/0x410 [ 122.651763][ T6642] __alloc_skb+0x156/0x410 [ 122.651782][ T6642] ? __alloc_skb+0x35d/0x410 [ 122.651801][ T6642] ? __pfx___alloc_skb+0x10/0x10 [ 122.651822][ T6642] ? netlink_autobind.isra.0+0x80/0x370 [ 122.651854][ T6642] netlink_alloc_large_skb+0x69/0x150 [ 122.651880][ T6642] netlink_sendmsg+0x680/0xda0 [ 122.651909][ T6642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.651932][ T6642] ? __might_fault+0x70/0x140 [ 122.651960][ T6642] ____sys_sendmsg+0xa54/0xc30 [ 122.651979][ T6642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.652012][ T6642] ___sys_sendmsg+0x190/0x1e0 [ 122.652032][ T6642] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.652058][ T6642] ? find_held_lock+0x2b/0x80 [ 122.652093][ T6642] __sys_sendmsg+0x170/0x220 [ 122.652116][ T6642] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.652154][ T6642] do_syscall_64+0xc9/0xf80 [ 122.652176][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.652194][ T6642] RIP: 0033:0x7f81dd99acb9 [ 122.652207][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.652223][ T6642] RSP: 002b:00007f81de8f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.652241][ T6642] RAX: ffffffffffffffda RBX: 00007f81ddc15fa0 RCX: 00007f81dd99acb9 [ 122.652252][ T6642] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 122.652262][ T6642] RBP: 00007f81de8f4090 R08: 0000000000000000 R09: 0000000000000000 [ 122.652272][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.652281][ T6642] R13: 00007f81ddc16038 R14: 00007f81ddc15fa0 R15: 00007ffda2872b68 [ 122.652305][ T6642] [ 122.898482][ T24] pvrusb2: Device being rendered inoperable [ 122.908250][ T24] pvrusb2: Device being rendered inoperable [ 122.953764][ T5872] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 123.059118][ T5872] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.125432][ T5872] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.187979][ T5872] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 123.196450][ T5872] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.207325][ T5872] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.229413][ T5872] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 123.277040][ T5872] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.310372][ T5872] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.357396][ T5872] usb 1-1: string descriptor 0 read error: -22 [ 123.392125][ T5872] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.423661][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.444762][ T5872] adutux 1-1:168.0: interrupt endpoints not found [ 125.446180][ T24] usb 1-1: USB disconnect, device number 13 [ 125.486720][ T30] audit: type=1400 audit(1769418297.723:362): avc: denied { watch watch_reads } for pid=6677 comm="syz.4.188" path="/44" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 125.584914][ T30] audit: type=1400 audit(1769418297.733:363): avc: denied { create } for pid=6677 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.171284][ T5879] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 126.741233][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 126.748199][ T5879] usb 1-1: config 2 has an invalid descriptor of length 239, skipping remainder of the config [ 126.758932][ T5879] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 126.768563][ T5879] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 126.778023][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.886373][ T6697] 8021q: VLANs not supported on ip6gre0 [ 127.114055][ T30] audit: type=1400 audit(1769418299.513:364): avc: denied { create } for pid=6706 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.142368][ T6710] (syz.0.192,6710,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 127.150019][ T6689] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 127.151234][ T6710] (syz.0.192,6710,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 127.208399][ T1207] IPVS: starting estimator thread 0... [ 127.319420][ T6710] (syz.0.192,6710,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 127.331202][ T6710] (syz.0.192,6710,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 127.351545][ T5872] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 127.421581][ T6712] IPVS: using max 77 ests per chain, 184800 per kthread [ 127.851742][ T30] audit: type=1326 audit(1769418299.773:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8add59acb9 code=0x7ffc0000 [ 127.971627][ T30] audit: type=1400 audit(1769418299.853:366): avc: denied { read } for pid=6706 comm="syz.1.198" path="socket:[12750]" dev="sockfs" ino=12750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.996239][ T30] audit: type=1326 audit(1769418300.263:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8add59acb9 code=0x7ffc0000 [ 128.022111][ T30] audit: type=1326 audit(1769418300.263:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8add59acb9 code=0x7ffc0000 [ 128.032106][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.045894][ T30] audit: type=1326 audit(1769418300.263:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8add59acb9 code=0x7ffc0000 [ 128.077678][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 128.095704][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 128.113395][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.423500][ T30] audit: type=1326 audit(1769418300.263:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8add59acb9 code=0x7ffc0000 [ 128.462562][ T5879] usb 1-1: string descriptor 0 read error: -71 [ 128.483819][ T5872] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 128.501209][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.509760][ T5879] usb 1-1: USB disconnect, device number 14 [ 128.553033][ T5872] usb 5-1: Product: syz [ 128.557201][ T5872] usb 5-1: Manufacturer: syz [ 128.582618][ T30] audit: type=1400 audit(1769418300.363:371): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.602669][ T5872] usb 5-1: SerialNumber: syz [ 128.610382][ T5872] usb 5-1: config 0 descriptor?? [ 128.681191][ T6717] syzkaller0: entered promiscuous mode [ 128.738339][ T6717] syzkaller0: entered allmulticast mode [ 128.820673][ T5879] usb 5-1: USB disconnect, device number 7 [ 128.857935][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 129.059270][ T6723] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 129.196077][ T6730] IPVS: Error connecting to the multicast addr [ 129.236262][ T6728] tmpfs: Bad value for 'mpol' [ 129.296005][ T6733] netlink: 272 bytes leftover after parsing attributes in process `syz.1.208'. [ 129.449073][ T6737] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 129.467104][ T6737] netlink: 96 bytes leftover after parsing attributes in process `syz.4.209'. [ 129.502016][ T6737] netlink: 1 bytes leftover after parsing attributes in process `syz.4.209'. [ 129.571007][ T6743] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 129.770985][ T6737] netlink: 658 bytes leftover after parsing attributes in process `syz.4.209'. [ 131.353310][ T6760] netlink: 'syz.4.213': attribute type 4 has an invalid length. [ 131.724342][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 131.724385][ T30] audit: type=1400 audit(1769418303.833:384): avc: denied { bind } for pid=6750 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.117566][ T30] audit: type=1400 audit(1769418304.003:385): avc: denied { read write } for pid=6758 comm="syz.4.213" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.231324][ T30] audit: type=1400 audit(1769418304.023:386): avc: denied { open } for pid=6758 comm="syz.4.213" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.301231][ T30] audit: type=1400 audit(1769418304.023:387): avc: denied { ioctl } for pid=6758 comm="syz.4.213" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.352617][ T6760] syzkaller0: entered promiscuous mode [ 132.358117][ T6760] syzkaller0: entered allmulticast mode [ 132.381242][ T30] audit: type=1400 audit(1769418304.733:388): avc: denied { write } for pid=6750 comm="syz.0.212" path="socket:[13964]" dev="sockfs" ino=13964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.407230][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.407296][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.498637][ T6774] FAULT_INJECTION: forcing a failure. [ 132.498637][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 132.521503][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.5.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.521531][ T6774] Tainted: [L]=SOFTLOCKUP [ 132.521537][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 132.521546][ T6774] Call Trace: [ 132.521552][ T6774] [ 132.521559][ T6774] dump_stack_lvl+0x100/0x190 [ 132.521586][ T6774] should_fail_ex.cold+0x5/0xa [ 132.521615][ T6774] should_failslab+0xc2/0x120 [ 132.521637][ T6774] kmem_cache_alloc_noprof+0x83/0x780 [ 132.521658][ T6774] ? mas_wr_store_type+0xb21/0x2200 [ 132.521676][ T6774] ? mas_alloc_nodes+0x280/0x390 [ 132.521706][ T6774] ? mas_alloc_nodes+0x280/0x390 [ 132.521729][ T6774] mas_alloc_nodes+0x280/0x390 [ 132.521755][ T6774] mas_preallocate+0x39c/0xf10 [ 132.521775][ T6774] ? __pfx_mas_preallocate+0x10/0x10 [ 132.521793][ T6774] ? rcu_is_watching+0x12/0xc0 [ 132.521820][ T6774] ? anon_vma_name+0x81/0x2c0 [ 132.521849][ T6774] __split_vma+0x33d/0xe30 [ 132.521868][ T6774] ? __pfx___split_vma+0x10/0x10 [ 132.521885][ T6774] ? find_held_lock+0x2b/0x80 [ 132.521911][ T6774] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.521941][ T6774] vma_modify+0x1127/0x2330 [ 132.521964][ T6774] ? __pfx_vma_modify+0x10/0x10 [ 132.521988][ T6774] vma_modify_flags+0x257/0x3d0 [ 132.522007][ T6774] ? __pfx_vma_modify_flags+0x10/0x10 [ 132.522053][ T6774] mlock_fixup+0x2fd/0xee0 [ 132.522074][ T6774] ? __pfx_mlock_fixup+0x10/0x10 [ 132.522099][ T6774] apply_vma_lock_flags+0x256/0x370 [ 132.522120][ T6774] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 132.522138][ T6774] ? __pfx___might_resched+0x10/0x10 [ 132.522165][ T6774] ? __pfx_down_write_killable+0x10/0x10 [ 132.522188][ T6774] ? __mutex_unlock_slowpath+0x15c/0x790 [ 132.522211][ T6774] do_mlock+0x261/0x7f0 [ 132.522228][ T6774] ? __fget_files+0x21f/0x3d0 [ 132.522248][ T6774] ? __pfx_do_mlock+0x10/0x10 [ 132.522267][ T6774] ? fput+0x79/0x100 [ 132.522289][ T6774] ? ksys_write+0x1ac/0x250 [ 132.522306][ T6774] ? __pfx_ksys_write+0x10/0x10 [ 132.522330][ T6774] __x64_sys_mlock+0x59/0x80 [ 132.522350][ T6774] do_syscall_64+0xc9/0xf80 [ 132.522372][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.522389][ T6774] RIP: 0033:0x7efc31d9acb9 [ 132.522404][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.522421][ T6774] RSP: 002b:00007efc32c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 132.522438][ T6774] RAX: ffffffffffffffda RBX: 00007efc32015fa0 RCX: 00007efc31d9acb9 [ 132.522450][ T6774] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00002000001f7000 [ 132.522460][ T6774] RBP: 00007efc32c95090 R08: 0000000000000000 R09: 0000000000000000 [ 132.522470][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.522480][ T6774] R13: 00007efc32016038 R14: 00007efc32015fa0 R15: 00007ffce96ec508 [ 132.522504][ T6774] [ 134.121581][ T24] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 134.638110][ T5813] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.161855][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 135.229424][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 135.241729][ T5813] usb 4-1: config 2 has an invalid descriptor of length 239, skipping remainder of the config [ 135.253107][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 135.264523][ T5813] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 135.279921][ T5813] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 135.291808][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.330185][ T24] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 135.339550][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.364487][ T24] usb 6-1: Product: syz [ 135.390062][ T24] usb 6-1: Manufacturer: syz [ 135.422425][ T24] usb 6-1: SerialNumber: syz [ 135.536011][ T24] usb 6-1: config 0 descriptor?? [ 135.789789][ T1207] usb 6-1: USB disconnect, device number 3 [ 135.832124][ T6791] (syz.3.223,6791,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 135.840391][ T5950] IPVS: starting estimator thread 0... [ 135.850144][ T6791] (syz.3.223,6791,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 135.857901][ T6791] (syz.3.223,6791,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 135.868193][ T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 135.876035][ T6791] (syz.3.223,6791,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 135.898584][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.910571][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.923452][ T5813] usb 4-1: string descriptor 0 read error: -71 [ 135.934284][ T6808] IPVS: using max 46 ests per chain, 110400 per kthread [ 135.938839][ T5813] usb 4-1: USB disconnect, device number 9 [ 136.053109][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 136.063594][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.076666][ T24] usb 1-1: config 0 descriptor?? [ 136.374234][ T30] audit: type=1400 audit(1769418308.783:389): avc: denied { read } for pid=6809 comm="syz.5.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 136.505008][ T24] logitech 0003:046D:C216.0002: unknown main item tag 0x0 [ 136.513922][ T24] logitech 0003:046D:C216.0002: item fetching failed at offset 3/5 [ 136.522621][ T24] logitech 0003:046D:C216.0002: parse failed [ 136.528709][ T24] logitech 0003:046D:C216.0002: probe with driver logitech failed with error -22 [ 136.735284][ T6818] syz.3.232 uses obsolete (PF_INET,SOCK_PACKET) [ 136.748668][ T30] audit: type=1400 audit(1769418309.153:390): avc: denied { bind } for pid=6816 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.772161][ T30] audit: type=1400 audit(1769418309.153:391): avc: denied { setopt } for pid=6816 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.820134][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 136.852763][ T30] audit: type=1400 audit(1769418309.253:392): avc: denied { sqpoll } for pid=6816 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 136.929873][ T24] usb 1-1: USB disconnect, device number 15 [ 136.979035][ T6833] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 136.986994][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 137.002604][ T30] audit: type=1400 audit(1769418309.413:393): avc: denied { setcurrent } for pid=6830 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 137.051659][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'. [ 137.079524][ T30] audit: type=1401 audit(1769418309.413:394): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 137.421486][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.618277][ T6840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.691296][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 137.713718][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.727253][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.957882][ T30] audit: type=1400 audit(1769418310.363:395): avc: denied { name_bind } for pid=6846 comm="syz.0.241" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 138.041230][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.050596][ T24] usb 4-1: config 1 has no interface number 1 [ 138.058867][ T30] audit: type=1400 audit(1769418310.463:396): avc: denied { read } for pid=6850 comm="syz.4.242" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.082884][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.101195][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.115940][ T24] usb 4-1: Product: syz [ 138.124282][ T24] usb 4-1: Manufacturer: syz [ 138.135740][ T24] usb 4-1: SerialNumber: syz [ 138.292924][ T30] audit: type=1400 audit(1769418310.693:397): avc: denied { load_policy } for pid=6850 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 138.318568][ T6855] SELinux: ebitmap: truncated map [ 138.341472][ T30] audit: type=1400 audit(1769418310.733:398): avc: denied { accept } for pid=6852 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.367305][ T6855] SELinux: failed to load policy [ 138.374355][ T6861] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 138.402360][ T6861] netlink: 55 bytes leftover after parsing attributes in process `syz.4.242'. [ 138.438002][ T24] usb 4-1: USB disconnect, device number 10 [ 138.903860][ T6851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.927649][ T6851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.939951][ T6851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.947656][ T6851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.956919][ T6851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.964217][ T6851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.004303][ T6851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.030532][ T6851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.451315][ T30] audit: type=1326 audit(1769418311.573:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.5.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc31d9acb9 code=0x7ffc0000 [ 139.498347][ T6851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.623848][ T6851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.631111][ T6851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.643865][ T6851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.658315][ T6851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.855992][ T6886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.024089][ T6851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.088847][ T6851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.118753][ T6851] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 140.127098][ T6851] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 140.138803][ T6851] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 140.301285][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.342115][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'. [ 141.031663][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.037785][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.267227][ T6911] 9p: Bad value for 'wfdno' [ 141.665857][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.671520][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.681298][ T6912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.883456][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 141.883471][ T30] audit: type=1400 audit(1769418314.293:406): avc: denied { connect } for pid=6919 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.142956][ T5817] Bluetooth: hci5: command 0x0c1a tx timeout [ 142.312593][ T30] audit: type=1400 audit(1769418314.723:407): avc: denied { read } for pid=6930 comm="syz.5.260" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.341295][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.260'. [ 142.462812][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.497346][ T6942] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 142.629283][ T2337] pvrusb2: request_firmware fatal error with code=-110 [ 142.739396][ T2337] pvrusb2: Failure uploading firmware1 [ 142.804890][ T30] audit: type=1400 audit(1769418315.203:408): avc: denied { mount } for pid=6939 comm="syz.3.263" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 142.833508][ T2337] pvrusb2: Device initialization was not successful. [ 142.914204][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 142.973708][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 143.101547][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.107188][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.111497][ T2337] pvrusb2: Invalid write control endpoint [ 143.114093][ T9] pvrusb2: Device being rendered inoperable [ 143.244125][ T2337] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 143.353317][ T2337] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 143.546456][ T30] audit: type=1400 audit(1769418315.953:409): avc: denied { map } for pid=6960 comm="syz.5.268" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 143.610141][ T30] audit: type=1400 audit(1769418315.983:410): avc: denied { read } for pid=6960 comm="syz.5.268" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 143.741864][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.742508][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.771256][ T30] audit: type=1400 audit(1769418315.983:411): avc: denied { open } for pid=6960 comm="syz.5.268" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 143.801472][ T30] audit: type=1400 audit(1769418315.983:412): avc: denied { ioctl } for pid=6960 comm="syz.5.268" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.022515][ T30] audit: type=1400 audit(1769418316.423:413): avc: denied { mount } for pid=6967 comm="syz.5.270" name="/" dev="rpc_pipefs" ino=15523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 144.222144][ T5817] Bluetooth: hci5: command 0x0c1a tx timeout [ 144.320308][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.5.270'. [ 144.541226][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.641192][ T30] audit: type=1400 audit(1769418317.043:414): avc: denied { bind } for pid=6973 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.181641][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.188017][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.336466][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 145.465175][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 145.529803][ T5948] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.827891][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.827907][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.909217][ T6993] netlink: 'syz.4.276': attribute type 3 has an invalid length. [ 145.921843][ T30] audit: type=1400 audit(1769418318.313:415): avc: denied { ioctl } for pid=6991 comm="syz.4.276" path="socket:[15722]" dev="sockfs" ino=15722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.002619][ T5948] usb 4-1: config 0 has no interfaces? [ 146.024649][ T5948] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.037075][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.045553][ T5948] usb 4-1: Product: syz [ 146.049896][ T5948] usb 4-1: Manufacturer: syz [ 146.061420][ T5948] usb 4-1: SerialNumber: syz [ 146.081994][ T5948] usb 4-1: config 0 descriptor?? [ 146.298681][ T5948] usb 4-1: USB disconnect, device number 11 [ 146.304833][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 146.949874][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.101366][ T5948] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 148.691567][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 148.702686][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.716390][ T5948] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 148.727988][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.740618][ T5948] usb 1-1: Product: syz [ 148.745052][ T5948] usb 1-1: Manufacturer: syz [ 148.749644][ T5948] usb 1-1: SerialNumber: syz [ 148.770594][ T5948] usb 1-1: config 0 descriptor?? [ 148.779014][ T5948] usb 1-1: bad CDC descriptors [ 148.789385][ T5948] usb 1-1: unsupported MDLM descriptors [ 148.931716][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 148.931733][ T30] audit: type=1400 audit(1769418321.343:417): avc: denied { create } for pid=7033 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.034645][ T7037] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 149.058206][ T7038] ubi5: attaching mtd0 [ 149.062561][ T7038] ubi5 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 149.137538][ T7034] raw_sendmsg: syz.1.288 forgot to set AF_INET. Fix it! [ 149.667243][ T30] audit: type=1400 audit(1769418322.073:418): avc: denied { getopt } for pid=7019 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.927050][ T30] audit: type=1400 audit(1769418322.323:419): avc: denied { unlink } for pid=7047 comm="syz.5.291" name="#1" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.055108][ T30] audit: type=1400 audit(1769418322.463:420): avc: denied { append } for pid=7050 comm="syz.3.293" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 150.274957][ T7061] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 150.674853][ T5925] usb 1-1: USB disconnect, device number 16 [ 151.822186][ T5925] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 151.983360][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 152.011468][ T5925] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.031767][ T5925] usb 4-1: config 0 has no interface number 0 [ 152.066431][ T5925] usb 4-1: config 0 interface 184 has no altsetting 0 [ 152.112979][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.129129][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.303'. [ 152.142248][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.159071][ T5925] usb 4-1: Product: syz [ 152.184847][ T5925] usb 4-1: Manufacturer: syz [ 152.197876][ T5925] usb 4-1: SerialNumber: syz [ 152.205522][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.303'. [ 152.222909][ T5872] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 152.314211][ T5925] usb 4-1: config 0 descriptor?? [ 152.334794][ T5925] smsc75xx v1.0.0 [ 152.345116][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.450287][ T7102] program syz.1.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.912542][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.923560][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 152.949137][ T5879] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.961335][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.991345][ T5879] usb 5-1: config 0 has no interface number 0 [ 152.997469][ T5879] usb 5-1: config 0 interface 184 has no altsetting 0 [ 153.004483][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.060937][ T5879] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.081849][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.101458][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.121273][ T5872] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 153.130414][ T5879] usb 5-1: Product: syz [ 153.140588][ T5879] usb 5-1: Manufacturer: syz [ 153.150694][ T5879] usb 5-1: SerialNumber: syz [ 153.155401][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.172542][ T5879] usb 5-1: config 0 descriptor?? [ 153.184450][ T5872] usb 1-1: config 0 descriptor?? [ 153.200511][ T5879] smsc75xx v1.0.0 [ 153.333590][ T30] audit: type=1400 audit(1769418325.743:421): avc: denied { read } for pid=7108 comm="syz.1.306" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.368466][ T7109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.432111][ T7110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.686828][ T30] audit: type=1400 audit(1769418325.773:422): avc: denied { open } for pid=7108 comm="syz.1.306" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.970292][ T30] audit: type=1400 audit(1769418325.773:423): avc: denied { ioctl } for pid=7108 comm="syz.1.306" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.042301][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.302'. [ 154.949660][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 155.201035][ T30] audit: type=1400 audit(1769418327.583:424): avc: denied { create } for pid=7091 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 155.204284][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 155.283755][ T30] audit: type=1400 audit(1769418327.583:425): avc: denied { accept } for pid=7091 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 155.301297][ T5879] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 155.371283][ T5879] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 155.385206][ T5879] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 155.401254][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 155.408733][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 155.421274][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 155.431423][ T5879] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 155.451356][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 155.475070][ T5879] usb 5-1: USB disconnect, device number 8 [ 155.517823][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 155.595212][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 155.623320][ T5872] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero RNG initialised [ 155.623865][ T7128] netlink: 'syz.4.311': attribute type 11 has an invalid length. [ 155.810815][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 155.837323][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 155.967579][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 155.997578][ T5925] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 156.611581][ T5925] usb 4-1: USB disconnect, device number 12 [ 157.612865][ T24] usb 1-1: USB disconnect, device number 17 [ 157.662640][ T5925] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 157.772402][ T30] audit: type=1400 audit(1769418330.183:426): avc: denied { write } for pid=7152 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.841242][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 157.932227][ T5925] usb 6-1: config 2 has an invalid descriptor of length 239, skipping remainder of the config [ 157.947287][ T5925] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 157.957501][ T5925] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 158.573671][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.753012][ T7145] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 159.781259][ T5872] IPVS: starting estimator thread 0... [ 159.862455][ T7164] (syz.5.315,7164,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 159.869961][ T7164] (syz.5.315,7164,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 159.941398][ T7165] IPVS: using max 49 ests per chain, 117600 per kthread [ 160.499939][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.594870][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.645140][ T7164] (syz.5.315,7164,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 160.855044][ T7164] (syz.5.315,7164,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 160.891348][ T5925] usb 6-1: string descriptor 0 read error: -71 [ 161.351206][ T5925] usb 6-1: USB disconnect, device number 4 [ 162.081636][ T30] audit: type=1400 audit(1769418334.473:427): avc: denied { setopt } for pid=7193 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.317299][ T7199] mmap: syz.0.325 (7199) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.304072][ T7205] netlink: 'syz.5.328': attribute type 10 has an invalid length. [ 163.890352][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 163.921394][ T5872] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 164.882075][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 164.901293][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.909315][ T24] usb 6-1: Product: syz [ 164.919150][ T24] usb 6-1: Manufacturer: syz [ 164.969827][ T7220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.026843][ T7227] 9pnet_fd: Insufficient options for proto=fd [ 165.055383][ T24] usb 6-1: SerialNumber: syz [ 165.066465][ T24] usb 6-1: config 0 descriptor?? [ 165.073758][ T5872] usb 4-1: config 4 has an invalid interface number: 213 but max is 2 [ 165.075908][ T24] usb 6-1: interface 1 not found [ 165.092182][ T30] audit: type=1400 audit(1769418337.503:428): avc: denied { setopt } for pid=7226 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.115955][ T5872] usb 4-1: config 4 has an invalid interface number: 249 but max is 2 [ 165.133466][ T5872] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 165.164585][ T5872] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 165.190486][ T5872] usb 4-1: config 4 has an invalid interface number: 121 but max is 2 [ 165.205750][ T5872] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 165.222076][ T5872] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 165.244259][ T5872] usb 4-1: config 4 has no interface number 0 [ 165.258544][ T5872] usb 4-1: config 4 has no interface number 1 [ 165.276464][ T5872] usb 4-1: config 4 has no interface number 2 [ 165.284002][ T24] usb 6-1: USB disconnect, device number 5 [ 165.306291][ T5872] usb 4-1: config 4 interface 213 altsetting 49 endpoint 0x5 has an invalid bInterval 131, changing to 7 [ 165.332551][ T5872] usb 4-1: config 4 interface 213 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 165.375201][ T5872] usb 4-1: config 4 interface 213 altsetting 49 endpoint 0xE has an invalid bInterval 128, changing to 7 [ 165.462457][ T5872] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 165.494312][ T5872] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 165.521188][ T5872] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 165.541275][ T5872] usb 4-1: config 4 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.553211][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 165.567337][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 165.583688][ T5872] usb 4-1: config 4 interface 121 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 165.595461][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 165.607721][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x9, skipping [ 165.619378][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 165.631998][ T5872] usb 4-1: config 4 interface 121 altsetting 157 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 165.649013][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 165.660530][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 165.672686][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xD, skipping [ 165.685337][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 165.698462][ T5872] usb 4-1: config 4 interface 121 altsetting 157 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 165.711115][ T5872] usb 4-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 165.732920][ T5872] usb 4-1: config 4 interface 213 has no altsetting 0 [ 165.791634][ T5872] usb 4-1: config 4 interface 249 has no altsetting 0 [ 165.800886][ T5872] usb 4-1: config 4 interface 121 has no altsetting 0 [ 165.845943][ T5872] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=24.a6 [ 165.861045][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.899516][ T5872] usb 4-1: Product: 嚸裘卄ɽ骆鶚摐汿嫡౿஍/蚻ﲉ峻寉珠罟 [ 165.933649][ T5872] usb 4-1: Manufacturer: 婴 [ 165.944529][ T5872] usb 4-1: SerialNumber: ྡྷ堩鵅ꯡ᱙槲僁偡맆顂嶸螹稢ꪤ,⡥쮩つⶈ䫷⩻櫵爟㹧蛛䤦̀ﯝอ咯칖핆垴顀䂢洑蛿ꄻ柚懘秋齒鎤〪଺ຏ [ 166.719872][ T5872] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 166.739459][ T5872] usb 4-1: selecting invalid altsetting 0 [ 166.753042][ T5872] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 166.770871][ T5872] usb 4-1: selecting invalid altsetting 0 [ 166.788953][ T5872] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 166.801430][ T5872] usb 4-1: selecting invalid altsetting 0 [ 166.834695][ T5872] usb 4-1: USB disconnect, device number 13 [ 166.857864][ T5872] pvrusb2: Device being rendered inoperable [ 166.877685][ T5872] pvrusb2: Device being rendered inoperable [ 166.905377][ T5872] pvrusb2: Device being rendered inoperable [ 166.961378][ T5948] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 167.348141][ T7265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.341'. [ 167.359014][ T7265] random: crng reseeded on system resumption [ 167.479712][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.518736][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.610680][ T5948] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 167.647937][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.865054][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 167.908273][ T30] audit: type=1400 audit(1769418340.213:429): avc: denied { bind } for pid=7270 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.938801][ T5948] usb 6-1: config 0 descriptor?? [ 168.013180][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 168.139778][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.151688][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.185151][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.197343][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.301561][ T7276] veth0: entered promiscuous mode [ 168.370193][ T5948] usbhid 6-1:0.0: can't add hid device: -71 [ 168.376259][ T5948] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 168.397792][ T5948] usb 6-1: USB disconnect, device number 6 [ 168.486799][ T7270] veth0: left promiscuous mode [ 168.527881][ T7284] netem: incorrect ge model size [ 168.569356][ T30] audit: type=1400 audit(1769418340.973:430): avc: denied { connect } for pid=7285 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.591510][ T7284] netem: change failed [ 168.872179][ T5872] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 169.050687][ T5872] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.081199][ T5872] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.134204][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.167048][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 169.198418][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 169.230120][ T5872] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.271238][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.279328][ T5872] usb 1-1: Product: syz [ 169.289918][ T5872] usb 1-1: Manufacturer: syz [ 170.308114][ T5872] cdc_wdm 1-1:1.0: skipping garbage [ 170.348306][ T5872] cdc_wdm 1-1:1.0: skipping garbage [ 170.384245][ T5872] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 170.404263][ T5872] cdc_wdm 1-1:1.0: Unknown control protocol [ 170.511535][ T7315] ip6t_srh: unknown srh invflags 4000 [ 170.837543][ T24] usb 1-1: USB disconnect, device number 18 [ 171.458053][ T7322] FAULT_INJECTION: forcing a failure. [ 171.458053][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 171.471438][ T7322] CPU: 1 UID: 0 PID: 7322 Comm: syz.5.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.471474][ T7322] Tainted: [L]=SOFTLOCKUP [ 171.471480][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 171.471489][ T7322] Call Trace: [ 171.471495][ T7322] [ 171.471502][ T7322] dump_stack_lvl+0x100/0x190 [ 171.471531][ T7322] should_fail_ex.cold+0x5/0xa [ 171.471561][ T7322] should_failslab+0xc2/0x120 [ 171.471585][ T7322] kmem_cache_alloc_noprof+0x83/0x780 [ 171.471606][ T7322] ? d_instantiate+0x90/0xb0 [ 171.471629][ T7322] ? alloc_empty_file+0x55/0x1c0 [ 171.471660][ T7322] ? alloc_empty_file+0x55/0x1c0 [ 171.471683][ T7322] alloc_empty_file+0x55/0x1c0 [ 171.471708][ T7322] alloc_file_pseudo+0x13a/0x230 [ 171.471735][ T7322] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 171.471768][ T7322] __anon_inode_getfile+0xe8/0x280 [ 171.471799][ T7322] bpf_link_prime+0x200/0x4c0 [ 171.471822][ T7322] bpf_xdp_link_attach+0x27a/0x8b0 [ 171.471849][ T7322] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 171.471872][ T7322] ? find_held_lock+0x2b/0x80 [ 171.471896][ T7322] ? __fget_files+0x215/0x3d0 [ 171.471929][ T7322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.471961][ T7322] __sys_bpf+0x3cab/0x5050 [ 171.471984][ T7322] ? __pfx___sys_bpf+0x10/0x10 [ 171.472002][ T7322] ? proc_fail_nth_write+0x9f/0x220 [ 171.472026][ T7322] ? find_held_lock+0x2b/0x80 [ 171.472055][ T7322] ? find_held_lock+0x2b/0x80 [ 171.472077][ T7322] ? ksys_write+0x190/0x250 [ 171.472101][ T7322] ? __mutex_unlock_slowpath+0x15c/0x790 [ 171.472137][ T7322] ? fput+0x79/0x100 [ 171.472160][ T7322] ? ksys_write+0x1ac/0x250 [ 171.472178][ T7322] ? __pfx_ksys_write+0x10/0x10 [ 171.472202][ T7322] __x64_sys_bpf+0x7b/0xc0 [ 171.472222][ T7322] ? lockdep_hardirqs_on+0x78/0x100 [ 171.472241][ T7322] do_syscall_64+0xc9/0xf80 [ 171.472263][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.472281][ T7322] RIP: 0033:0x7efc31d9acb9 [ 171.472296][ T7322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.472313][ T7322] RSP: 002b:00007efc32c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.472331][ T7322] RAX: ffffffffffffffda RBX: 00007efc32015fa0 RCX: 00007efc31d9acb9 [ 171.472343][ T7322] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 000000000000001c [ 171.472353][ T7322] RBP: 00007efc32c95090 R08: 0000000000000000 R09: 0000000000000000 [ 171.472363][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.472373][ T7322] R13: 00007efc32016038 R14: 00007efc32015fa0 R15: 00007ffce96ec508 [ 171.472399][ T7322] [ 172.020353][ T7332] netlink: 'syz.4.360': attribute type 12 has an invalid length. [ 172.589211][ T7338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.016197][ T30] audit: type=1400 audit(1769418345.423:431): avc: denied { write } for pid=7357 comm="syz.4.370" path="socket:[16823]" dev="sockfs" ino=16823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.016844][ T7359] Bluetooth: MGMT ver 1.23 [ 174.052886][ T30] audit: type=1400 audit(1769418346.363:432): avc: denied { bind } for pid=7364 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.804344][ T30] audit: type=1400 audit(1769418346.883:433): avc: denied { mount } for pid=7364 comm="syz.4.372" name="/" dev="ramfs" ino=16831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 174.889007][ T30] audit: type=1400 audit(1769418347.293:434): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 174.955662][ T7370] IPv4: Oversized IP packet from 172.20.20.24 [ 174.963197][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 174.970119][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 175.077189][ T7370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.152478][ T30] audit: type=1400 audit(1769418347.563:435): avc: denied { append } for pid=7372 comm="syz.0.374" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 175.373237][ T7375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 175.662477][ T30] audit: type=1400 audit(1769418348.013:436): avc: denied { mount } for pid=7379 comm="syz.3.377" name="/" dev="autofs" ino=17500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 175.922714][ T30] audit: type=1400 audit(1769418348.023:437): avc: denied { read append } for pid=7379 comm="syz.3.377" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.062568][ T1207] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 176.193333][ T30] audit: type=1400 audit(1769418348.023:438): avc: denied { open } for pid=7379 comm="syz.3.377" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.507913][ T30] audit: type=1400 audit(1769418348.023:439): avc: denied { ioctl } for pid=7379 comm="syz.3.377" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 177.338069][ T1207] usb 4-1: too many configurations: 87, using maximum allowed: 8 [ 177.369073][ T1207] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 177.378612][ T7389] syzkaller0: entered promiscuous mode [ 177.406277][ T1207] usb 4-1: can't read configurations, error -71 [ 177.413485][ T7389] syzkaller0: entered allmulticast mode [ 177.435253][ T7390] netlink: 'syz.4.381': attribute type 1 has an invalid length. [ 177.472400][ T7390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.479639][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 177.490496][ T7388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.381'. [ 177.512781][ T7388] bond1: (slave dummy0): making interface the new active one [ 177.521635][ T7388] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 177.531097][ T7388] netlink: 'syz.4.381': attribute type 10 has an invalid length. [ 177.531097][ T7390] netlink: 'syz.4.381': attribute type 10 has an invalid length. [ 177.531182][ T7388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.381'. [ 177.558822][ T7388] dummy0: entered promiscuous mode [ 177.558830][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.381'. [ 177.575732][ T7388] bond1: (slave dummy0): Releasing active interface [ 177.950262][ T30] audit: type=1400 audit(1769418350.353:440): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 178.160447][ T30] audit: type=1400 audit(1769418350.463:441): avc: denied { create } for pid=7405 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.720607][ T30] audit: type=1400 audit(1769418350.623:442): avc: denied { write } for pid=7405 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.984501][ T7421] FAULT_INJECTION: forcing a failure. [ 178.984501][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.056799][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.3.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.056831][ T7421] Tainted: [L]=SOFTLOCKUP [ 179.056837][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 179.056847][ T7421] Call Trace: [ 179.056853][ T7421] [ 179.056861][ T7421] dump_stack_lvl+0x100/0x190 [ 179.056889][ T7421] should_fail_ex.cold+0x5/0xa [ 179.056920][ T7421] _copy_from_user+0x2e/0xd0 [ 179.056945][ T7421] copy_msghdr_from_user+0x9f/0x4f0 [ 179.056966][ T7421] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 179.056995][ T7421] ___sys_sendmsg+0x106/0x1e0 [ 179.057015][ T7421] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.057044][ T7421] ? find_held_lock+0x2b/0x80 [ 179.057083][ T7421] __sys_sendmsg+0x170/0x220 [ 179.057107][ T7421] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.057145][ T7421] do_syscall_64+0xc9/0xf80 [ 179.057167][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.057184][ T7421] RIP: 0033:0x7f8add59acb9 [ 179.057198][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.057229][ T7421] RSP: 002b:00007f8ade3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.057247][ T7421] RAX: ffffffffffffffda RBX: 00007f8add815fa0 RCX: 00007f8add59acb9 [ 179.057258][ T7421] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 179.057269][ T7421] RBP: 00007f8ade3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.057279][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.057289][ T7421] R13: 00007f8add816038 R14: 00007f8add815fa0 R15: 00007ffcced4fd08 [ 179.057313][ T7421] [ 179.415138][ T7425] random: crng reseeded on system resumption [ 180.351468][ T5950] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 180.731407][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 180.753918][ T5950] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.807875][ T5950] usb 1-1: config 0 has no interface number 0 [ 180.816428][ T5950] usb 1-1: config 0 interface 184 has no altsetting 0 [ 180.939868][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.966660][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.975428][ T30] audit: type=1400 audit(1769418353.393:443): avc: denied { connect } for pid=7441 comm="syz.5.395" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.015289][ T5950] usb 1-1: Product: syz [ 181.150163][ T5950] usb 1-1: Manufacturer: syz [ 181.715613][ T5950] usb 1-1: SerialNumber: syz [ 181.728556][ T5950] usb 1-1: config 0 descriptor?? [ 181.746496][ T5950] smsc75xx v1.0.0 [ 181.763035][ T7450] overlayfs: failed to clone upperpath [ 186.340471][ T7493] overlayfs: missing 'lowerdir' [ 187.187742][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 187.203544][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 187.368367][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 187.379091][ T5950] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -110 [ 187.670321][ T7104] usb 1-1: USB disconnect, device number 19 [ 189.050122][ T30] audit: type=1400 audit(1769418361.453:444): avc: denied { read write } for pid=7527 comm="syz.0.416" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 189.114538][ T30] audit: type=1400 audit(1769418361.453:445): avc: denied { open } for pid=7527 comm="syz.0.416" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 189.197107][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 189.197254][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 189.265472][ T30] audit: type=1400 audit(1769418361.553:446): avc: denied { accept } for pid=7529 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.304088][ T30] audit: type=1400 audit(1769418361.603:447): avc: denied { open } for pid=7529 comm="syz.0.417" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 189.481229][ T5948] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 189.493266][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.419'. [ 189.651176][ T5948] usb 6-1: Using ep0 maxpacket: 32 [ 189.658914][ T5948] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 189.675165][ T5948] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 189.687576][ T5948] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.700409][ T5948] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 189.724261][ T5948] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 189.737465][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.752357][ T5948] usb 6-1: Product: syz [ 189.758688][ T5948] usb 6-1: Manufacturer: syz [ 189.767034][ T5948] usb 6-1: SerialNumber: syz [ 189.808312][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 189.831044][ T5948] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input7 [ 190.081240][ T5948] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 190.097097][ T5948] (id 0x00) [ 190.547860][ T7552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.611192][ T5948] rc_core: IR keymap rc-imon-pad not found [ 190.626586][ T5948] Registered IR keymap rc-empty [ 190.643253][ T5948] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 190.678693][ T5948] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 190.831340][ T5925] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 190.931910][ T5948] imon:send_packet: packet tx failed (-71) [ 190.952724][ T5948] imon 6-1:155.0: remote input dev register failed [ 190.972272][ T5948] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 191.031554][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 191.710183][ T5948] imon 6-1:155.0: unable to initialize intf0, err 0 [ 191.727582][ T5925] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 191.755959][ T5948] imon:imon_probe: failed to initialize context! [ 191.769932][ T5925] usb 1-1: config 0 has no interface number 0 [ 191.779806][ T5948] imon 6-1:155.0: unable to register, err -19 [ 191.807166][ T5925] usb 1-1: config 0 interface 184 has no altsetting 0 [ 191.826012][ T5948] usb 6-1: USB disconnect, device number 7 [ 191.848879][ T5925] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 191.895041][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.922166][ T5925] usb 1-1: Product: syz [ 191.933829][ T5925] usb 1-1: Manufacturer: syz [ 191.941086][ T5925] usb 1-1: SerialNumber: syz [ 191.986625][ T5925] usb 1-1: config 0 descriptor?? [ 192.037316][ T5925] smsc75xx v1.0.0 [ 192.720963][ T30] audit: type=1326 audit(1769418365.123:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.3.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8add59acb9 code=0x0 [ 192.853453][ T30] audit: type=1400 audit(1769418365.263:449): avc: denied { read } for pid=7586 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.000520][ T30] audit: type=1400 audit(1769418365.403:450): avc: denied { ioctl } for pid=7586 comm="syz.5.432" path="socket:[17805]" dev="sockfs" ino=17805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.091209][ T30] audit: type=1400 audit(1769418365.403:451): avc: denied { mounton } for pid=7586 comm="syz.5.432" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 193.448393][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.433'. [ 193.474045][ T7594] SET target dimension over the limit! [ 193.729731][ T30] audit: type=1400 audit(1769418366.133:452): avc: denied { setopt } for pid=7595 comm="syz.5.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 193.840775][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.847699][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.865861][ T30] audit: type=1400 audit(1769418366.133:453): avc: denied { mounton } for pid=7595 comm="syz.5.435" path="/83/file0" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 194.257438][ T7606] random: crng reseeded on system resumption [ 195.123375][ T7617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.410924][ T7623] overlayfs: failed to resolve './file1': -2 [ 196.000679][ T30] audit: type=1400 audit(1769418367.953:454): avc: denied { setopt } for pid=7620 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.061476][ T5925] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 196.204393][ T5925] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 196.215770][ T5925] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 196.231755][ T5925] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 196.247174][ T5925] usb 1-1: USB disconnect, device number 20 [ 197.807996][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.446'. [ 200.378026][ T7660] lo speed is unknown, defaulting to 1000 [ 200.384254][ T7660] lo speed is unknown, defaulting to 1000 [ 200.401835][ T7660] lo speed is unknown, defaulting to 1000 [ 200.428085][ T7660] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 200.475230][ T7660] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 200.727286][ T7660] lo speed is unknown, defaulting to 1000 [ 200.768518][ T7660] lo speed is unknown, defaulting to 1000 [ 200.775146][ T7660] lo speed is unknown, defaulting to 1000 [ 200.782437][ T7660] lo speed is unknown, defaulting to 1000 [ 200.789411][ T7660] lo speed is unknown, defaulting to 1000 [ 200.796735][ T7660] lo speed is unknown, defaulting to 1000 [ 200.940618][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.451'. [ 201.362294][ T30] audit: type=1400 audit(1769418373.753:455): avc: denied { connect } for pid=7674 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.464220][ T30] audit: type=1400 audit(1769418373.763:456): avc: denied { connect } for pid=7674 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.681538][ T30] audit: type=1400 audit(1769418373.833:457): avc: denied { ioctl } for pid=7674 comm="syz.1.456" path="socket:[18423]" dev="sockfs" ino=18423 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 201.809424][ T30] audit: type=1400 audit(1769418373.833:458): avc: denied { write } for pid=7674 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.329631][ T30] audit: type=1400 audit(1769418374.733:459): avc: denied { kexec_image_load } for pid=7684 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 203.385445][ T30] audit: type=1400 audit(1769418375.783:460): avc: denied { read } for pid=7702 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.634093][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 204.072748][ T2337] pvrusb2: request_firmware fatal error with code=-110 [ 204.229391][ T2337] pvrusb2: Failure uploading firmware1 [ 204.230968][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.469'. [ 204.277236][ T2337] pvrusb2: Device initialization was not successful. [ 204.308350][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.340690][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 204.364454][ T2337] pvrusb2: Invalid write control endpoint [ 204.364909][ T9] pvrusb2: Device being rendered inoperable [ 204.376890][ T2337] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 204.400885][ T2337] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 204.593987][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 205.068832][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.114469][ T7729] warning: `syz.3.472' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.128901][ T7729] FAT-fs (nullb0): bogus number of reserved sectors [ 205.135661][ T7729] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 205.950512][ T5925] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 206.116880][ T30] audit: type=1400 audit(1769418378.523:461): avc: denied { lock } for pid=7747 comm="syz.1.477" path="socket:[19626]" dev="sockfs" ino=19626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.153896][ T7748] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 206.165016][ T5925] usb 6-1: config 4 has an invalid interface number: 213 but max is 2 [ 206.185840][ T7748] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.526166][ T5925] usb 6-1: config 4 has an invalid interface number: 249 but max is 2 [ 206.539472][ T5925] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 206.766704][ T5925] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 206.785854][ T5925] usb 6-1: config 4 has an invalid interface number: 121 but max is 2 [ 206.794597][ T5925] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 206.803608][ T5925] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 206.812819][ T5925] usb 6-1: config 4 has no interface number 0 [ 206.819141][ T5925] usb 6-1: config 4 has no interface number 1 [ 206.825536][ T5925] usb 6-1: config 4 has no interface number 2 [ 206.831995][ T5925] usb 6-1: config 4 interface 213 altsetting 49 endpoint 0x5 has an invalid bInterval 131, changing to 7 [ 206.846457][ T5925] usb 6-1: config 4 interface 213 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 206.858423][ T5925] usb 6-1: config 4 interface 213 altsetting 49 endpoint 0xE has an invalid bInterval 128, changing to 7 [ 206.875139][ T5925] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 206.936224][ T5925] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 206.953625][ T5925] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 206.965360][ T5925] usb 6-1: config 4 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 206.979212][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 207.004121][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 207.015669][ T5925] usb 6-1: config 4 interface 121 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 207.033916][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 207.045444][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x9, skipping [ 207.060322][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 207.072323][ T5925] usb 6-1: config 4 interface 121 altsetting 157 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 207.086749][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 207.098285][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 207.166411][ T30] audit: type=1400 audit(1769418379.533:462): avc: denied { ioctl } for pid=7757 comm="syz.0.479" path="socket:[19675]" dev="sockfs" ino=19675 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 207.478894][ T30] audit: type=1400 audit(1769418379.533:463): avc: denied { create } for pid=7757 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 207.548055][ T30] audit: type=1400 audit(1769418379.603:464): avc: denied { read } for pid=7757 comm="syz.0.479" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.082660][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xD, skipping [ 208.093746][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 208.104994][ T5925] usb 6-1: config 4 interface 121 altsetting 157 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 208.116176][ T5925] usb 6-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 208.127169][ T5925] usb 6-1: config 4 interface 213 has no altsetting 0 [ 208.134060][ T5925] usb 6-1: config 4 interface 249 has no altsetting 0 [ 208.140896][ T5925] usb 6-1: config 4 interface 121 has no altsetting 0 [ 208.163782][ T5925] usb 6-1: string descriptor 0 read error: -71 [ 208.170190][ T5925] usb 6-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=24.a6 [ 208.180801][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.191821][ T5925] usb 6-1: can't set config #4, error -71 [ 208.199966][ T5925] usb 6-1: USB disconnect, device number 8 [ 208.472047][ T1207] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 208.644588][ T1207] usb 1-1: config 4 has an invalid interface number: 213 but max is 2 [ 208.653197][ T1207] usb 1-1: config 4 has an invalid interface number: 249 but max is 2 [ 209.109261][ T30] audit: type=1400 audit(1769418381.173:465): avc: denied { create } for pid=7774 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.129747][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 209.138694][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 209.147616][ T1207] usb 1-1: config 4 has an invalid interface number: 121 but max is 2 [ 209.155931][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 209.164848][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 209.233455][ T1207] usb 1-1: config 4 has no interface number 0 [ 209.239681][ T1207] usb 1-1: config 4 has no interface number 1 [ 209.246144][ T1207] usb 1-1: config 4 has no interface number 2 [ 209.252382][ T1207] usb 1-1: config 4 interface 213 altsetting 49 endpoint 0x5 has an invalid bInterval 131, changing to 7 [ 209.263826][ T1207] usb 1-1: config 4 interface 213 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 209.274968][ T1207] usb 1-1: config 4 interface 213 altsetting 49 endpoint 0xE has an invalid bInterval 128, changing to 7 [ 209.286376][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 209.299520][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 209.311031][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 209.402591][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 209.418949][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 209.430480][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 209.442979][ T1207] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 209.458645][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 209.469842][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x9, skipping [ 209.640372][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 209.687542][ T1207] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 209.756182][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 209.856231][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 209.910283][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xD, skipping [ 209.978482][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 210.083704][ T1207] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 210.207215][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 210.341059][ T1207] usb 1-1: config 4 interface 213 has no altsetting 0 [ 210.393674][ T1207] usb 1-1: config 4 interface 249 has no altsetting 0 [ 210.428893][ T1207] usb 1-1: config 4 interface 121 has no altsetting 0 [ 211.199413][ T7794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.448260][ T1207] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=24.a6 [ 211.520349][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.598060][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.487'. [ 211.610265][ T1207] usb 1-1: Product: 嚸裘卄ɽ骆鶚摐汿嫡౿஍/蚻ﲉ峻寉珠罟 [ 211.711346][ T1207] usb 1-1: Manufacturer: 婴 [ 211.729271][ T1207] usb 1-1: can't set config #4, error -71 [ 211.754762][ T1207] usb 1-1: USB disconnect, device number 21 [ 212.664012][ T30] audit: type=1400 audit(1769418385.003:466): avc: denied { execute } for pid=7801 comm="syz.1.489" path="/93/net_prio.prioidx" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.967083][ T30] audit: type=1400 audit(1769418385.013:467): avc: denied { bind } for pid=7801 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.240817][ T7829] overlayfs: failed to resolve './file1/file0': -2 [ 214.260147][ T30] audit: type=1400 audit(1769418386.663:468): avc: denied { map } for pid=7826 comm="syz.3.495" path="socket:[19074]" dev="sockfs" ino=19074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.788400][ T7832] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 215.237405][ T30] audit: type=1400 audit(1769418386.663:469): avc: denied { read accept } for pid=7826 comm="syz.3.495" path="socket:[19074]" dev="sockfs" ino=19074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.525992][ T30] audit: type=1326 audit(1769418388.913:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99acb9 code=0x7fc00000 [ 216.629356][ T30] audit: type=1326 audit(1769418389.023:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81dd99acb9 code=0x7fc00000 [ 217.470744][ T7859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.589705][ T5925] lo speed is unknown, defaulting to 1000 [ 217.958691][ T30] audit: type=1400 audit(1769418390.363:472): avc: denied { bind } for pid=7860 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.021824][ T30] audit: type=1400 audit(1769418390.363:473): avc: denied { name_bind } for pid=7860 comm="syz.3.498" src=3687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 218.092716][ T30] audit: type=1400 audit(1769418390.363:474): avc: denied { node_bind } for pid=7860 comm="syz.3.498" saddr=ff01::1 src=3687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 218.130617][ T1207] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 218.171191][ T30] audit: type=1400 audit(1769418390.363:475): avc: denied { ioctl } for pid=7860 comm="syz.3.498" path="socket:[19116]" dev="sockfs" ino=19116 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.229561][ T30] audit: type=1400 audit(1769418390.373:476): avc: denied { connect } for pid=7860 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.332931][ T1207] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.341983][ T1207] usb 6-1: not running at top speed; connect to a high speed hub [ 218.378737][ T1207] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.668408][ T7866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.814114][ T1207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.856419][ T1207] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.889988][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 218.918611][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.937255][ T1207] usb 6-1: Product: syz [ 218.947361][ T1207] usb 6-1: Manufacturer: syz [ 218.957670][ T1207] usb 6-1: SerialNumber: syz [ 219.743523][ T1207] usb 6-1: 0:2 : does not exist [ 219.749035][ T1207] usb 6-1: unit 0 not found! [ 219.757614][ T1207] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 219.781046][ T1207] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 219.803470][ T7877] can0: slcan on ttyS3. [ 219.816134][ T1207] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 220.017649][ T1207] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 220.038630][ T1207] usb 6-1: USB disconnect, device number 9 [ 220.663572][ T6511] udevd[6511]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.741796][ T7877] can0 (unregistered): slcan off ttyS3. [ 220.940487][ T7854] syz.5.504 (7854) used greatest stack depth: 19688 bytes left [ 221.305706][ T7893] FAULT_INJECTION: forcing a failure. [ 221.305706][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 221.982593][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: syz.3.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.982624][ T7893] Tainted: [L]=SOFTLOCKUP [ 221.982631][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 221.982641][ T7893] Call Trace: [ 221.982647][ T7893] [ 221.982654][ T7893] dump_stack_lvl+0x100/0x190 [ 221.982683][ T7893] should_fail_ex.cold+0x5/0xa [ 221.982711][ T7893] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 221.982739][ T7893] should_failslab+0xc2/0x120 [ 221.982763][ T7893] kmem_cache_alloc_noprof+0x83/0x780 [ 221.982786][ T7893] ? skb_clone+0x190/0x400 [ 221.982814][ T7893] ? skb_clone+0x190/0x400 [ 221.982834][ T7893] skb_clone+0x190/0x400 [ 221.982857][ T7893] netlink_deliver_tap+0xaed/0xcc0 [ 221.982888][ T7893] netlink_unicast+0x650/0x870 [ 221.982918][ T7893] ? __pfx_netlink_unicast+0x10/0x10 [ 221.982952][ T7893] netlink_sendmsg+0x8b0/0xda0 [ 221.982982][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.983006][ T7893] ? __might_fault+0x70/0x140 [ 221.983034][ T7893] ____sys_sendmsg+0xa54/0xc30 [ 221.983054][ T7893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.983084][ T7893] ___sys_sendmsg+0x190/0x1e0 [ 221.983104][ T7893] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.983135][ T7893] ? find_held_lock+0x2b/0x80 [ 221.983174][ T7893] __sys_sendmsg+0x170/0x220 [ 221.983198][ T7893] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.983238][ T7893] do_syscall_64+0xc9/0xf80 [ 221.983260][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.983277][ T7893] RIP: 0033:0x7f8add59acb9 [ 221.983292][ T7893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.983309][ T7893] RSP: 002b:00007f8ade3e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.983327][ T7893] RAX: ffffffffffffffda RBX: 00007f8add815fa0 RCX: 00007f8add59acb9 [ 221.983338][ T7893] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 221.983349][ T7893] RBP: 00007f8ade3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.983363][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.983373][ T7893] R13: 00007f8add816038 R14: 00007f8add815fa0 R15: 00007ffcced4fd08 [ 221.983402][ T7893] [ 223.149442][ T1207] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 223.246320][ T30] audit: type=1326 audit(1769418395.653:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99acb9 code=0x7ffc0000 [ 223.417374][ T1207] usb 1-1: config 4 has an invalid interface number: 213 but max is 2 [ 225.124253][ T1207] usb 1-1: config 4 has an invalid interface number: 249 but max is 2 [ 225.146933][ T30] audit: type=1326 audit(1769418395.653:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99acb9 code=0x7ffc0000 [ 225.170246][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 225.179502][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 225.190112][ T1207] usb 1-1: config 4 has an invalid interface number: 121 but max is 2 [ 225.198584][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 225.208660][ T1207] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 225.216960][ T30] audit: type=1326 audit(1769418395.753:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f81dd99acb9 code=0x7ffc0000 [ 225.220662][ T1207] usb 1-1: config 4 has no interface number 0 [ 225.240713][ T30] audit: type=1326 audit(1769418395.753:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99acb9 code=0x7ffc0000 [ 225.270157][ T30] audit: type=1326 audit(1769418395.753:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7903 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99acb9 code=0x7ffc0000 [ 225.589057][ T7934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.919978][ T7939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.082433][ T1207] usb 1-1: config 4 has no interface number 1 [ 226.103351][ T1207] usb 1-1: config 4 has no interface number 2 [ 226.168514][ T30] audit: type=1326 audit(1769418398.563:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857d79acb9 code=0x7ffc0000 [ 226.218639][ T1207] usb 1-1: config 4 interface 213 altsetting 49 endpoint 0x5 has an invalid bInterval 131, changing to 7 [ 226.265699][ T30] audit: type=1326 audit(1769418398.563:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f857d79acb9 code=0x7ffc0000 [ 226.466895][ T1207] usb 1-1: config 4 interface 213 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 226.505456][ T30] audit: type=1326 audit(1769418398.563:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857d79acb9 code=0x7ffc0000 [ 226.530197][ T1207] usb 1-1: config 4 interface 213 altsetting 49 endpoint 0xE has an invalid bInterval 128, changing to 7 [ 226.663918][ T7958] random: crng reseeded on system resumption [ 226.727015][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 226.743134][ T30] audit: type=1326 audit(1769418398.563:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857d79acb9 code=0x7ffc0000 [ 226.883966][ T5872] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 226.884633][ T30] audit: type=1326 audit(1769418398.563:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.0.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f857d79acb9 code=0x7ffc0000 [ 226.950952][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 226.989359][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 227.027625][ T1207] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.063795][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 227.126489][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 227.146893][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.156546][ T1207] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 227.169118][ T5872] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 227.182479][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 227.199233][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.212861][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x9, skipping [ 227.227126][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 227.246166][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 227.262249][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.275276][ T1207] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 227.288537][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.302023][ T5872] usb 4-1: Product: syz [ 227.307766][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 227.326543][ T5872] usb 4-1: Manufacturer: syz [ 227.361627][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 227.372625][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xD, skipping [ 227.384743][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 227.390220][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 227.396284][ T5872] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 227.404240][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 227.427259][ T1207] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 227.457185][ T1207] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 227.487663][ T1207] usb 1-1: config 4 interface 213 has no altsetting 0 [ 227.507910][ T1207] usb 1-1: config 4 interface 249 has no altsetting 0 [ 227.540048][ T1207] usb 1-1: config 4 interface 121 has no altsetting 0 [ 227.569293][ T1207] usb 1-1: string descriptor 0 read error: -71 [ 227.637510][ T1207] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=24.a6 [ 227.659585][ T5872] usb 4-1: USB disconnect, device number 16 [ 227.812985][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.966248][ T1207] usb 1-1: can't set config #4, error -71 [ 227.988535][ T1207] usb 1-1: USB disconnect, device number 22 [ 228.171981][ T7978] 8021q: VLANs not supported on vxcan1 [ 228.190596][ T7978] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 228.256800][ T7978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.312120][ T7980] lo speed is unknown, defaulting to 1000 [ 228.330971][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 228.337947][ T30] audit: type=1400 audit(1769418400.733:509): avc: denied { unmount } for pid=7977 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 228.362557][ T30] audit: type=1400 audit(1769418400.773:510): avc: denied { mount } for pid=7977 comm="syz.4.535" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 228.385950][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.535'. [ 228.406393][ T30] audit: type=1400 audit(1769418400.813:511): avc: denied { associate } for pid=7982 comm="syz.4.535" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 228.411350][ T7978] bond2: (slave ip6gretap1): making interface the new active one [ 228.471837][ T1207] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 228.489135][ T7978] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 229.061564][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 229.087605][ T7987] netlink: zone id is out of range [ 229.092905][ T7987] netlink: zone id is out of range [ 229.098034][ T7987] netlink: zone id is out of range [ 229.103305][ T7987] netlink: zone id is out of range [ 229.108446][ T7987] netlink: zone id is out of range [ 229.113639][ T7987] netlink: zone id is out of range [ 229.118766][ T7987] netlink: zone id is out of range [ 229.123984][ T7987] netlink: zone id is out of range [ 229.129115][ T7987] netlink: zone id is out of range [ 229.151703][ T30] audit: type=1400 audit(1769418401.493:512): avc: denied { getopt } for pid=7983 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.341907][ T1207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.435616][ T1207] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 229.455003][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.475335][ T1207] usb 1-1: Product: syz [ 229.479561][ T1207] usb 1-1: Manufacturer: syz [ 229.558851][ T1207] usb 1-1: SerialNumber: syz [ 229.573664][ T1207] usb 1-1: config 0 descriptor?? [ 230.016389][ T1207] usb 1-1: bad CDC descriptors [ 230.024961][ T1207] usb 1-1: unsupported MDLM descriptors [ 230.274645][ T7994] fuse: Bad value for 'fd' [ 231.034594][ T8001] net_ratelimit: 45 callbacks suppressed [ 231.034601][ T8001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.313829][ T5872] usb 1-1: USB disconnect, device number 23 [ 231.407005][ T8006] geneve2: entered promiscuous mode [ 231.416311][ T8006] geneve2: entered allmulticast mode [ 231.509093][ T8014] syzkaller0: entered promiscuous mode [ 231.523101][ T8014] syzkaller0: entered allmulticast mode [ 233.441539][ T1207] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 233.646873][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 233.823759][ T5950] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 233.835954][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.851213][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.881322][ T1207] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 233.899931][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.925652][ T1207] usb 4-1: config 0 descriptor?? [ 233.981894][ T5950] usb 6-1: device descriptor read/64, error -71 [ 234.299134][ T5950] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 234.307169][ T5948] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 234.341094][ T1207] ntrig 0003:1B96:0008.0004: unbalanced delimiter at end of report description [ 234.350531][ T1207] ntrig 0003:1B96:0008.0004: parse failed [ 234.356423][ T1207] ntrig 0003:1B96:0008.0004: probe with driver ntrig failed with error -22 [ 234.444579][ T8049] dummy0: left promiscuous mode [ 234.453848][ T5950] usb 6-1: device descriptor read/64, error -71 [ 234.547220][ T5948] usb 1-1: config 4 has an invalid interface number: 213 but max is 2 [ 234.561183][ T5948] usb 1-1: config 4 has an invalid interface number: 249 but max is 2 [ 234.569939][ T5948] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 234.580421][ T5950] usb usb6-port1: attempt power cycle [ 234.728713][ T8049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.762667][ T5948] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 234.782207][ T5948] usb 1-1: config 4 has an invalid interface number: 121 but max is 2 [ 234.792090][ T5948] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 234.808998][ T5948] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 234.822213][ T5948] usb 1-1: config 4 has no interface number 0 [ 234.823983][ T8032] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 234.831306][ T5948] usb 1-1: config 4 has no interface number 1 [ 234.836601][ T30] audit: type=1400 audit(1769418407.233:513): avc: denied { getopt } for pid=8029 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.842998][ T5948] usb 1-1: config 4 has no interface number 2 [ 234.876759][ T5948] usb 1-1: config 4 interface 213 altsetting 49 endpoint 0x5 has an invalid bInterval 131, changing to 7 [ 234.892406][ T5948] usb 1-1: config 4 interface 213 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 234.904823][ T8032] veth1_macvtap: left promiscuous mode [ 234.910355][ T5948] usb 1-1: config 4 interface 213 altsetting 49 endpoint 0xE has an invalid bInterval 128, changing to 7 [ 234.922786][ T5948] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 234.934348][ T5948] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 235.035644][ T5948] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 235.048301][ T5948] usb 1-1: config 4 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 235.234199][ T5950] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 235.242772][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x1, skipping [ 235.253721][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 235.265016][ T5948] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 235.276273][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xC, skipping [ 235.287723][ T5950] usb 6-1: device descriptor read/8, error -71 [ 235.294538][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x9, skipping [ 235.320632][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 235.789998][ T5948] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 235.801796][ T8063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.841554][ T5950] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 235.853449][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 235.872096][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 235.885522][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xD, skipping [ 235.899666][ T5950] usb 6-1: device descriptor read/8, error -71 [ 235.907006][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 235.918645][ T5948] usb 1-1: config 4 interface 121 altsetting 157 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 235.932883][ T5948] usb 1-1: config 4 interface 121 altsetting 157 has a duplicate endpoint with address 0xE, skipping [ 235.945227][ T5948] usb 1-1: config 4 interface 213 has no altsetting 0 [ 235.952352][ T5948] usb 1-1: config 4 interface 249 has no altsetting 0 [ 235.959198][ T5948] usb 1-1: config 4 interface 121 has no altsetting 0 [ 235.969999][ T5948] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=24.a6 [ 235.991962][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.999990][ T5948] usb 1-1: Product: 嚸裘卄ɽ骆鶚摐汿嫡౿஍/蚻ﲉ峻寉珠罟 [ 236.013189][ T5950] usb usb6-port1: unable to enumerate USB device [ 236.041270][ T5948] usb 1-1: Manufacturer: 婴 [ 236.045889][ T5948] usb 1-1: SerialNumber: ྡྷ堩鵅ꯡ᱙槲僁偡맆顂嶸螹稢ꪤ,⡥쮩つⶈ䫷⩻櫵爟㹧蛛䤦̀ﯝอ咯칖핆垴顀䂢洑蛿ꄻ柚懘秋齒鎤〪଺ຏ [ 237.283096][ T5948] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 237.290568][ T5925] usb 4-1: USB disconnect, device number 17 [ 237.381975][ T5948] usb 1-1: selecting invalid altsetting 0 [ 237.445045][ T5948] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 237.470999][ T5948] usb 1-1: selecting invalid altsetting 0 [ 237.543165][ T5948] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 237.567940][ T5948] usb 1-1: selecting invalid altsetting 0 [ 237.596690][ T5948] usb 1-1: USB disconnect, device number 24 [ 237.714895][ T5948] pvrusb2: Device being rendered inoperable [ 237.742378][ T5948] pvrusb2: Device being rendered inoperable [ 237.754656][ T5948] pvrusb2: Device being rendered inoperable [ 237.833524][ T30] audit: type=1400 audit(1769418410.213:514): avc: denied { create } for pid=8115 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 237.983088][ T30] audit: type=1400 audit(1769418410.393:515): avc: denied { module_request } for pid=8122 comm="syz.4.565" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 238.058511][ T8126] tmpfs: Unknown parameter 'usrqQ0uota_block_hardlimit' [ 238.220728][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.568'. [ 239.032268][ T8137] syzkaller0: entered promiscuous mode [ 239.038052][ T8137] syzkaller0: entered allmulticast mode [ 239.186566][ T8142] netlink: 332 bytes leftover after parsing attributes in process `syz.0.571'. [ 239.212309][ T8142] netlink: 'syz.0.571': attribute type 9 has an invalid length. [ 239.220245][ T8142] netlink: 100 bytes leftover after parsing attributes in process `syz.0.571'. [ 239.567135][ T8149] netlink: 48 bytes leftover after parsing attributes in process `syz.3.572'. [ 239.577875][ T8149] random: crng reseeded on system resumption [ 241.116399][ T8169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.577'. [ 241.371243][ T5925] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 241.871389][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 241.893899][ T5925] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 241.920238][ T5925] usb 1-1: config 0 has no interface number 0 [ 241.937376][ T5925] usb 1-1: config 0 interface 184 has no altsetting 0 [ 241.963545][ T5925] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 241.977238][ T8183] syzkaller0: entered promiscuous mode [ 241.982851][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.991724][ T8183] syzkaller0: entered allmulticast mode [ 241.998588][ T5925] usb 1-1: Product: syz [ 242.005645][ T5925] usb 1-1: Manufacturer: syz [ 242.013788][ T5925] usb 1-1: SerialNumber: syz [ 242.088447][ T5925] usb 1-1: config 0 descriptor?? [ 242.144432][ T5925] smsc75xx v1.0.0 [ 242.316397][ T8191] overlayfs: failed to clone upperpath [ 242.334873][ T8192] FAULT_INJECTION: forcing a failure. [ 242.334873][ T8192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.462693][ T31] INFO: task syz.2.54:6136 blocked for more than 144 seconds. [ 242.470260][ T31] Tainted: G L syzkaller #0 [ 242.592277][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.1.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.592305][ T8192] Tainted: [L]=SOFTLOCKUP [ 242.592315][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 242.592325][ T8192] Call Trace: [ 242.592331][ T8192] [ 242.592338][ T8192] dump_stack_lvl+0x100/0x190 [ 242.592367][ T8192] should_fail_ex.cold+0x5/0xa [ 242.592397][ T8192] _copy_from_user+0x2e/0xd0 [ 242.592422][ T8192] ucma_write+0x128/0x330 [ 242.592449][ T8192] ? __pfx_ucma_write+0x10/0x10 [ 242.592473][ T8192] ? bpf_lsm_file_permission+0x9/0x10 [ 242.592496][ T8192] ? security_file_permission+0x76/0x210 [ 242.592517][ T8192] ? rw_verify_area+0xce/0x6d0 [ 242.592536][ T8192] ? __pfx_ucma_write+0x10/0x10 [ 242.592559][ T8192] vfs_writev+0x5ea/0xe10 [ 242.592574][ T8192] ? get_pid_task+0x106/0x250 [ 242.592598][ T8192] ? __pfx_vfs_writev+0x10/0x10 [ 242.592617][ T8192] ? find_held_lock+0x2b/0x80 [ 242.592654][ T8192] ? __fget_files+0x21f/0x3d0 [ 242.592682][ T8192] ? do_writev+0x28a/0x340 [ 242.592698][ T8192] do_writev+0x28a/0x340 [ 242.592715][ T8192] ? __pfx_do_writev+0x10/0x10 [ 242.592739][ T8192] do_syscall_64+0xc9/0xf80 [ 242.592762][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.592779][ T8192] RIP: 0033:0x7f38c219acb9 [ 242.592794][ T8192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.592810][ T8192] RSP: 002b:00007f38c03f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 242.592828][ T8192] RAX: ffffffffffffffda RBX: 00007f38c2415fa0 RCX: 00007f38c219acb9 [ 242.592840][ T8192] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000f [ 242.592850][ T8192] RBP: 00007f38c03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.592860][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.592870][ T8192] R13: 00007f38c2416038 R14: 00007f38c2415fa0 R15: 00007fffd036f4c8 [ 242.592894][ T8192] [ 242.807739][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.823048][ T31] task:syz.2.54 state:D stack:24680 pid:6136 tgid:6136 ppid:5809 task_flags:0x400040 flags:0x00080002 [ 242.835365][ T31] Call Trace: [ 242.838715][ T31] [ 242.841693][ T31] ? __schedule+0xf65/0x5e10 [ 242.846334][ T31] __schedule+0xfe4/0x5e10 [ 242.850775][ T31] ? __lock_acquire+0x4a5/0x2630 [ 242.855812][ T31] ? kasan_save_stack+0x3f/0x50 [ 242.860678][ T31] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 242.866815][ T31] ? __pfx___schedule+0x10/0x10 [ 242.871795][ T31] ? find_held_lock+0x2b/0x80 [ 242.957119][ T31] ? schedule+0x2bf/0x390 [ 242.965135][ T31] schedule+0xdd/0x390 [ 242.974904][ T31] schedule_preempt_disabled+0x13/0x30 [ 242.994263][ T31] __mutex_lock+0xc9a/0x1b90 [ 243.005915][ T31] ? usbdev_release+0x81/0x470 [ 243.034981][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 243.053822][ T31] ? __fsnotify_parent+0x2b4/0xca0 [ 243.061510][ T31] ? locks_remove_file+0x3a0/0x5b0 [ 243.066731][ T31] ? usbdev_release+0x81/0x470 [ 243.071607][ T31] usbdev_release+0x81/0x470 [ 243.076296][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 243.122742][ T31] __fput+0x3ff/0xb40 [ 243.128191][ T31] task_work_run+0x150/0x240 [ 243.139287][ T31] ? __pfx_task_work_run+0x10/0x10 [ 243.156053][ T31] exit_to_user_mode_loop+0x100/0x4b0 [ 243.458337][ T31] ? rcu_is_watching+0x12/0xc0 [ 243.468455][ T31] do_syscall_64+0x4fe/0xf80 [ 243.484815][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.506117][ T31] RIP: 0033:0x7f9d0059acb9 [ 243.516559][ T31] RSP: 002b:00007ffc1d1289e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 243.535646][ T31] RAX: 0000000000000000 RBX: 00007f9d00817da0 RCX: 00007f9d0059acb9 [ 243.552844][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 243.569855][ T31] RBP: 00007f9d00817da0 R08: 0000000000000006 R09: 0000000000000000 [ 243.587330][ T31] R10: 00007f9d00817cb0 R11: 0000000000000246 R12: 0000000000014219 [ 243.607916][ T31] R13: 00007f9d0081636c R14: 00000000000140c8 R15: 00007f9d00816360 [ 243.626339][ T31] [ 243.633257][ T31] [ 243.633257][ T31] Showing all locks held in the system: [ 243.633308][ T8196] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 243.650176][ T8196] chnl_net:chnl_net_open(): state disconnected [ 243.657036][ T8196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.756070][ T31] 6 locks held by kworker/0:0/9: [ 243.768545][ T31] #0: ffff8880212c1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 243.795689][ T31] #1: ffffc900000e7c98 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 243.821631][ T31] #2: ffff88814377b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 243.838937][ T31] #3: ffff888033888198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 243.870663][ T31] #4: ffff8880798d7160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 243.890711][ T31] #5: ffff8880358e4188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x8a/0x600 [ 243.916332][ T31] 1 lock held by khungtaskd/31: [ 243.919616][ T8200] lo speed is unknown, defaulting to 1000 [ 243.927212][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 243.938523][ T31] 2 locks held by pvrusb2-context/2337: [ 243.944275][ T31] #0: ffff8880358e4188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xb6/0x3710 [ 243.955927][ T31] #1: ffffffff8e48dbf0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 243.966831][ T31] 1 lock held by klogd/5170: [ 243.971792][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 243.984565][ T31] 2 locks held by getty/5573: [ 243.989568][ T31] #0: ffff88814d6010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 244.003111][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 244.015861][ T31] 4 locks held by udevd/5808: [ 244.021209][ T31] #0: ffff88807641c418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 244.030245][ T31] #1: ffff888057b47888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 244.045092][ T31] #2: ffff8880511cd2d8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 244.054788][ T31] #3: ffff888033888198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 244.065809][ T31] 5 locks held by kworker/1:6/5925: [ 244.071041][ T31] #0: ffff8880212c1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 244.082776][ T31] #1: ffffc90004c5fc98 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 244.094093][ T31] #2: ffff8881433e3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 244.103280][ T31] #3: ffff8880774f6198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 244.113275][ T31] #4: ffff88807b910160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 244.124920][ T31] 1 lock held by syz.2.54/6136: [ 244.129829][ T31] #0: ffff88814377b198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x81/0x470 [ 244.139199][ T31] 4 locks held by udevd/6511: [ 244.146159][ T31] #0: ffff88804adf7c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 244.156094][ T31] #1: ffff888058635888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 244.165605][ T31] #2: ffff888058682788 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 244.175993][ T31] #3: ffff8880774f6198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 244.184937][ T31] [ 244.187274][ T31] ============================================= [ 244.187274][ T31] [ 244.195840][ T31] NMI backtrace for cpu 1 [ 244.195856][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 244.195882][ T31] Tainted: [L]=SOFTLOCKUP [ 244.195887][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 244.195896][ T31] Call Trace: [ 244.195901][ T31] [ 244.195907][ T31] dump_stack_lvl+0x100/0x190 [ 244.195934][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 244.195957][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 244.195983][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 244.196008][ T31] sys_info+0x141/0x190 [ 244.196027][ T31] watchdog+0xcc3/0xfe0 [ 244.196056][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.196079][ T31] ? __kthread_parkme+0x18c/0x230 [ 244.196104][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.196127][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.196148][ T31] kthread+0x3b3/0x730 [ 244.196163][ T31] ? __pfx_kthread+0x10/0x10 [ 244.196177][ T31] ? ret_from_fork+0x79/0xaf0 [ 244.196195][ T31] ? ret_from_fork+0x79/0xaf0 [ 244.196212][ T31] ? rcu_is_watching+0x12/0xc0 [ 244.196234][ T31] ? __pfx_kthread+0x10/0x10 [ 244.196253][ T31] ret_from_fork+0x754/0xaf0 [ 244.196273][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 244.196293][ T31] ? __switch_to+0x7b9/0x10c0 [ 244.196315][ T31] ? __pfx_kthread+0x10/0x10 [ 244.196332][ T31] ret_from_fork_asm+0x1a/0x30 [ 244.196357][ T31] [ 244.196381][ T31] Sending NMI from CPU 1 to CPUs 0: [ 244.346120][ C0] NMI backtrace for cpu 0 [ 244.346138][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.346158][ C0] Tainted: [L]=SOFTLOCKUP [ 244.346163][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 244.346171][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 244.346189][ C0] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 cc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 244.346203][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 244.346215][ C0] RAX: 0000000000959413 RBX: ffffffff8e297ac0 RCX: ffffffff8b76b4b5 [ 244.346229][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45515 RDI: ffffffff8bfa35a0 [ 244.346239][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 244.346248][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 244.346256][ C0] R13: 0000000000000000 R14: ffffffff90b74bd0 R15: 0000000000000000 [ 244.346265][ C0] FS: 0000000000000000(0000) GS:ffff8881245db000(0000) knlGS:0000000000000000 [ 244.346279][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.346288][ C0] CR2: 0000200000404030 CR3: 000000002eb86000 CR4: 00000000003526f0 [ 244.346297][ C0] Call Trace: [ 244.346302][ C0] [ 244.346306][ C0] default_idle+0x9/0x10 [ 244.346322][ C0] default_idle_call+0x6c/0xb0 [ 244.346338][ C0] do_idle+0x35b/0x4b0 [ 244.346357][ C0] ? __pfx_do_idle+0x10/0x10 [ 244.346378][ C0] cpu_startup_entry+0x4f/0x60 [ 244.346395][ C0] rest_init+0x251/0x260 [ 244.346412][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 244.346427][ C0] start_kernel+0x47a/0x480 [ 244.346441][ C0] x86_64_start_reservations+0x24/0x30 [ 244.346455][ C0] x86_64_start_kernel+0x122/0x130 [ 244.346469][ C0] common_startup_64+0x13e/0x148 [ 244.346490][ C0] [ 244.535225][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 244.542079][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 244.552742][ T31] Tainted: [L]=SOFTLOCKUP [ 244.557048][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 244.567083][ T31] Call Trace: [ 244.570343][ T31] [ 244.573254][ T31] dump_stack_lvl+0x100/0x190 [ 244.577920][ T31] vpanic+0x20d/0x630 [ 244.581879][ T31] panic+0xd1/0xd1 [ 244.585578][ T31] ? __pfx_panic+0x10/0x10 [ 244.589971][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 244.596109][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 244.602250][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 244.608384][ T31] ? watchdog.cold+0x198/0x1ca [ 244.613125][ T31] ? watchdog+0xcd3/0xfe0 [ 244.617439][ T31] watchdog.cold+0x1a9/0x1ca [ 244.622014][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.626676][ T31] ? __kthread_parkme+0x18c/0x230 [ 244.631685][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.636360][ T31] ? __pfx_watchdog+0x10/0x10 [ 244.641043][ T31] kthread+0x3b3/0x730 [ 244.645117][ T31] ? __pfx_kthread+0x10/0x10 [ 244.649692][ T31] ? ret_from_fork+0x79/0xaf0 [ 244.654355][ T31] ? ret_from_fork+0x79/0xaf0 [ 244.659023][ T31] ? rcu_is_watching+0x12/0xc0 [ 244.663771][ T31] ? __pfx_kthread+0x10/0x10 [ 244.668339][ T31] ret_from_fork+0x754/0xaf0 [ 244.672910][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 244.678019][ T31] ? __switch_to+0x7b9/0x10c0 [ 244.682681][ T31] ? __pfx_kthread+0x10/0x10 [ 244.687253][ T31] ret_from_fork_asm+0x1a/0x30 [ 244.692002][ T31] [ 244.695277][ T31] Kernel Offset: disabled [ 244.699573][ T31] Rebooting in 86400 seconds..