last executing test programs: 5m12.01044206s ago: executing program 3 (id=1246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m9.753576793s ago: executing program 3 (id=1252): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x24001035) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, 0x0, 0x20008814) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_clone(0xc0442400, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) 5m7.246699364s ago: executing program 4 (id=1254): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 5m4.181723002s ago: executing program 4 (id=1259): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x148}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendto$inet(r1, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x27, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x4, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) 5m2.200050589s ago: executing program 4 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000700)="a6", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x3, 0x4, 0x4, 0x9, 0x1c000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @value=r1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4m58.542998968s ago: executing program 4 (id=1263): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100), 0x0, 0x3ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/66) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 4m56.70582775s ago: executing program 3 (id=1265): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x88) r4 = dup2(r3, r3) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000140)="91d174dbb4", 0x5}], 0x1) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) 4m55.573476034s ago: executing program 4 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, &(0x7f00000001c0)) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16df86d67a8526bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xd0, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0) 4m54.802794543s ago: executing program 3 (id=1267): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) fcntl$setstatus(r6, 0x4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000400)=""/82}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) ioctl$I2C_RDWR(r3, 0x707, 0x0) 4m54.193030737s ago: executing program 4 (id=1270): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7fffffff, @local, 0x3}, {0xa, 0x4e20, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0xffffffffffffffff, 0x44}}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r2, 0x5}}, 0x10) writev(r1, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25ac1e000104000000000000000000000000000000000000000000ffffe00000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000100000000000000000000000000000200000000000000030000000000000000000000000000000000000000000000030000000000000000000000002000000000000000000000070000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000000000000000000000000000000000000000000033500000100000000000000ffffffff00"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x100000000000000, 0x0, 0xfffffffffffffffe) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 4m49.522432305s ago: executing program 3 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000061e000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000076a000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r3 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x2000008, 0xc1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m46.884201964s ago: executing program 3 (id=1276): syz_open_dev$dvb_demux(&(0x7f0000000140), 0xffff, 0x400002) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) close_range(r2, 0xffffffffffffffff, 0x0) 4m36.836929786s ago: executing program 32 (id=1270): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7fffffff, @local, 0x3}, {0xa, 0x4e20, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0xffffffffffffffff, 0x44}}, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r2, 0x5}}, 0x10) writev(r1, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25ac1e000104000000000000000000000000000000000000000000ffffe00000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000100000000000000000000000000000200000000000000030000000000000000000000000000000000000000000000030000000000000000000000002000000000000000000000070000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000000000000000000000000000000000000000000033500000100000000000000ffffffff00"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x100000000000000, 0x0, 0xfffffffffffffffe) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 4m32.065393159s ago: executing program 33 (id=1276): syz_open_dev$dvb_demux(&(0x7f0000000140), 0xffff, 0x400002) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x14, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) close_range(r2, 0xffffffffffffffff, 0x0) 1m11.216515515s ago: executing program 5 (id=1750): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ca443, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff, 0x0, r2}}], 0x1, 0x0, 0x0) 1m11.177855782s ago: executing program 1 (id=1751): socket$nl_generic(0x10, 0x3, 0x10) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000001c0)={0x0, 0x3, 0x5, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "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"}, 0x418, 0x40}) 1m7.805589268s ago: executing program 5 (id=1756): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x8010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800084000000072050005000a0000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r4 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)={0x77359400}, 0x1, 0x4, 0x1}) io_uring_enter(r4, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x50, 0xffbf, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0xffff, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) 1m7.686847013s ago: executing program 1 (id=1757): socket$inet(0x2, 0x800, 0x4) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file2\x00', 0x9900) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) open(&(0x7f0000000480)='./file0\x00', 0x80, 0x122) mount$fuse(0x0, 0x0, 0x0, 0x2100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) 1m6.091728642s ago: executing program 1 (id=1762): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$kcm(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/254, 0xfe}], 0x1}, 0x10000) sendmsg(r1, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000002c0)=0x54d) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, r4}) 1m4.350772894s ago: executing program 1 (id=1765): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TCXONC(r1, 0x540a, 0x3) 1m3.095520299s ago: executing program 5 (id=1771): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5c}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000010ec0)="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", 0x2000, 0x0) 59.317830737s ago: executing program 1 (id=1776): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/31, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c617465"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x4e24, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x20, 0x2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000002}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@empty, 0x0, 0x32}, 0xb, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 59.137525602s ago: executing program 5 (id=1779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 56.578234368s ago: executing program 5 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) 55.571867002s ago: executing program 5 (id=1784): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r6, 0x34}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="f6", 0x1}], 0x1}, 0x4) 54.450151914s ago: executing program 1 (id=1788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x14a82, 0x15) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01", @ANYRES32=r4, @ANYBLOB='\b\x00\t', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 40.149541991s ago: executing program 34 (id=1784): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r6, 0x34}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="f6", 0x1}], 0x1}, 0x4) 39.234264711s ago: executing program 35 (id=1788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x14a82, 0x15) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01", @ANYRES32=r4, @ANYBLOB='\b\x00\t', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 12.232245236s ago: executing program 0 (id=1844): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fstat(r4, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000005dc0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0xffffffff, 0xd67e713, 0x5, 0xfffffffffffeffff, r2, r2, 0xff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_gettime(0x0, &(0x7f0000003500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xca0e, 0x400}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r1, 0x5608) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 11.054930896s ago: executing program 0 (id=1846): fsopen(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc0405668, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8000}, &(0x7f00000005c0)=0x8) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f8000000000040000000002b3bf12b0047e75cf8c6b9b4fbbb000086b24fe208183a3ba939c211f5cb90e072bac415ebcf9d7590655c0f8df4f58302227ce7ca6d79ed760524284e36adb7ae11c48966f6660f1ff52ab9003ec8cfb8c5d628127a8a6219e91e45fc374d8eb37b717659e10e54cb6e82d3f3e4c3523ff2e41b17f11a8f43335af9f74c421ae1317b8ac2d2885c23b4ffe37954a0ea175f46"], 0x48) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x160, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) setresgid(0xee00, 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000100)={0xff, "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"}) socket$inet_tcp(0x2, 0x1, 0x0) 10.144556519s ago: executing program 6 (id=1847): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) unshare(0x28000080) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181b, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x502, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x8001, 0x48a, 0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) keyctl$revoke(0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) 9.53075872s ago: executing program 0 (id=1849): socket(0x28, 0x1, 0x0) r0 = socket(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x65, 0x64, 0x0, 0x0) epoll_create1(0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) creat(&(0x7f00000000c0)='./bus\x00', 0x102) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) semctl$SEM_INFO(0x0, 0x2, 0x13, 0xfffffffffffffffe) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 8.997036181s ago: executing program 6 (id=1850): r0 = syz_open_dev$radio(&(0x7f0000001840), 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000001940)={0x5, "0ed299dc63440d76485e572a9016145fc348d97aedd41aace10ef396f1b65aaa", 0x0, 0x0, 0x4, 0xb4e, 0x1, 0x2, 0x1, 0xfffffff9}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab"], 0xfe33) 7.826888751s ago: executing program 6 (id=1852): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) modify_ldt$write(0x1, &(0x7f0000000100)={0x5, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xfffffffffffffdf9) modify_ldt$write2(0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x10, {0x2, 0x4e20, @rand_addr=0x64010104}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) recvmsg(0xffffffffffffffff, 0x0, 0x100) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x4}) close(r6) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) 7.537038348s ago: executing program 2 (id=1853): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket(0x1e, 0x2, 0x0) r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) inotify_init() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4b8200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x8000}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) 7.382663479s ago: executing program 0 (id=1854): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.354656351s ago: executing program 2 (id=1855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0xa, 0x0, 0x6}}, 0x14) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x3}}]}) 5.274876996s ago: executing program 6 (id=1856): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00943f, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0x0, 0x700001b, 0x148, 0x240, 0x148, 0x318, 0x206, 0x240, 0x318, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x90, 0xf0, 0x0, {0x390, 0x8f00}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x5, 0x6, 0x100000, 0x2], 0x6, 0x1}, {0xffffffffffffffff, [0x9, 0x1, 0x2, 0x5, 0x6], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgget$private(0x0, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0xd4, &(0x7f0000000480)=""/212, 0x41100, 0x1d, '\x00', r3, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1000, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x2, 0x2, 0xb, 0x8}, {0x1, 0x1, 0x0, 0x9}, {0x4, 0x1, 0x6}], 0x10, 0x81}, 0x94) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x800001c) 4.266065321s ago: executing program 2 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) r6 = dup(r5) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0xbe9, 0x0, 0x7, 0x1, 0x4]}, &(0x7f0000000340)=0x54) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000400000004", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000857d92b7d54277093c2b692213bc53f9d14192f757add8c6b9a8a1b74fbbdc4c198f156693672535624cc075eb0046244131a15d31"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x58, &(0x7f0000000600)}, 0x10) 2.941241285s ago: executing program 2 (id=1858): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210f000000000000000020000000", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.479815109s ago: executing program 6 (id=1859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE(r4, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) fstat(r1, &(0x7f0000000500)) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 1.47873049s ago: executing program 0 (id=1867): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) 1.477925036s ago: executing program 2 (id=1860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = creat(0x0, 0x6a) close(r1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_route(0x10, 0x3, 0x0) 426.796666ms ago: executing program 6 (id=1861): unshare(0x6a040000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x24, 0x36, 0x6, 0x13, 0xa, 0x1000ff, 0x2, 0x3d}) r1 = socket(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='source', 0x0, 0xfeffffff00000000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0x0, [0x9dd, 0x1, 0x7, 0x7, 0xa8, 0x4], 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000280)={0xff, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0xfffffffffffffffa, 0x80, 0x0, 0x5, 0xfffffffffffffff4, 0x6], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) unshare(0x10010880) r8 = syz_usb_connect(0x3, 0x541, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0xd4, 0x30, 0x53, 0x20, 0x19d2, 0x1095, 0xfe78, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52f, 0x3, 0x6, 0x0, 0x40, 0x7, "", [{{0x9, 0x4, 0x25, 0xb, 0x4, 0xff, 0xff, 0xff, 0x14, [@hid_hid={0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xa02}}, @generic={0x8c, 0x6, "3784941e45c7c0432d8add9d313ab8cb46080080ceb2c60fc3cfa79690135dca036a426b24159021208801cd7a7320462589d25ca9aad6729802e471c9641df151e8110b293ca5e46b58b980261e60d10dba82245366a2720e3bcf2100a84227a8fc5ca0f1c393376da98f47e36d2797a8ad73d67ca7bfe03f5167541201e5e78d377d9c098a9a04daf9"}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x5, 0x5, 0xc0, [@generic={0x25, 0x11, "89af876f4932fa7c5fbc198e781f2279ce4b685b717bdd10e69f4e730cedaa22a59027"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7, 0x19, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x2}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x10, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x1a, 0x7, 0x10, 0xff, 0xff, 0xff, 0x60, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '.'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7d12, 0xfff6, 0x8}, {0x6, 0x24, 0x1a, 0x1ff, 0x3}, [@obex={0x5, 0x24, 0x15, 0x8}, @obex={0x5, 0x24, 0x15, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x4, 0x2, 0x6, 0x5, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0x8, 0xf}, @mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x7, 0x7}]}], [{{0x9, 0x5, 0x7, 0x1, 0x10, 0x6, 0x77, 0x5, [@generic={0x7, 0xe, "aa953fbff7"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x90, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0x42, 0xfa, [@generic={0x1b, 0xd, "4fc460a840a4b16af4a935902ba545d9c347d385a0904d16c6"}, @generic={0x8c, 0xf, "d1d7d6306cf5f8b256a4a2ec39f589f7f5a221dbb0ddef6885b21a28b1688bd065d024727ead9a0e1ef312bb4dd969f8df3df9477537322c20a2b0d378aa7c25357f5e60db7f61c9413cb83c693953e2a5b762f62cbfcbd97e05bd753e25e95c0c71e9d104787a2e00a66dfb198d9e304d31f6864df20db9bc6293627dc9025248a5e363ec4c6d81c5de"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x8, 0xce, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x4ff87df51c3db76f, 0x7, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x18f, 0x5, 0x8, 0xda}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x8, 0xa, 0x3, [@generic={0x16, 0x7, "7c2fce43057fb9e634091c823c22f9b5c590f14d"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x9, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1}]}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x9, 0x10, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x3, 0x40, 0x2, [@generic={0xef, 0x21, "f317a4cd85f2f182b33234a98a1a5bbabd198306b1f7685e3a6c89079e98edf7612de02f39bcc398e76740241edee5894dac95bfeb0f60ee0e6369af5a2026f41a45cc14a1618c65e2307c1c8d982b241b6e47eeedce016349f90571c65cce8d4b3836761a8eea1c1c6e7898242d5092ba6e4f1958756469f7c0c98a896c3ca6a45603e41705f91e037496aa6162a7007ebe5ae3968ae519d7d8b736aa8375f234cc11aecf5cbe47150dfdc21f0d087ce56f511f0fe4abb91cbebca0058975e821853c3b19db2fc4aa4bcccc8dcc6dec8425e74e4a772b24a583777cad9fb8941c185bba416c58a932ddacab44"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x420, 0x1, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x4}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xfc, 0x5f, 0x80, [@generic={0xa0, 0x1, "5eb35ccde95654be23735c3c9a41131e744af92a2e9e8c38f51d1a0d9278d03d620e0d307898f9bad1dd1d2de66145b3656651943b36d5421381119089c06254c28442f2a0a42a600dfbd5a026dfe6f90ebc486a534ee3ceef93b920131a8cf28ddd9e9fc3c7cef331cb3c90449fde2516af0032ef5d70c8c97cd0ae6a22c46088f7cfa45077aff5cd7c618b606de9b6b3bd25291a7fcfbc11209b5a0a77"}]}}, {{0x9, 0x5, 0x6, 0x1a, 0x200, 0x9, 0x1e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x600, 0xf4, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}]}}, {{0x9, 0x5, 0x15, 0x10, 0x40, 0x6, 0xcd, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x5, 0xd0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0xe, 0x1c, 0xc52a1fee5980cb9e, 0x8, 0x80, 0x4, [@generic={0x68, 0x21, "8ed7887911a63ab709d37369ead035ef2d8bab6fe7ab54e955ec797bd540290c2eb83e0e0b6de70d2ea2cef572f0e3e85a1d78771fbe6d955a1de5453f26c6dd9434fb48cd99e9784a347e46858ec7d55e07a5fe6282a7d2241588840257c8f59f49dea00eba"}, @generic={0x40, 0x22, "d0a4b9d603e85f67261d5e196be48f618b9aac0518f38a31ea11e9dbb658cc2bd6196ece2a3a0c75a104b57f183ca3f69bebb397fbe53d54dae75e6858ad"}]}}]}}, {{0x9, 0x4, 0x1a, 0x7f, 0x1, 0x29, 0xf1, 0xd0, 0x7b, [@hid_hid={0x9, 0x21, 0x81, 0xef, 0x1, {0x22, 0xf51}}], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4}]}}]}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x23, &(0x7f0000001080)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3e7b7e110e1c3a5507c836e1ab4a2ad0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xc, 0x7, 0x1}]}, 0xa, [{0xb3, &(0x7f0000000cc0)=@string={0xb3, 0x3, "7b975a38e950372e67c3637d257b3754c5f6fd5992eb828334f6a0953bd13172168a28d8838962dc7500e98308d1386d8872d55dd77dc0c8b4183b00d2e2c064212bd3c4c207db0896269606c8250ec3ee40838f6e246a7113c42d0b0c3f625662b31913c27d268ddf69c4feb447405c43e1385573fb6621f4f81dd7321f6a0130be40e00451f5ac2c7d052d4d325207f36dc20778b11d4155549c8f55f7c9bafd9337eecb953785631d10206ad883e87a"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x2, &(0x7f0000000e40)=@string={0x2}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x200f}}, {0x4d, &(0x7f0000000f00)=@string={0x4d, 0x3, "2ef17f60beb71cd085159154253d93d164fc6d81f206e6a73e6b3ff455f86b3dcb4ad7885c8c23af8d1b9cdf79757bf499b512ce11cb3a74ca6140a3102a72f42e3831fe736f4b07911173"}}, {0x4, &(0x7f0000000f80)=@string={0x4, 0x3, '\x00H'}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44f}}, {0x28, &(0x7f00000010c0)=@string={0x28, 0x3, "51f5174beb6f01fb34319a7fc4247faf4eb6225b537fecaa757e82a4b40d8d0ec5b1b5d94565"}}, {0xc8, &(0x7f0000001100)=@string={0xc8, 0x3, "d3f8f3cd2fa932e8a4da66499004a122e260b6e8845b7dbec76173afad15b0f5b4fcc1b9b7866073ccfb94fb2fe2e2c2380de814ecf3117575d18ca03793ffec23248e1a45829193cdd2b1e59e93ab277007ad5c321f1dd14671ecd932c71767289b01040dc904a1b675477a47b175911e822ce2308e2ff56a51154d1920fbd35a60048a80cf634156bacb00973973fdc614afb0bef32d8391e1f3f1f827c7bb52019cf08081397e58a7f43c98775db7213e4667eb6b628bca7ed647440daedc0878951549a4"}}]}) syz_usb_control_io(r8, &(0x7f0000001400)={0x2c, &(0x7f0000000380)={0x0, 0x6, 0x23, {0x23, 0x2, "59f0ee021ad9d9eb0319d5a7b9f342b7012ea065eda52a0848378d6285ec10930964b187b9c31c"}}, &(0x7f0000001300)={0x0, 0x3, 0x1, @lang_id={0x4, 0x3, 0x457}}, &(0x7f0000001340)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8e, "2a73712a0cfc6d9b5b041068f071ee28"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x5, 0x8, 0x101, 0xa}]}}, &(0x7f0000001380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x0, 0x5, 0x9, "2df9a2f0", "59a97e1f"}}, &(0x7f00000013c0)={0x20, 0x2a, 0x6e, {0xc, 0x2a, 0x2, 0x60, 0xfa, 0x0, 0x10, 0x7, 0x80}}}, &(0x7f0000001900)={0x84, &(0x7f0000001440)={0x20, 0x15, 0xc0, "2f012853b57fad5b34052da4c98e7cdbd43c8e88f786346bda8857a1de9a3ca8f7b3a3b6a966b796f857a684d55596fe07cd67f5d3708ed47c80011fd8594b5b2c58943387ec8a304b742d95c132362379307e6006528a61278b90ef3dc0b521efcd313df85258f358dcd09e1a027babe9bebb4e3084c74596a96523652395094a1cef0422b6ca773723193556784a5df185e74774116424a288a8054bdcdfffcf2e86c3d40a2fe998ae3c5fbef17f3b324da3966874555a7a0aae46c31ad1d7"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x52}, &(0x7f00000015c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0xc0, 0x1, [0xf000]}}, &(0x7f0000001640)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000001680)={0x40, 0x9, 0x1}, &(0x7f00000016c0)={0x40, 0xb, 0x2, "80fb"}, &(0x7f0000001700)={0x40, 0xf, 0x2, 0x8c9}, &(0x7f0000001740)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000017c0)={0x40, 0x19, 0x2, "52c5"}, &(0x7f0000001800)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001840)={0x40, 0x1c, 0x1, 0x56}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0xbf}, &(0x7f00000018c0)={0x40, 0x21, 0x5d, 0x40}}) 169.41255ms ago: executing program 2 (id=1862): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1, 0xffff}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, 0x0, 0x20) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r3 = fcntl$dupfd(r2, 0x406, r2) fsetxattr$security_evm(r2, &(0x7f00000002c0), &(0x7f0000000300)=@md5={0x1, "ecd1e1693f554f8069e9caaede6a97cf"}, 0x11, 0x3) readv(r3, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000100)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="38000000121401002abd70000000000008004f000000000008004b00130000000800030001000000080015000200000008000100000000000676a4fa3b43d97f427c2cb25c548a495bc9712c4338bccce1acdffad5c86eb966cb5206b808bc06ad5805f72c0e6924abd31ca506db82a78b66223744b0784f629a2364cf87e8fe970b40fa293634bb5ea9affbc05cd39fac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = syz_ublk_setup_io_uring(0x1b81, &(0x7f0000000340)={0x0, 0xecca, 0x4, 0x3, 0x9f}, &(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000580)) socketpair$unix(0x1, 0xf6a3d3e8487d791f, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000005c0)={0x0, 0xaebc, 0x40, 0x0, 0x311}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3bc, 0x1000, 0x0, 0x297}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a16, 0x8, 0x2, 0x3bd, 0x0, r3}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4936, 0x80, 0x0, 0x22d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa49f, 0x80, 0x1, 0x124, 0x0, r3}}], 0x4, &(0x7f00000018c0)={0x2e, 0x30, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9bb}, 0x0, r6, '\x00', {0x0, 0x5c, 0x0, &(0x7f00000008c0)=@buf_512="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"}}, &(0x7f0000001940)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=1863): sched_setattr(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000022001f3d000000020000000000000000"], 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0x8}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0xfd872ef86dd1e10a) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffdfff8, r0}, 0x38) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet(0xa, 0x801, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'ip_vti0\x00', {}, 0x840}) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): ev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.088199][ T9350] usb 7-1: selecting invalid altsetting 6 [ 693.088259][ T9350] usb 7-1: digital interface selection failed (-22) [ 693.088273][ T9350] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 693.091470][ T9350] usb 7-1: setting power OFF [ 693.091566][ T9350] dvb-usb: bulk message failed: -22 (2/0) [ 693.091607][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 693.091619][ T9350] (NULL device *): no alternate interface [ 693.308063][ T9350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 693.575966][ T9350] usb 7-1: USB disconnect, device number 2 [ 693.866900][T11622] lo speed is unknown, defaulting to 1000 [ 694.227022][ T29] audit: type=1400 audit(1783755466.795:842): avc: denied { write } for pid=11632 comm="syz.5.1432" name="usbmon1" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 694.682661][T11640] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1434'. [ 695.546317][ T29] audit: type=1400 audit(1783755468.115:843): avc: denied { ioctl } for pid=11652 comm="syz.1.1439" path="socket:[34651]" dev="sockfs" ino=34651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 695.589885][ T7365] net_ratelimit: 29 callbacks suppressed [ 695.589923][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.821552][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.931549][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.082950][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.359838][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.500037][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.577821][T11635] lo speed is unknown, defaulting to 1000 [ 696.679782][ T9350] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 696.704793][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1443'. [ 696.768656][T11667] gretap0: entered promiscuous mode [ 696.791337][ T5716] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 696.818173][T11667] macvlan2: entered allmulticast mode [ 696.839768][ T9350] usb 1-1: Using ep0 maxpacket: 32 [ 696.841034][T11667] gretap0: entered allmulticast mode [ 696.865486][ T9350] usb 1-1: config 6 has an invalid interface number: 37 but max is 2 [ 696.881210][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.906794][ T9350] usb 1-1: config 6 has an invalid interface number: 26 but max is 2 [ 696.921397][ T9350] usb 1-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 696.930270][ T9350] usb 1-1: config 6 has an invalid interface number: 26 but max is 2 [ 696.938429][ T9350] usb 1-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 696.947623][ T9350] usb 1-1: config 6 has no interface number 0 [ 696.955370][ T9350] usb 1-1: config 6 has no interface number 1 [ 696.961947][ T9350] usb 1-1: config 6 interface 37 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 696.976001][ T9350] usb 1-1: config 6 interface 37 altsetting 11 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 696.988786][ T9350] usb 1-1: config 6 interface 37 altsetting 11 bulk endpoint 0x2 has invalid maxpacket 32 [ 696.999838][ T5716] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 697.008908][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.009961][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.017331][ T9350] usb 1-1: config 6 interface 26 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 697.017360][ T9350] usb 1-1: config 6 interface 26 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 697.017393][ T9350] usb 1-1: config 6 interface 26 altsetting 7 endpoint 0xD has invalid maxpacket 399, setting to 64 [ 697.017415][ T9350] usb 1-1: config 6 interface 26 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 697.086096][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 697.104092][ T5716] usb 3-1: config 0 descriptor?? [ 697.117863][ T5716] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 697.197556][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 697.228210][ T9350] usb 1-1: config 6 interface 26 altsetting 7 endpoint 0x4 has invalid maxpacket 1056, setting to 64 [ 697.269911][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.334253][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 697.395596][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 697.421047][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.489689][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 697.526758][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has an endpoint descriptor with address 0x15, changing to 0x5 [ 697.540150][ T5716] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 697.575298][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 697.603281][ T9350] usb 1-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 697.627693][ T9350] usb 1-1: config 6 interface 26 altsetting 7 endpoint 0xE has invalid maxpacket 52126, setting to 64 [ 697.678138][ T9350] usb 1-1: config 6 interface 37 has no altsetting 0 [ 697.704161][ T9350] usb 1-1: config 6 interface 26 has no altsetting 0 [ 697.729395][ T9350] usb 1-1: config 6 interface 26 has no altsetting 1 [ 697.768862][ T9350] usb 1-1: string descriptor 0 read error: -71 [ 697.824948][ T9350] usb 1-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=fe.78 [ 697.906217][ T9350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.973745][ T5716] gspca_cpia1: usb_control_msg 02, error -71 [ 697.982841][ T9350] usb 1-1: can't set config #6, error -71 [ 698.008627][ T5716] gspca_cpia1: usb_control_msg 05, error -71 [ 698.028242][ T5716] cpia1 3-1:0.0: unexpected systemstate: 01 [ 698.065026][ T5716] usb 3-1: USB disconnect, device number 39 [ 698.125265][ T9350] usb 1-1: USB disconnect, device number 42 [ 698.430040][ T9350] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 698.601206][ T9350] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.637242][ T9350] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 698.670877][ T9350] usb 1-1: config 0 interface 0 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 698.700103][ T5716] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 698.717173][ T9350] usb 1-1: config 0 interface 0 has no altsetting 0 [ 698.728308][ T9350] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 698.738687][ T9350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.752587][ T9350] usb 1-1: Product: syz [ 698.761548][ T9350] usb 1-1: Manufacturer: syz [ 698.768319][T11695] xt_hashlimit: size too large, truncated to 1048576 [ 698.776197][ T9350] usb 1-1: SerialNumber: syz [ 698.787822][ T9350] usb 1-1: config 0 descriptor?? [ 698.870269][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 698.878335][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.918559][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.948359][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 698.995984][ T5716] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.024891][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.080077][ T5716] usb 2-1: config 0 descriptor?? [ 699.284306][ T9350] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 699.305069][ T9350] uvcvideo 1-1:0.0: No valid video chain found. [ 699.543240][ T5716] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 699.592433][ T9070] usb 1-1: USB disconnect, device number 43 [ 699.617367][ T5716] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 699.648875][ T5716] microsoft 0003:045E:07DA.000A: no inputs found [ 699.664802][ T5716] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 699.904930][ T5716] usb 2-1: USB disconnect, device number 40 [ 700.462119][ T9350] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 700.632289][ T1096] net_ratelimit: 22 callbacks suppressed [ 700.632323][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.653775][ T5716] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 700.687937][ T9350] usb 1-1: Using ep0 maxpacket: 8 [ 700.699129][ T9350] usb 1-1: config 195 has an invalid interface number: 112 but max is 1 [ 700.719246][ T9350] usb 1-1: config 195 has an invalid interface number: 112 but max is 1 [ 700.727820][ T9350] usb 1-1: config 195 has 1 interface, different from the descriptor's value: 2 [ 700.736936][ T9350] usb 1-1: config 195 has no interface number 0 [ 700.755776][ T9350] usb 1-1: config 195 interface 112 has no altsetting 0 [ 700.772985][ T9350] usb 1-1: config 195 interface 112 has no altsetting 1 [ 700.788353][ T9350] usb 1-1: New USB device found, idVendor=055d, idProduct=2020, bcdDevice= 1.3f [ 700.820600][ T9350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.824428][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.846136][ T5716] usb 6-1: no configurations [ 700.851730][ T9350] usb 1-1: Product: syz [ 700.861199][ T5716] usb 6-1: can't read configurations, error -22 [ 700.879528][ T9350] usb 1-1: Manufacturer: syz [ 700.904433][ T9350] usb 1-1: SerialNumber: syz [ 701.040465][ T5716] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 701.102638][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.169855][ T9350] usb-storage 1-1:195.112: USB Mass Storage device detected [ 701.231206][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.244128][T11741] syzkaller1: entered promiscuous mode [ 701.255229][ T9350] usb-storage 1-1:195.112: Quirks match for vid 055d pid 2020: 1 [ 701.275882][ T5716] usb 6-1: no configurations [ 701.305669][ T5716] usb 6-1: can't read configurations, error -22 [ 701.351709][ T5716] usb usb6-port1: attempt power cycle [ 701.387064][ T9350] usb 1-1: USB disconnect, device number 44 [ 701.440689][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.569820][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.700779][ T9070] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 701.708440][ T5716] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 701.716256][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.752503][ T5716] usb 6-1: no configurations [ 701.761745][ T5716] usb 6-1: can't read configurations, error -22 [ 701.840437][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.882657][ T9070] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.901041][ T9070] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.920233][ T5716] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 701.934996][ T29] audit: type=1400 audit(1783755474.495:844): avc: denied { write } for pid=11754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.961079][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.968533][ T9070] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.986344][ T9070] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.995794][ T9070] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.006131][ T5716] usb 6-1: no configurations [ 702.011835][ T5716] usb 6-1: can't read configurations, error -22 [ 702.018693][ T5716] usb usb6-port1: unable to enumerate USB device [ 702.036078][ T9070] usb 7-1: config 0 descriptor?? [ 702.092496][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.104768][T11747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.206534][ T29] audit: type=1400 audit(1783755474.765:845): avc: denied { write } for pid=11771 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.564600][ T9070] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 702.631774][ T9350] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 702.778474][ T9070] usb 7-1: USB disconnect, device number 3 [ 702.808380][ T9350] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 702.835437][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 702.861414][ T9350] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 702.890676][ T9350] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.050144][ T9350] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 703.064460][ T9350] usb 1-1: config 0 interface 0 has no altsetting 0 [ 703.072202][ T9350] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 703.084735][ T9350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.144349][ T9350] usb 1-1: config 0 descriptor?? [ 703.252799][ T29] audit: type=1400 audit(1783755475.825:846): avc: denied { write } for pid=11779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.777115][ T9350] hid-alps 0003:044E:120C.000C: item fetching failed at offset 5/8 [ 703.801382][ T9350] hid-alps 0003:044E:120C.000C: parse failed [ 703.823320][ T9350] hid-alps 0003:044E:120C.000C: probe with driver hid-alps failed with error -22 [ 703.839045][T11810] syzkaller1: entered promiscuous mode [ 703.849415][ T29] audit: type=1400 audit(1783755476.415:847): avc: denied { write } for pid=11806 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.872673][T11810] syzkaller1: entered allmulticast mode [ 704.041893][ T9342] usb 1-1: USB disconnect, device number 45 [ 704.883559][ T29] audit: type=1400 audit(1783755477.455:848): avc: denied { write } for pid=11818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.950094][ T9342] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 705.130946][ T9342] usb 2-1: no configurations [ 705.172207][ T29] audit: type=1400 audit(1783755477.745:849): avc: denied { write } for pid=11858 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.226926][T11862] xt_hashlimit: size too large, truncated to 1048576 [ 705.236128][ T9342] usb 2-1: can't read configurations, error -22 [ 705.391126][ T9342] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 705.572538][ T9342] usb 2-1: no configurations [ 705.588615][ T9342] usb 2-1: can't read configurations, error -22 [ 705.607817][ T9342] usb usb2-port1: attempt power cycle [ 705.690460][ T7369] net_ratelimit: 30 callbacks suppressed [ 705.690479][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.877379][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.981914][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 706.044271][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 706.553805][ T9342] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 706.569635][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 706.661676][ T9342] usb 2-1: no configurations [ 706.669935][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.691653][ T9342] usb 2-1: can't read configurations, error -22 [ 706.822587][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.843042][ T9342] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 706.941095][ T9342] usb 2-1: no configurations [ 706.953707][ T9342] usb 2-1: can't read configurations, error -22 [ 707.004366][ T9342] usb usb2-port1: unable to enumerate USB device [ 707.011704][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.130306][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.301785][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.328976][T11900] syzkaller0: entered promiscuous mode [ 707.332228][ T29] audit: type=1400 audit(1783755479.895:850): avc: denied { write } for pid=11870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.429851][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.551798][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.602490][ T29] audit: type=1400 audit(1783755480.165:851): avc: denied { write } for pid=11907 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.690007][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.179598][ T29] audit: type=1400 audit(1783755480.745:852): avc: denied { read } for pid=11928 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 708.269978][ T9342] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 708.427273][T11947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.446662][ T9342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 708.472940][ T9342] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 708.489337][ T29] audit: type=1400 audit(1783755481.065:853): avc: denied { write } for pid=11923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.514068][ T9342] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 708.549903][ T9342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.594660][ T9342] usb 3-1: config 0 descriptor?? [ 708.600380][ T9331] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 708.620809][ T29] audit: type=1400 audit(1783755481.195:854): avc: denied { write } for pid=11955 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.773383][ T9331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.791173][ T9331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.802224][ T9331] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 708.822622][ T9331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.872792][ T9331] usb 6-1: config 0 descriptor?? [ 708.920765][ T9354] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 709.087132][ T9354] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.106708][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.123519][ T9354] usb 7-1: config 0 has no interfaces? [ 709.136519][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.152581][ T9354] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 709.173487][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.189869][ T9354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.203040][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.214644][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.224743][ T9354] usb 7-1: config 0 descriptor?? [ 709.232497][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.257738][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.280507][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.292373][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.321501][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: unknown main item tag 0x0 [ 709.392778][ T9342] aquacomputer_d5next 0003:0C70:F00B.000D: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 709.534692][ T29] audit: type=1400 audit(1783755482.105:855): avc: denied { write } for pid=11964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.535000][ T9331] usb 6-1: language id specifier not provided by device, defaulting to English [ 709.574461][ T5796] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 709.584536][ T9342] usb 3-1: USB disconnect, device number 40 [ 709.617895][T11981] fido_id[11981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 709.618125][ T9354] libceph: connect (1)[c::]:6789 error -101 [ 709.642345][ T9354] libceph: mon0 (1)[c::]:6789 connect error [ 709.656239][ T9354] libceph: connect (1)[c::]:6789 error -101 [ 709.667411][ T9354] libceph: mon0 (1)[c::]:6789 connect error [ 709.748663][T11984] ceph: No mds server is up or the cluster is laggy [ 709.769854][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 709.826095][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 709.830704][ T29] audit: type=1400 audit(1783755482.395:856): avc: denied { write } for pid=11990 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.857115][ T5796] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 709.858814][ T5796] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 709.858839][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.858858][ T5796] usb 2-1: Product: syz [ 709.858872][ T5796] usb 2-1: Manufacturer: syz [ 709.858886][ T5796] usb 2-1: SerialNumber: syz [ 709.945367][ T9342] usb 7-1: USB disconnect, device number 4 [ 709.976186][ T9331] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000E/input/input53 [ 710.205587][ T5796] usb 2-1: USB disconnect, device number 45 [ 710.240833][ T9331] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000E/input/input54 [ 710.427544][ T9331] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000E/input/input55 [ 710.545482][ T9331] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000E/input/input56 [ 710.682178][ T9331] uclogic 0003:256C:006D.000E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 710.711443][ T7365] net_ratelimit: 24 callbacks suppressed [ 710.711461][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.920210][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.012876][ T29] audit: type=1400 audit(1783755483.585:857): avc: denied { write } for pid=11994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.051174][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.083687][T12001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.185745][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.324588][T12029] sd 0:0:1:0: PR command failed: 1026 [ 711.326642][ T29] audit: type=1400 audit(1783755483.895:858): avc: denied { ioctl } for pid=12027 comm="syz.0.1533" path="/304/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 711.334061][T12029] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 711.359012][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.377713][T12029] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 711.398707][ T5796] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 711.427274][ T29] audit: type=1400 audit(1783755483.985:859): avc: denied { write } for pid=12030 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.510009][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.620317][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.821616][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.939835][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.059826][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.075428][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 712.182909][T12057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 712.372268][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 712.372297][ T29] audit: type=1400 audit(1783755484.945:861): avc: denied { write } for pid=12063 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.521281][ T5796] usb 6-1: device descriptor read/64, error -71 [ 712.619915][ T5716] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 712.799818][ T5796] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 712.809004][ T5716] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 712.817687][ T5716] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.838231][ T5716] usb 7-1: config 0 has no interface number 0 [ 712.845014][ T5716] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 712.857725][ T5716] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 712.868520][ T5716] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.927135][ T5716] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 712.947657][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.956222][ T5716] usb 7-1: Product: syz [ 712.963289][ T5716] usb 7-1: Manufacturer: syz [ 712.968067][ T5716] usb 7-1: SerialNumber: syz [ 712.994360][ T5796] usb 6-1: device firmware changed [ 713.017399][ T5716] usb 7-1: config 0 descriptor?? [ 713.042566][ T9070] usb 6-1: USB disconnect, device number 8 [ 713.472602][ T5716] usb 7-1: USB disconnect, device number 5 [ 713.589828][ T9070] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 713.741319][ T9070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.751633][ T9070] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 713.761820][ T9070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.770852][ T5796] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 713.780864][ T9070] usb 6-1: config 0 descriptor?? [ 713.789668][ T9070] pwc: Askey VC010 type 2 USB webcam detected. [ 713.954149][ T5796] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 713.966424][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.978596][ T5796] usb 3-1: config 0 descriptor?? [ 714.058138][T12084] lo speed is unknown, defaulting to 1000 [ 714.210052][ T5796] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 714.326335][T12091] orangefs_devreq_open: device cannot be opened in blocking mode [ 714.968621][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 715.092961][ T5796] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 715.115359][ T5796] [drm] Initialized udl on minor 2 [ 715.129320][ T5796] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 715.182168][ T5796] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 715.331538][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 715.332054][ T9342] usb 3-1: USB disconnect, device number 41 [ 715.340952][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 715.460504][ T9331] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 715.629961][ T9331] usb 7-1: Using ep0 maxpacket: 32 [ 715.639656][ T9331] usb 7-1: config 6 has an invalid interface number: 37 but max is 2 [ 715.650987][ T9331] usb 7-1: config 6 has an invalid interface number: 26 but max is 2 [ 715.660007][ T9331] usb 7-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 715.669471][ T9331] usb 7-1: config 6 has an invalid interface number: 26 but max is 2 [ 715.678333][ T9331] usb 7-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 715.688324][ T9331] usb 7-1: config 6 has no interface number 0 [ 715.695211][ T9331] usb 7-1: config 6 has no interface number 1 [ 715.712465][ T9331] usb 7-1: config 6 interface 37 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 715.731114][ T9331] usb 7-1: config 6 interface 37 altsetting 11 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 715.744217][ T9331] usb 7-1: config 6 interface 37 altsetting 11 bulk endpoint 0x2 has invalid maxpacket 32 [ 715.755494][ T9331] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 715.768836][ T9331] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 715.780724][ T9331] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0xD has invalid maxpacket 399, setting to 64 [ 715.791189][ T7372] net_ratelimit: 27 callbacks suppressed [ 715.791209][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.793216][ T9331] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 715.816870][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 715.828469][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 715.840047][ T9331] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0x4 has invalid maxpacket 1056, setting to 64 [ 715.851763][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 715.863404][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 715.875013][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 715.886593][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has an endpoint descriptor with address 0x15, changing to 0x5 [ 715.899616][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 715.921091][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.931770][ T9331] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 715.965019][ T9331] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0xE has invalid maxpacket 52126, setting to 64 [ 715.979864][ T9331] usb 7-1: config 6 interface 37 has no altsetting 0 [ 715.994979][ T9331] usb 7-1: config 6 interface 26 has no altsetting 0 [ 716.010994][ T9331] usb 7-1: config 6 interface 26 has no altsetting 1 [ 716.036952][ T9331] usb 7-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=fe.78 [ 716.059075][ T9331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.083410][ T9070] pwc: recv_control_msg error -71 req 02 val 2b00 [ 716.092406][ T9070] pwc: recv_control_msg error -71 req 02 val 2700 [ 716.112594][ T9070] pwc: recv_control_msg error -71 req 02 val 2c00 [ 716.120096][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.150661][ T9331] usb 7-1: Manufacturer: 㰊 [ 716.169460][ T9070] pwc: recv_control_msg error -71 req 04 val 1000 [ 716.187823][ T9331] usb 7-1: SerialNumber: О [ 716.212902][ T9070] pwc: recv_control_msg error -71 req 04 val 1300 [ 716.240832][ T9070] pwc: recv_control_msg error -71 req 04 val 1400 [ 716.249937][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.284280][ T9070] pwc: recv_control_msg error -71 req 02 val 2000 [ 716.285640][T12085] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 716.325122][ T9070] pwc: recv_control_msg error -71 req 02 val 2100 [ 716.346628][ T9070] pwc: recv_control_msg error -71 req 04 val 1500 [ 716.362433][ T9070] pwc: recv_control_msg error -71 req 02 val 2500 [ 716.373038][ T9070] pwc: recv_control_msg error -71 req 02 val 2400 [ 716.388055][ T9070] pwc: recv_control_msg error -71 req 02 val 2600 [ 716.409802][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.422837][ T9070] pwc: recv_control_msg error -71 req 02 val 2900 [ 716.433957][ T9070] pwc: recv_control_msg error -71 req 02 val 2800 [ 716.459133][ T9070] pwc: recv_control_msg error -71 req 04 val 1100 [ 716.484864][ T9070] pwc: recv_control_msg error -71 req 04 val 1200 [ 716.509389][ T9070] pwc: Registered as video103. [ 716.539982][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.550121][ T9070] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input58 [ 716.629285][ T9070] usb 6-1: USB disconnect, device number 9 [ 716.680073][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.813270][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.844324][ T9331] option 7-1:6.37: GSM modem (1-port) converter detected [ 716.961924][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.029335][ T9331] option 7-1:6.26: GSM modem (1-port) converter detected [ 717.121506][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.211885][ T9331] usb 7-1: USB disconnect, device number 6 [ 717.260061][ T9070] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 717.266178][ T9331] option 7-1:6.37: device disconnected [ 717.331645][T12127] kvm: pic: level sensitive irq not supported [ 717.336867][ T9331] option 7-1:6.26: device disconnected [ 717.500533][ T9070] usb 6-1: Using ep0 maxpacket: 16 [ 717.514897][ T9070] usb 6-1: config 0 interface 0 has no altsetting 0 [ 717.536696][ T9070] usb 6-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 717.565143][ T9070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.637425][ T9070] usb 6-1: config 0 descriptor?? [ 718.210822][ T9070] hid_parser_main: 28 callbacks suppressed [ 718.210845][ T9070] ortek 0003:05A4:8003.000F: unknown main item tag 0x2 [ 718.256801][ T9070] ortek 0003:05A4:8003.000F: unknown main item tag 0x6 [ 718.298532][ T9070] ortek 0003:05A4:8003.000F: ignoring exceeding usage max [ 718.633245][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1569'. [ 718.685802][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1569'. [ 718.792373][ T9070] ortek 0003:05A4:8003.000F: hidraw0: USB HID v0.83 Device [HID 05a4:8003] on usb-dummy_hcd.5-1/input0 [ 718.827425][ T9070] usb 6-1: USB disconnect, device number 10 [ 718.891700][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1569'. [ 718.902990][ T6503] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.952492][ T6503] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.006283][ T6503] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.059293][ T6503] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.100987][T12156] fido_id[12156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 719.138790][T12162] syz.6.1572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 719.173598][ T9342] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 719.335544][ T5716] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 719.338022][ T9342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.391930][ T9342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.412869][ T9342] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 719.446902][ T9342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.473180][ T9342] usb 1-1: config 0 descriptor?? [ 719.519862][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 719.536750][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.575180][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 719.603799][ T5716] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 719.637026][ T5716] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 719.670021][ T5716] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 719.703208][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.733481][ T9342] usbhid 1-1:0.0: can't add hid device: -71 [ 719.737311][ T5716] hub 3-1:1.0: bad descriptor, ignoring hub [ 719.771205][ T5716] hub 3-1:1.0: probe with driver hub failed with error -5 [ 719.774087][ T9342] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 719.826690][ T5716] cdc_wdm 3-1:1.0: skipping garbage [ 719.851720][ T5716] cdc_wdm 3-1:1.0: skipping garbage [ 720.159027][ T9342] usb 1-1: USB disconnect, device number 46 [ 720.161942][ T5716] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 720.198030][ T5716] cdc_wdm 3-1:1.0: Unknown control protocol [ 720.335580][T12178] lo speed is unknown, defaulting to 1000 [ 720.445322][ T29] audit: type=1400 audit(1783755493.015:862): avc: denied { read write } for pid=12159 comm="syz.2.1571" name="cdc-wdm0" dev="devtmpfs" ino=3876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 720.500713][ T29] audit: type=1400 audit(1783755493.015:863): avc: denied { open } for pid=12159 comm="syz.2.1571" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 720.560020][ T9342] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 720.615823][T12181] binder: 12180:12181 ioctl c0306201 2000000003c0 returned -14 [ 720.725732][ T9342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.739337][ T9342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.768160][ T9342] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 720.791963][ T9331] usb 3-1: USB disconnect, device number 42 [ 720.801551][ T9342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.810755][ T6503] net_ratelimit: 23 callbacks suppressed [ 720.810774][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.836028][T12183] netlink: 'syz.6.1578': attribute type 2 has an invalid length. [ 720.847232][ T9342] usb 1-1: config 0 descriptor?? [ 720.851813][T12183] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1578'. [ 721.084848][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.095108][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.103762][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.107910][T12191] l2tp_ppp: sess 2/0: no socket in recv [ 721.132206][ T9342] usbhid 1-1:0.0: can't add hid device: -71 [ 721.141416][ T9342] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 721.164871][ T9342] usb 1-1: USB disconnect, device number 47 [ 721.230282][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.259810][ T9354] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 721.341207][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.359255][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1582'. [ 721.403518][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1582'. [ 721.414571][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1582'. [ 721.443023][ T9354] usb 2-1: Using ep0 maxpacket: 32 [ 721.468416][ T9354] usb 2-1: config 6 has an invalid interface number: 37 but max is 2 [ 721.502595][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 721.527493][ T9354] usb 2-1: config 6 has an invalid interface number: 26 but max is 2 [ 721.536634][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.572064][ T9354] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 721.604928][ T9354] usb 2-1: config 6 has an invalid interface number: 26 but max is 2 [ 721.636417][ T9354] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 721.647452][ T9354] usb 2-1: config 6 has no interface number 0 [ 721.659232][ T9354] usb 2-1: config 6 has no interface number 1 [ 721.671150][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.679963][ T9354] usb 2-1: config 6 interface 37 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 721.692389][ T9342] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 721.701331][ T9354] usb 2-1: config 6 interface 37 altsetting 11 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 721.713853][ T9354] usb 2-1: config 6 interface 37 altsetting 11 bulk endpoint 0x2 has invalid maxpacket 32 [ 721.741010][ T9354] usb 2-1: config 6 interface 26 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 721.741219][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.753283][ T9354] usb 2-1: config 6 interface 26 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 721.768948][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 721.787276][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 721.795472][ T24] usb 6-1: Product: syz [ 721.795732][ T9354] usb 2-1: config 6 interface 26 altsetting 7 endpoint 0xD has invalid maxpacket 399, setting to 64 [ 721.799914][ T24] usb 6-1: Manufacturer: syz [ 721.799934][ T24] usb 6-1: SerialNumber: syz [ 721.817329][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.822321][ T9354] usb 2-1: config 6 interface 26 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 721.841774][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 721.853823][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 721.866068][ T9342] usb 1-1: Using ep0 maxpacket: 16 [ 721.872156][ T9354] usb 2-1: config 6 interface 26 altsetting 7 endpoint 0x4 has invalid maxpacket 1056, setting to 64 [ 721.884669][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 721.896675][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 721.908467][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 721.920759][ T9342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.939859][ T9342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.940227][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.953702][ T9342] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.40 [ 721.990061][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has an endpoint descriptor with address 0x15, changing to 0x5 [ 722.016361][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 722.019853][ T9342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.037681][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 722.053345][ T9354] usb 2-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 722.068211][ T9354] usb 2-1: config 6 interface 26 altsetting 7 endpoint 0xE has invalid maxpacket 52126, setting to 64 [ 722.085249][ T9342] usb 1-1: config 0 descriptor?? [ 722.100071][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 722.118250][ T9342] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 722.135118][ T9354] usb 2-1: config 6 interface 37 has no altsetting 0 [ 722.142561][ T9354] usb 2-1: config 6 interface 26 has no altsetting 0 [ 722.150094][ T9354] usb 2-1: config 6 interface 26 has no altsetting 1 [ 722.158873][ T9354] usb 2-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=fe.78 [ 722.168717][ T9354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.177237][ T9354] usb 2-1: Manufacturer: 㰊 [ 722.182410][ T9354] usb 2-1: SerialNumber: О [ 722.193996][T12179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 722.219838][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 722.248449][ T29] audit: type=1400 audit(1783755494.815:864): avc: denied { read write } for pid=12187 comm="syz.5.1580" name="lp0" dev="devtmpfs" ino=3882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 722.291933][ T29] audit: type=1400 audit(1783755494.815:865): avc: denied { open } for pid=12187 comm="syz.5.1580" path="/dev/usb/lp0" dev="devtmpfs" ino=3882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 722.326647][ T24] usb 6-1: USB disconnect, device number 11 [ 722.346084][ T29] audit: type=1400 audit(1783755494.855:866): avc: denied { append } for pid=12208 comm="syz.6.1588" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 722.379606][ T24] usblp0: removed [ 722.502439][ T29] audit: type=1400 audit(1783755495.075:867): avc: denied { append } for pid=12215 comm="syz.2.1590" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 722.641471][ T9354] option 2-1:6.37: GSM modem (1-port) converter detected [ 722.673525][ T9354] option 2-1:6.26: GSM modem (1-port) converter detected [ 722.712655][ T9354] usb 2-1: USB disconnect, device number 46 [ 722.736441][ T9354] option 2-1:6.37: device disconnected [ 722.809550][ T9354] option 2-1:6.26: device disconnected [ 722.953439][ T9342] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 723.181348][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 723.207716][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 723.218535][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 723.233809][ T92] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.317766][ T9342] usb 1-1: USB disconnect, device number 48 [ 723.345304][ T6503] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.375049][ T6503] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.424571][ T6503] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.950320][ T9342] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 725.101543][ T9354] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 725.143131][ T9342] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 725.174874][ T9342] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 725.194785][T12264] lo speed is unknown, defaulting to 1000 [ 725.213544][ T9342] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.245402][ T9342] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 725.273279][ T9342] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.286806][ T9342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.304928][ T9342] usb 1-1: Product: syz [ 725.311916][ T9354] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 725.321685][ T9342] usb 1-1: Manufacturer: syz [ 725.329672][ T9354] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 725.342072][ T9342] usb 1-1: SerialNumber: syz [ 725.359280][ T9354] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 725.369096][T12247] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 725.384369][ T9354] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.417329][ T9331] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 725.425456][ T9354] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 725.480612][ T9354] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 725.540741][ T9354] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.580634][T12247] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 725.606222][ T9354] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.626762][ T9331] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 725.645630][ T9331] usb 2-1: config 0 has no interface number 0 [ 725.652261][ T9354] usb 7-1: Product: syz [ 725.663198][ T9354] usb 7-1: Manufacturer: syz [ 725.678301][ T9331] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.710629][T12255] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 725.758635][ T9354] cdc_wdm 7-1:1.0: skipping garbage [ 725.769676][ T9331] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 725.779374][ T9354] cdc_wdm 7-1:1.0: skipping garbage [ 725.797761][ T9331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.810673][ T9354] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 725.819630][ T9331] usb 2-1: Product: syz [ 725.826161][ T9354] cdc_wdm 7-1:1.0: Unknown control protocol [ 725.834277][ T9331] usb 2-1: Manufacturer: syz [ 725.842086][ T9331] usb 2-1: SerialNumber: syz [ 725.879850][ T6503] net_ratelimit: 26 callbacks suppressed [ 725.879870][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.922246][ T9331] usb 2-1: config 0 descriptor?? [ 725.955271][ T9331] yurex 2-1:0.50: USB YUREX device now attached to Yurex #1 [ 726.067439][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.074314][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.080742][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.087332][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.093797][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.100385][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.106696][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.113274][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.119779][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.126376][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.133355][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.139950][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.146212][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.152813][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.159053][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.165646][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.174540][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.181168][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.189784][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 726.196385][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 726.297608][ T9331] usb 7-1: USB disconnect, device number 7 [ 726.303553][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 726.320485][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.362489][ T9354] usb 2-1: USB disconnect, device number 47 [ 726.450987][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.585538][T12274] tmpfs: Unknown parameter ' : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 4 gretap0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 5 erspan0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 6 ip_vti0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 7 ip6_vti0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 8 sit0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 9 ip6tnl0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 10 ip6gre0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 11 syz_tun : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 12 ip6gretap0: 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 13 bridge0 : 2 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 6A0000E0 1 0:00000000 0 [ 726.585538][T12274] 14 vcan0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 15 bond0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 16 team0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 17 dummy0 : 1 V3 [ 726.585538][T12274] 010000E0 1 0:00000000 0 [ 726.585538][T12274] 18 nlmon0 : 1 V3 [ 726.585538][T12274] 010000E0 [ 726.593823][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.768763][T12274] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1608'. [ 726.929923][ T9354] yurex 2-1:0.50: USB YUREX #1 now disconnected [ 727.236293][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 727.467538][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 727.521583][ T24] usb 3-1: config 6 has an invalid interface number: 37 but max is 2 [ 727.552836][ T24] usb 3-1: config 6 has an invalid interface number: 26 but max is 2 [ 727.578975][ T24] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 727.602874][ T24] usb 3-1: config 6 has an invalid interface number: 26 but max is 2 [ 727.617830][ T24] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 727.640793][ T24] usb 3-1: config 6 has no interface number 0 [ 727.656019][ T24] usb 3-1: config 6 has no interface number 1 [ 727.681360][ T24] usb 3-1: config 6 interface 37 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 727.739808][ T24] usb 3-1: config 6 interface 37 altsetting 11 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 727.849203][T12272] lo speed is unknown, defaulting to 1000 [ 727.863375][ T24] usb 3-1: config 6 interface 37 altsetting 11 bulk endpoint 0x2 has invalid maxpacket 32 [ 727.879922][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.921732][ T24] usb 3-1: config 6 interface 26 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 728.422946][ T24] usb 3-1: config 6 interface 26 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 728.449528][ T24] usb 3-1: config 6 interface 26 altsetting 7 endpoint 0xD has invalid maxpacket 399, setting to 64 [ 728.479248][ T24] usb 3-1: config 6 interface 26 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 728.493807][ T24] usb 3-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 728.507465][ T24] usb 3-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 728.525466][ T24] usb 3-1: config 6 interface 26 altsetting 7 endpoint 0x4 has invalid maxpacket 1056, setting to 64 [ 728.536660][ T24] usb 3-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 728.547541][ T24] usb 3-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 728.558347][ T24] usb 3-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 728.651724][ T24] usb 3-1: config 6 interface 26 altsetting 7 has an endpoint descriptor with address 0x15, changing to 0x5 [ 728.677394][ T24] usb 3-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 728.698390][ T24] usb 3-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 728.725868][ T24] usb 3-1: config 6 interface 26 altsetting 7 endpoint 0xE has invalid maxpacket 52126, setting to 64 [ 728.751061][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 728.782882][ T24] usb 3-1: config 6 interface 37 has no altsetting 0 [ 728.811036][ T9342] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 728.821605][ T24] usb 3-1: config 6 interface 26 has no altsetting 0 [ 728.837561][ T9342] cdc_ncm 1-1:1.0: bind() failure [ 728.851959][ T24] usb 3-1: config 6 interface 26 has no altsetting 1 [ 728.867091][ T9342] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 728.900711][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 728.903486][ T9342] cdc_ncm 1-1:1.1: bind() failure [ 728.960264][ T9342] usb 1-1: USB disconnect, device number 49 [ 729.280958][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 729.500023][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 729.634148][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 729.682149][ T24] usb 3-1: string descriptor 0 read error: -71 [ 729.721027][ T24] usb 3-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=fe.78 [ 729.751508][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.796536][ T24] usb 3-1: can't set config #6, error -71 [ 729.863001][ T24] usb 3-1: USB disconnect, device number 43 [ 730.238707][T12307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 730.551457][ T9342] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 730.642553][T12320] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 730.663321][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1622'. [ 730.717036][ T9342] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 730.733009][ T9342] usb 2-1: config 0 has no interface number 0 [ 730.744903][ T9342] usb 2-1: config 0 interface 41 has no altsetting 0 [ 730.756241][ T9342] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 730.769117][ T9342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.783535][ T9342] usb 2-1: Product: syz [ 730.791043][ T9342] usb 2-1: Manufacturer: syz [ 730.797904][ T9342] usb 2-1: SerialNumber: syz [ 730.826072][ T9342] usb 2-1: config 0 descriptor?? [ 730.991218][ T6503] net_ratelimit: 11 callbacks suppressed [ 730.991259][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.241117][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.400164][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.511699][ T9345] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 731.549950][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.669878][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.716591][ T9345] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 731.766045][ T9345] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 731.781104][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.883471][ T9345] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.930102][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.956022][ T9342] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 732.011981][ T9345] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 732.069835][ T9345] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.078930][ T9345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.087071][ T9345] usb 7-1: Product: syz [ 732.099799][ T9345] usb 7-1: Manufacturer: syz [ 732.106366][ T9345] usb 7-1: SerialNumber: syz [ 732.111413][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.141282][T12331] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 732.219809][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.331424][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.351852][T12331] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 732.429888][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 732.590068][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 732.597589][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 732.608819][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 732.618849][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 732.628258][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 732.638360][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 732.648500][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 732.685656][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 732.708092][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.727929][ T24] usb 1-1: config 0 descriptor?? [ 732.953111][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 732.999112][ T24] usb 1-1: USB disconnect, device number 50 [ 733.024825][ T24] usblp0: removed [ 733.245904][ T9342] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 733.258916][ T9342] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 733.274152][ T9342] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 733.299884][ T9342] usb 2-1: USB disconnect, device number 48 [ 733.399920][ T9354] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 733.499766][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 733.573726][ T9354] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.591949][ T9354] usb 6-1: config 0 has no interfaces? [ 733.602138][ T9354] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 733.622325][ T9354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.652344][ T9354] usb 6-1: config 0 descriptor?? [ 733.689845][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 733.705235][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 733.724484][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 733.744687][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 733.763061][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 733.785079][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 733.804933][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 733.833765][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 733.852767][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.879988][ T24] usb 1-1: config 0 descriptor?? [ 733.979823][T12361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12361 comm=syz.1.1632 [ 733.989083][ T9342] libceph: connect (1)[c::]:6789 error -101 [ 734.062643][ T9342] libceph: mon0 (1)[c::]:6789 connect error [ 734.066341][T12361] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 734.087915][ T9342] libceph: connect (1)[c::]:6789 error -101 [ 734.105105][ T9342] libceph: mon0 (1)[c::]:6789 connect error [ 734.111165][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 734.150379][T12361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.195390][T12358] ceph: No mds server is up or the cluster is laggy [ 734.292583][T12361] bond1: (slave dummy0): making interface the new active one [ 734.307641][ T5796] usb 6-1: USB disconnect, device number 12 [ 734.354194][T12361] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 734.807687][ T9345] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 734.846047][ T9345] cdc_ncm 7-1:1.0: bind() failure [ 734.896024][ T9345] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 734.938570][ T9345] cdc_ncm 7-1:1.1: bind() failure [ 734.995980][ T9345] usb 7-1: USB disconnect, device number 8 [ 735.661634][ T1096] bond0: (slave bond_slave_0): interface is now down [ 735.717444][ T1096] bond0: (slave bond_slave_1): interface is now down [ 735.736023][ T1096] bond0: now running without any active interface! [ 735.753926][ T9342] usb 1-1: USB disconnect, device number 51 [ 735.773252][ T9342] usblp0: removed [ 735.839898][ T9354] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 736.079907][ T1096] net_ratelimit: 25 callbacks suppressed [ 736.079956][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.229860][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.319910][ T9345] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 736.360384][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.423781][T12388] infiniband syz1: set down [ 736.428555][T12388] infiniband syz1: added bond0 [ 736.440236][ T9354] usb 6-1: Using ep0 maxpacket: 16 [ 736.479810][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.600402][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.625535][T12388] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 736.680731][T12388] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 736.706597][T12388] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 736.731072][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.775218][ T9354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.787446][ T9354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.797873][ T9354] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 736.811631][ T9354] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 736.821886][ T9354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.830903][ T9342] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 736.848409][ T9354] usb 6-1: config 0 descriptor?? [ 736.849813][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.892988][T12388] RDS/IB: syz1: added [ 736.903114][T12388] smc: adding ib device syz1 with port count 1 [ 736.923482][T12388] smc: ib device syz1 port 1 has no pnetid [ 736.955719][ T9345] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.005479][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.026230][ T9345] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 737.051111][ T9345] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.129914][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.254874][ T29] audit: type=1400 audit(1783755509.825:868): avc: denied { read } for pid=12380 comm="syz.5.1638" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 737.284311][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 737.337371][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.389222][ T29] audit: type=1400 audit(1783755509.855:869): avc: denied { open } for pid=12380 comm="syz.5.1638" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 737.391220][ T9345] usb 7-1: config 0 descriptor?? [ 737.422934][ T9345] pwc: Askey VC010 type 2 USB webcam detected. [ 737.497908][ T29] audit: type=1400 audit(1783755509.905:870): avc: denied { ioctl } for pid=12380 comm="syz.5.1638" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 737.982967][ T9354] usbhid 6-1:0.0: can't add hid device: -71 [ 737.990589][ T9354] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 738.009086][ T9345] pwc: recv_control_msg error -32 req 02 val 2b00 [ 738.016678][ T9354] usb 6-1: USB disconnect, device number 13 [ 738.026521][ T9345] pwc: recv_control_msg error -32 req 02 val 2700 [ 738.054104][ T9345] pwc: recv_control_msg error -32 req 02 val 2c00 [ 738.729453][ T9342] usb 1-1: unable to get BOS descriptor or descriptor too short [ 738.740068][ T9342] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 738.749506][ T9345] pwc: recv_control_msg error -32 req 04 val 1000 [ 738.767656][ T9342] usb 1-1: can't read configurations, error -71 [ 738.775280][ T9345] pwc: recv_control_msg error -32 req 04 val 1300 [ 738.785009][ T9345] pwc: recv_control_msg error -32 req 04 val 1400 [ 738.793932][ T9345] pwc: recv_control_msg error -32 req 02 val 2000 [ 738.811829][ T9345] pwc: recv_control_msg error -32 req 02 val 2100 [ 739.429062][ T9345] pwc: recv_control_msg error -71 req 02 val 2500 [ 739.603887][ T9345] pwc: recv_control_msg error -71 req 02 val 2400 [ 739.717302][ T9345] pwc: recv_control_msg error -71 req 02 val 2600 [ 739.901332][ T9345] pwc: recv_control_msg error -71 req 02 val 2900 [ 739.964073][ T9345] pwc: recv_control_msg error -71 req 02 val 2800 [ 740.007329][ T9345] pwc: recv_control_msg error -71 req 04 val 1100 [ 740.051631][ T9345] pwc: recv_control_msg error -71 req 04 val 1200 [ 740.080250][ T9345] pwc: Registered as video103. [ 740.146284][ T9345] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input60 [ 740.152189][T12417] syzkaller0: entered promiscuous mode [ 740.174686][T12417] syzkaller0: entered allmulticast mode [ 740.233676][ T9345] usb 7-1: USB disconnect, device number 9 [ 742.184566][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.191052][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.221609][ T1096] net_ratelimit: 28 callbacks suppressed [ 742.221641][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.422469][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.572173][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.709951][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.899810][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.131139][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.259922][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.400722][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.557081][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.701025][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.349950][ T5796] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 744.591273][ T5796] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 744.611476][ T29] audit: type=1400 audit(1783755517.175:871): avc: denied { mount } for pid=12453 comm="syz.0.1660" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 744.671053][ T5796] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 744.737609][ T5796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 744.770195][ T5796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 744.795971][ T5796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 744.813447][ T5796] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 744.822810][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 744.834403][ T5796] usb 2-1: Product: syz [ 744.838724][ T5796] usb 2-1: Manufacturer: syz [ 744.879488][ T5796] cdc_wdm 2-1:1.0: skipping garbage [ 744.898430][ T5796] cdc_wdm 2-1:1.0: skipping garbage [ 744.944080][ T5796] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 744.957631][ T5796] cdc_wdm 2-1:1.0: Unknown control protocol [ 745.336817][T12469] syzkaller0: entered promiscuous mode [ 745.386575][ C1] wdm_int_callback: 516 callbacks suppressed [ 745.386600][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 745.440240][T12469] syzkaller0: entered allmulticast mode [ 745.610967][ T9345] usb 2-1: USB disconnect, device number 49 [ 746.072472][ T29] audit: type=1400 audit(1783755518.635:872): avc: denied { map } for pid=12475 comm="syz.5.1665" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 746.758728][T12476] syzkaller0: entered promiscuous mode [ 746.805379][T12476] syzkaller0: entered allmulticast mode [ 747.279904][ T1096] net_ratelimit: 17 callbacks suppressed [ 747.279924][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.594066][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.710275][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.842520][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.951203][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.060015][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.186795][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.299832][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.324139][T12504] syzkaller0: entered promiscuous mode [ 748.348387][T12504] syzkaller0: entered allmulticast mode [ 748.429937][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.639909][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.032499][ T29] audit: type=1400 audit(1783755521.605:873): avc: denied { read } for pid=12513 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 751.271551][ T9345] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 751.502724][ T9345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.544152][ T9345] usb 1-1: config 0 has no interfaces? [ 751.606743][ T9345] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 751.630686][ T9345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.669846][ T9345] usb 1-1: Product: syz [ 751.689350][ T9345] usb 1-1: Manufacturer: syz [ 751.702980][ T9345] usb 1-1: SerialNumber: syz [ 751.759108][ T9345] usb 1-1: config 0 descriptor?? [ 752.172038][ T9345] usb 1-1: USB disconnect, device number 54 [ 752.289860][ T1165] net_ratelimit: 31 callbacks suppressed [ 752.289880][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.429829][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.539902][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.660127][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.799925][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.769943][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.827693][T12552] syzkaller0: entered promiscuous mode [ 753.853389][T12552] syzkaller0: entered allmulticast mode [ 754.031814][T12554] syzkaller0: entered promiscuous mode [ 754.054422][T12554] syzkaller0: entered allmulticast mode [ 754.136358][T12567] syzkaller0: entered promiscuous mode [ 754.142755][T12567] syzkaller0: entered allmulticast mode [ 754.182707][ T5716] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 754.432895][ T5716] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.444257][ T5716] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 754.454440][ T5716] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 754.464130][ T5716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.481985][ T5716] usb 7-1: config 0 descriptor?? [ 754.527903][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 754.590774][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 754.855793][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 754.862891][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 754.871371][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 754.885287][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 755.018790][T12578] ceph: No mds server is up or the cluster is laggy [ 759.238111][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 759.238840][T12565] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 759.299095][ T9342] usb 7-1: USB disconnect, device number 10 [ 759.417901][T12602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.429876][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 759.601101][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 760.009358][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 760.442015][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 760.968771][ T50] Bluetooth: hci5: link tx timeout [ 760.975188][ T50] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 760.989580][ T50] Bluetooth: hci5: link tx timeout [ 760.995283][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.051778][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 761.680488][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 761.886341][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 762.105234][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 762.490000][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 762.599860][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.069773][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 763.610118][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 763.709540][T12636] lo speed is unknown, defaulting to 1000 [ 764.314549][ T29] audit: type=1800 audit(1783755536.885:874): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1702" name="file2" dev="tmpfs" ino=1674 res=0 errno=0 [ 764.347267][ T9070] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 764.421891][ T5796] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 764.493081][ T6503] net_ratelimit: 10 callbacks suppressed [ 764.493114][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.521052][ T9070] usb 7-1: Using ep0 maxpacket: 32 [ 764.554632][ T9070] usb 7-1: config 6 has an invalid interface number: 37 but max is 2 [ 764.575373][T12647] syzkaller0: entered promiscuous mode [ 764.586375][ T9070] usb 7-1: config 6 has an invalid interface number: 26 but max is 2 [ 764.598302][ T5796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.615580][T12647] syzkaller0: entered allmulticast mode [ 764.626434][ T5796] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 764.636191][ T9070] usb 7-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 764.658510][ T5796] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 764.670095][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.674747][ T9070] usb 7-1: config 6 has an invalid interface number: 26 but max is 2 [ 764.689525][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.702056][ T9070] usb 7-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 764.717764][ T5796] usb 6-1: config 0 descriptor?? [ 764.725223][ T9070] usb 7-1: config 6 has no interface number 0 [ 764.751688][ T9070] usb 7-1: config 6 has no interface number 1 [ 764.768038][ T9070] usb 7-1: config 6 interface 37 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 764.786490][ T9070] usb 7-1: config 6 interface 37 altsetting 11 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 764.808208][ T9070] usb 7-1: config 6 interface 37 altsetting 11 bulk endpoint 0x2 has invalid maxpacket 32 [ 764.821680][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.836741][ T9070] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 764.881347][ T9070] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 764.927957][ T9070] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0xD has invalid maxpacket 399, setting to 64 [ 764.940933][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.974154][ T9070] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 764.985733][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 764.998562][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 765.009941][ T9070] usb 7-1: config 6 interface 26 altsetting 7 endpoint 0x4 has invalid maxpacket 1056, setting to 64 [ 765.021869][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 765.033385][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 765.044826][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 765.056060][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has an endpoint descriptor with address 0x15, changing to 0x5 [ 765.068936][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 765.080848][ T9070] usb 7-1: config 6 interface 26 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 765.091887][ T9070] usb 7-1: config 6 interface 37 has no altsetting 0 [ 765.098700][ T9070] usb 7-1: config 6 interface 26 has no altsetting 0 [ 765.105335][ T9354] libceph: connect (1)[c::]:6789 error -101 [ 765.117196][ T9070] usb 7-1: config 6 interface 26 has no altsetting 1 [ 765.130310][ T9354] libceph: mon0 (1)[c::]:6789 connect error [ 765.149662][ T9354] libceph: connect (1)[c::]:6789 error -101 [ 765.156477][ T9070] usb 7-1: New USB device found, idVendor=19d2, idProduct=1095, bcdDevice=fe.78 [ 765.176679][ T9354] libceph: mon0 (1)[c::]:6789 connect error [ 765.191403][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.206405][ T9070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.236061][ T9070] usb 7-1: Manufacturer: 㰊 [ 765.254039][T12653] ceph: No mds server is up or the cluster is laggy [ 765.263508][ T9070] usb 7-1: SerialNumber: О [ 765.322502][T12638] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 765.334263][ T7367] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.397858][ T9350] usb 6-1: USB disconnect, device number 14 [ 765.450531][ T7367] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.579969][ T5796] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 765.589879][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.619855][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 765.714992][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.733932][ T5796] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 765.756938][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.779177][ T5796] usb 1-1: Product: syz [ 765.789284][ T5796] usb 1-1: Manufacturer: syz [ 765.794345][ T5796] usb 1-1: SerialNumber: syz [ 767.060315][ T5796] usb 1-1: config 0 descriptor?? [ 767.068528][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 768.127339][ T5796] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 768.170874][ T5796] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 769.267681][ T9354] usb 1-1: USB disconnect, device number 55 [ 769.559989][ T1165] net_ratelimit: 11 callbacks suppressed [ 769.560008][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.709928][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.795879][ T9070] option 7-1:6.37: GSM modem (1-port) converter detected [ 769.821005][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.950246][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 770.081744][ T9070] option 7-1:6.26: GSM modem (1-port) converter detected [ 770.260021][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 770.288426][ T9070] usb 7-1: USB disconnect, device number 11 [ 770.302950][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 770.391447][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 770.453901][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 771.127569][ T9070] option 7-1:6.37: device disconnected [ 771.163260][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'. [ 771.272946][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 771.337977][ T9070] option 7-1:6.26: device disconnected [ 771.419841][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 771.628020][ T7367] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 771.759241][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 772.372496][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.049167][ T29] audit: type=1400 audit(1783755545.615:875): avc: denied { getopt } for pid=12720 comm="syz.1.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 773.069277][T12722] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 773.123501][T12722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 773.183380][T12722] bond2: (slave geneve2): making interface the new active one [ 773.193338][T12722] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 773.392546][ T9070] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 773.416957][T12729] syzkaller0: entered promiscuous mode [ 773.440406][T12729] syzkaller0: entered allmulticast mode [ 773.512558][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 773.547174][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 773.557630][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 773.587117][ T6504] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.609197][ T9070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.676385][ T9070] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 773.740604][ T6504] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.775778][ T9070] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 773.858409][ T9070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.937733][ T9070] usb 6-1: config 0 descriptor?? [ 774.035697][ T7365] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.055338][ T7365] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.737746][ T9342] libceph: connect (1)[c::]:6789 error -101 [ 774.762248][ T9342] libceph: mon0 (1)[c::]:6789 connect error [ 774.784088][ T9342] libceph: connect (1)[c::]:6789 error -101 [ 774.791293][ T9342] libceph: mon0 (1)[c::]:6789 connect error [ 775.052216][ T7369] net_ratelimit: 10 callbacks suppressed [ 775.052238][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 775.073190][T12742] ceph: No mds server is up or the cluster is laggy [ 775.083464][ T9342] libceph: connect (1)[c::]:6789 error -101 [ 775.120031][ T9342] libceph: mon0 (1)[c::]:6789 connect error [ 775.222959][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 775.359855][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 776.249016][ T9342] libceph: connect (1)[c::]:6789 error -101 [ 776.261306][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 776.288673][ T9342] libceph: mon0 (1)[c::]:6789 connect error [ 776.371155][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 776.539992][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 776.747250][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 776.899970][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 776.906097][ T9342] usb 6-1: USB disconnect, device number 15 [ 777.775980][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 777.899811][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 777.934839][ T29] audit: type=1800 audit(1783755550.505:876): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1733" name="file1" dev="tmpfs" ino=3 res=0 errno=0 [ 778.079880][ T5716] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 778.385133][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 778.406293][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 778.417711][ T9070] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 778.435475][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 778.469363][ T5716] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 778.489438][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.513585][ T5716] usb 6-1: Product: syz [ 778.529550][ T5716] usb 6-1: Manufacturer: syz [ 778.540190][ T5716] usb 6-1: SerialNumber: syz [ 778.613896][ T9070] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 779.499583][ T9070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.508760][ T5716] usb 6-1: config 0 descriptor?? [ 779.517052][ T9070] usb 3-1: Product: syz [ 779.525227][ T9070] usb 3-1: Manufacturer: syz [ 779.530113][ T9070] usb 3-1: SerialNumber: syz [ 779.537684][ T9070] usb 3-1: config 0 descriptor?? [ 779.755171][ T9070] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 779.782024][ T5716] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 780.363260][ T7374] net_ratelimit: 14 callbacks suppressed [ 780.363296][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 780.822782][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 780.939935][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 780.957737][ T9350] usb 6-1: USB disconnect, device number 16 [ 781.081893][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 781.129825][ T9345] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 781.209790][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 781.313443][T12807] syz_tun: entered allmulticast mode [ 781.314681][ T9345] usb 1-1: Using ep0 maxpacket: 8 [ 781.321602][T12807] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 781.335030][T12807] mroute: pending queue full, dropping entries [ 781.342757][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 781.344789][ T9345] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 781.351422][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 781.361042][ T9345] usb 1-1: config 0 has no interface number 0 [ 781.369824][ C1] mroute: pending queue full, dropping entries [ 781.391854][ T9345] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 781.404634][ T9345] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 781.416057][ T9345] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 781.557498][ T9345] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 781.573555][ T9345] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.587830][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 782.350176][ T9345] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 782.360071][ T9345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.370796][ T9345] usb 1-1: Product: syz [ 782.377119][ T9345] usb 1-1: Manufacturer: syz [ 782.383182][ T9345] usb 1-1: SerialNumber: syz [ 782.402664][ T9345] usb 1-1: config 0 descriptor?? [ 782.412174][ T9070] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 782.452176][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 782.469911][ T9331] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 782.477763][ T9070] usb 3-1: USB disconnect, device number 44 [ 782.694951][ T9345] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 783.501486][ T9331] usb 7-1: Using ep0 maxpacket: 16 [ 783.687039][ T9331] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 783.699964][ T9331] usb 7-1: config 0 interface 0 has no altsetting 0 [ 783.715426][ T9331] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 783.727892][ T9331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.095973][ T9331] usb 7-1: config 0 descriptor?? [ 784.792005][ T9070] usb 1-1: USB disconnect, device number 56 [ 785.789283][ T7374] net_ratelimit: 7 callbacks suppressed [ 785.789302][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 786.172153][ T9331] usbhid 7-1:0.0: can't add hid device: -71 [ 786.195874][ T9331] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 786.211677][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 786.359535][ T9331] usb 7-1: USB disconnect, device number 12 [ 786.464038][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 787.449983][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 787.879834][ T9070] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 788.381922][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 788.425766][T12854] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 788.520591][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 788.634058][ T9070] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.664240][ T9070] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 788.689937][ T9070] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 788.731713][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 788.744155][ T9070] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 788.787402][ T9070] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.810190][ T9070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.852676][ T9070] usb 1-1: Product: syz [ 788.866712][ T9070] usb 1-1: Manufacturer: syz [ 788.884166][ T9070] usb 1-1: SerialNumber: syz [ 788.885320][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 788.895622][T12851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 789.259879][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 789.293176][T12861] tipc: Started in network mode [ 789.299897][T12861] tipc: Node identity be1c27e2f213, cluster identity 4711 [ 789.321223][T12861] tipc: Enabled bearer , priority 0 [ 789.374363][T12862] syzkaller0: entered promiscuous mode [ 789.390398][T12862] syzkaller0: entered allmulticast mode [ 789.429811][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 789.484622][T12851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 789.704883][T12862] tipc: Resetting bearer [ 789.833364][T12860] tipc: Resetting bearer [ 789.971777][T12860] tipc: Disabling bearer [ 789.990619][ T9331] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 790.169832][ T9331] usb 6-1: Using ep0 maxpacket: 8 [ 790.209790][ T9331] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 790.236292][ T9331] usb 6-1: config 179 has no interface number 0 [ 790.266879][ T9331] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 790.305102][ T9331] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 790.324739][T12876] syzkaller0: entered promiscuous mode [ 790.339906][T12876] syzkaller0: entered allmulticast mode [ 790.352881][ T9331] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 790.383456][ T9331] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 790.410559][T12876] tipc: Enabled bearer , priority 0 [ 790.419613][ T9331] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 790.450544][ T9331] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 790.460948][T12875] tipc: Resetting bearer [ 790.476789][ T9331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.542329][T12865] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 790.581515][T12875] tipc: Disabling bearer [ 790.822309][ T1096] net_ratelimit: 4 callbacks suppressed [ 790.822328][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.073747][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.389168][T12883] syzkaller0: entered promiscuous mode [ 791.415744][T12883] syzkaller0: entered allmulticast mode [ 791.509836][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 792.058350][ T9331] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input61 [ 792.199950][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 792.373992][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 792.767451][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 792.878051][ T9350] usb 6-1: USB disconnect, device number 17 [ 792.878053][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 792.878095][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 792.930712][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.009894][ T9070] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 793.040100][ T9070] cdc_ncm 1-1:1.0: bind() failure [ 793.058674][ T9070] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 793.083203][ T9070] cdc_ncm 1-1:1.1: bind() failure [ 793.083259][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.169776][ T9070] usb 1-1: USB disconnect, device number 57 [ 793.249934][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.389836][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.942932][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801cf9b800: rx timeout, send abort [ 794.443025][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801cf9b800: abort rx timeout. Force session deactivation [ 794.642755][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1770'. [ 794.657334][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1770'. [ 794.667945][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1770'. [ 795.849719][ T7374] net_ratelimit: 13 callbacks suppressed [ 795.850111][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.368396][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.701301][ T6504] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.006402][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.141571][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.249981][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.360413][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.479912][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.549847][ T9070] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 797.599788][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.727570][ T9070] usb 3-1: Using ep0 maxpacket: 16 [ 797.732826][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.767373][ T9070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.824351][ T9070] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 797.877086][ T9070] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 797.926054][ T9070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.986511][ T9070] usb 3-1: config 0 descriptor?? [ 799.349903][T12952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.397962][T12952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.474187][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.676658][ T9070] usbhid 3-1:0.0: can't add hid device: -71 [ 800.686495][ T9070] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 800.708388][ T9070] usb 3-1: USB disconnect, device number 45 [ 800.876663][T12955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.920964][ T6503] net_ratelimit: 10 callbacks suppressed [ 800.920991][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 800.968486][T12957] syzkaller0: entered promiscuous mode [ 801.009920][T12957] syzkaller0: entered allmulticast mode [ 801.127087][T12965] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 801.171380][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.733676][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.950085][T12954] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1776'. [ 802.650475][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 804.293419][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.301293][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.748392][ T29] audit: type=1400 audit(1783755577.305:877): avc: denied { mounton } for pid=12989 comm="syz.2.1787" path="/proc/1150/task" dev="proc" ino=42466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 805.333809][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.534377][T13004] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 811.006469][T13036] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13038] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13036] [ 815.452164][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 815.516444][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 816.154901][ T29] audit: type=1400 audit(1783755588.715:878): avc: denied { getopt } for pid=13072 comm="syz.2.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 817.527877][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 817.544143][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 817.553156][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 817.563081][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 817.571134][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 818.416483][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 818.492554][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 818.527763][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 818.570898][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 818.633659][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 819.793692][ T50] Bluetooth: hci2: command tx timeout [ 820.163075][T12991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1788'. [ 820.804243][ T50] Bluetooth: hci6: command tx timeout [ 820.810193][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 820.914263][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 820.969860][ T7365] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 821.009804][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 821.051066][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 821.120088][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 821.285544][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 821.667394][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 821.869815][ T50] Bluetooth: hci2: command tx timeout [ 822.153267][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 822.425726][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.948875][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.957779][ T50] Bluetooth: hci6: command tx timeout [ 823.962673][ T5627] Bluetooth: hci2: command tx timeout [ 825.168253][ T7365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.181937][ T7365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.329821][T13010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 825.879463][ T7365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.912217][ T7365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.930175][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807843d400: rx timeout, send abort [ 825.941947][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807843d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 825.957833][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807de06800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 825.989874][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 826.022612][ T5627] Bluetooth: hci6: command tx timeout [ 826.030398][ T50] Bluetooth: hci2: command tx timeout [ 826.055175][T13095] lo speed is unknown, defaulting to 1000 [ 826.514939][ T7365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.601754][ T7365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.639816][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 826.750110][ T7365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.772996][ T7365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.169897][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.193313][T13085] lo speed is unknown, defaulting to 1000 [ 827.247439][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055922c00: rx timeout, send abort [ 827.258394][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055922c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 827.273678][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055920400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 827.290595][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.500534][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.649969][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.426132][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 828.582441][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 828.592765][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 828.631886][ T1096] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.690047][ T5627] Bluetooth: hci6: command tx timeout [ 828.888998][ T1096] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.965426][ T1096] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.027941][ T1096] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.930854][T13156] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 829.944389][ T7365] bridge_slave_1: left allmulticast mode [ 829.965628][ T7365] bridge_slave_1: left promiscuous mode [ 829.987345][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.034896][ T7365] bridge_slave_0: left allmulticast mode [ 830.061701][ T7365] bridge_slave_0: left promiscuous mode [ 830.087892][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.142932][ T7365] pim6reg: left allmulticast mode [ 830.256506][T13166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.500674][T13174] misc userio: Invalid payload size [ 833.259720][ T29] audit: type=1400 audit(1783755605.825:879): avc: denied { write } for pid=13163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.602449][ T7365] bond2 (unregistering): (slave geneve2): Releasing active interface [ 833.947835][ T29] audit: type=1400 audit(1783755606.515:880): avc: denied { write } for pid=13195 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.053110][T13010] smc: removing ib device syz1 [ 834.201899][ T7365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.230637][ T7365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.251327][ T7365] bond0 (unregistering): Released all slaves [ 834.316140][ T7365] bond1 (unregistering): (slave dummy0): Releasing active interface [ 834.392251][T13201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1826'. [ 834.477360][ T7365] bond1 (unregistering): Released all slaves [ 834.655552][ T7365] bond2 (unregistering): Released all slaves [ 834.804278][ T7369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.849607][T13010] smbdirect: ib_dev[syz1] removed [ 834.850270][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 835.869868][ T1096] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 836.371749][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 836.543012][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 837.929763][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.067188][T13243] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 838.078151][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.230044][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.379978][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.520122][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.624954][ T29] audit: type=1400 audit(1783755611.195:881): avc: denied { write } for pid=13215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.142871][ T9354] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 841.685501][ T29] audit: type=1400 audit(1783755614.255:882): avc: denied { write } for pid=13254 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.780991][ T7374] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 841.830208][ T9354] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 841.859528][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 841.872058][ T9354] usb 7-1: can't read configurations, error -71 [ 842.622232][T13269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 843.400927][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.412302][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.444591][T13095] bridge_slave_0: entered allmulticast mode [ 843.479039][T13095] bridge_slave_0: entered promiscuous mode [ 843.599789][T12680] block nbd64: NBD_DISCONNECT [ 843.656442][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.706013][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.738642][T13095] bridge_slave_1: entered allmulticast mode [ 843.812449][T13095] bridge_slave_1: entered promiscuous mode [ 844.491554][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 844.500995][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 844.543835][T13292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 844.575113][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 845.421104][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.449277][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.488171][T13085] bridge_slave_0: entered allmulticast mode [ 845.931933][T13085] bridge_slave_0: entered promiscuous mode [ 846.110461][T13307] tmpfs: Bad value for 'mpol' [ 846.119286][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.322548][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.353781][T13085] bridge_slave_1: entered allmulticast mode [ 846.402137][T13085] bridge_slave_1: entered promiscuous mode [ 846.439790][ T6503] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.600373][ T5627] Bluetooth: hci5: unexpected event for opcode 0x2023 [ 846.850015][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.331730][ T29] audit: type=1400 audit(1783755619.905:883): avc: denied { open } for pid=13317 comm="syz.6.1847" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 847.792210][ T7365] tipc: Left network mode [ 847.989571][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.015820][T13085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.341206][T13085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.447417][T13095] team0: Port device team_slave_0 added [ 848.486285][T13085] team0: Port device team_slave_0 added [ 848.501164][T13095] team0: Port device team_slave_1 added [ 848.501588][ T7365] IPVS: stopping master sync thread 10835 ... [ 848.513770][T13085] team0: Port device team_slave_1 added [ 848.733150][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.749729][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.810475][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.469512][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.495717][ T29] audit: type=1400 audit(1783755622.065:884): avc: denied { write } for pid=13306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.497962][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.583201][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.596786][T13085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.605091][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.630967][ T29] audit: type=1400 audit(1783755622.175:885): avc: denied { write } for pid=13349 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.633242][T13085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.674008][T13085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.683105][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.843871][T13085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.948059][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 850.053203][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.173574][T13085] hsr_slave_0: entered promiscuous mode [ 850.180706][T13085] hsr_slave_1: entered promiscuous mode [ 850.187364][T13085] debugfs: 'hsr0' already exists in 'hsr' [ 850.200239][ T5716] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 850.215427][T13085] Cannot create hsr debugfs directory [ 850.292290][ T7372] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.363760][T13095] hsr_slave_0: entered promiscuous mode [ 850.386118][ T5716] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 850.406964][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.444701][T13095] hsr_slave_1: entered promiscuous mode [ 850.473733][ T5716] usb 3-1: Product: syz [ 850.500150][ T5716] usb 3-1: Manufacturer: syz [ 850.504922][T13095] debugfs: 'hsr0' already exists in 'hsr' [ 850.520663][T13095] Cannot create hsr debugfs directory [ 850.526668][ T5716] usb 3-1: SerialNumber: syz [ 850.605835][ T5716] usb 3-1: config 0 descriptor?? [ 850.641091][ T5716] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 046 [ 850.666540][ T5627] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 850.678242][ T5627] Bluetooth: hci5: Injecting HCI hardware error event [ 850.690532][ T5627] Bluetooth: hci5: hardware error 0x00 [ 850.780849][ T92] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 851.046996][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.110020][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.284795][ T5716] (null): error -EIO: failure setting delay to 10us [ 851.303282][ T7365] hsr_slave_0: left promiscuous mode [ 851.318575][ T5716] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 851.371225][ T7365] hsr_slave_1: left promiscuous mode [ 851.384367][ T5716] usb 3-1: USB disconnect, device number 46 [ 851.400576][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.448441][ T7365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.554093][ T29] audit: type=1400 audit(1783755624.125:886): avc: denied { write } for pid=13361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.772154][ T29] audit: type=1400 audit(1783755624.345:887): avc: denied { write } for pid=13372 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.857595][ T7365] veth1_macvtap: left promiscuous mode [ 851.892267][ T7365] veth0_macvtap: left promiscuous mode [ 851.941448][ T7365] veth1_vlan: left promiscuous mode [ 852.000830][ T7365] veth0_vlan: left promiscuous mode [ 852.829806][ T5627] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 854.052297][ T29] audit: type=1400 audit(1783755626.335:888): avc: denied { accept } for pid=13385 comm="syz.2.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 854.113380][ T29] audit: type=1400 audit(1783755626.345:889): avc: denied { read } for pid=13385 comm="syz.2.1857" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 854.594419][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 854.890457][T13392] IPVS: Scheduler module ip_vs_ not found [ 855.473728][ T7365] team0 (unregistering): Port device team_slave_1 removed [ 855.519234][ T7365] team0 (unregistering): Port device team_slave_0 removed [ 855.721514][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 855.728942][T13383] batadv_slave_1: entered promiscuous mode [ 855.742192][T13383] batadv_slave_1: left promiscuous mode [ 856.465954][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.049928][ T1165] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.295209][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 962.409629][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 962.416632][ C1] rcu: 0-...!: (1 GPs behind) idle=7d14/1/0x4000000000000000 softirq=80542/80543 fqs=7 [ 962.427935][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13412/1:b..l P5608/1:b..l [ 962.437092][ C1] rcu: (detected by 1, t=10502 jiffies, g=88529, q=776 ncpus=2) [ 962.444801][ C1] Sending NMI from CPU 1 to CPUs 0: [ 962.444827][ C0] NMI backtrace for cpu 0 [ 962.444840][ C0] CPU: 0 UID: 0 PID: 13415 Comm: syz.2.1862 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.444859][ C0] Tainted: [L]=SOFTLOCKUP [ 962.444864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 962.444872][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 962.444895][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 0b 39 b9 f5 cc [ 962.444908][ C0] RSP: 0018:ffffc90000007e48 EFLAGS: 00000046 [ 962.444920][ C0] RAX: 0000000080010001 RBX: ffff888035c8a300 RCX: ffffffff81f561d2 [ 962.444930][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802c2bca80 [ 962.444939][ C0] RBP: ffff8880b8428540 R08: 0000000000000001 R09: 0000000000000000 [ 962.444952][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 962.444961][ C0] R13: ffff8880b8428400 R14: 0000000000000000 R15: 0000000000000000 [ 962.444970][ C0] FS: 00007f95bedc46c0(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000 [ 962.444985][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.444995][ C0] CR2: 000000110c29ca63 CR3: 000000002c063000 CR4: 00000000003526f0 [ 962.445005][ C0] Call Trace: [ 962.445012][ C0] [ 962.445018][ C0] __remove_hrtimer+0x122/0x440 [ 962.445041][ C0] __hrtimer_run_queues+0x352/0x9c0 [ 962.445062][ C0] hrtimer_interrupt+0x3e5/0x940 [ 962.445086][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 962.445107][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 962.445127][ C0] [ 962.445131][ C0] [ 962.445137][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.445152][ C0] RIP: 0010:timerfd_clock_was_set+0x1e0/0x310 [ 962.445173][ C0] Code: 00 00 00 e8 82 12 60 ff 48 c7 c7 00 61 be 8e 48 8d 35 00 00 00 00 e8 5f a8 3b ff 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c0 09 45 ff 5b 12 60 ff e8 c6 14 44 ff 31 ff 89 c3 89 c6 e8 5b 0c 60 ff 84 [ 962.445186][ C0] RSP: 0018:ffffc9000480fc68 EFLAGS: 00000202 [ 962.445197][ C0] RAX: ffffffff82a9bc36 RBX: 0000000000000001 RCX: ffffffff82a9bc57 [ 962.445207][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802c2bca80 [ 962.445216][ C0] RBP: ffff8880b8528400 R08: 0000000000000005 R09: 0000000000000000 [ 962.445225][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: fffffbfff22445f2 [ 962.445234][ C0] R13: 1bc16c9fafa874bf R14: 0000000000000000 R15: 0000000000000000 [ 962.445245][ C0] ? timerfd_clock_was_set+0x36/0x310 [ 962.445263][ C0] ? timerfd_clock_was_set+0x57/0x310 [ 962.445284][ C0] ? timerfd_clock_was_set+0x36/0x310 [ 962.445303][ C0] clock_was_set+0x652/0x850 [ 962.445325][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 962.445344][ C0] ? rcu_is_watching+0x12/0xc0 [ 962.445363][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 962.445382][ C0] do_settimeofday64+0x330/0x4d0 [ 962.445398][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 962.445412][ C0] ? security_capable+0x80/0x260 [ 962.445425][ C0] ? cma_query_handler+0x619/0x820 [ 962.445444][ C0] ? capable+0xd3/0xf0 [ 962.445460][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 962.445477][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 962.445498][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 962.445520][ C0] do_syscall_64+0x115/0x870 [ 962.445540][ C0] ? clear_bhb_loop+0x40/0x90 [ 962.445555][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.445569][ C0] RIP: 0033:0x7f95bdf9de59 [ 962.445583][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.445595][ C0] RSP: 002b:00007f95bedc4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 962.445607][ C0] RAX: ffffffffffffffda RBX: 00007f95be225fa0 RCX: 00007f95bdf9de59 [ 962.445616][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 962.445624][ C0] RBP: 00007f95be033e6f R08: 0000000000000000 R09: 0000000000000000 [ 962.445632][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.445657][ C0] R13: 00007f95be226038 R14: 00007f95be225fa0 R15: 00007ffca6e9e9f8 [ 962.445671][ C0] [ 962.445822][ C1] task:syz-executor state:R running task stack:22792 pid:5608 tgid:5608 ppid:5603 task_flags:0x400140 flags:0x00080002 [ 962.871535][ C1] Call Trace: [ 962.874804][ C1] [ 962.877728][ C1] __schedule+0x125c/0x6730 [ 962.882246][ C1] ? __pfx___schedule+0x10/0x10 [ 962.887093][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 962.893263][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 962.898651][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 962.904560][ C1] rcu_is_watching+0x8e/0xc0 [ 962.909148][ C1] lock_acquire+0x301/0x370 [ 962.913651][ C1] ? unwind_next_frame+0x3be/0x2090 [ 962.918847][ C1] ? unwind_next_frame+0x3be/0x2090 [ 962.924043][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 962.930195][ C1] unwind_next_frame+0xd1/0x2090 [ 962.935128][ C1] ? unwind_next_frame+0xbd/0x2090 [ 962.940237][ C1] ? __kasan_slab_free+0x5f/0x80 [ 962.945183][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 962.951337][ C1] arch_stack_walk+0x94/0xf0 [ 962.955927][ C1] ? __kasan_slab_free+0x5f/0x80 [ 962.960858][ C1] ? tomoyo_realpath_from_path+0x19c/0x690 [ 962.966663][ C1] stack_trace_save+0x8e/0xc0 [ 962.971340][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 962.976707][ C1] ? kasan_save_track+0x14/0x30 [ 962.981552][ C1] ? __lock_acquire+0x49f/0x1a40 [ 962.986487][ C1] ? do_syscall_64+0x115/0x870 [ 962.991249][ C1] kasan_save_stack+0x30/0x50 [ 962.995916][ C1] ? kasan_save_stack+0x30/0x50 [ 963.000756][ C1] ? kasan_save_track+0x14/0x30 [ 963.005596][ C1] ? kasan_save_free_info+0x3b/0x70 [ 963.010794][ C1] ? __kasan_slab_free+0x5f/0x80 [ 963.015760][ C1] kasan_save_track+0x14/0x30 [ 963.020428][ C1] kasan_save_free_info+0x3b/0x70 [ 963.025452][ C1] __kasan_slab_free+0x5f/0x80 [ 963.030213][ C1] ? tomoyo_realpath_from_path+0xa0/0x690 [ 963.035949][ C1] kfree+0x22b/0x6c0 [ 963.039844][ C1] tomoyo_realpath_from_path+0x19c/0x690 [ 963.045487][ C1] tomoyo_path_perm+0x276/0x460 [ 963.050332][ C1] ? tomoyo_path_perm+0x262/0x460 [ 963.055351][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 963.060717][ C1] ? mntput+0x70/0xa0 [ 963.064716][ C1] ? __d_lookup+0x25c/0x4a0 [ 963.069224][ C1] tomoyo_path_unlink+0x91/0xe0 [ 963.074075][ C1] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 963.079619][ C1] ? lookup_dcache+0x66/0x170 [ 963.084306][ C1] security_path_unlink+0x145/0x2b0 [ 963.089527][ C1] filename_unlinkat+0x316/0x730 [ 963.094502][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 963.099966][ C1] ? do_getname+0x191/0x390 [ 963.104470][ C1] __x64_sys_unlink+0x46/0x70 [ 963.109142][ C1] do_syscall_64+0x115/0x870 [ 963.113735][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.118493][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.124376][ C1] RIP: 0033:0x7f153019cf47 [ 963.128787][ C1] RSP: 002b:00007ffe780b9948 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 963.137194][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f153019cf47 [ 963.145155][ C1] RDX: 00007ffe780b9970 RSI: 00007ffe780b9a00 RDI: 00007ffe780b9a00 [ 963.153118][ C1] RBP: 00007ffe780b9a00 R08: 00007ffe780baa00 R09: 00000000ffffffff [ 963.161079][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe780baa90 [ 963.169044][ C1] R13: 00007f15302332ca R14: 00000000000d13ee R15: 00007ffe780baad0 [ 963.177019][ C1] [ 963.180030][ C1] task:syz.6.1861 state:R running task stack:25816 pid:13412 tgid:13410 ppid:11049 task_flags:0x400140 flags:0x00080000 [ 963.193519][ C1] Call Trace: [ 963.196789][ C1] [ 963.199714][ C1] __schedule+0x125c/0x6730 [ 963.204254][ C1] ? unwind_get_return_address+0x59/0xa0 [ 963.209893][ C1] ? __pfx___schedule+0x10/0x10 [ 963.214740][ C1] ? mark_held_locks+0x40/0x70 [ 963.219498][ C1] preempt_schedule_irq+0x50/0x90 [ 963.224520][ C1] irqentry_exit+0x205/0xa00 [ 963.229114][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 963.235084][ C1] RIP: 0010:__update_page_owner_handle+0x160/0x530 [ 963.241582][ C1] Code: ea 03 4a 8d 04 22 48 89 44 24 30 e8 ea f6 84 ff 48 8b 1d 63 c5 5c 0c 4c 01 fb 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 20 <84> c0 74 08 3c 03 0f 8e 8f 03 00 00 8b 44 24 0c 89 43 08 48 89 d8 [ 963.261180][ C1] RSP: 0018:ffffc90005266de0 EFLAGS: 00000a02 [ 963.267237][ C1] RAX: 0000000000000000 RBX: ffff88801e524678 RCX: ffffc90012ef3000 [ 963.275197][ C1] RDX: 0000000000080000 RSI: ffffffff8284d956 RDI: ffff88801e524680 [ 963.283158][ C1] RBP: 000000000004ba7b R08: 0000000000000007 R09: 0000000000000000 [ 963.291117][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 963.299097][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88801e524670 [ 963.307065][ C1] ? __update_page_owner_handle+0x146/0x530 [ 963.312964][ C1] __set_page_owner+0x11f/0x540 [ 963.317833][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 963.323213][ C1] ? bad_range+0x257/0x3f0 [ 963.327627][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 963.332823][ C1] ? get_page_from_freelist+0xf25/0x3530 [ 963.338459][ C1] post_alloc_hook+0xfd/0x120 [ 963.343136][ C1] get_page_from_freelist+0xf48/0x3530 [ 963.348595][ C1] ? __lock_acquire+0x49f/0x1a40 [ 963.353543][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 963.359457][ C1] ? prepare_alloc_pages+0x1f0/0x5f0 [ 963.364740][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 963.370650][ C1] ? rcu_is_watching+0x12/0xc0 [ 963.375431][ C1] ? trace_kmem_cache_alloc+0xdd/0x100 [ 963.380886][ C1] ? __lock_acquire+0x49f/0x1a40 [ 963.385819][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 963.392170][ C1] ? __css_rstat_updated+0x1ce/0x5a0 [ 963.397457][ C1] ? do_raw_spin_lock+0x128/0x260 [ 963.402478][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 963.407862][ C1] ? find_held_lock+0x2b/0x80 [ 963.412545][ C1] ? __lock_acquire+0x49f/0x1a40 [ 963.417493][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 963.423379][ C1] ? policy_nodemask+0xed/0x4f0 [ 963.428228][ C1] alloc_pages_mpol+0x1fb/0x540 [ 963.433161][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 963.438527][ C1] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 963.444428][ C1] folio_alloc_mpol_noprof+0x36/0x260 [ 963.449801][ C1] shmem_alloc_folio+0x135/0x160 [ 963.454738][ C1] shmem_alloc_and_add_folio+0x371/0xd40 [ 963.460375][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 963.466534][ C1] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 963.472516][ C1] shmem_get_folio_gfp+0x6ad/0x1910 [ 963.477716][ C1] ? filemap_map_pages+0x112d/0x1fe0 [ 963.482997][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 963.488631][ C1] ? filemap_map_pages+0x1137/0x1fe0 [ 963.493917][ C1] shmem_fault+0x1f9/0xa20 [ 963.498336][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 963.503274][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 963.508738][ C1] ? find_held_lock+0x2b/0x80 [ 963.513420][ C1] __do_fault+0x10b/0x440 [ 963.517744][ C1] do_fault+0xa99/0x1750 [ 963.521989][ C1] __handle_mm_fault+0x187d/0x2a00 [ 963.527104][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 963.532491][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 963.537952][ C1] ? pte_offset_map_lock+0x174/0x320 [ 963.543230][ C1] ? find_held_lock+0x2b/0x80 [ 963.547914][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 963.552937][ C1] handle_mm_fault+0x37b/0xa30 [ 963.557707][ C1] __get_user_pages+0x1178/0x32a0 [ 963.562736][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 963.568108][ C1] populate_vma_page_range+0x267/0x3f0 [ 963.573563][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 963.579536][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 963.585337][ C1] ? do_mmap+0x93f/0x12f0 [ 963.589665][ C1] __mm_populate+0x107/0x3a0 [ 963.594253][ C1] ? __pfx___mm_populate+0x10/0x10 [ 963.599361][ C1] ? up_write+0x2e5/0x5c0 [ 963.603688][ C1] vm_mmap_pgoff+0x37f/0x470 [ 963.608303][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 963.613420][ C1] ? __pfx_do_futex+0x10/0x10 [ 963.618099][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 963.622774][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 963.627710][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 963.632988][ C1] ? xfd_validate_state+0x129/0x190 [ 963.638273][ C1] __x64_sys_mmap+0x125/0x190 [ 963.643068][ C1] do_syscall_64+0x115/0x870 [ 963.647659][ C1] ? clear_bhb_loop+0x40/0x90 [ 963.652331][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.658215][ C1] RIP: 0033:0x7fb1bc59de59 [ 963.662618][ C1] RSP: 002b:00007fb1bd4f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 963.671037][ C1] RAX: ffffffffffffffda RBX: 00007fb1bc826090 RCX: 00007fb1bc59de59 [ 963.679002][ C1] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 963.686965][ C1] RBP: 00007fb1bc633e6f R08: ffffffffffffffff R09: 0000000000000000 [ 963.694928][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 963.702887][ C1] R13: 00007fb1bc826128 R14: 00007fb1bc826090 R15: 00007ffe02a3ced8 [ 963.710860][ C1] [ 963.713868][ C1] rcu: rcu_preempt kthread starved for 10488 jiffies! g88529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 963.725061][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 963.735054][ C1] rcu: RCU grace-period kthread stack dump: [ 963.740933][ C1] task:rcu_preempt state:R running task stack:28984 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 963.754422][ C1] Call Trace: [ 963.757688][ C1] [ 963.760612][ C1] __schedule+0x125c/0x6730 [ 963.765132][ C1] ? __pfx___schedule+0x10/0x10 [ 963.769977][ C1] ? find_held_lock+0x2b/0x80 [ 963.774650][ C1] ? schedule+0x225/0x2c0 [ 963.778980][ C1] schedule+0xdd/0x2c0 [ 963.783057][ C1] schedule_timeout+0x127/0x280 [ 963.787900][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 963.793284][ C1] ? __pfx_process_timeout+0x10/0x10 [ 963.798571][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 963.804370][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 963.809912][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 963.814676][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 963.819957][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 963.824886][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 963.830084][ C1] rcu_gp_kthread+0x179/0x230 [ 963.834751][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 963.839945][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 963.845748][ C1] ? __kthread_parkme+0x18c/0x230 [ 963.850769][ C1] ? kthread+0x13a/0x450 [ 963.855011][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 963.860197][ C1] kthread+0x370/0x450 [ 963.864265][ C1] ? __pfx_kthread+0x10/0x10 [ 963.868856][ C1] ret_from_fork+0x72b/0xd50 [ 963.873441][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 963.878547][ C1] ? __switch_to+0x800/0x10f0 [ 963.883222][ C1] ? __pfx_kthread+0x10/0x10 [ 963.887824][ C1] ret_from_fork_asm+0x1a/0x30 [ 963.892594][ C1] [ 963.895598][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 963.901919][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 963.912463][ C1] Tainted: [L]=SOFTLOCKUP [ 963.916792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 963.926850][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 963.932491][ C1] Code: a6 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 79 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 963.952085][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 963.958160][ C1] RAX: 00000000044bcefb RBX: ffff88801ea82540 RCX: ffffffff8bb922d5 [ 963.966120][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a3122 RDI: ffffffff8c400c80 [ 963.974079][ C1] RBP: ffffed1003d504a8 R08: 0000000000000001 R09: ffffed10170a678d [ 963.982055][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 963.990029][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 963.998083][ C1] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 964.007013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.013599][ C1] CR2: 00007f94edd76b44 CR3: 000000000e992000 CR4: 00000000003526f0 [ 964.021560][ C1] Call Trace: [ 964.024830][ C1] [ 964.027751][ C1] default_idle+0x9/0x10 [ 964.031986][ C1] default_idle_call+0x6c/0xb0 [ 964.036738][ C1] do_idle+0x3a7/0x5b0 [ 964.040805][ C1] ? __pfx_do_idle+0x10/0x10 [ 964.045395][ C1] cpu_startup_entry+0x4f/0x60 [ 964.050153][ C1] start_secondary+0x21d/0x2d0 [ 964.054925][ C1] ? __pfx_start_secondary+0x10/0x10 [ 964.060219][ C1] common_startup_64+0x13e/0x158 [ 964.065164][ C1]