last executing test programs: 13m1.187038914s ago: executing program 4 (id=814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0xc8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_ife={0xb0, 0x1, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x21b4539e, 0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) 12m56.906275063s ago: executing program 4 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r5, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 12m55.907535628s ago: executing program 4 (id=823): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000104000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="0500070000000000"], 0x48}}, 0x0) 12m55.564782582s ago: executing program 4 (id=825): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="c892b6bc436a00"/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1, 0x0, 0x7c10}, 0x10000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000061c0)=@deltfilter={0x107c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xb, 0x3}, {0x4, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x104c, 0x2, [@TCA_FLOW_POLICE={0x80c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x7, 0x1ff, 0x24, 0x7f800000, 0xdd0, 0x8001, 0x9, 0x4, 0x8, 0x3, 0x5, 0x6, 0x7f, 0x81, 0x40000000, 0x6, 0x3, 0x9, 0x3, 0x1, 0xebe, 0x4, 0x2, 0x7fff, 0x3, 0x3, 0x0, 0xb, 0x80, 0x9, 0x4, 0x8, 0x1ff, 0x4f, 0x4, 0x7, 0x9, 0xe025, 0xc, 0x2, 0x8a6, 0x5, 0x8, 0x80, 0x8, 0x25e, 0x8, 0x1, 0x1, 0x55ea429a, 0x5, 0x0, 0x8, 0x7, 0x7, 0x80000000, 0x1ff, 0xfffffff3, 0x8, 0x4, 0x9, 0x7ff, 0x3, 0x4, 0x7fff, 0xee, 0x5d93, 0x4963, 0x2, 0xb, 0x0, 0x8, 0x4, 0x5, 0x1, 0xfffffff9, 0x7, 0x56, 0x1000, 0x0, 0x0, 0xffff0001, 0x6, 0x2, 0x206, 0xa, 0x5, 0x75fba843, 0xfffffffb, 0xb, 0x6, 0x4, 0x7ff, 0xba3, 0x6, 0x2, 0x80000001, 0xf6, 0x1, 0x4, 0x5, 0x47c82681, 0x7fffffff, 0x40, 0x8001, 0x2, 0x7f, 0x6f, 0x3f896bdc, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x3, 0x9, 0xd, 0x1, 0x804, 0x99, 0x5, 0x8, 0x401, 0x1, 0x2, 0x6, 0x7, 0x6, 0xfffffffa, 0x3, 0xff, 0xff, 0x3, 0x8, 0x9, 0x1, 0x7, 0x8, 0x0, 0x5, 0x1, 0x22, 0x10ab, 0xfffffff8, 0xb, 0x8, 0x2, 0x3, 0x100, 0x7ba, 0xcdf, 0xfffff296, 0x3, 0x9, 0x9, 0xff, 0x8, 0x10, 0x8, 0x0, 0x6, 0x6, 0x200, 0x7, 0x6, 0x3, 0x9, 0x4, 0x401, 0x0, 0x0, 0x4, 0x0, 0x80000000, 0x400, 0x80000000, 0x6, 0x9, 0x2, 0x2, 0xe, 0x7, 0x7f, 0x800, 0x7fffffff, 0x0, 0x5, 0x7ff, 0x7f, 0x6, 0xffff, 0x9, 0x2, 0xa, 0x0, 0xb, 0x1, 0x7, 0x4, 0x3, 0x3, 0x6, 0xabb, 0x401, 0xf7b1, 0x3, 0x1, 0x8, 0x75, 0x6, 0x2, 0x1, 0x6, 0x7, 0x8, 0x4, 0x7, 0x8, 0x8, 0xfffffff7, 0x81, 0xe4, 0x2, 0xde, 0xf, 0x7ff, 0x488, 0x3, 0x0, 0x3, 0x5, 0x41, 0xfff, 0x8, 0xa237, 0xff, 0xc3b, 0x7, 0x4, 0x0, 0x4, 0x0, 0xb0, 0x9, 0x6, 0x0, 0xfffffffc, 0x10, 0x64, 0x5, 0x6, 0x8000, 0x8, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1a16, 0x5, 0x8, 0x3, 0x8, 0x7b, 0x7df, 0x6, 0x8, 0x5, 0x800, 0xfff, 0x9318, 0x3, 0x167, 0xfffffffd, 0x5, 0xe6e, 0x0, 0x4, 0x6, 0x9, 0x3, 0x8, 0x9, 0x80000001, 0x8, 0x9, 0x8, 0x6214, 0x200, 0x14, 0x4, 0x168ac436, 0xc00000, 0x7, 0x0, 0x7f, 0x3, 0x4, 0x800ffff, 0xf, 0x6, 0x7fff, 0xfffffff8, 0x9, 0x9, 0x579a, 0x401, 0x6, 0x1, 0x8, 0x8, 0x9, 0x56b1, 0xd9, 0x80000000, 0xcf, 0x2e, 0x4, 0x24c, 0xffff, 0x5, 0x6, 0xb7a, 0x9, 0x721, 0x5, 0x2, 0x0, 0x6, 0xff, 0xa, 0x10, 0x280, 0x0, 0xfffffffe, 0x1a00000, 0xe, 0x6, 0x200, 0xfffffaf0, 0x3, 0x44a, 0x1, 0x3, 0x4, 0x6, 0x2, 0x8, 0xb81, 0x8000, 0x3, 0x4, 0x10, 0x1, 0x0, 0xde6, 0x2, 0x6, 0x10, 0x50e, 0x5, 0x1000, 0x8, 0x9, 0x1b1, 0x2, 0x4, 0x7, 0x1, 0x8, 0xfe0, 0x7, 0x7, 0x8, 0x1, 0x3, 0xfffffff7, 0x2, 0x7fffffff, 0x80, 0x1, 0xdf6c, 0x5, 0x3, 0x7, 0x4, 0x1ff, 0xfff, 0xfffffffe, 0x7, 0x2f5, 0x0, 0x5, 0x2, 0x7, 0x8, 0xd8c, 0x0, 0x5, 0x4, 0xf6b, 0x50b, 0x2, 0x2, 0x0, 0x3, 0x401, 0x8, 0x68f, 0x3, 0x9, 0x1, 0x5, 0x6, 0xf, 0xc, 0x0, 0x5, 0x4, 0xfffff355, 0x81, 0x6, 0x2, 0xfff, 0x4, 0x9, 0x3, 0xfffffffa, 0x40, 0xa0, 0x3, 0x9, 0x26, 0x8d4, 0x9, 0x2, 0x89, 0x8001, 0x2, 0xec9, 0x5, 0x2000000, 0x8, 0x0, 0x2, 0x5, 0x3, 0x9, 0x9bfb, 0x6, 0x5, 0xb, 0x0, 0xffffffff, 0x3, 0x800, 0x6, 0x2d7a, 0x4, 0x9, 0x5, 0xfffff000, 0x9, 0x6, 0x1, 0x100, 0x2, 0x1, 0x40, 0xb71, 0x8000, 0xfffffffd, 0x5, 0x7fffffff, 0x679b6d7, 0x5, 0x6, 0x1, 0xfffffffd, 0x8, 0xff, 0x14838efb, 0x9, 0x9, 0x7f, 0xc6ea, 0x6, 0x4, 0x5, 0x5, 0x2, 0x1, 0x7, 0x55, 0x8, 0x8, 0x5, 0x7, 0x84, 0x3, 0x0, 0x10000, 0xfffff65a, 0x0, 0x4, 0x9, 0x2, 0x2, 0x62b5, 0x3ff, 0x2, 0x5, 0x1, 0x4]}]}, @TCA_FLOW_ACT={0x83c, 0x9, 0x0, 0x1, [@m_police={0x838, 0x10, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x9, 0x3, 0x0, 0x78db, 0x9, 0x1, 0x2a5, 0x10, 0xa, 0x7, 0x0, 0x9, 0xfffffff8, 0x2, 0x1, 0x5, 0x7, 0x1, 0x400, 0x8000, 0x9, 0x9, 0x5c6, 0x8, 0xca, 0xa, 0x8, 0x80000001, 0xb, 0xfffff625, 0x4, 0x80000000, 0xfff, 0x3800000, 0x478b, 0x2, 0x8, 0x6, 0x55a, 0x1, 0x26416728, 0xff, 0x5, 0x0, 0x7f, 0x7, 0x4, 0x2, 0xfffffffc, 0x1, 0x24, 0xffff, 0x2, 0x3, 0x9, 0xc9, 0x9, 0x9, 0x8b48, 0x6, 0x7, 0x6, 0x1, 0x1, 0x7, 0x8, 0x81, 0x2, 0x7, 0x1, 0xc5, 0x4, 0x5, 0x2, 0x8, 0x2, 0xbde, 0x6, 0x488, 0x1, 0x3, 0x6, 0x3, 0xb5, 0x6, 0x2, 0x5, 0x5, 0x0, 0x5, 0x2, 0x9, 0x10001, 0x0, 0x1000, 0x9, 0x8, 0x8, 0x4, 0x4f50, 0x401, 0xe, 0x42, 0x2, 0x1, 0x7f, 0x800, 0x7, 0x4, 0x1, 0x3, 0x0, 0x7, 0x8, 0x3, 0x0, 0x200, 0x3, 0x5, 0x178000, 0x80000001, 0xfffffff7, 0x7, 0x9, 0x3, 0x7ff, 0x0, 0x461, 0x3c7, 0x8000000, 0xffff, 0x400, 0xfffff38d, 0x6, 0x0, 0x1, 0x2, 0x7, 0x2, 0x0, 0xb, 0x9, 0x3, 0x1, 0x0, 0x10001, 0x4, 0x1, 0x7fff, 0x81, 0x5, 0x7, 0xe, 0x6, 0x0, 0xe36, 0x9782, 0x7, 0x9, 0x0, 0x2a2d, 0x9, 0x8, 0x2, 0x6, 0x7, 0x6, 0x8, 0x9353, 0x81, 0x7, 0x3ff, 0x2, 0x4, 0x8ca, 0x6, 0x7, 0x0, 0x1, 0x100, 0xee0, 0xad, 0x8001, 0x2, 0x9, 0x9, 0x4, 0x5, 0x3, 0xa00, 0x2, 0x1000, 0x4, 0x81, 0x0, 0x0, 0x9, 0xffffffff, 0x8, 0x9, 0xa, 0xa, 0x4, 0x401, 0xf, 0x4f, 0xfffff000, 0x4, 0x9, 0x0, 0xa, 0x7ff, 0x0, 0x7fffffff, 0x200, 0x0, 0xffffff7f, 0x3, 0xc, 0x3, 0x2, 0x0, 0x7, 0x8, 0x2, 0x400, 0x4, 0x1ff, 0xb, 0x1, 0x6a74, 0x7fff, 0x8, 0x2, 0x9d, 0x5, 0x8, 0x8001, 0x2, 0x4, 0x40, 0x4, 0xffff, 0x0, 0x7, 0x3, 0xfffff000, 0x0, 0x95b, 0xfffffff0, 0x65c, 0x6f1, 0x0, 0x2, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x5, 0x4, 0x2, 0x9, 0xfffffff7, 0x24, 0xbf55, 0x10000, 0xd, 0x8138, 0x2, 0x7, 0xfff, 0x0, 0x0, 0x0, 0x8, 0xe, 0x7f, 0x5, 0x4, 0x9, 0x8, 0xbf, 0xc, 0x8, 0x1, 0xe7, 0x7, 0x8, 0x71b2, 0x3, 0x2, 0x9, 0x6da2, 0x2, 0x3, 0x5, 0x5, 0x0, 0x1a, 0x3, 0xdc, 0x6, 0x3, 0x3fe00000, 0x7fffffff, 0x8, 0x7ff, 0x8d, 0xe5, 0xffffffc3, 0x2, 0xa, 0x9, 0x7c35, 0x4, 0x1, 0xbd3, 0x776f, 0x3, 0x73, 0x1, 0xaa, 0xf, 0x9, 0x200, 0x7, 0x700, 0x3, 0xfffffff8, 0xfffffffb, 0x200, 0x5, 0x8, 0x400, 0xb46, 0x8, 0x6322216e, 0x5, 0x62, 0x8, 0x5, 0x5, 0x4, 0x8, 0xff, 0x2, 0x6, 0x2, 0x3ff, 0x2, 0x5, 0x8000, 0x400, 0xae, 0xfffffffb, 0x80000001, 0x4, 0x9, 0x2, 0x3, 0x7, 0x7, 0x0, 0x6, 0x5, 0x0, 0x5e, 0x12, 0xc9, 0x5, 0x97f, 0x26, 0x8004, 0x8, 0x0, 0x800, 0x78e, 0x6, 0x9, 0x4, 0x7, 0xc447, 0xa387, 0x5, 0x58, 0x7, 0xffffffff, 0x4, 0x7f, 0x6, 0xffff7fff, 0x1, 0xfffffff8, 0x8, 0x100540, 0x80000000, 0x3ff, 0x0, 0xc9, 0xe5b, 0xab, 0xfffffff3, 0x5, 0xfffffffa, 0x3, 0x0, 0x3, 0x81, 0x5, 0x0, 0xefb, 0x4, 0x2, 0x6, 0x3, 0x2458, 0x1, 0x6, 0xc, 0x1ff, 0x4e67, 0xffff, 0xfff, 0x7081, 0x3b4e, 0xd38d, 0x10000, 0x3, 0x0, 0x63a2, 0x7fffffff, 0x7, 0x401, 0x3, 0x400, 0x6, 0x43e70000, 0x7, 0x9, 0x2, 0x8f2a, 0xda16, 0x925, 0x0, 0x7, 0x9, 0x5, 0x1, 0x4140, 0xa4000000, 0x1, 0x9, 0x101, 0x7, 0x8, 0x10001, 0xfffffff7, 0xfffffffc, 0x2, 0x180, 0x7, 0x7f, 0x7, 0x1, 0x8000, 0xf86c, 0x2, 0x9, 0x5, 0xc, 0x4, 0xb1c, 0x5, 0x2, 0x8cf0000, 0x947, 0x5, 0x4, 0x8, 0x10, 0x5, 0x40000000, 0x0, 0xaaf8, 0x8a1, 0x8, 0x7fff, 0x6cc, 0x0, 0x6, 0x9, 0x5, 0xfffffffb, 0xee0, 0x4, 0x6, 0x2, 0x7, 0x10001, 0x7, 0xfffffffd, 0x4, 0x5, 0x4, 0x44, 0x400, 0xd, 0xf, 0x8, 0xb3f4, 0x8, 0x0, 0x3]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x107c}, 0x1, 0x0, 0x0, 0xd816451b076636a9}, 0x1) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf57, 0x2925, 0xffff, 0x9dff, 0xc, "28f29c9500901000"}) 12m54.272760872s ago: executing program 4 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsmount(r3, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3f}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) 12m52.725111841s ago: executing program 4 (id=833): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xdc) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0xff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 'lblc\x00', 0x0, 0x3, 0x12}, 0x2c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRESOCT=r6], 0x1c}}, 0x4008054) read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, &(0x7f00000002c0)=0x7) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) 12m37.437375349s ago: executing program 32 (id=833): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xdc) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0xff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 'lblc\x00', 0x0, 0x3, 0x12}, 0x2c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRESOCT=r6], 0x1c}}, 0x4008054) read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, &(0x7f00000002c0)=0x7) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) 13.31692381s ago: executing program 5 (id=3309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.566418034s ago: executing program 5 (id=3310): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async) r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x20000040) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000b00000000000119078000010000000000000004e22009c90780100000000000000000000000000000000000000000000000000006c79cb104a481c090000000000000600000000000000000000000000000000000000000000000000a6ae7452000000000000000000000000000000000000000000000000000000000000800c4ffe00"/190], 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0xb2570000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000440)) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x7, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @loopback, @loopback}}}}) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2460c3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0xb, @mcast2, 0x3}, @in={0x2, 0x4e24, @broadcast}], 0x2c) (async) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000900000000000119078000000000000000000004e22007c90780400000000000000002000"/158], 0x0) 9.729390896s ago: executing program 1 (id=3319): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000d980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES8], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r4, 0xd, 0x5, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x1) acct(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20142, 0x0) ioctl$HIDIOCGRAWINFO(r6, 0x80084803, &(0x7f0000000240)=""/104) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 8.352282914s ago: executing program 2 (id=3326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.787426144s ago: executing program 2 (id=3328): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000000c0), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 6.672717762s ago: executing program 0 (id=3329): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="05000700"], 0x48}}, 0x0) 6.560917133s ago: executing program 0 (id=3330): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8200806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x89, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xd, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x200047, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x2000001, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4ed7, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x6, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x90, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.52326439s ago: executing program 5 (id=3331): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3e4cd25529e20900"}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r5) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023892) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001240"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000406010200000000000000000a00000505000100070000000500011807000000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006340)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) socket$nl_route(0x10, 0x3, 0x0) 5.936614639s ago: executing program 0 (id=3332): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000a0601010000000000000000030000065a89d5b6b1833d590573000940800000010900020073797a3100000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4c040) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, 0x0, r3, 0x0, 0x46) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2000, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socket(0x400000000010, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioprio_get$pid(0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000"/16], 0x10}}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.178374219s ago: executing program 1 (id=3334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000300)='GPL\x00', 0xd3}, 0x94) 5.084668077s ago: executing program 1 (id=3335): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@generic="a54aea0d"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x9f, 0x9, 0xa0, 0x8, 0x471, 0x311, 0x81d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0xf5, 0x1f}}]}}]}}, 0x0) 5.050189764s ago: executing program 0 (id=3336): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x2, 0x2, 0x401}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x50, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000580)={0x10800, 0x0, 0x87}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0xc}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000096'], 0x2a, 0xfffffffffffffff9) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)="beba44804cced105001d50edbefa6da394239b87cb07ae6816bf9aca26cc86f67f9e7c89ea27b329a7bf931e9f38c649d2ab846fac9baa8926a57285ca8ee8ca25aade36126cff1b9cfb228b08419996510c6d38cac9531f9ad83cbe1753136f7e4fa3af98a065265696afa70f056258a746ee1ac57f9aded0122b32ec94761bbaf3500b71b517295553114c7d5b00eeda9c7b898848c3d44cb987ec769cab2a0742b46a88650791073807ea2386aef3f290f78ccc9dee6910f7383890adf402af70f21bc8f818dd7ff62c5181da65f79cbde799eacf4411db3cf3", 0xdb, r5) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x9a0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980919, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) 4.570941624s ago: executing program 3 (id=3337): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x1000000000000000) (async) fcntl$setpipe(r3, 0x407, 0x1000000300007) (async) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 4.440063383s ago: executing program 2 (id=3338): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000004c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000280)=0x2}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x5, 0x7}]}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f00000034c0)) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300034700bb5be1c3e4feff06000200000000000000000025000000190004000400ad000200000000000006040000000000f93132", 0x39}, {&(0x7f0000000080)="b7", 0x1}], 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x14) 3.496837211s ago: executing program 3 (id=3339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@canfd={{0x4, 0x1}, 0x38, 0x3, 0x0, 0x0, "591dcd5615f15ad17ab480026be902ea69570e3ec2136f665278cb1c7f1a09ebe1ad89ba76746b4d4e7f4734cf3de33a3b897e2d3806c54d1b122b0eab687425"}, 0x48}}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 3.457955234s ago: executing program 3 (id=3340): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000400)=""/174, 0xae, &(0x7f00000004c0)=""/142, 0x3, 0x4}}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000005000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) 3.384013689s ago: executing program 2 (id=3341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000fdd15fca6c459203", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x2000002}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000fdd15fca6c459203", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x2000002}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) 3.326233566s ago: executing program 0 (id=3342): syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), 0x0) eventfd(0x401) socket(0x1f, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x6}}, 0x3, 0x81}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x4a, &(0x7f000001b040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="503c7d45503fc4f8a6d49dc00b0bb24cae5cdbd95082000000907800002b"], 0x0) pipe2(0x0, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x80) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x2cd}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000050900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000034000000060a010400000000000000000100000008000b4000ec4f3dd78f0fef8b67651c34073389b80000001800048014000180090001006c6173740000000004000280140000001100010000000001000000000000000a"], 0xa8}}, 0x0) 3.200352577s ago: executing program 5 (id=3343): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000000c0), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 2.971412471s ago: executing program 1 (id=3344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000020000103000000120000000093ce0004000000000000000000000000003db3e827f0be6cb0fb080000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="db00041000dd1e000000700000000000"], 0x10}}, 0x4008040) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) (async, rerun: 32) pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0x73) (rerun: 32) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) (async) r6 = getpid() syz_pidfd_open(r6, 0x0) (async) syz_open_procfs(r6, &(0x7f0000000100)='net/raw6\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2.694283616s ago: executing program 1 (id=3345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x6000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r5, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.080381618s ago: executing program 2 (id=3346): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x408b}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xf3c0}, &(0x7f0000000080)=0x8) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x6000050) socket$inet_tcp(0x2, 0x1, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x37, 0x800000000004, @thr={&(0x7f0000000540)="b85119778c894c91ced5534e9ce072934670e7c697ca6ddd591b650c8ca83a1c435029637fd634b4fcea3543355704247b36dfe87feecb3ed9d5eb71c675d0431b2a3b96cf7a20ad398a867688a3a3c04495fa9e29843af72003546b1121202d096aa57ce6a8fdc4411b50024dbaaadd540ce4951c453b91aed45aeb039aa43da244468dd4b5319faf3dcccfc684d25859b4f0785e2b68e0e6048343dc114baae4bb1df1a6ed0b62d567765116ca6a6fe1600063", &(0x7f0000000680)="b45629ac70df6142ac439950d5cbdd1387cc347cde7f791caaffcc6ed7a0790873dc65da187776c6437279e3f9cc40207bd028e36f21de314324d120d2bb51fbdc8f61b40953e3c7d37e64c1384bdc1cc19303d52c783d8fcb21fa461c118747860a07e2a7ae22b03252db0fc35fb4caa6"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) 1.698897707s ago: executing program 0 (id=3347): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x10, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r3, 0x0, 0x0, 0x26c) 1.621894347s ago: executing program 1 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) socket$inet6(0xa, 0x2, 0x3a) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x1000, 0xa, 0x49}, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.stat\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000000c0)={'erspan0\x00', 0x8bcb}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0) syz_open_dev$mouse(0x0, 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8006, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffffb, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0xfff, 0x7, 0xb, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x7c, 0x3, 0x5, 0x1, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x204, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x8, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x5, 0x0, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x0, 0x4, 0x1ef, 0x2, 0x6, 0x86, 0x3, 0x2, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x8, 0x4, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x101, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fe, 0xffff3441, 0xfff]}, 0x45c) io_submit(r6, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b46a2c10b4070a010201010203010902120001010000000904d602002b573300db56731ee3e683c7ca6a486df5fd04bc32fc2572303e2faf9a473c0a4c83f4972c6b4df84ffc7e198d"], 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) 1.420272983s ago: executing program 5 (id=3349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) ftruncate(r1, 0x8800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0x3) sendfile(r2, r1, 0x0, 0x558410e9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x48, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x110) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000021"], 0x48) writev(r6, &(0x7f0000000800)=[{&(0x7f00000003c0)="4af80100", 0x4}], 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[], 0x24, 0x3) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) mount$bind(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000081c0)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 964.295301ms ago: executing program 2 (id=3350): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0xd0, 0x1201, 0x0, 0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000e0c0)=""/102400, 0x19000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f000001aa40)=""/102392, 0x18ff8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r8, 0x0, 0x0, 0x200040c3, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) 666.015414ms ago: executing program 3 (id=3351): io_setup(0x80000000, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') 633.400857ms ago: executing program 3 (id=3352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x150) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x8002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000000900010073797a3000000000140000001100010000005a2ed3f500000700000a"], 0x108}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x150) (async) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) (async) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x8002) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) (async) 431.781204ms ago: executing program 3 (id=3353): r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000416000/0x3000)=nil, 0x3000, 0x8, 0x10010, 0xffffffffffffffff, 0x1d907000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x420000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x401, 0xfffffffc}) syz_emit_ethernet(0x11, &(0x7f0000001dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa10ac3811d95588f500b0fbce110aa27c3319fcf561c19285ca1e73ece5a807aa8d0b71bbb41c9dac9ac92760bd2ec8066ca02a49876f45a12c325d5bd73a1198c4ae3d081d138b99d6bb8ddfacebfdd2acaf1c2651673c"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001d00)=[{{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000480)=""/69, 0x45}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000500)=""/26, 0x1a}], 0x3, &(0x7f0000001e40)=""/187, 0xbb}, 0xd3}, {{&(0x7f00000008c0)=@tipc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000940)=""/83, 0x53}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f0000001ac0)=""/139, 0x8b}, {&(0x7f0000001b80)=""/38, 0x26}, {&(0x7f0000001bc0)=""/64, 0x40}, {&(0x7f0000001c00)=""/84, 0x54}], 0x8}, 0x1}], 0x3, 0x2003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000001a40)="390000001300034700dc5be161e4feff06ffffffee000020450000002500000019f904000400ad004570444fcea310710d00000000000006040000000000f93132", 0x41}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001a00)={'veth1_vlan\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 5 (id=3354): mkdir(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000440)=0xfffffffe, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @loopback}}}], 0x20}, 0x24008004) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): b failed with error -71 [ 962.923769][ T5807] usb 6-1: USB disconnect, device number 60 [ 963.081420][T18028] loop5: detected capacity change from 0 to 7 [ 963.093028][ C0] blk_print_req_error: 11 callbacks suppressed [ 963.093054][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.108998][ C0] buffer_io_error: 28 callbacks suppressed [ 963.109024][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.130704][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.140365][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.155932][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.165558][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.183694][T15757] usb 1-1: string descriptor 0 read error: -71 [ 963.210548][ T5949] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 963.219981][T18029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.231652][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.241249][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.250716][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.260372][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.268685][ T5949] usb 4-1: device descriptor read/8, error -71 [ 963.275154][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.284871][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.293691][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.303371][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.311387][ T6140] ldm_validate_partition_table(): Disk read failed. [ 963.318629][T18029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.326733][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.336358][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.354579][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.361852][ T30] audit: type=1400 audit(1770257193.268:1120): avc: denied { accept } for pid=18034 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 963.364203][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.393505][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.403152][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 963.414000][ T6140] Dev loop5: unable to read RDB block 0 [ 963.437674][ T6140] loop5: unable to read partition table [ 963.443496][ T6140] loop5: partition table beyond EOD, truncated [ 963.452629][T15757] usb 1-1: USB disconnect, device number 80 [ 963.494354][T18028] ldm_validate_partition_table(): Disk read failed. [ 963.512847][T18028] Dev loop5: unable to read RDB block 0 [ 963.548599][T18028] loop5: unable to read partition table [ 963.567811][ T5949] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 963.580557][T18028] loop5: partition table beyond EOD, truncated [ 963.588500][T18028] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?%`ր{֐ȵ4FLQk݊5) failed (rc=-5) [ 963.601748][ T5949] usb 4-1: device descriptor read/8, error -71 [ 963.719325][ T5949] usb usb4-port1: unable to enumerate USB device [ 963.758539][ T5920] ath6kl: Failed to submit usb control message: -110 [ 963.769038][ T5920] ath6kl: unable to send the bmi data to the device: -110 [ 963.776293][ T5920] ath6kl: Unable to send get target info: -110 [ 963.839660][ T5920] ath6kl: Failed to init ath6kl core: -110 [ 963.864313][ T5920] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 964.047598][T15757] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 964.086725][ T5178] ldm_validate_partition_table(): Disk read failed. [ 964.109105][ T5178] Dev loop5: unable to read RDB block 0 [ 964.115922][ T5178] loop5: unable to read partition table [ 964.130084][ T5178] loop5: partition table beyond EOD, truncated [ 964.170451][ T30] audit: type=1400 audit(1770257194.088:1121): avc: denied { write } for pid=18039 comm="syz.5.2895" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 964.218414][ T5920] usb 3-1: USB disconnect, device number 79 [ 964.233911][T15757] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 964.265174][ T5178] ldm_validate_partition_table(): Disk read failed. [ 964.272456][T15757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.284266][ T5178] Dev loop5: unable to read RDB block 0 [ 964.290342][T15757] usb 1-1: Product: syz [ 964.295179][ T5178] loop5: unable to read partition table [ 964.301151][T15757] usb 1-1: Manufacturer: syz [ 964.306035][ T5178] loop5: partition table beyond EOD, truncated [ 964.313364][T15757] usb 1-1: SerialNumber: syz [ 964.349607][T15757] usb 1-1: config 0 descriptor?? [ 964.664832][T15757] usb 1-1: Firmware version (0.0) predates our first public release. [ 964.729133][T15757] usb 1-1: Please update to version 0.2 or newer [ 964.969341][T15757] usb 1-1: USB disconnect, device number 81 [ 965.385625][ T5178] ldm_validate_partition_table(): Disk read failed. [ 965.462567][T18058] netlink: 356 bytes leftover after parsing attributes in process `syz.5.2901'. [ 965.476842][ T5178] Dev loop5: unable to read RDB block 0 [ 965.486271][ T5178] loop5: unable to read partition table [ 965.505229][T18058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2901'. [ 965.535288][ T5178] loop5: partition table beyond EOD, truncated [ 965.595632][ T30] audit: type=1400 audit(1770257195.508:1122): avc: denied { ioctl } for pid=18056 comm="syz.1.2900" path="socket:[68146]" dev="sockfs" ino=68146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 965.670707][ T5178] ldm_validate_partition_table(): Disk read failed. [ 965.691634][ T5178] Dev loop5: unable to read RDB block 0 [ 965.703193][ T5178] loop5: unable to read partition table [ 965.708921][ T30] audit: type=1400 audit(1770257195.568:1123): avc: denied { ioctl } for pid=18063 comm="syz.5.2903" path="socket:[68156]" dev="sockfs" ino=68156 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 965.734609][ T5178] loop5: partition table beyond EOD, truncated [ 965.761306][T18069] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2902'. [ 965.850064][ T5178] ldm_validate_partition_table(): Disk read failed. [ 965.857239][ T5178] Dev loop5: unable to read RDB block 0 [ 965.869796][ T5178] loop5: unable to read partition table [ 965.967747][ T5178] loop5: partition table beyond EOD, truncated [ 966.499504][ T5178] ldm_validate_partition_table(): Disk read failed. [ 966.506748][ T5178] Dev loop5: unable to read RDB block 0 [ 966.508753][T18085] loop8: detected capacity change from 0 to 7 [ 966.516971][ T5178] loop5: unable to read partition table [ 966.524230][T18085] Dev loop8: unable to read RDB block 7 [ 966.528978][ T5178] loop5: partition table beyond EOD, truncated [ 966.530212][T18085] loop8: unable to read partition table [ 966.543274][T18085] loop8: partition table beyond EOD, truncated [ 966.556735][T18085] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 966.611663][ T5178] ldm_validate_partition_table(): Disk read failed. [ 966.628045][ T5178] Dev loop5: unable to read RDB block 0 [ 966.638254][ T5178] loop5: unable to read partition table [ 966.644058][ T5178] loop5: partition table beyond EOD, truncated [ 966.647379][ T30] audit: type=1400 audit(1770257196.558:1124): avc: denied { write } for pid=18088 comm="syz.5.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 968.413328][T18100] netlink: 356 bytes leftover after parsing attributes in process `syz.5.2914'. [ 968.423251][T18100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2914'. [ 968.455705][ C1] blk_print_req_error: 150 callbacks suppressed [ 968.455718][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.471530][ C1] buffer_io_error: 150 callbacks suppressed [ 968.471539][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.496151][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.505773][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.514608][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.524197][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.544487][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.554058][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.571210][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.580790][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.590519][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.600132][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.609308][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.618894][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.629449][ T5178] ldm_validate_partition_table(): Disk read failed. [ 968.649519][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.659123][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.667254][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.676874][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.685096][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 968.694683][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 968.751906][ T5178] Dev loop5: unable to read RDB block 0 [ 968.764962][ T5178] loop5: unable to read partition table [ 968.841583][ T5178] loop5: partition table beyond EOD, truncated [ 971.233168][ T30] audit: type=1400 audit(1770257200.738:1125): avc: denied { mount } for pid=18132 comm="syz.2.2924" name="/" dev="configfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 972.676499][ T30] audit: type=1400 audit(1770257202.578:1126): avc: denied { accept } for pid=18150 comm="syz.2.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 972.699449][T15765] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 972.755458][T18157] 9p: Bad value for 'rfdno' [ 972.922432][T15765] usb 2-1: Using ep0 maxpacket: 16 [ 973.103398][T15765] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.145426][T15765] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.156686][T15765] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 973.166820][T15765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.729626][T18175] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2932'. [ 974.214561][T15765] usbhid 2-1:128.0: can't add hid device: -71 [ 974.221255][T15765] usbhid 2-1:128.0: probe with driver usbhid failed with error -71 [ 974.252774][T15765] usb 2-1: USB disconnect, device number 58 [ 977.039045][T18204] lo speed is unknown, defaulting to 1000 [ 977.188265][T18204] lo speed is unknown, defaulting to 1000 [ 979.470463][T18231] netlink: 'syz.5.2948': attribute type 1 has an invalid length. [ 979.587883][T18231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 982.307581][T15757] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 982.539495][T18269] syz_tun: entered allmulticast mode [ 982.883661][T15757] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 982.911591][T15757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.938046][T15757] usb 2-1: config 0 descriptor?? [ 984.017643][T15757] ath6kl: Failed to submit usb control message: -110 [ 984.024424][T15757] ath6kl: unable to send the bmi data to the device: -110 [ 984.134046][T15757] ath6kl: Unable to send get target info: -110 [ 984.176719][T15757] ath6kl: Failed to init ath6kl core: -110 [ 984.213692][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.228987][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.384235][T15757] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 984.948395][T17116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 984.959033][T17116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 984.967342][T17116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 984.976294][T17116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 984.983921][T17116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 985.064130][T18281] lo speed is unknown, defaulting to 1000 [ 985.316732][T15086] batman_adv: batadv0: Removing interface: netdevsim0 [ 985.359215][T18269] syz_tun: left allmulticast mode [ 985.435121][T18281] lo speed is unknown, defaulting to 1000 [ 985.729077][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2964'. [ 985.858533][ T30] audit: type=1400 audit(1770257215.768:1127): avc: denied { lock } for pid=18285 comm="syz.2.2965" path="socket:[70683]" dev="sockfs" ino=70683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 985.909304][ T5949] usb 2-1: USB disconnect, device number 59 [ 985.943860][T18286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18286 comm=syz.2.2965 [ 985.956773][T15086] bridge_slave_1: left allmulticast mode [ 985.975225][T15086] bridge_slave_1: left promiscuous mode [ 985.984336][T15086] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.040823][T15086] bridge_slave_0: left allmulticast mode [ 986.046502][T15086] bridge_slave_0: left promiscuous mode [ 986.061952][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.095498][ T30] audit: type=1326 audit(1770257216.008:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.163367][ T30] audit: type=1326 audit(1770257216.008:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.217371][ T30] audit: type=1326 audit(1770257216.008:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.271454][ T30] audit: type=1326 audit(1770257216.008:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.324053][ T30] audit: type=1326 audit(1770257216.008:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.375443][ T30] audit: type=1326 audit(1770257216.008:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.387588][T15766] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 986.428050][T15765] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 986.428366][ T30] audit: type=1326 audit(1770257216.008:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.501841][ T30] audit: type=1326 audit(1770257216.008:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.556155][ T30] audit: type=1326 audit(1770257216.008:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18295 comm="syz.5.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3fd9aeb9 code=0x7ffc0000 [ 986.609728][T15765] usb 1-1: Using ep0 maxpacket: 8 [ 986.619817][T15766] usb 6-1: Using ep0 maxpacket: 8 [ 986.628744][T15765] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 986.654897][T15766] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 986.669231][T15765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.679111][T15766] usb 6-1: config 0 interface 0 has no altsetting 0 [ 986.686398][T15765] usb 1-1: Product: syz [ 986.698023][T15765] usb 1-1: Manufacturer: syz [ 986.727672][T15765] usb 1-1: SerialNumber: syz [ 986.747285][T15766] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 986.819558][T15766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.904233][T15766] usb 6-1: Product: syz [ 986.951371][T15765] radio-usb-si4713 1-1:4.0: Si4713 development board discovered: (10C4:8244) [ 986.960966][T15766] usb 6-1: Manufacturer: syz [ 986.988930][T15766] usb 6-1: SerialNumber: syz [ 986.994728][T18323] fuse: Bad value for 'fd' [ 987.018508][T18323] fuse: Bad value for 'user_id' [ 987.023706][T18323] fuse: Bad value for 'user_id' [ 987.040422][T15766] usb 6-1: config 0 descriptor?? [ 987.052024][T17116] Bluetooth: hci0: command tx timeout [ 987.062386][T15766] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 987.151578][T15765] radio-usb-si4713 1-1:4.0: probe with driver radio-usb-si4713 failed with error -71 [ 987.162043][T15765] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 987.178602][T15765] usb 1-1: USB disconnect, device number 82 [ 987.285527][T15766] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 987.294365][T15766] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 987.337714][ T5949] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 987.373934][T15086] bond0 (unregistering): left promiscuous mode [ 987.380162][T15086] bond_slave_0: left promiscuous mode [ 987.385872][T15086] bond_slave_1: left promiscuous mode [ 987.392301][T15086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.402988][T15086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.412522][T15086] bond0 (unregistering): Released all slaves [ 987.487860][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 987.488479][T15086] bond1 (unregistering): Released all slaves [ 987.503551][ T5949] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 987.512945][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.521295][ T5949] usb 2-1: Product: syz [ 987.525543][ T5949] usb 2-1: Manufacturer: syz [ 987.546448][ T5949] usb 2-1: SerialNumber: syz [ 987.563486][ T5949] usb 2-1: config 0 descriptor?? [ 987.572534][T18296] Option '[y$ [ 987.572534][T18296] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 987.601591][ T5949] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 987.638480][ T5949] pctv452e: pctv452e_power_ctrl: 1 [ 987.638480][ T5949] [ 987.646194][ T5949] usb 2-1: selecting invalid altsetting 3 [ 987.653049][ T5949] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 987.653049][ T5949] [ 987.700353][ T5949] dvb-usb: bulk message failed: -22 (5/0) [ 987.749924][T15086] tipc: Left network mode [ 987.755964][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 987.802966][T18325] FAULT_INJECTION: forcing a failure. [ 987.802966][T18325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.823416][ T5949] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 987.840399][T18325] CPU: 0 UID: 0 PID: 18325 Comm: syz.1.2968 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.840428][T18325] Tainted: [L]=SOFTLOCKUP [ 987.840435][T18325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 987.840446][T18325] Call Trace: [ 987.840452][T18325] [ 987.840460][T18325] dump_stack_lvl+0x100/0x190 [ 987.840489][T18325] should_fail_ex.cold+0x5/0xa [ 987.840509][T18325] _copy_from_user+0x2e/0xd0 [ 987.840534][T18325] memdup_user+0x6b/0xe0 [ 987.840557][T18325] i2cdev_write+0xe4/0x240 [ 987.840581][T18325] vfs_write+0x2aa/0x1070 [ 987.840601][T18325] ? __pfx_i2cdev_write+0x10/0x10 [ 987.840622][T18325] ? __pfx_vfs_write+0x10/0x10 [ 987.840640][T18325] ? find_held_lock+0x2b/0x80 [ 987.840662][T18325] ? __fget_files+0x215/0x3d0 [ 987.840681][T18325] ? __fget_files+0x215/0x3d0 [ 987.840705][T18325] ? __fget_files+0x21f/0x3d0 [ 987.840732][T18325] __x64_sys_pwrite64+0x1eb/0x250 [ 987.840754][T18325] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 987.840781][T18325] do_syscall_64+0xc9/0xf80 [ 987.840804][T18325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.840822][T18325] RIP: 0033:0x7f459cb9aeb9 [ 987.840844][T18325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.840861][T18325] RSP: 002b:00007f459adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 987.840878][T18325] RAX: ffffffffffffffda RBX: 00007f459ce15fa0 RCX: 00007f459cb9aeb9 [ 987.840890][T18325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 987.840901][T18325] RBP: 00007f459adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 987.840912][T18325] R10: 000000000000026c R11: 0000000000000246 R12: 0000000000000001 [ 987.840923][T18325] R13: 00007f459ce16038 R14: 00007f459ce15fa0 R15: 00007ffc0ac760b8 [ 987.840947][T18325] [ 987.841075][T18325] dvb-usb: bulk message failed: -22 (7/0) [ 988.031945][ T5949] usb 2-1: media controller created [ 988.045049][T18325] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 988.059932][T18281] chnl_net:caif_netlink_parms(): no params data found [ 988.073658][ T5949] dvb-usb: bulk message failed: -22 (8/0) [ 988.103630][ T5949] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 988.124476][ T5949] dvb-usb: MAC address reading failed. [ 988.156165][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 989.040885][ T5949] DVB: Unable to find symbol stb0899_attach() [ 989.047064][ T5949] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 989.128099][T17116] Bluetooth: hci0: command tx timeout [ 989.211837][T15766] usb 6-1: USB disconnect, device number 61 [ 989.277755][ T5949] rc_core: IR keymap rc-tt-1500 not found [ 989.283575][ T5949] Registered IR keymap rc-empty [ 989.683509][T15765] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 989.704185][ T5949] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 989.725926][T18281] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.750480][T18281] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.756738][ T5949] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input86 [ 989.758208][T18281] bridge_slave_0: entered allmulticast mode [ 989.797464][T18281] bridge_slave_0: entered promiscuous mode [ 989.811042][ T5949] dvb-usb: schedule remote query interval to 100 msecs. [ 989.816820][T18281] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.831063][T18281] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.839693][T18281] bridge_slave_1: entered allmulticast mode [ 989.846071][ T5949] pctv452e: pctv452e_power_ctrl: 0 [ 989.846071][ T5949] [ 989.850523][T18281] bridge_slave_1: entered promiscuous mode [ 989.859378][T15765] usb 3-1: device descriptor read/64, error -71 [ 989.870187][ T5949] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 989.916129][ T5949] usb 2-1: USB disconnect, device number 60 [ 990.172568][T15765] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 990.229857][ T5949] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 990.450270][T15765] usb 3-1: device descriptor read/64, error -71 [ 990.478162][T18378] netlink: 774 bytes leftover after parsing attributes in process `syz.1.2977'. [ 990.491046][T18378] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2977'. [ 990.507394][T18281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.527324][T18281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.595503][T15765] usb usb3-port1: attempt power cycle [ 990.658616][T18281] team0: Port device team_slave_0 added [ 990.681131][T18281] team0: Port device team_slave_1 added [ 990.721846][T18281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.762765][T18281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.832164][T18281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.867287][T18281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.888027][T18281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.964911][T18281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.991796][T15765] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 991.014220][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 991.014235][ T30] audit: type=1400 audit(1770257220.834:1172): avc: denied { bind } for pid=18380 comm="syz.5.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 991.055399][T15765] usb 3-1: device descriptor read/8, error -71 [ 991.136219][T18398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.147192][T18398] bond0: (slave rose0): Enslaving as an active interface with an up link [ 991.299368][T18410] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 991.313239][T15765] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 991.323937][T17116] Bluetooth: hci0: command tx timeout [ 991.355830][T18410] CPU: 1 UID: 0 PID: 18410 Comm: syz.0.2984 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.355864][T18410] Tainted: [L]=SOFTLOCKUP [ 991.355872][T18410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 991.355884][T18410] Call Trace: [ 991.355892][T18410] [ 991.355901][T18410] dump_stack_lvl+0x100/0x190 [ 991.355933][T18410] sysfs_warn_dup.cold+0x1c/0x28 [ 991.355960][T18410] sysfs_do_create_link_sd+0x113/0x140 [ 991.355994][T18410] sysfs_create_link+0x61/0xc0 [ 991.356022][T18410] device_add+0x675/0x1950 [ 991.356050][T18410] ? __pfx_device_add+0x10/0x10 [ 991.356071][T18410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 991.356101][T18410] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 991.356129][T18410] wiphy_register+0x1e58/0x2d30 [ 991.356154][T18410] ? __rtnl_unlock+0xb9/0xf0 [ 991.356187][T18410] ? __pfx_wiphy_register+0x10/0x10 [ 991.356214][T18410] ? __asan_memset+0x23/0x50 [ 991.356234][T18410] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 991.356269][T18410] ieee80211_register_hw+0x2c11/0x4040 [ 991.356305][T18410] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 991.356331][T18410] ? __pfx___debug_object_init+0x10/0x10 [ 991.356354][T18410] ? find_held_lock+0x2b/0x80 [ 991.356380][T18410] ? net_generic+0xea/0x2a0 [ 991.356398][T18410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 991.356426][T18410] ? __hrtimer_setup+0x178/0x280 [ 991.356450][T18410] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 991.356485][T18410] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 991.356517][T18410] ? __asan_memcpy+0x3c/0x60 [ 991.356537][T18410] hwsim_new_radio_nl+0xc1f/0x1340 [ 991.356556][T18410] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 991.356576][T18410] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 991.356604][T18410] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 991.356620][T18410] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 991.356640][T18410] genl_family_rcv_msg_doit+0x214/0x300 [ 991.356657][T18410] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 991.356679][T18410] ? bpf_lsm_capable+0x9/0x10 [ 991.356700][T18410] ? security_capable+0x80/0x260 [ 991.356723][T18410] ? ns_capable+0xd2/0xf0 [ 991.356745][T18410] genl_rcv_msg+0x560/0x800 [ 991.356761][T18410] ? __pfx_genl_rcv_msg+0x10/0x10 [ 991.356775][T18410] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 991.356802][T18410] netlink_rcv_skb+0x159/0x420 [ 991.356822][T18410] ? __pfx_genl_rcv_msg+0x10/0x10 [ 991.356837][T18410] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 991.356867][T18410] ? netlink_deliver_tap+0x1ae/0xcc0 [ 991.356890][T18410] genl_rcv+0x28/0x40 [ 991.356911][T18410] netlink_unicast+0x5aa/0x870 [ 991.356935][T18410] ? __pfx_netlink_unicast+0x10/0x10 [ 991.356965][T18410] netlink_sendmsg+0x8b0/0xda0 [ 991.356989][T18410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 991.357009][T18410] ? __might_fault+0x10/0x140 [ 991.357033][T18410] ____sys_sendmsg+0xa54/0xc30 [ 991.357050][T18410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 991.357067][T18410] ? try_to_wake_up+0x644/0x1a60 [ 991.357092][T18410] ___sys_sendmsg+0x190/0x1e0 [ 991.357109][T18410] ? __pfx____sys_sendmsg+0x10/0x10 [ 991.357123][T18410] ? futex_private_hash_put+0x107/0x1c0 [ 991.357147][T18410] ? find_held_lock+0x2b/0x80 [ 991.357180][T18410] __sys_sendmsg+0x170/0x220 [ 991.357199][T18410] ? __pfx___sys_sendmsg+0x10/0x10 [ 991.357218][T18410] ? __x64_sys_futex+0x34f/0x4d0 [ 991.357248][T18410] do_syscall_64+0xc9/0xf80 [ 991.357267][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.357282][T18410] RIP: 0033:0x7fc30899aeb9 [ 991.357295][T18410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.357310][T18410] RSP: 002b:00007fc306bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.357327][T18410] RAX: ffffffffffffffda RBX: 00007fc308c15fa0 RCX: 00007fc30899aeb9 [ 991.357337][T18410] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 991.357346][T18410] RBP: 00007fc308a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 991.357354][T18410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.357362][T18410] R13: 00007fc308c16038 R14: 00007fc308c15fa0 R15: 00007fff6cfc4e28 [ 991.357383][T18410] [ 991.904724][T18281] hsr_slave_0: entered promiscuous mode [ 991.916302][T18281] hsr_slave_1: entered promiscuous mode [ 991.969420][T15765] usb 3-1: device descriptor read/8, error -71 [ 991.981017][T18281] debugfs: 'hsr0' already exists in 'hsr' [ 992.001926][T18281] Cannot create hsr debugfs directory [ 992.091962][T15765] usb usb3-port1: unable to enumerate USB device [ 992.220672][ T5807] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 992.444256][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 992.479347][ T5807] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 992.488572][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.496727][ T5807] usb 1-1: Product: syz [ 992.821679][ T5807] usb 1-1: Manufacturer: syz [ 992.826301][ T5807] usb 1-1: SerialNumber: syz [ 992.864143][ T5807] usb 1-1: config 0 descriptor?? [ 993.181925][ T5807] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 993.192877][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.194483][ T5807] pctv452e: pctv452e_power_ctrl: 1 [ 993.194483][ T5807] [ 993.269557][ T5807] usb 1-1: selecting invalid altsetting 3 [ 993.300985][ T5807] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 993.300985][ T5807] [ 993.374300][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 993.391792][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 993.447343][ T5807] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 993.488835][ T5807] usb 1-1: media controller created [ 993.549015][T17116] Bluetooth: hci0: command tx timeout [ 993.668503][ T5807] dvb-usb: bulk message failed: -22 (8/0) [ 993.816623][ T5807] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 993.844553][ T5807] dvb-usb: MAC address reading failed. [ 993.943233][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 994.224950][ T5807] DVB: Unable to find symbol stb0899_attach() [ 994.258337][ T5807] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 994.503376][T15086] batadv0: left promiscuous mode [ 994.514215][T15086] hsr_slave_0: left promiscuous mode [ 994.519626][ T5807] rc_core: IR keymap rc-tt-1500 not found [ 994.529895][ T5807] Registered IR keymap rc-empty [ 994.537517][ T5807] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 994.565969][T15086] hsr_slave_1: left promiscuous mode [ 994.582420][ T5807] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input87 [ 994.593507][T15086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.608721][T15086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.642837][ T5807] dvb-usb: schedule remote query interval to 100 msecs. [ 994.652502][ T5807] pctv452e: pctv452e_power_ctrl: 0 [ 994.652502][ T5807] [ 994.663245][ T5807] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 994.757797][ T5807] usb 1-1: USB disconnect, device number 83 [ 994.817646][T15765] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 994.981862][ T5807] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 994.995007][T15765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.025963][T15765] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 995.068313][T15765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.101925][T15765] usb 2-1: config 0 descriptor?? [ 995.122354][T15765] gspca_main: spca501-2.14.0 probing 0000:0000 [ 995.195337][T18467] netlink: 356 bytes leftover after parsing attributes in process `syz.5.2991'. [ 995.298589][T18468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2991'. [ 995.579237][T15766] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 995.666507][ T30] audit: type=1400 audit(1770257225.184:1173): avc: denied { accept } for pid=18454 comm="syz.1.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 995.689951][T15765] gspca_spca501: reg write: error -71 [ 995.696590][T15765] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 995.714305][T15765] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 995.737809][T15765] usb 2-1: USB disconnect, device number 61 [ 995.779736][T15766] usb 3-1: Using ep0 maxpacket: 16 [ 995.790746][T15766] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 995.805659][T15766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.824605][T15766] usb 3-1: Product: syz [ 995.839659][T15766] usb 3-1: Manufacturer: syz [ 995.850476][T15766] usb 3-1: SerialNumber: syz [ 995.866394][T15766] usb 3-1: config 0 descriptor?? [ 995.960211][T15086] team0 (unregistering): Port device team_slave_1 removed [ 996.226429][T18281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 996.237487][T18281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 996.249063][T18281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 996.306661][T18281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 996.307881][T15766] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 996.348767][T15766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 996.371317][T15766] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 996.382234][T15766] usb 3-1: media controller created [ 996.408464][T15766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 996.531220][T15766] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 996.542315][T15766] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 997.015079][T18466] binder: 18463:18466 ioctl 707 200000000340 returned -22 [ 997.024504][T15766] usb 3-1: USB disconnect, device number 84 [ 997.068612][T15766] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 997.085602][T18281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.128285][T18281] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.161899][T15087] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.169035][T15087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.192593][T15087] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.199737][T15087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.315135][T18281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.096002][T18529] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2998'. [ 999.139263][T18281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.357554][T18281] veth0_vlan: entered promiscuous mode [ 999.405985][T18281] veth1_vlan: entered promiscuous mode [ 999.509230][T18281] veth0_macvtap: entered promiscuous mode [ 999.554461][T18281] veth1_macvtap: entered promiscuous mode [ 999.641575][T18281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.699917][T18281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.755442][T15085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.815464][T15085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.889929][T15085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.924631][T15085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.227729][ T9304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.235581][ T9304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.530147][T18549] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3003'. [ 1000.547220][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3003'. [ 1000.782969][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.791771][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.066776][T18565] syz_tun: entered allmulticast mode [ 1001.104859][T18563] syz_tun: left allmulticast mode [ 1001.382736][ T30] audit: type=1400 audit(1770257230.506:1174): avc: denied { map } for pid=18569 comm="syz.0.3008" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1001.409014][T18571] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2962'. [ 1001.819619][ T30] audit: type=1400 audit(1770257230.572:1175): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1001.873474][T15766] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1002.261843][T15766] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1002.281054][T15766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.289315][T15766] usb 6-1: Product: syz [ 1002.294003][T15766] usb 6-1: Manufacturer: syz [ 1002.299800][T15766] usb 6-1: SerialNumber: syz [ 1002.431240][T15766] hub 6-1:24.0: bad descriptor, ignoring hub [ 1002.442228][T15766] hub 6-1:24.0: probe with driver hub failed with error -5 [ 1002.672644][T15766] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1002.741483][T15766] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1002.762365][T15766] dib0700: firmware download failed at 7 with -22 [ 1002.804594][T15766] usb 6-1: USB disconnect, device number 62 [ 1003.439623][T18621] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3013'. [ 1003.544246][T18617] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3014'. [ 1004.267338][T18640] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3019'. [ 1006.085449][T15766] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1006.281570][T15766] usb 4-1: Using ep0 maxpacket: 8 [ 1006.305410][T15766] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1006.372534][T15766] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1006.436008][T15766] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1006.466239][T15766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.653974][ T5949] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1006.743831][T18683] binder: 18676:18683 ioctl c0306201 200000000540 returned -14 [ 1006.833837][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 1006.897509][ T5949] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1007.037509][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.105063][ T5949] usb 2-1: Product: syz [ 1007.129133][ T5949] usb 2-1: Manufacturer: syz [ 1007.171146][ T5949] usb 2-1: SerialNumber: syz [ 1007.189235][ T5949] usb 2-1: config 0 descriptor?? [ 1007.207443][ T5949] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1007.226968][ T5949] pctv452e: pctv452e_power_ctrl: 1 [ 1007.226968][ T5949] [ 1007.889870][ T5949] usb 2-1: selecting invalid altsetting 3 [ 1007.902986][ T5949] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1007.902986][ T5949] [ 1007.913258][ T5949] dvb-usb: bulk message failed: -22 (5/0) [ 1007.928821][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1007.938908][T18672] dvb-usb: bulk message failed: -22 (7/0) [ 1007.944627][T18672] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 1008.083511][T15766] usb 4-1: string descriptor 0 read error: -71 [ 1008.128833][ T5949] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1008.137227][ T5949] usb 2-1: media controller created [ 1008.170300][ T5949] dvb-usb: bulk message failed: -22 (8/0) [ 1008.191931][ T5949] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 1008.202295][ T5949] dvb-usb: MAC address reading failed. [ 1008.232494][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.283661][T15766] usb 4-1: USB disconnect, device number 82 [ 1008.405525][ T5949] DVB: Unable to find symbol stb0899_attach() [ 1008.418140][ T5949] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1008.929394][ T5949] rc_core: IR keymap rc-tt-1500 not found [ 1008.939527][ T5949] Registered IR keymap rc-empty [ 1009.041664][ T5949] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1009.059550][ T5949] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input89 [ 1009.076001][ T5949] dvb-usb: schedule remote query interval to 100 msecs. [ 1009.109683][ T5949] pctv452e: pctv452e_power_ctrl: 0 [ 1009.109683][ T5949] [ 1009.217819][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1009.530089][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1009.608649][ T5949] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1009.860014][ T5949] usb 2-1: USB disconnect, device number 62 [ 1010.390727][ T5949] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1010.597552][T18732] netlink: 'syz.5.3039': attribute type 23 has an invalid length. [ 1010.749403][T18733] netlink: 'syz.5.3039': attribute type 23 has an invalid length. [ 1010.984438][T18740] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1010.995849][T18740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1011.127157][T18745] netlink: 'syz.5.3043': attribute type 1 has an invalid length. [ 1011.319552][T18745] bond4: entered promiscuous mode [ 1011.370242][T18745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1011.678444][T18757] fuse: Bad value for 'fd' [ 1011.705396][T18757] fuse: Bad value for 'user_id' [ 1011.710544][T18757] fuse: Bad value for 'user_id' [ 1011.748531][T18757] loop7: detected capacity change from 0 to 7 [ 1011.879252][T18760] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 1011.923464][T18760] CPU: 1 UID: 0 PID: 18760 Comm: syz.5.3045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.923495][T18760] Tainted: [L]=SOFTLOCKUP [ 1011.923503][T18760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1011.923523][T18760] Call Trace: [ 1011.923530][T18760] [ 1011.923537][T18760] dump_stack_lvl+0x100/0x190 [ 1011.923569][T18760] sysfs_warn_dup.cold+0x1c/0x28 [ 1011.923596][T18760] sysfs_do_create_link_sd+0x113/0x140 [ 1011.923625][T18760] sysfs_create_link+0x61/0xc0 [ 1011.923651][T18760] device_add+0x675/0x1950 [ 1011.923674][T18760] ? __pfx_device_add+0x10/0x10 [ 1011.923697][T18760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1011.923725][T18760] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 1011.923755][T18760] wiphy_register+0x1e58/0x2d30 [ 1011.923779][T18760] ? __rtnl_unlock+0xb9/0xf0 [ 1011.923813][T18760] ? __pfx_wiphy_register+0x10/0x10 [ 1011.923841][T18760] ? __asan_memset+0x23/0x50 [ 1011.923862][T18760] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 1011.923898][T18760] ieee80211_register_hw+0x2c11/0x4040 [ 1011.923934][T18760] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1011.923963][T18760] ? __pfx___debug_object_init+0x10/0x10 [ 1011.923989][T18760] ? find_held_lock+0x2b/0x80 [ 1011.924013][T18760] ? net_generic+0xea/0x2a0 [ 1011.924032][T18760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1011.924063][T18760] ? __hrtimer_setup+0x178/0x280 [ 1011.924086][T18760] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 1011.924128][T18760] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1011.924155][T18760] ? __asan_memcpy+0x3c/0x60 [ 1011.924177][T18760] hwsim_new_radio_nl+0xc1f/0x1340 [ 1011.924199][T18760] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1011.924223][T18760] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1011.924254][T18760] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 1011.924273][T18760] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 1011.924298][T18760] genl_family_rcv_msg_doit+0x214/0x300 [ 1011.924320][T18760] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1011.924347][T18760] ? bpf_lsm_capable+0x9/0x10 [ 1011.924374][T18760] ? security_capable+0x80/0x260 [ 1011.924402][T18760] ? ns_capable+0xd2/0xf0 [ 1011.924429][T18760] genl_rcv_msg+0x560/0x800 [ 1011.924450][T18760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.924468][T18760] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1011.924500][T18760] netlink_rcv_skb+0x159/0x420 [ 1011.924534][T18760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.924553][T18760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.924594][T18760] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1011.924625][T18760] genl_rcv+0x28/0x40 [ 1011.924649][T18760] netlink_unicast+0x5aa/0x870 [ 1011.924676][T18760] ? __pfx_netlink_unicast+0x10/0x10 [ 1011.924712][T18760] netlink_sendmsg+0x8b0/0xda0 [ 1011.924741][T18760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.924763][T18760] ? __might_fault+0x10/0x140 [ 1011.924792][T18760] ____sys_sendmsg+0xa54/0xc30 [ 1011.924812][T18760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.924829][T18760] ? __pfx___futex_wait+0x10/0x10 [ 1011.924857][T18760] ? __pfx_futex_wake_mark+0x10/0x10 [ 1011.924885][T18760] ___sys_sendmsg+0x190/0x1e0 [ 1011.924905][T18760] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.924937][T18760] ? find_held_lock+0x2b/0x80 [ 1011.924977][T18760] __sys_sendmsg+0x170/0x220 [ 1011.925001][T18760] ? __pfx___sys_sendmsg+0x10/0x10 [ 1011.925022][T18760] ? __x64_sys_futex+0x34f/0x4d0 [ 1011.925056][T18760] do_syscall_64+0xc9/0xf80 [ 1011.925080][T18760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.925100][T18760] RIP: 0033:0x7f4b3fd9aeb9 [ 1011.925117][T18760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.925137][T18760] RSP: 002b:00007f4b3dff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1011.925156][T18760] RAX: ffffffffffffffda RBX: 00007f4b40015fa0 RCX: 00007f4b3fd9aeb9 [ 1011.925168][T18760] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1011.925177][T18760] RBP: 00007f4b3fe08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1011.925188][T18760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.925198][T18760] R13: 00007f4b40016038 R14: 00007f4b40015fa0 R15: 00007fff0fd95d98 [ 1011.925222][T18760] [ 1012.350125][T18757] Invalid logical block size (256) [ 1012.368006][ C0] blk_print_req_error: 25 callbacks suppressed [ 1012.368024][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1012.392265][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1012.401860][ C0] buffer_io_error: 25 callbacks suppressed [ 1012.401872][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1012.435567][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1012.445161][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1012.456721][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1012.466269][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1012.485809][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1012.489112][ T5949] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1012.495367][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1012.511508][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1012.521040][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1012.646883][T18766] fuse: Bad value for 'fd' [ 1012.657568][T18766] fuse: Bad value for 'user_id' [ 1012.663529][T18766] fuse: Bad value for 'user_id' [ 1012.690579][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 1012.715238][ T5949] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1012.724680][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.732808][ T5949] usb 6-1: Product: syz [ 1012.745998][ T5949] usb 6-1: Manufacturer: syz [ 1012.756897][ T5949] usb 6-1: SerialNumber: syz [ 1012.937461][T18766] Invalid logical block size (256) [ 1012.953140][ T5949] usb 6-1: config 0 descriptor?? [ 1013.133839][ T5949] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1013.169377][ T5949] pctv452e: pctv452e_power_ctrl: 1 [ 1013.169377][ T5949] [ 1013.183748][ T5949] usb 6-1: selecting invalid altsetting 3 [ 1013.189817][ T5949] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1013.189817][ T5949] [ 1013.212476][ T5949] dvb-usb: bulk message failed: -22 (5/0) [ 1013.259220][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1013.295035][ T5949] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1013.328513][ T5949] usb 6-1: media controller created [ 1013.347624][ T5949] dvb-usb: bulk message failed: -22 (8/0) [ 1013.353373][ T5949] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1013.412727][ T5949] dvb-usb: MAC address reading failed. [ 1013.423093][T18760] dvb-usb: bulk message failed: -22 (7/0) [ 1013.430567][T18760] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1013.701678][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1013.937388][ T5949] DVB: Unable to find symbol stb0899_attach() [ 1013.954572][ T5949] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1014.047263][T18795] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3037'. [ 1014.243615][ T5949] rc_core: IR keymap rc-tt-1500 not found [ 1014.252666][ T5949] Registered IR keymap rc-empty [ 1014.272314][ T5949] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1014.275882][T18798] : renamed from wg2 (while UP) [ 1014.479044][ T5949] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input90 [ 1014.550541][ T5949] dvb-usb: schedule remote query interval to 100 msecs. [ 1014.614263][ T5949] pctv452e: pctv452e_power_ctrl: 0 [ 1014.614263][ T5949] [ 1014.672147][ T5949] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1014.683559][ T5949] usb 6-1: USB disconnect, device number 63 [ 1014.788853][T18813] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3058'. [ 1014.865056][ T5949] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1015.185289][ T5807] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1015.988246][ T5807] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1016.114514][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.129263][ T5807] usb 1-1: config 0 descriptor?? [ 1016.207853][T18807] fuse: Bad value for 'fd' [ 1016.213723][T18807] fuse: Bad value for 'user_id' [ 1016.218570][T18807] fuse: Bad value for 'user_id' [ 1016.391691][T18807] Invalid logical block size (256) [ 1017.034698][T18841] netlink: 356 bytes leftover after parsing attributes in process `syz.5.3063'. [ 1017.045713][T18841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3063'. [ 1017.073381][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.097241][ T5951] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1017.217307][T18848] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3064'. [ 1017.236933][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.414694][ T5807] ath6kl: Failed to submit usb control message: -110 [ 1017.425704][ T5807] ath6kl: unable to send the bmi data to the device: -110 [ 1017.453262][ T5807] ath6kl: Unable to send get target info: -110 [ 1017.467851][T18846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3064'. [ 1017.488463][ T5807] ath6kl: Failed to init ath6kl core: -110 [ 1017.504483][ T5807] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1017.515162][ T5951] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1017.556457][ T5951] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1017.603831][ T5951] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1017.617445][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.653082][T18838] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1017.675025][ T5951] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1017.695461][ T5920] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1017.888072][T15765] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1017.992800][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 1018.007470][ T5920] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1018.020746][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.038932][ T5951] usb 4-1: USB disconnect, device number 83 [ 1018.065793][T15765] usb 2-1: Using ep0 maxpacket: 8 [ 1018.069373][ T5920] usb 6-1: Product: syz [ 1018.107234][ T5920] usb 6-1: Manufacturer: syz [ 1018.109492][T15765] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1018.135475][ T5920] usb 6-1: SerialNumber: syz [ 1018.165444][T15765] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1018.200543][T15765] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1018.219070][ T5920] usb 6-1: config 0 descriptor?? [ 1018.254657][T15765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.255048][ T5920] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1018.282804][ T5920] pctv452e: pctv452e_power_ctrl: 1 [ 1018.282804][ T5920] [ 1018.292955][ T5920] usb 6-1: selecting invalid altsetting 3 [ 1018.299120][ T5920] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1018.299120][ T5920] [ 1018.310819][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 1018.365812][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1018.376282][ T5920] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1018.385358][ T5920] usb 6-1: media controller created [ 1018.392974][ T5920] dvb-usb: bulk message failed: -22 (8/0) [ 1018.398818][ T5920] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1018.408093][ T5920] dvb-usb: MAC address reading failed. [ 1018.468763][T18852] dvb-usb: bulk message failed: -22 (7/0) [ 1018.474717][T18852] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1018.560503][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1018.739065][ T5920] DVB: Unable to find symbol stb0899_attach() [ 1018.746549][ T5920] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1018.816100][ T5951] usb 1-1: USB disconnect, device number 84 [ 1019.085207][ T5920] rc_core: IR keymap rc-tt-1500 not found [ 1019.099094][T18869] FAULT_INJECTION: forcing a failure. [ 1019.099094][T18869] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.161626][T18869] CPU: 0 UID: 0 PID: 18869 Comm: syz.3.3068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.161662][T18869] Tainted: [L]=SOFTLOCKUP [ 1019.161668][T18869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1019.161679][T18869] Call Trace: [ 1019.161685][T18869] [ 1019.161692][T18869] dump_stack_lvl+0x100/0x190 [ 1019.161722][T18869] should_fail_ex.cold+0x5/0xa [ 1019.161746][T18869] should_failslab+0xc2/0x120 [ 1019.161769][T18869] ? tomoyo_encode2+0xfb/0x3c0 [ 1019.161788][T18869] __kmalloc_noprof+0xf6/0x9c0 [ 1019.161813][T18869] ? tomoyo_encode2+0xfb/0x3c0 [ 1019.161830][T18869] tomoyo_encode2+0xfb/0x3c0 [ 1019.161853][T18869] tomoyo_encode+0x29/0x50 [ 1019.161871][T18869] tomoyo_realpath_from_path+0x18c/0x690 [ 1019.161896][T18869] tomoyo_path_number_perm+0x23c/0x580 [ 1019.161924][T18869] ? tomoyo_path_number_perm+0x22e/0x580 [ 1019.161953][T18869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1019.162006][T18869] ? find_held_lock+0x2b/0x80 [ 1019.162029][T18869] ? hook_file_ioctl_common+0x146/0x410 [ 1019.162051][T18869] ? __fget_files+0x215/0x3d0 [ 1019.162077][T18869] ? __fget_files+0x21f/0x3d0 [ 1019.162102][T18869] security_file_ioctl+0xd3/0x230 [ 1019.162122][T18869] __x64_sys_ioctl+0xb7/0x210 [ 1019.162143][T18869] do_syscall_64+0xc9/0xf80 [ 1019.162164][T18869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.162182][T18869] RIP: 0033:0x7f304c99aeb9 [ 1019.162197][T18869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.162213][T18869] RSP: 002b:00007f304d84b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.162231][T18869] RAX: ffffffffffffffda RBX: 00007f304cc15fa0 RCX: 00007f304c99aeb9 [ 1019.162242][T18869] RDX: 00002000000001c0 RSI: 00000000c008561c RDI: 0000000000000003 [ 1019.162252][T18869] RBP: 00007f304d84b090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.162262][T18869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.162273][T18869] R13: 00007f304cc16038 R14: 00007f304cc15fa0 R15: 00007fff0007ca38 [ 1019.162298][T18869] [ 1019.162331][T18869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1019.164930][ T5920] Registered IR keymap rc-empty [ 1019.572227][T18874] netlink: 34 bytes leftover after parsing attributes in process `syz.5.3070'. [ 1019.757585][T18878] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3071'. [ 1020.151138][ T30] audit: type=1400 audit(1770257248.064:1176): avc: denied { read } for pid=18870 comm="syz.5.3070" name="file0" dev="tmpfs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1020.286784][ T5920] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1020.309668][ T5920] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input91 [ 1020.691827][ T5920] dvb-usb: schedule remote query interval to 100 msecs. [ 1020.710774][ T5920] pctv452e: pctv452e_power_ctrl: 0 [ 1020.710774][ T5920] [ 1020.718159][ T5920] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1020.769664][ T5920] usb 6-1: USB disconnect, device number 64 [ 1021.016136][ T5920] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1021.071750][T18894] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3074'. [ 1021.294548][T15765] usb 2-1: string descriptor 0 read error: -71 [ 1021.301497][T15762] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1021.390714][T15765] usb 2-1: USB disconnect, device number 63 [ 1021.488132][T15762] usb 4-1: Using ep0 maxpacket: 32 [ 1021.515898][T15762] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1021.532417][T15762] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1021.573997][T15762] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1021.599089][T18899] syz_tun: entered allmulticast mode [ 1021.700834][T15762] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1022.156519][T15762] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1022.171525][T15762] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1022.192530][T15762] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1022.216328][T18897] syz_tun: left allmulticast mode [ 1022.279245][T15762] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1022.316015][T15762] usb 4-1: Product: syz [ 1022.322656][T15762] usb 4-1: Manufacturer: syz [ 1022.330664][T15762] usb 4-1: SerialNumber: syz [ 1022.349781][T15762] usb 4-1: config 0 descriptor?? [ 1022.366225][T15762] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1022.393985][T15762] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1022.592350][T18893] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1022.657721][T15762] usb 4-1: USB disconnect, device number 84 [ 1022.678311][T15762] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1023.496991][T18918] siw: device registration error -23 [ 1024.954908][ T30] audit: type=1400 audit(1770257252.582:1177): avc: denied { mount } for pid=18926 comm="syz.2.3085" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1024.957219][T18927] overlayfs: failed to resolve './file1': -2 [ 1025.073995][ T30] audit: type=1400 audit(1770257252.582:1178): avc: denied { mounton } for pid=18926 comm="syz.2.3085" path="/590/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1025.263478][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1025.272669][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1025.281652][T18933] netlink: 'syz.0.3086': attribute type 13 has an invalid length. [ 1025.289546][T18933] netlink: 'syz.0.3086': attribute type 12 has an invalid length. [ 1025.820000][ T30] audit: type=1400 audit(1770257253.367:1179): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1026.020067][ T30] audit: type=1326 audit(1770257253.573:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18935 comm="syz.2.3089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f978699aeb9 code=0x0 [ 1026.087320][T18945] syz_tun: entered allmulticast mode [ 1026.197916][T18947] binder: 18934:18947 ioctl c0306201 200000000540 returned -14 [ 1026.791913][T18956] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3092'. [ 1026.909169][T18960] loop8: detected capacity change from 0 to 7 [ 1026.927922][T18960] Dev loop8: unable to read RDB block 7 [ 1026.940463][T18960] loop8: unable to read partition table [ 1026.954848][T18960] loop8: partition table beyond EOD, truncated [ 1026.964699][T18960] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1027.252872][T18973] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1028.120448][T17116] Bluetooth: hci2: command 0x0405 tx timeout [ 1028.488962][T17116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1028.589538][T17116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1028.601849][T12679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1028.642406][T12679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1028.744363][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3102'. [ 1028.835438][T12679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.125189][ T5816] bond0: (slave syz_tun): Releasing backup interface [ 1029.172601][ T5816] syz_tun (unregistering): left promiscuous mode [ 1029.307761][T18987] lo speed is unknown, defaulting to 1000 [ 1029.679739][ T5812] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 1029.987203][ T30] audit: type=1400 audit(1770257257.259:1181): avc: denied { ioctl } for pid=19008 comm="syz.1.3108" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1030.020898][T15086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.113576][ T5812] Bluetooth: hci1: command tx timeout [ 1031.565590][T18987] lo speed is unknown, defaulting to 1000 [ 1031.779801][T15086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.899041][T19030] fuseblk: Unknown parameter 'rootmode0000000020000.us' [ 1032.134893][T15086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.801894][T19047] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3112'. [ 1033.073695][T15086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.183291][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 1033.192287][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 1033.201273][T19056] netlink: 'syz.3.3114': attribute type 13 has an invalid length. [ 1033.209161][T19056] netlink: 'syz.3.3114': attribute type 12 has an invalid length. [ 1033.485669][ T5812] Bluetooth: hci1: command tx timeout [ 1033.812541][T19066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1033.862307][T15086] bridge_slave_1: left allmulticast mode [ 1033.878841][T15086] bridge_slave_1: left promiscuous mode [ 1033.884775][T15086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.923819][ T5920] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1033.969430][T15086] bridge_slave_0: left allmulticast mode [ 1033.975351][T15086] bridge_slave_0: left promiscuous mode [ 1034.020254][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.149435][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 1034.165406][ T5920] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1034.201801][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.209850][ T5920] usb 2-1: Product: syz [ 1034.239208][ T5920] usb 2-1: Manufacturer: syz [ 1034.243863][ T5920] usb 2-1: SerialNumber: syz [ 1034.812262][ T5920] usb 2-1: config 0 descriptor?? [ 1035.052624][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3116'. [ 1035.085956][ T5920] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1035.137722][ T5920] usb 2-1: USB disconnect, device number 64 [ 1036.065995][ T5812] Bluetooth: hci1: command tx timeout [ 1036.902448][T19100] fuse: Bad value for 'fd' [ 1036.960089][T19100] Invalid logical block size (256) [ 1037.098254][T15086] bond0 (unregistering): left promiscuous mode [ 1037.106553][T15086] bond_slave_0: left promiscuous mode [ 1037.113915][T15086] bond_slave_1: left promiscuous mode [ 1037.120115][T15086] team0: left promiscuous mode [ 1037.125862][T15086] team_slave_1: left promiscuous mode [ 1037.131982][T15086] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1037.144598][T15086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.157419][T15086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.171924][T15086] bond0 (unregistering): (slave team0): Releasing backup interface [ 1037.186813][T15086] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1037.200249][T15086] bond0 (unregistering): Released all slaves [ 1037.283070][T15086] bond1 (unregistering): Released all slaves [ 1037.296241][T18987] chnl_net:caif_netlink_parms(): no params data found [ 1037.707428][T15086] tipc: Disabling bearer [ 1037.732668][T15086] tipc: Disabling bearer [ 1037.760985][T15086] tipc: Left network mode [ 1038.038893][T18987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.082624][T18987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.089863][T18987] bridge_slave_0: entered allmulticast mode [ 1038.144641][T18987] bridge_slave_0: entered promiscuous mode [ 1038.297110][ T5812] Bluetooth: hci1: command tx timeout [ 1038.353938][T18987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.377588][T18987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.466911][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'. [ 1038.476024][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'. [ 1038.485379][T19131] netlink: 'syz.1.3127': attribute type 13 has an invalid length. [ 1038.494090][T19131] netlink: 'syz.1.3127': attribute type 12 has an invalid length. [ 1038.797445][T18987] bridge_slave_1: entered allmulticast mode [ 1038.815100][T18987] bridge_slave_1: entered promiscuous mode [ 1038.897465][T18987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.945232][T18987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.192313][T19138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1039.225199][T18987] team0: Port device team_slave_0 added [ 1039.287295][T18987] team0: Port device team_slave_1 added [ 1039.601026][T19150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3130'. [ 1039.811618][T19153] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3129'. [ 1039.844462][T18987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.861340][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.921885][T18987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.345972][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3131'. [ 1040.537335][T18987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.588848][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.616181][T18987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.720487][T19164] netlink: 'syz.5.3132': attribute type 1 has an invalid length. [ 1040.742689][T18987] hsr_slave_0: entered promiscuous mode [ 1040.754620][T18987] hsr_slave_1: entered promiscuous mode [ 1040.850130][T19164] veth3: entered promiscuous mode [ 1040.904617][T19170] netlink: 'syz.5.3132': attribute type 5 has an invalid length. [ 1041.998907][T19178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1042.006052][T19178] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1042.101669][T19178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1042.116119][T19178] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1042.732455][T19178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1042.753168][T19178] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1042.764627][T15086] batadv0: left promiscuous mode [ 1042.784728][T15086] hsr_slave_0: left promiscuous mode [ 1042.853642][T15086] hsr_slave_1: left promiscuous mode [ 1042.873780][T15086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.892203][T15086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.953597][T15086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.191893][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3137'. [ 1043.200900][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3137'. [ 1043.209884][T19215] netlink: 'syz.5.3137': attribute type 13 has an invalid length. [ 1043.217740][T19215] netlink: 'syz.5.3137': attribute type 12 has an invalid length. [ 1043.612294][T15086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.007565][T15086] veth1_macvtap: left promiscuous mode [ 1044.054481][T15086] veth0_macvtap: left promiscuous mode [ 1044.070936][T15086] veth1_vlan: left promiscuous mode [ 1044.117912][T19225] fuse: Bad value for 'fd' [ 1044.123534][T19225] fuse: Bad value for 'fd' [ 1044.133529][T15086] veth0_vlan: left promiscuous mode [ 1044.176289][T19225] Invalid logical block size (256) [ 1044.444091][T15086] pim6reg9 (unregistering): left allmulticast mode [ 1045.005921][T15086] team0 (unregistering): Port device team_slave_1 removed [ 1045.171192][T15757] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1045.385290][T15757] usb 2-1: Using ep0 maxpacket: 8 [ 1045.402622][T15757] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1045.415406][T15757] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1045.437276][T15766] lo speed is unknown, defaulting to 1000 [ 1045.726216][T15757] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1045.735468][T15766] infiniband syz0: ib_query_port failed (-19) [ 1045.762150][T15757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.880116][T18987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1045.927448][T18987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1045.956489][T18987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1045.999656][T18987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1046.146303][T15086] IPVS: stop unused estimator thread 0... [ 1046.292369][T19271] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1046.337352][T18987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.373424][T18987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.395855][T15085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.403016][T15085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.430775][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.437949][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.748991][ T5920] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1047.018948][ T5920] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1047.040713][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.067358][ T5920] usb 6-1: Product: syz [ 1047.114538][ T5920] usb 6-1: Manufacturer: syz [ 1047.132374][ T5920] usb 6-1: SerialNumber: syz [ 1047.353079][T18987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.379403][T19276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.388195][T19276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.509940][T18987] veth0_vlan: entered promiscuous mode [ 1047.542640][T18987] veth1_vlan: entered promiscuous mode [ 1047.638081][T15757] usb 2-1: string descriptor 0 read error: -71 [ 1047.648076][T18987] veth0_macvtap: entered promiscuous mode [ 1047.703270][T18987] veth1_macvtap: entered promiscuous mode [ 1047.710183][T15757] usb 2-1: USB disconnect, device number 65 [ 1047.762062][T19093] udevd[19093]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.811475][T18987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.846443][T18987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.909236][ T5920] net_ratelimit: 10 callbacks suppressed [ 1047.909260][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1047.970216][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1047.984723][T15088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.999524][T15088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.014429][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1048.033752][T15088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.063306][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1048.295963][T15088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.305017][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1048.330077][ T5920] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1048.411735][ T5920] usb 6-1: USB disconnect, device number 65 [ 1048.595536][ T30] audit: type=1400 audit(1770257274.685:1182): avc: denied { call } for pid=19305 comm="syz.3.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1048.616038][T19306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3148'. [ 1048.640377][T15087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.658946][ T30] audit: type=1400 audit(1770257274.685:1183): avc: denied { transfer } for pid=19305 comm="syz.3.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1048.758671][T15087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.866389][T19310] kvm: MWAIT instruction emulated as NOP! [ 1048.866591][T15087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.186887][T15087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.235190][T12679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1050.246645][T12679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1050.257842][T12679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1050.267144][T12679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1050.311190][T12679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1050.437487][T19364] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3155'. [ 1050.506995][ T5920] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1050.553099][ T30] audit: type=1400 audit(1770257276.528:1184): avc: denied { write } for pid=19361 comm="syz.1.3157" path="socket:[74237]" dev="sockfs" ino=74237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1050.616467][T18942] syz_tun (unregistering): left allmulticast mode [ 1050.702841][ T5920] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.717219][ T5920] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1050.728712][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.739307][ T5920] usb 4-1: Product: syz [ 1050.770376][ T5920] usb 4-1: Manufacturer: syz [ 1050.798896][ T5920] usb 4-1: SerialNumber: syz [ 1050.809341][T19354] lo speed is unknown, defaulting to 1000 [ 1051.035266][ T5920] usb 4-1: selecting invalid altsetting 1 [ 1051.343254][ T5920] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1051.343667][ T5920] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1052.432563][ T5920] usb 4-1: USB disconnect, device number 85 [ 1052.547662][ T5812] Bluetooth: hci4: command tx timeout [ 1052.690780][T19389] binder: 19388:19389 unknown command 0 [ 1052.726523][T19389] binder: 19388:19389 ioctl c0306201 200000000400 returned -22 [ 1052.794987][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3161'. [ 1052.840966][ T3484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.998337][ T3484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.377890][ T3484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.390878][ T3484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.504408][ T3484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.516548][ T3484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.541544][ T5920] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1053.543758][T19354] chnl_net:caif_netlink_parms(): no params data found [ 1053.616757][ T5949] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1053.619710][T19354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.631499][T19354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.638910][T19354] bridge_slave_0: entered allmulticast mode [ 1053.646188][T19354] bridge_slave_0: entered promiscuous mode [ 1053.666587][ T3484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.688861][ T3484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.725817][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1053.748307][ T5920] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1053.758891][T19354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.766339][T19354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.773484][T19354] bridge_slave_1: entered allmulticast mode [ 1053.779983][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1053.796137][T19354] bridge_slave_1: entered promiscuous mode [ 1053.799026][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.819103][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.851065][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.852386][T19354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.875629][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1053.893313][T19402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1053.898522][ T5949] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1053.910403][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.927149][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1053.952117][ T5949] usb 6-1: config 0 descriptor?? [ 1053.956094][T19354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.419393][T19354] team0: Port device team_slave_0 added [ 1054.454248][T19354] team0: Port device team_slave_1 added [ 1054.538166][T15766] usb 4-1: USB disconnect, device number 86 [ 1054.626258][ T5949] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 1054.646489][ T5949] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 1054.686754][ T5949] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1054.691313][T19354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.772207][ T5812] Bluetooth: hci4: command tx timeout [ 1054.837034][T19354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.867046][T19436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3170'. [ 1054.888439][T19436] netlink: 'syz.1.3170': attribute type 10 has an invalid length. [ 1054.896420][T19436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3170'. [ 1055.101162][T19354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.118360][T19354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.125815][T19354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.161758][T19354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.301981][T19442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1055.311178][T19442] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1055.370417][T19354] hsr_slave_0: entered promiscuous mode [ 1055.412132][T19445] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1055.486153][T19354] hsr_slave_1: entered promiscuous mode [ 1055.522650][T19354] debugfs: 'hsr0' already exists in 'hsr' [ 1055.553540][T19354] Cannot create hsr debugfs directory [ 1055.830955][ T5807] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1056.017402][ T5807] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1056.028808][ T5807] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1056.071884][ T5807] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1056.162403][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.423486][T19447] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1056.434873][ T5807] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1056.556669][T15766] usb 6-1: reset high-speed USB device number 66 using dummy_hcd [ 1056.950229][T15765] usb 4-1: USB disconnect, device number 87 [ 1057.004889][ T5812] Bluetooth: hci4: command tx timeout [ 1057.614198][ T5807] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1057.699802][ T5920] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1057.788980][ T5807] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1057.804139][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.812460][ T5807] usb 2-1: Product: syz [ 1057.816627][ T5807] usb 2-1: Manufacturer: syz [ 1057.827960][ T5807] usb 2-1: SerialNumber: syz [ 1057.861430][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 1057.870402][ T5920] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1057.890877][ T5920] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1057.901214][ T5920] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1057.911723][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.086657][T15757] usb 6-1: USB disconnect, device number 66 [ 1058.374901][ T3484] bond0 (unregistering): left promiscuous mode [ 1058.381142][ T3484] bond_slave_0: left promiscuous mode [ 1058.387673][ T3484] bond_slave_1: left promiscuous mode [ 1058.395368][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.406352][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.417022][ T3484] bond0 (unregistering): Released all slaves [ 1058.485696][ T5807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1058.499102][ T5807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1058.613427][ T3484] bond1 (unregistering): Released all slaves [ 1058.781634][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.065362][ T3484] bond2 (unregistering): Released all slaves [ 1059.217780][ T5812] Bluetooth: hci4: command tx timeout [ 1059.224753][ T3484] bond3 (unregistering): Released all slaves [ 1059.390891][ T3484] bond4 (unregistering): Released all slaves [ 1059.413590][ T3484] bond5 (unregistering): Released all slaves [ 1059.499633][ T3484] bond6 (unregistering): Released all slaves [ 1059.585735][ T3484] bond7 (unregistering): Released all slaves [ 1059.723767][ T3484] bond8 (unregistering): Released all slaves [ 1059.908065][ T5807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1059.933162][ T5807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1060.030750][ T3484] bond9 (unregistering): (slave vlan2): Releasing active interface [ 1060.045891][ T3484] bond9 (unregistering): Released all slaves [ 1060.138389][ T5920] usb 1-1: string descriptor 0 read error: -71 [ 1060.202835][ T5920] usb 1-1: USB disconnect, device number 85 [ 1060.640062][ T30] audit: type=1400 audit(1770257285.854:1185): avc: denied { ioctl } for pid=19484 comm="syz.5.3183" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1060.750411][ T3484] tipc: Left network mode [ 1061.056763][ T5949] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1061.553639][ T5949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1061.597584][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.649904][ T5949] usb 1-1: config 0 descriptor?? [ 1061.707282][ T5807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1061.769123][ T5807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1061.833485][ T5807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1061.922022][ T5807] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1062.180460][ T5807] usb 2-1: USB disconnect, device number 66 [ 1062.603878][T19513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.631585][T19513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.636525][T19518] netlink: 'syz.3.3187': attribute type 3 has an invalid length. [ 1063.367730][ T5949] ath6kl: Failed to submit usb control message: -110 [ 1063.374503][ T5949] ath6kl: unable to send the bmi data to the device: -110 [ 1063.534727][ T5949] ath6kl: Unable to send get target info: -110 [ 1063.572676][ T5949] ath6kl: Failed to init ath6kl core: -110 [ 1063.592273][ T5949] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1063.900260][ T5920] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1064.597235][ T5920] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1064.624124][ T5920] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1064.663656][ T5920] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1064.700424][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.772895][T19524] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1064.800175][T19354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1064.847056][ T5920] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1064.942601][T19354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1065.002662][T19354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1065.101327][T19354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1065.240119][T15766] usb 6-1: USB disconnect, device number 67 [ 1065.376675][ T43] usb 1-1: USB disconnect, device number 86 [ 1065.746985][T19354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.814695][T19556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.863956][T19354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.894912][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.902078][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.963271][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.970427][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.038832][ T3484] batadv0: left promiscuous mode [ 1066.076963][ T3484] hsr_slave_0: left promiscuous mode [ 1066.092817][ T3484] hsr_slave_1: left promiscuous mode [ 1066.103559][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.131790][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.145401][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.206296][T19560] FAULT_INJECTION: forcing a failure. [ 1066.206296][T19560] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.224003][ T3484] veth1_macvtap: left promiscuous mode [ 1066.229506][ T3484] veth0_macvtap: left promiscuous mode [ 1066.242068][ T3484] veth1_vlan: left promiscuous mode [ 1066.247387][ T3484] veth0_vlan: left promiscuous mode [ 1066.259854][T19560] CPU: 0 UID: 0 PID: 19560 Comm: syz.5.3195 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.259872][T19560] Tainted: [L]=SOFTLOCKUP [ 1066.259876][T19560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1066.259883][T19560] Call Trace: [ 1066.259887][T19560] [ 1066.259891][T19560] dump_stack_lvl+0x100/0x190 [ 1066.259910][T19560] should_fail_ex.cold+0x5/0xa [ 1066.259922][T19560] should_failslab+0xc2/0x120 [ 1066.259937][T19560] ? tomoyo_encode2+0xfb/0x3c0 [ 1066.259948][T19560] __kmalloc_noprof+0xf6/0x9c0 [ 1066.259963][T19560] ? tomoyo_encode2+0xfb/0x3c0 [ 1066.259974][T19560] tomoyo_encode2+0xfb/0x3c0 [ 1066.259987][T19560] tomoyo_encode+0x29/0x50 [ 1066.259999][T19560] tomoyo_realpath_from_path+0x18c/0x690 [ 1066.260014][T19560] tomoyo_path_number_perm+0x23c/0x580 [ 1066.260031][T19560] ? tomoyo_path_number_perm+0x22e/0x580 [ 1066.260049][T19560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1066.260079][T19560] ? find_held_lock+0x2b/0x80 [ 1066.260094][T19560] ? hook_file_ioctl_common+0x146/0x410 [ 1066.260108][T19560] ? __fget_files+0x215/0x3d0 [ 1066.260123][T19560] ? __fget_files+0x21f/0x3d0 [ 1066.260139][T19560] security_file_ioctl+0xd3/0x230 [ 1066.260151][T19560] __x64_sys_ioctl+0xb7/0x210 [ 1066.260163][T19560] do_syscall_64+0xc9/0xf80 [ 1066.260177][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.260188][T19560] RIP: 0033:0x7f4b3fd9aeb9 [ 1066.260198][T19560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.260208][T19560] RSP: 002b:00007f4b3dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1066.260219][T19560] RAX: ffffffffffffffda RBX: 00007f4b40015fa0 RCX: 00007f4b3fd9aeb9 [ 1066.260226][T19560] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 1066.260232][T19560] RBP: 00007f4b3dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.260239][T19560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.260245][T19560] R13: 00007f4b40016038 R14: 00007f4b40015fa0 R15: 00007fff0fd95d98 [ 1066.260259][T19560] [ 1066.260269][T19560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.027143][ T3484] pim6reg9 (unregistering): left allmulticast mode [ 1067.752261][ T5920] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1068.736060][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1068.787937][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1068.813850][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1068.890483][ T5920] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.924706][ T5920] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1068.935435][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1069.056238][ T5920] usb 2-1: Product: syz [ 1069.154983][ T5920] usb 2-1: Manufacturer: syz [ 1069.181428][ T5920] usb 2-1: SerialNumber: syz [ 1069.203734][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 1069.212798][ T5920] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input95 [ 1069.777369][T15766] lo speed is unknown, defaulting to 1000 [ 1069.790816][T15766] infiniband syz2: ib_query_port failed (-19) [ 1069.817915][T19354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1069.952370][ T43] usb 2-1: USB disconnect, device number 67 [ 1070.000485][T19595] binder: 19594:19595 ioctl c00c6211 0 returned -14 [ 1070.057043][ T43] appletouch 2-1:1.0: input: appletouch disconnected [ 1070.433037][T19604] fuse: Bad value for 'user_id' [ 1070.438012][T19604] fuse: Bad value for 'user_id' [ 1070.595550][T19604] Invalid logical block size (256) [ 1070.634826][T19354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.805940][T19354] veth0_vlan: entered promiscuous mode [ 1070.865164][T19354] veth1_vlan: entered promiscuous mode [ 1070.929134][T19354] veth0_macvtap: entered promiscuous mode [ 1071.008439][T19354] veth1_macvtap: entered promiscuous mode [ 1071.066219][T19354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.076132][T19354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.121486][ T3484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.131605][ T3484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.182749][ T3484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.224897][ T3484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.267437][T19617] xt_socket: unknown flags 0x4 [ 1071.332193][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.351317][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.521384][T15087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.533146][T15087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.164284][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1072.173197][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1072.182297][T19631] netlink: 'syz.2.3152': attribute type 13 has an invalid length. [ 1072.190250][T19631] netlink: 'syz.2.3152': attribute type 12 has an invalid length. [ 1072.912523][T15766] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1073.521560][T15766] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1073.682171][T15766] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1073.700727][T15766] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1073.769374][T19652] Invalid logical block size (256) [ 1073.774757][T15766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.822066][T19645] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1073.846073][T15766] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1074.231800][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1074.240778][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1074.249760][T19661] netlink: 'syz.3.3218': attribute type 13 has an invalid length. [ 1074.257579][T19661] netlink: 'syz.3.3218': attribute type 12 has an invalid length. [ 1074.629248][ T5920] usb 6-1: USB disconnect, device number 68 [ 1076.174437][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3222'. [ 1076.678970][T19693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 1076.687901][T19693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3226'. [ 1077.113918][T15757] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1077.137829][T19700] netlink: 'syz.1.3228': attribute type 39 has an invalid length. [ 1077.289462][T15757] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1077.366736][T15757] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1077.648375][ T5920] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1077.857211][ T5920] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1077.877745][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.960119][T15757] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1077.974456][T15757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.988483][ T5920] usb 6-1: config 0 descriptor?? [ 1078.003165][T19683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1078.031807][T15757] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1078.367321][T15757] usb 3-1: USB disconnect, device number 85 [ 1078.653255][T19718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.685970][T19718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.145630][ T5920] ath6kl: Failed to submit usb control message: -110 [ 1079.158285][ T5920] ath6kl: unable to send the bmi data to the device: -110 [ 1079.191100][ T5920] ath6kl: Unable to send get target info: -110 [ 1079.249088][ T5920] ath6kl: Failed to init ath6kl core: -110 [ 1079.281072][ T5920] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1080.617333][T19731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3235'. [ 1082.020377][ T5949] usb 6-1: USB disconnect, device number 69 [ 1083.566245][T19747] fuse: Bad value for 'fd' [ 1083.575058][T19747] fuse: Bad value for 'user_id' [ 1083.579917][T19747] fuse: Bad value for 'user_id' [ 1083.645986][T19747] Invalid logical block size (256) [ 1084.224290][T19765] syzkaller1: entered promiscuous mode [ 1084.259242][T19765] syzkaller1: entered allmulticast mode [ 1086.278226][ T43] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1086.457961][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1086.481661][ T43] usb 3-1: no configurations [ 1086.487165][ T43] usb 3-1: can't read configurations, error -22 [ 1086.677969][ T43] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1086.899164][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1087.067190][ T43] usb 3-1: no configurations [ 1087.071792][ T43] usb 3-1: can't read configurations, error -22 [ 1087.081131][ T43] usb usb3-port1: attempt power cycle [ 1087.421198][T19799] fuse: Bad value for 'fd' [ 1087.441101][T19799] fuse: Bad value for 'user_id' [ 1087.446220][T19799] fuse: Bad value for 'user_id' [ 1087.462885][ T43] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1087.494874][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1087.501381][ T43] usb 3-1: no configurations [ 1087.506441][ T43] usb 3-1: can't read configurations, error -22 [ 1087.539790][T19806] FAULT_INJECTION: forcing a failure. [ 1087.539790][T19806] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.569248][T19798] Invalid logical block size (256) [ 1087.599251][T19806] CPU: 1 UID: 0 PID: 19806 Comm: syz.3.3255 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.599270][T19806] Tainted: [L]=SOFTLOCKUP [ 1087.599274][T19806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1087.599280][T19806] Call Trace: [ 1087.599285][T19806] [ 1087.599289][T19806] dump_stack_lvl+0x100/0x190 [ 1087.599308][T19806] should_fail_ex.cold+0x5/0xa [ 1087.599320][T19806] should_failslab+0xc2/0x120 [ 1087.599335][T19806] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1087.599347][T19806] __kmalloc_noprof+0xf6/0x9c0 [ 1087.599362][T19806] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1087.599374][T19806] tomoyo_realpath_from_path+0xb6/0x690 [ 1087.599389][T19806] tomoyo_path_number_perm+0x23c/0x580 [ 1087.599406][T19806] ? tomoyo_path_number_perm+0x22e/0x580 [ 1087.599424][T19806] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1087.599454][T19806] ? find_held_lock+0x2b/0x80 [ 1087.599473][T19806] ? hook_file_ioctl_common+0x146/0x410 [ 1087.599487][T19806] ? __fget_files+0x215/0x3d0 [ 1087.599502][T19806] ? __fget_files+0x21f/0x3d0 [ 1087.599517][T19806] security_file_ioctl+0xd3/0x230 [ 1087.599530][T19806] __x64_sys_ioctl+0xb7/0x210 [ 1087.599542][T19806] do_syscall_64+0xc9/0xf80 [ 1087.599556][T19806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.599567][T19806] RIP: 0033:0x7f304c99aeb9 [ 1087.599577][T19806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.599588][T19806] RSP: 002b:00007f304d82a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.599599][T19806] RAX: ffffffffffffffda RBX: 00007f304cc16090 RCX: 00007f304c99aeb9 [ 1087.599605][T19806] RDX: 0000200000000440 RSI: 000000000000541b RDI: 0000000000000006 [ 1087.599612][T19806] RBP: 00007f304d82a090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.599618][T19806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.599624][T19806] R13: 00007f304cc16128 R14: 00007f304cc16090 R15: 00007fff0007ca38 [ 1087.599638][T19806] [ 1087.599644][T19806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1087.846192][T19809] team0: Port device team_slave_0 removed [ 1087.880064][ T43] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1087.912059][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1087.923906][ T43] usb 3-1: no configurations [ 1087.929519][ T43] usb 3-1: can't read configurations, error -22 [ 1087.937061][ T43] usb usb3-port1: unable to enumerate USB device [ 1088.028837][T19818] loop9: detected capacity change from 0 to 7 [ 1088.035662][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.044083][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.052048][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.061092][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.068978][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.076891][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.085342][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.093724][T19818] ldm_validate_partition_table(): Disk read failed. [ 1088.100400][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.108446][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.116351][T19818] Buffer I/O error on dev loop9, logical block 0, async page read [ 1088.124222][T19818] Dev loop9: unable to read RDB block 0 [ 1088.130030][T19818] loop9: unable to read partition table [ 1088.135986][T19818] loop9: partition table beyond EOD, truncated [ 1088.142205][T19818] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1088.142205][T19818] ) failed (rc=-5) [ 1089.693022][T19843] fuse: Bad value for 'fd' [ 1089.732140][T19843] fuse: Bad value for 'user_id' [ 1089.737113][T19843] fuse: Bad value for 'user_id' [ 1089.890120][T19843] Invalid logical block size (256) [ 1091.740093][ T30] audit: type=1400 audit(1770257315.057:1186): avc: denied { write } for pid=19868 comm="syz.3.3270" path="socket:[76506]" dev="sockfs" ino=76506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1093.214113][T15757] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1093.425418][T19891] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1093.569916][ T5949] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1093.952577][T15757] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1093.961639][T15757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.973662][T15757] usb 1-1: config 0 descriptor?? [ 1094.059861][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 1094.067630][ T5949] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 1094.077841][ T5949] usb 2-1: config 1 has no interface number 0 [ 1095.092288][ T5949] usb 2-1: config 1 interface 214 has no altsetting 0 [ 1095.124070][ T5949] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1095.141549][T15757] ath6kl: Failed to submit usb control message: -110 [ 1095.156311][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.156403][T15757] ath6kl: unable to send the bmi data to the device: -110 [ 1095.269654][T19909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.296288][ T5949] usb 2-1: Product: syz [ 1095.301647][ T5949] usb 2-1: Manufacturer: syz [ 1095.308708][ T5949] usb 2-1: SerialNumber: syz [ 1095.322179][T19909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.336792][T15757] ath6kl: Unable to send get target info: -110 [ 1095.364488][ T5949] ums-alauda 2-1:1.214: USB Mass Storage device detected [ 1095.400891][T15757] ath6kl: Failed to init ath6kl core: -110 [ 1095.414180][T15757] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1095.557890][T19914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3279'. [ 1096.097665][ T5949] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1096.262634][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.275630][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1096.288262][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1096.302699][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1096.316657][ T5949] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1096.325899][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.347131][ T5949] usb 4-1: config 0 descriptor?? [ 1096.729549][ T5920] usb 1-1: USB disconnect, device number 87 [ 1096.824042][ T43] usb 2-1: USB disconnect, device number 68 [ 1096.835485][ T5949] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1098.397967][T19941] overlayfs: failed to clone upperpath [ 1098.721623][T19944] CUSE: DEVNAME unspecified [ 1099.463137][ T43] usb 4-1: USB disconnect, device number 88 [ 1100.071743][T19964] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1100.697535][T15757] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1101.413894][T15757] usb 2-1: Using ep0 maxpacket: 16 [ 1101.420900][T15757] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1101.432827][T15757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1101.447859][T15757] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1101.457042][T15757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.465172][T15757] usb 2-1: Product: syz [ 1101.472038][T15757] usb 2-1: Manufacturer: syz [ 1101.477095][T15757] usb 2-1: SerialNumber: syz [ 1101.490516][T15757] usb 2-1: config 0 descriptor?? [ 1101.513968][T15757] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1101.524027][T15757] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1102.065701][T15757] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1102.255910][T15757] em28xx 2-1:0.0: Config register raw data: 0xa6 [ 1102.262610][T15757] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 1102.269226][T15757] em28xx 2-1:0.0: No AC97 audio processor [ 1102.283253][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1102.306587][T19987] sit0: entered promiscuous mode [ 1102.327386][T19987] netlink: 'syz.2.3301': attribute type 1 has an invalid length. [ 1102.352200][T19987] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1102.482791][ T30] audit: type=1400 audit(1770257325.094:1187): avc: denied { write } for pid=19990 comm="syz.3.3302" path="socket:[78054]" dev="sockfs" ino=78054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1102.520090][T15757] usb 2-1: USB disconnect, device number 69 [ 1102.869070][ T5949] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1102.933011][T20008] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1103.030117][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1103.039094][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1103.048054][T20012] netlink: 'syz.3.3307': attribute type 13 has an invalid length. [ 1103.055937][T20012] netlink: 'syz.3.3307': attribute type 12 has an invalid length. [ 1103.380449][T20015] Cannot find set identified by id 0 to match [ 1103.394699][T20015] fuse: Unknown parameter '' [ 1103.415803][ T5949] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1103.425368][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.433666][ T5949] usb 1-1: Product: syz [ 1103.438641][ T5949] usb 1-1: Manufacturer: syz [ 1104.225258][ T5949] usb 1-1: SerialNumber: syz [ 1104.242959][ T5949] usb 1-1: config 0 descriptor?? [ 1104.473921][ T5949] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 1104.620833][ T5949] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1104.689644][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1104.792085][ T5949] usb 1-1: USB disconnect, device number 88 [ 1104.872501][T20031] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3312'. [ 1104.972571][T20034] tipc: Started in network mode [ 1104.984315][T20034] tipc: Node identity 56d5478e8c0e, cluster identity 4711 [ 1105.002699][T20034] tipc: Enabled bearer , priority 0 [ 1105.013693][T20034] syzkaller0: entered promiscuous mode [ 1105.028286][T20034] syzkaller0: entered allmulticast mode [ 1105.181966][T20036] tipc: Resetting bearer [ 1105.302523][T20033] tipc: Resetting bearer [ 1105.541626][T20033] tipc: Disabling bearer [ 1105.828895][ T5807] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1106.045955][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 1106.080919][ T5807] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1106.135718][ T5807] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1106.213784][ T5807] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.354610][ T5807] usb 1-1: string descriptor 0 read error: -22 [ 1106.362787][ T5807] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1106.483687][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.537964][ T5807] usb 1-1: 0:2 : does not exist [ 1106.710481][T20054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3317'. [ 1106.870312][ T5807] usb 1-1: USB disconnect, device number 89 [ 1106.951483][T20057] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3318'. [ 1107.160246][T20061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3320'. [ 1107.177468][T20049] mmap: syz.5.3310 (20049): VmData 25968640 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1107.503100][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3321'. [ 1107.512071][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3321'. [ 1107.521036][T20071] netlink: 'syz.2.3321': attribute type 13 has an invalid length. [ 1107.529080][T20071] netlink: 'syz.2.3321': attribute type 12 has an invalid length. [ 1108.123451][T15764] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1108.706866][T15764] usb 2-1: Using ep0 maxpacket: 8 [ 1108.952017][T15764] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1108.963170][T15764] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1108.973011][T15764] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1108.982205][T15764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.175450][T20095] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1110.811718][T20105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3332'. [ 1111.429471][T15764] usb 2-1: string descriptor 0 read error: -71 [ 1111.513235][T15764] usb 2-1: USB disconnect, device number 70 [ 1111.608519][T19187] udevd[19187]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.674125][T20119] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1112.093612][T15764] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1112.264564][T15764] usb 2-1: Using ep0 maxpacket: 8 [ 1112.273830][T15764] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 1112.294074][T15764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.320959][T15764] usb 2-1: Product: syz [ 1112.337146][T15764] usb 2-1: Manufacturer: syz [ 1112.350014][T15764] usb 2-1: SerialNumber: syz [ 1112.363201][T15764] usb 2-1: config 0 descriptor?? [ 1112.374535][T15764] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 1112.851619][T20132] netlink: 'syz.2.3338': attribute type 4 has an invalid length. [ 1112.876827][T20132] netlink: 'syz.2.3338': attribute type 4 has an invalid length. [ 1113.074388][T15764] pwc: Failed to set LED on/off time (-71) [ 1113.097369][T15764] pwc: send_video_command error -71 [ 1113.104786][T15764] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1113.189872][T15764] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1113.208168][T15764] usb 2-1: USB disconnect, device number 71 [ 1113.444258][ T793] kworker/1:2 (793) used greatest stack depth: 17016 bytes left [ 1113.759882][T20148] loop9: detected capacity change from 0 to 7 [ 1113.767168][T20148] buffer_io_error: 9 callbacks suppressed [ 1113.767186][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1113.780816][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1113.825930][T20142] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3341'. [ 1113.844968][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1113.857105][T20142] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1113.964620][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.280977][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.431083][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 1114.440283][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 1114.449242][T20165] netlink: 'syz.1.3345': attribute type 13 has an invalid length. [ 1114.457089][T20165] netlink: 'syz.1.3345': attribute type 12 has an invalid length. [ 1114.734286][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.745399][T20141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1114.770028][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.778137][T20148] ldm_validate_partition_table(): Disk read failed. [ 1115.045998][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.159281][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.170991][T20148] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.204919][T20148] Dev loop9: unable to read RDB block 0 [ 1115.215431][T20148] loop9: unable to read partition table [ 1115.221268][T20148] loop9: partition table beyond EOD, truncated [ 1115.321475][T20148] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1115.321475][T20148] ) failed (rc=-5) [ 1115.461332][ T5949] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1115.984938][ T5807] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1115.996854][T20181] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1116.005929][T20181] No source specified [ 1116.017051][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 1116.037871][ T5949] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1116.051454][T15757] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1116.056933][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.070393][ T5949] usb 1-1: Product: syz [ 1116.078646][ T5949] usb 1-1: Manufacturer: syz [ 1116.088884][ T5949] usb 1-1: SerialNumber: syz [ 1116.156005][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 1116.162807][ T5807] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 1116.172836][ T5807] usb 2-1: config 1 has no interface number 0 [ 1116.180494][ T5807] usb 2-1: config 1 interface 214 has no altsetting 0 [ 1116.193273][ T5807] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1116.213246][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.221539][T15757] usb 3-1: Using ep0 maxpacket: 32 [ 1116.229850][ T5807] usb 2-1: Product: syz [ 1116.234267][ T5807] usb 2-1: Manufacturer: syz [ 1116.238949][ T5807] usb 2-1: SerialNumber: syz [ 1116.248838][T15757] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1116.260323][ T5807] ums-alauda 2-1:1.214: USB Mass Storage device detected [ 1116.264877][T15757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.277892][T15757] usb 3-1: config 0 descriptor?? [ 1116.321430][ T5949] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1116.445546][ T5949] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1116.459011][ T5949] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1116.467610][ T5949] usb 1-1: media controller created [ 1116.487219][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.508902][T15757] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1116.517047][T20195] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1116.530100][T15757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1116.541304][T15757] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1116.549042][T15757] usb 3-1: media controller created [ 1116.561042][T15757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.755728][ T5949] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1116.756682][T20179] ------------[ cut here ]------------ [ 1116.769455][T20179] usb 1-1: BOGUS control dir, pipe 80005a80 doesn't match bRequestType c0 [ 1116.778310][T20179] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.2.3350/20179 [ 1116.788716][T20179] Modules linked in: [ 1116.793112][T20179] CPU: 0 UID: 0 PID: 20179 Comm: syz.2.3350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.804219][T20179] Tainted: [L]=SOFTLOCKUP [ 1116.808618][T20179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1116.818682][T20179] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1116.824389][T20179] Code: d2 74 5d 48 89 54 24 40 e8 af dd c8 fa 4c 89 ef e8 c7 ff df fe 48 89 c6 48 8d 3d fd b6 85 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 83 dd c8 fa 89 ee bf ff 00 00 00 [ 1116.844589][T20179] RSP: 0018:ffffc9000f2bf920 EFLAGS: 00010283 [ 1116.850690][T20179] RAX: ffffffff8c5f4a60 RBX: ffff888075b98a00 RCX: 0000000080005a80 [ 1116.858757][T20179] RDX: ffff8880338437a0 RSI: ffffffff8c5f4a60 RDI: ffffffff90c3d500 [ 1116.874751][T20179] RBP: ffff888081160058 R08: 00000000000000c0 R09: 0000000000000000 [ 1116.925928][T20179] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880657dc780 [ 1116.980457][T20179] R13: ffff8880811600b0 R14: 0000000080005a80 R15: 00000000000000c0 [ 1117.000917][T20179] FS: 00007f7e6d7016c0(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 1117.011345][T20179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.025064][T20179] CR2: 00007fff0fd93f2c CR3: 0000000022bb2000 CR4: 00000000003526f0 [ 1117.066183][T20179] Call Trace: [ 1117.096796][T20179] [ 1117.102840][T20179] ? __init_swait_queue_head+0xca/0x150 [ 1117.134419][T20179] usb_start_wait_urb+0x106/0x4c0 [ 1117.159184][T20179] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1117.190195][T20179] ? __asan_memset+0x23/0x50 [ 1117.214736][T20179] usb_control_msg+0x326/0x4a0 [ 1117.235678][T20179] ? __pfx_usb_control_msg+0x10/0x10 [ 1117.262641][T20179] ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0 [ 1117.289119][T20179] ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0 [ 1117.310555][T20179] gl861_ctrl_msg+0x1a5/0x4a0 [ 1117.343020][T20179] ? __rt_mutex_slowlock_locked.constprop.0+0x250/0x6b0 [ 1117.385402][T20179] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1117.402754][T20179] gl861_i2c_master_xfer+0x545/0x690 [ 1117.408272][T20179] ? mark_held_locks+0x40/0x70 [ 1117.413068][T20179] __i2c_transfer+0x5e1/0x1610 [ 1117.417911][T20179] ? __pfx___i2c_transfer+0x10/0x10 [ 1117.423447][T20179] i2c_transfer+0x15f/0x380 [ 1117.428351][T20179] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1117.433453][T20179] i2cdev_ioctl+0x19d/0x830 [ 1117.438039][T20179] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1117.443201][T20179] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1117.448274][T20179] __x64_sys_ioctl+0x18e/0x210 [ 1117.453126][T20179] do_syscall_64+0xc9/0xf80 [ 1117.457732][T20179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.463747][T20179] RIP: 0033:0x7f7e6c79aeb9 [ 1117.468194][T20179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.487944][T20179] RSP: 002b:00007f7e6d701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.496464][T20179] RAX: ffffffffffffffda RBX: 00007f7e6ca15fa0 RCX: 00007f7e6c79aeb9 [ 1117.504498][T20179] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 1117.512502][T20179] RBP: 00007f7e6c808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1117.520567][T20179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.528598][T20179] R13: 00007f7e6ca16038 R14: 00007f7e6ca15fa0 R15: 00007ffdaad083c8 [ 1117.537422][T20179] [ 1117.540495][T20179] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1117.547789][T20179] CPU: 0 UID: 0 PID: 20179 Comm: syz.2.3350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.558706][T20179] Tainted: [L]=SOFTLOCKUP [ 1117.563012][T20179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1117.573044][T20179] Call Trace: [ 1117.576303][T20179] [ 1117.579211][T20179] dump_stack_lvl+0x100/0x190 [ 1117.583875][T20179] vpanic+0x20d/0x630 [ 1117.587847][T20179] panic+0xd1/0xd1 [ 1117.591542][T20179] ? __pfx_panic+0x10/0x10 [ 1117.595939][T20179] check_panic_on_warn.cold+0x19/0x34 [ 1117.601295][T20179] ? usb_submit_urb+0x1573/0x1910 [ 1117.606313][T20179] __warn.cold+0x191/0x2f8 [ 1117.610708][T20179] __report_bug+0x296/0x3d0 [ 1117.615188][T20179] ? usb_submit_urb+0x1573/0x1910 [ 1117.620190][T20179] ? __pfx___report_bug+0x10/0x10 [ 1117.625274][T20179] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1117.631065][T20179] ? kasan_save_stack+0x3f/0x50 [ 1117.635897][T20179] ? kasan_save_stack+0x30/0x50 [ 1117.640721][T20179] ? kasan_save_track+0x14/0x30 [ 1117.645551][T20179] ? __kasan_kmalloc+0xaa/0xb0 [ 1117.650310][T20179] report_bug_entry+0xe1/0x290 [ 1117.655052][T20179] ? usb_submit_urb+0x157e/0x1910 [ 1117.660147][T20179] handle_bug+0x1c9/0x2a0 [ 1117.664471][T20179] exc_invalid_op+0x17/0x50 [ 1117.668954][T20179] asm_exc_invalid_op+0x1a/0x20 [ 1117.673786][T20179] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 1117.679402][T20179] Code: d2 74 5d 48 89 54 24 40 e8 af dd c8 fa 4c 89 ef e8 c7 ff df fe 48 89 c6 48 8d 3d fd b6 85 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 83 dd c8 fa 89 ee bf ff 00 00 00 [ 1117.699008][T20179] RSP: 0018:ffffc9000f2bf920 EFLAGS: 00010283 [ 1117.705054][T20179] RAX: ffffffff8c5f4a60 RBX: ffff888075b98a00 RCX: 0000000080005a80 [ 1117.713001][T20179] RDX: ffff8880338437a0 RSI: ffffffff8c5f4a60 RDI: ffffffff90c3d500 [ 1117.720952][T20179] RBP: ffff888081160058 R08: 00000000000000c0 R09: 0000000000000000 [ 1117.728911][T20179] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880657dc780 [ 1117.736860][T20179] R13: ffff8880811600b0 R14: 0000000080005a80 R15: 00000000000000c0 [ 1117.744829][T20179] ? __init_swait_queue_head+0xca/0x150 [ 1117.750363][T20179] usb_start_wait_urb+0x106/0x4c0 [ 1117.755802][T20179] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1117.761335][T20179] ? __asan_memset+0x23/0x50 [ 1117.765910][T20179] usb_control_msg+0x326/0x4a0 [ 1117.770661][T20179] ? __pfx_usb_control_msg+0x10/0x10 [ 1117.775946][T20179] ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0 [ 1117.782620][T20179] ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0 [ 1117.789235][T20179] gl861_ctrl_msg+0x1a5/0x4a0 [ 1117.793940][T20179] ? __rt_mutex_slowlock_locked.constprop.0+0x250/0x6b0 [ 1117.800871][T20179] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1117.806089][T20179] gl861_i2c_master_xfer+0x545/0x690 [ 1117.811371][T20179] ? mark_held_locks+0x40/0x70 [ 1117.816123][T20179] __i2c_transfer+0x5e1/0x1610 [ 1117.820904][T20179] ? __pfx___i2c_transfer+0x10/0x10 [ 1117.826095][T20179] i2c_transfer+0x15f/0x380 [ 1117.830588][T20179] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1117.835519][T20179] i2cdev_ioctl+0x19d/0x830 [ 1117.840004][T20179] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1117.845017][T20179] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1117.850025][T20179] __x64_sys_ioctl+0x18e/0x210 [ 1117.855207][T20179] do_syscall_64+0xc9/0xf80 [ 1117.859725][T20179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.865597][T20179] RIP: 0033:0x7f7e6c79aeb9 [ 1117.869992][T20179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.889584][T20179] RSP: 002b:00007f7e6d701028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.897974][T20179] RAX: ffffffffffffffda RBX: 00007f7e6ca15fa0 RCX: 00007f7e6c79aeb9 [ 1117.905936][T20179] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 1117.913889][T20179] RBP: 00007f7e6c808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1117.921839][T20179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.929785][T20179] R13: 00007f7e6ca16038 R14: 00007f7e6ca15fa0 R15: 00007ffdaad083c8 [ 1117.937744][T20179] [ 1117.941003][T20179] Kernel Offset: disabled [ 1117.945302][T20179] Rebooting in 86400 seconds..