last executing test programs: 11m36.872307636s ago: executing program 2 (id=2619): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x6, 0x4, 0x4, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x6, 0x4, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000d00)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c80)=[0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000d00)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c80)=[0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000e00)={&(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xcccccccc}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000e00)={&(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000e80)={&(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001000)={&(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0xb0b0b0b0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001000)={&(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0xb0b0b0b0}) r15 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r15, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r15, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r15, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r16}) ioctl$DRM_IOCTL_MODE_ATOMIC(r15, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000540)=[r16], &(0x7f0000000440)=[0x1], &(0x7f0000000680)=[r18], &(0x7f0000000040), 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000001100)={&(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r17, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001380)={&(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[{}, {}, {}, {}, {}], &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001480)={0x200, 0x8, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, r10, r11, r12, r13], &(0x7f0000000f40)=[0x7f, 0x3, 0x2, 0x2, 0x2], &(0x7f0000001400)=[r14, r18, 0x0, r19, r20], &(0x7f0000001440)=[0x4, 0x2, 0x7f], 0x0, 0x4}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r9, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000180)}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xcbf, 0x2}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r21, 0x2, 0x20}, &(0x7f0000000300)=0xc) r22 = dup(r6) syz_ublk_setup_queues(r22, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r22}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r22}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 11m35.573420048s ago: executing program 2 (id=2627): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x42f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0xf, "", [{{0x9, 0x4, 0x0, 0x7, 0xb9, 0x3, 0x1, 0x1, 0xf9, {0x9, 0x21, 0xf, 0x8, 0x1, {0x22, 0x9a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0xf7, 0x9, 0xd, 0x8, 0xa}, 0x8, &(0x7f0000000480)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x30, &(0x7f00000004c0)=@string={0x30, 0x3, "96782e47f52d7b667b2ef3aa6d5521bf7795b9d6860d21ef4d5fc1c4f5160b9ddcb5a5b3a6ae589af5799b607665"}}]}) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r2 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4000000053d2) execveat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={[&(0x7f00000001c0)='/dev/input/event#\x00', &(0x7f0000000200)='/dev/snd/seq\x00', &(0x7f0000000240)='/dev/snd/seq\x00']}, &(0x7f0000000380)={[&(0x7f00000002c0)='#/!\x00', &(0x7f0000000300)='/dev/snd/seq\x00', &(0x7f0000000340)='/dev/snd/seq\x00']}, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ca061a2583ec6813"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000f7ff0000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xfffffffffffffd28) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x3150c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/150) 11m32.62887578s ago: executing program 2 (id=2637): socket$inet6(0xa, 0x6, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x2000010f, &(0x7f0000000440)=ANY=[], 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x60}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a010100000000000000000100000009003c000000060a010400000000000000000100000008000b40fffffffc200004801c0001800b00010065787468647200000c0002800800034000000000140000001100010000000000000000000700000a"], 0xa4}}, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c047c070080000900", 0x33a) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r6 = gettid() tkill(r6, 0x14) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x800]}, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500"], 0x7c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl(r0, 0x7, &(0x7f00000001c0)="cbe0dd095e0b0ef8a8d4d21e413d1aa4fc179dd30eb6180917131645d260fb50a108ad1554a95251831d95bbe67406d4c23e1f757c0c07a2e5e2f3e93e4f02b3198b108c2cc93aef93f260e52f77fd707fd5f9e311bf0a2bdd08c03fbdc12900e46cf028855a2664580ff0319ee88c6b7cebdf6a8c522a81ee1c172b8f44513819b014e6225d39efe8078cd7b54f4fe0c56ce2813fab0d38a9fbc8d5fa1a74ca2c") r9 = syz_io_uring_setup(0x34b9, &(0x7f0000000100)={0x0, 0xe690, 0x80, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r13, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) 11m31.247920927s ago: executing program 2 (id=2641): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfffffffffffffff1, 0xe2080) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x0, 0x2, 0x7, '\x00', &(0x7f0000000200)=0x10}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000001c0)={0xffb, 0x0, 0x2, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x40284504, &(0x7f0000000040)=""/30) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) 11m29.928392783s ago: executing program 2 (id=2646): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) socket(0x10, 0x3, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0), 0xf, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x200) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x140, 0x30, 0xb, 0x0, 0x0, {}, [{0x12c, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0xd4, 0x5, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4b9fa}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe365}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_BOS={0x5}]}, {0x5e, 0x6, "3425e123d7726547ddceccacdd389820621f2b25023e25efa18c467746c861893b611fc273e18bb2ba425bbcad8fd216b839d471dca64ca2ae202c4613fd5b4e194784cc307e280ff7484e71edb4268d49d7ac73da490d98701b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x140}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x3c}}, 0x8004042) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000140)={0x10, 0x31, &(0x7f0000000100)="1ff2698045693c2482c1de92cbaa296e2f3093f90d1fed9b84d6b48b05c07a5cd4ae4942d010c40c0a1072fd2c60b9992e8a5c7c5e3bace6a8f3c9a12e1a", {0x0, 0x8c, 0x7538499eb121d14a, 0x2, 0xb3, 0x2, 0xa, 0x1000}}) 11m29.225867525s ago: executing program 2 (id=2651): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2000000f5, 0x2) (async) pselect6(0x7c, &(0x7f0000000180)={0xc, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x9}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(r3, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) ptrace$getregs(0xc, r5, 0xf, &(0x7f0000000600)=""/245) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000099d7fe812797a8c8eeadfce23f4851a2f1eeb8c37af88cea35187ff53f9ecea8048ad1a9015b5e5aa642586d3e745b19f8b46e5a91a2aaf1a88a9c6f833723ee931a3b39ba1d6749da1774211a4853727fcf1c768b4e62dae480bc49ee558f26bdf381f4e5e56e7e3a27d30813b86c7e9fcc65bcb6", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES16=r1, @ANYBLOB="0c009900ff070000710000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x891}, 0x24004884) 11m13.75203597s ago: executing program 32 (id=2651): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2000000f5, 0x2) (async) pselect6(0x7c, &(0x7f0000000180)={0xc, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x9}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(r3, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) ptrace$getregs(0xc, r5, 0xf, &(0x7f0000000600)=""/245) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000099d7fe812797a8c8eeadfce23f4851a2f1eeb8c37af88cea35187ff53f9ecea8048ad1a9015b5e5aa642586d3e745b19f8b46e5a91a2aaf1a88a9c6f833723ee931a3b39ba1d6749da1774211a4853727fcf1c768b4e62dae480bc49ee558f26bdf381f4e5e56e7e3a27d30813b86c7e9fcc65bcb6", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES16=r1, @ANYBLOB="0c009900ff070000710000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x891}, 0x24004884) 11m8.236224131s ago: executing program 0 (id=2702): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000740)={'syz1\x00', {0xfff9, 0x8, 0x7f, 0x9}, 0x26, [0x7dc5, 0x5, 0x8, 0x1, 0x8001, 0x10, 0x0, 0x23, 0x4, 0x400, 0x10000, 0x5, 0x7, 0xec7, 0xc, 0x0, 0x1, 0xfffffffb, 0x2, 0x34, 0x1, 0x2, 0x3, 0xc794, 0x200, 0x40, 0x564476b9, 0x7, 0x0, 0x2, 0x4, 0x30ac, 0x1, 0x8, 0xd, 0x0, 0x5, 0x30, 0x8, 0x9, 0x0, 0x3afb, 0x400, 0x26, 0x5, 0x5, 0x200, 0x0, 0x6, 0xff9, 0xff, 0x6, 0xb, 0x8001, 0x4, 0x9, 0x84f5, 0xcd94, 0xf06e, 0xb6f1, 0xd72a, 0x4, 0x6b20, 0x1], [0x101, 0x1, 0xe, 0x40, 0x7fff, 0xe5, 0x6, 0x7, 0x5, 0x4, 0x6, 0x4, 0x81, 0xfffffffe, 0x8, 0x6, 0x3, 0xfffffff3, 0x8, 0x1, 0x100, 0x862, 0x1, 0x7, 0x81, 0x4, 0x8, 0x7, 0xe, 0x0, 0xffff, 0x0, 0x7f, 0xf, 0x7, 0x9, 0x0, 0x9, 0x838d, 0x7, 0x28000, 0x0, 0xf8e3, 0x2, 0x4, 0x2, 0x9, 0x2, 0x1800, 0x3, 0x1, 0x8, 0xd84b, 0x90, 0x9, 0x100, 0x0, 0x2, 0x5, 0x6, 0x8, 0x6, 0x401, 0x40], [0xfffffff9, 0x3, 0x9, 0x3, 0xb, 0x80, 0x4, 0x3, 0x1, 0x401, 0x80000001, 0x7, 0x8, 0x9, 0xc, 0xd, 0x3, 0x0, 0x7d80, 0x5, 0xffff8000, 0x61ae0ec7, 0x33dc, 0x0, 0xbad, 0x2, 0x900, 0x6, 0x0, 0x799, 0x10, 0x4, 0x8, 0x8, 0xc397, 0xfffffe01, 0x4, 0xc93, 0x2, 0x4, 0x8, 0x8, 0x7, 0x7f, 0x200, 0x9, 0x9, 0x8, 0xc, 0x98, 0x2, 0x2, 0x1, 0x1, 0x0, 0x9, 0x100, 0x5, 0x8, 0x2, 0x64, 0x4, 0x3, 0x2], [0x9, 0x9, 0xb, 0x0, 0x5, 0x6, 0x80000001, 0x0, 0x5, 0xffffffff, 0xd, 0x6, 0xfffffffc, 0x7, 0x6, 0x2, 0x6, 0x6, 0x9, 0xfff, 0xffff, 0xfff, 0x7, 0x5, 0x3, 0xffffffff, 0x5, 0x80000000, 0x0, 0x69a, 0xe, 0xffffffff, 0x3, 0x80000001, 0x1, 0x1b, 0xfffffff8, 0x99, 0xd6, 0x9, 0x81, 0x4, 0x4, 0x0, 0x7, 0x0, 0x9, 0x5, 0x81, 0xa, 0xab0, 0x5, 0x2, 0x7, 0x9, 0x10, 0x2, 0x500000, 0xb, 0x59, 0x4, 0x6, 0x2, 0x3]}, 0x45c) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f00000006c0)) socket$kcm(0x10, 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x1, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x6, 0x6, "8896ef", 0x2, 0x2b, 0xff, @private2, @local, [@fragment={0x2f, 0x0, 0x1, 0x1, 0x0, 0xf, 0x67}], "8000655800000000"}}}}}}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r6, @ANYRES32=r6], 0x14) 11m4.325703632s ago: executing program 0 (id=2714): r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000640)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 11m2.520444825s ago: executing program 0 (id=2720): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd0500000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc01000000000000000000000000000000000000000000000000a788000000000000006d9b0b795f5c44b60000000000fb36eeca6fad50b340972a584d16ca55"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000000)=""/107, 0x6b) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r0, 0x0, 0xc7, 0x5b, &(0x7f00000003c0)="9dd05f65a7cabb804be3ebcdd6f18971ce0ad0b320a78a6ed57b1fbad40487c10c445f49c8902ef8ca7dfddc3a99acb068a079bd9c895d89a47922ed92a4c7722afbb1eb314c0b4c26bddf33b335da86b73149f63103c6d72dd169f732d9716377fe7a992d6775d2758147d0f6821aac35cb263d7af604a63e2ad96146024830983ac184148e7ae9165915cc71f8d94226f831d482e32bd87c30d9a62761fc680a90339aba24619afe3c1e3abf0acb13807d6f4f15c39fb7910df3d0ebc95642ca670c20fdfd1e", &(0x7f00000014c0)=""/91, 0x7f, 0x0, 0xfa, 0x76, &(0x7f0000001680)="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", &(0x7f0000001780)="b0295d1e1246546c95d03fc763756eac848ee31ed3800fa29da4e15ea6ac7e87c68923fb40f6d51274759f0a9f0fa904d3fb388a0675e5689b62c61955464d9e7e2b554fe6caeeff7008aa996fcd0f6baf1001688007751948e5225ea156831089ab2a8cd3330333f48504673ea8d734112dc3b4c440", 0x7, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) syz_usb_connect(0x0, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) 10m59.138042568s ago: executing program 0 (id=2729): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa1"], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x231, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x415}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x1, 0xe) fchdir(r4) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) 10m57.144674938s ago: executing program 0 (id=2737): lremovexattr(0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff, 0x0, 0x0, 0x2}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x10}, 0x200440d1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x4) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r4, 0x1, 0x0, 0x0) timer_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000d80000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000680)="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", &(0x7f0000000240)=""/12, 0x2}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0x200cf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x6, 0x0, 0x2}}) 10m56.934741584s ago: executing program 0 (id=2740): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000017c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000030c0)=[@sndinfo={0x20, 0x84, 0x2, {0x401, 0xf, 0xd, 0x8}}], 0x20, 0x814}, {&(0x7f0000000280)=@in6={0xa, 0x4e24, 0x8, @local, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000002c0)="a0df6b3aae76508add407270df08f3e8aad90fb033a8b1e8bad724b7da852f931014a9b8c47604edf635023417216a59a65354ddadbb84d0d7d0fa7862f399accf0f3e7d55f1f6c7b9b72464cab36c1bdfcd11a32bb3b70480b7a161e83cad9eee164c22b99fa2b478b9dbf7a3e7125ab3e03e2b7f359db1595ceede610e7c3cf80b07d7ee0cfb052a0dc8a2d79a03c2a892f83017718081b40bd7606eadd43f3d60160553698b8be9980356aeb1f4bb61fa310e5ef4be22d94c26e27a448557f1f79557314abaf948212141", 0xcc}, {&(0x7f00000003c0)="d11eaa52a80590c1df96f8768328aba25c2470e8a6d9fe05f6a52672c19efa6c5545", 0x22}, {&(0x7f0000000400)="34fc8eb9ea0f4644d8bea73416a6fca583aa685502a095e4c5a9e67627f1bf5e51a54d5efbfea0abeefcd2a1ea6ad7b74145cea8c6e8b71c2ecd052ca97be24b09c78c968a1748b7fa474e8481d58e22584d83929c23ec8a88b942bfc3561951a63b39598798fc8858b89eef810e66c509709d7de0b5e2f7c3678f1ec8042376d0bec3663bfc6586e9638c60ab90cb4ac8d5ffb7adaab6f9133ec13f8f9c0ddcdebecc1f9c3aeb2a783a15af86296763b19fcbecbd2434bf31106fec3e19d3dcea02af5cff3f722bcfa199669b9ab6eae24f90aebb3e2d03cf32890742aba13ae5", 0xe1}, {&(0x7f0000000500)="02f9c9df0dbb71fb9d53b736608e9541d1849e960359d91842ec5b1acb4ec1094ee33c971b8d70dc0a8f3c1eb427eef0826c3cb077156cbe7bf94b5b5faff41e9052f953204a7c256982b6c05be7eb5ecca7dbac0e3f81db82e0c6c6d9e7d7f116d6304cd96221aacf329852970a81b19113e0bbd74c4094d8ab17115149901dba5f97883abc85e29e2f91c7c8f7c6169af909db904ba148c990be9a6ebb595855046cbc7cf2fa9f3271bce7edd4acba9b3e317ca753bc32b3ff6d79054ca5d788a82218ecad", 0xc6}, {&(0x7f0000000600)="cd1a63ced58686d6c09fb5dee556f47c98cd931769a44ca45e861dfbdfae5e038b3b8d7b8db62716db371512e1fb4d46d9c6351f7f01e90aaa1d8f114c6f821249839047e0712bd3cb9ba179107e1a", 0x4f}, {&(0x7f0000000680)="cfa7e0104a4ca9e40d44d899177958f2ae8456daaba1523aeb480f49d2d73c9e9a127349c83da94eb6f4fc6c5db610507ca619a83d3fb1940a3a431b9ad0bc2abc501dc68156422a0357b19ca64b6a87a0c4dfde7c178897cf4746b86792b614cc4f25c36cc0d757b97a7e81573bd4509bbcba9e92be50445d312132add45e8de26d1655", 0x84}, {&(0x7f0000000740)="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", 0x1000}], 0x7, 0x0, 0x0, 0x4008015}], 0x2, 0x200400d4) 10m56.618731464s ago: executing program 33 (id=2740): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000017c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000030c0)=[@sndinfo={0x20, 0x84, 0x2, {0x401, 0xf, 0xd, 0x8}}], 0x20, 0x814}, {&(0x7f0000000280)=@in6={0xa, 0x4e24, 0x8, @local, 0x5}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000002c0)="a0df6b3aae76508add407270df08f3e8aad90fb033a8b1e8bad724b7da852f931014a9b8c47604edf635023417216a59a65354ddadbb84d0d7d0fa7862f399accf0f3e7d55f1f6c7b9b72464cab36c1bdfcd11a32bb3b70480b7a161e83cad9eee164c22b99fa2b478b9dbf7a3e7125ab3e03e2b7f359db1595ceede610e7c3cf80b07d7ee0cfb052a0dc8a2d79a03c2a892f83017718081b40bd7606eadd43f3d60160553698b8be9980356aeb1f4bb61fa310e5ef4be22d94c26e27a448557f1f79557314abaf948212141", 0xcc}, {&(0x7f00000003c0)="d11eaa52a80590c1df96f8768328aba25c2470e8a6d9fe05f6a52672c19efa6c5545", 0x22}, {&(0x7f0000000400)="34fc8eb9ea0f4644d8bea73416a6fca583aa685502a095e4c5a9e67627f1bf5e51a54d5efbfea0abeefcd2a1ea6ad7b74145cea8c6e8b71c2ecd052ca97be24b09c78c968a1748b7fa474e8481d58e22584d83929c23ec8a88b942bfc3561951a63b39598798fc8858b89eef810e66c509709d7de0b5e2f7c3678f1ec8042376d0bec3663bfc6586e9638c60ab90cb4ac8d5ffb7adaab6f9133ec13f8f9c0ddcdebecc1f9c3aeb2a783a15af86296763b19fcbecbd2434bf31106fec3e19d3dcea02af5cff3f722bcfa199669b9ab6eae24f90aebb3e2d03cf32890742aba13ae5", 0xe1}, {&(0x7f0000000500)="02f9c9df0dbb71fb9d53b736608e9541d1849e960359d91842ec5b1acb4ec1094ee33c971b8d70dc0a8f3c1eb427eef0826c3cb077156cbe7bf94b5b5faff41e9052f953204a7c256982b6c05be7eb5ecca7dbac0e3f81db82e0c6c6d9e7d7f116d6304cd96221aacf329852970a81b19113e0bbd74c4094d8ab17115149901dba5f97883abc85e29e2f91c7c8f7c6169af909db904ba148c990be9a6ebb595855046cbc7cf2fa9f3271bce7edd4acba9b3e317ca753bc32b3ff6d79054ca5d788a82218ecad", 0xc6}, {&(0x7f0000000600)="cd1a63ced58686d6c09fb5dee556f47c98cd931769a44ca45e861dfbdfae5e038b3b8d7b8db62716db371512e1fb4d46d9c6351f7f01e90aaa1d8f114c6f821249839047e0712bd3cb9ba179107e1a", 0x4f}, {&(0x7f0000000680)="cfa7e0104a4ca9e40d44d899177958f2ae8456daaba1523aeb480f49d2d73c9e9a127349c83da94eb6f4fc6c5db610507ca619a83d3fb1940a3a431b9ad0bc2abc501dc68156422a0357b19ca64b6a87a0c4dfde7c178897cf4746b86792b614cc4f25c36cc0d757b97a7e81573bd4509bbcba9e92be50445d312132add45e8de26d1655", 0x84}, {&(0x7f0000000740)="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", 0x1000}], 0x7, 0x0, 0x0, 0x4008015}], 0x2, 0x200400d4) 8m2.331028068s ago: executing program 3 (id=3310): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b400000003000000100000000000000803000000100011fbc4edd927960300000f00000003000000050000000d000000490000003e0000000c0000000900000089ca00000300002100000000030000000f00000047758055041da49d50497b01000000810000000d0000000100000007000000090000000600000004000000040000000000400090bd00000a0000000600df000200000000090000000000000000000003000000000200000001000000400000000d0000000000000200000000005f00"], &(0x7f0000000200)=""/111, 0xcf, 0x6f, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000940)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22df5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3cd5800}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_args={0x48, 0x114, 0x1, {{0x1}, {&(0x7f0000000540)=""/90, 0x5a}, &(0x7f0000000900)=[{&(0x7f0000000780)=""/127, 0x7f}, {&(0x7f0000000880)=""/65, 0xffffff3b}], 0x2, 0x0, 0x2}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 8m2.1083559s ago: executing program 3 (id=3312): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100080) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000100)={&(0x7f0000000080)=[{0x2, 0x0, 0x7, 0x8000000000000001, 0xffffffffffffff42, 0x7fffffff, 0x8, 0x4}, {0x0, 0x0, 0xb, 0x1, 0x100, 0x3, 0x6, 0x9}], 0x2, 0x38, 0x1}) (async) poll(&(0x7f0000000140)=[{r0, 0x4028}, {r1, 0x9500}, {r1}, {r1, 0x4000}, {r0, 0x768}, {r0, 0x20}, {r0, 0xd040}], 0x7, 0x10000) (async) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0x6}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000340)=@srh={0x3c, 0xa, 0x4, 0x5, 0x9, 0x58, 0x8001, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast2]}, 0x58) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000003c0)={[{0x3, 0xed9a, 0x4, 0xe, 0x0, 0xff, 0x5, 0x1, 0x5f, 0x6e, 0x7, 0x8, 0x5}, {0x9, 0x8001, 0x0, 0x3, 0x2, 0x3, 0x8, 0x4, 0x8, 0xaf, 0x3, 0x5, 0x4}, {0x8, 0x8000, 0x8d, 0x7f, 0x0, 0x40, 0xd7, 0x1f, 0x1, 0x2, 0xff, 0x7, 0x2}], 0x1000}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000500)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{}, {}]}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40080) (async) sendto$inet6(r3, &(0x7f0000000680)="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", 0x1000, 0x4004004, &(0x7f0000001680)={0xa, 0x4e24, 0xfffffffa, @private0}, 0x1c) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001840)={{r1, &(0x7f00000016c0)='*\x00', 0x43, &(0x7f0000001700)={@_ha_fsid={[0x8f1, 0x9]}, {0x7, 0x3ff, 0xffff1c5e, 0x3}}, 0xf979, &(0x7f0000001740), &(0x7f0000001780)=0x3}, {[0x5, 0x6, 0x6, 0x9]}, 0xfffffe01, 0x54, &(0x7f00000017c0)=""/84}) (async) socket$packet(0x11, 0x3, 0x300) (async) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000018c0)={r1, 0x0, 0xa18a260f60fd0dc5, 0xfffffffff0000000}) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000001900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001b40)=0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x35}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) r7 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x18, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x4004) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x6c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0xc080) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80a000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1084}, 0x4055) (async) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000020c0)=0x1, 0x4) 8m1.152202202s ago: executing program 3 (id=3315): syz_open_dev$sg(&(0x7f0000000540), 0x3, 0x80042) add_key(&(0x7f0000000080)='id_legacy\x00', 0x0, &(0x7f0000000100)="26c2", 0x2, 0xffffffffffffffff) 8m0.526747148s ago: executing program 3 (id=3317): r0 = io_uring_setup(0x6e71, &(0x7f0000000040)={0x0, 0x800000, 0x400, 0x4, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80c29c168df55ea1, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) pipe2$watch_queue(&(0x7f0000001180), 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) listen(r4, 0x5b) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 7m58.990011556s ago: executing program 3 (id=3322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x0, 0x1, 0x40000000000002, 0xffffffffffff2ae1, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x3, 0x9, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x70) fremovexattr(r7, &(0x7f0000000000)=@known='system.posix_acl_default\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944c", 0x2}], 0x1}, 0x20000010) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r9, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = getpid() r11 = syz_clone(0x41010100, &(0x7f0000000240)="3ebdcd3837bd8a73e762772b085c9f3048638e203cdcdb9ba698505c059cba7fadaa1669a69e66b756a06358ef9264c3e59b77fb0438209b7540a9bc11d03b93c92e8ecc02893cd12960948a94f8d0f4b90d7e15f968bd035e142eb1fbd5cd884b158d47bab8e9c79e48238bb69834b04016dc6eef9fba410788496c173c74e2465af57a8fd6553b325e12364a053d67e1e31a2285d295b4416a22acabd3c82e587053d0e4fb3ef4551f3d38bfedd074c5197fca3d46ae9b9647e79902c99433d886a53c477beb127c23e5d5899120226eab5faf7599884eb60c18ea2ed338f09e7ab7a5fd", 0xe5, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="b3bbde2bbe84f0fcafeb2223221a8b88cb858d80d295caf4b895a79fcd134d6511b3eb0df31e4bcedd31b24761b7e2758680bc378bdc8d01dc98ad72011cd15ae50cd342c3db5a7c498df11e0b77230a7c8daacf6ea056e0b1cc51eccc00cf103996c541f3960fa3d4b5a7c99f993b0b5714c3040fe9c1b7529289e248528b718b7b5c23b8537250bf605271599dcf11c1f0d5f47b7fef77f3584f86173a305fbd3242b40edb0f06df88156d") r12 = syz_clone(0x84040000, &(0x7f0000000480)="84b2db05b83dad2c6885509772652c86d135102f87cefaac972491e0df4c251ae92ffc986f290a0db7762e672477b99cb54fb2bbf0ff900a4fb07beefcdb657eac1935eca02baf845c619d1e42cb663c949963837445af45082f2ad9f5", 0x5d, &(0x7f0000000500), &(0x7f00000005c0), &(0x7f0000000600)="aaf6bb7d5bff9f5a87bae185ebaff1b9b22b26de3600feb7763091c527ccab3bcd9be7acc2943dd07959dd5be61378dab0644af5467b3754988058c21dc054dd6e46c6b6fbf735a71ff4e29282df015c24aff3ba8cee0c6b88f200b520aa1e242d271723cbb928550ef2fd6976bb18f703866761532ee30ee4b25d8fd04a8a4f5bccd4fedcffc5df16a2d00e16e270e4dab0e28ea3a61ccc5ab559bc0266ad7c96") sendmsg$nl_route(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@RTM_GETNSID={0x54, 0x5a, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r1}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r8}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_PID={0x8, 0x2, r10}, @NETNSA_PID={0x8, 0x2, r11}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x24004000) getpid() 7m57.482600655s ago: executing program 3 (id=3325): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) setrlimit(0xc, &(0x7f00000003c0)={0x0, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x44040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e38, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004045}, 0x81) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket(0xa, 0x3, 0xff) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x3, 0x8}, &(0x7f0000000380)=0x8) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x54) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r5, 0xfff, 0x1) 7m42.317536405s ago: executing program 34 (id=3325): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) setrlimit(0xc, &(0x7f00000003c0)={0x0, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x44040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e38, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004045}, 0x81) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket(0xa, 0x3, 0xff) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x3, 0x8}, &(0x7f0000000380)=0x8) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x54) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r5, 0xfff, 0x1) 11.947221286s ago: executing program 4 (id=4886): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @sliced={0x8, [0x4, 0x3, 0xc99, 0x644c, 0x4, 0x7f, 0x1, 0x0, 0x7fff, 0x7, 0x5cd1, 0xc, 0x8, 0xbb, 0x4, 0x0, 0x8, 0xc5, 0x9, 0xffff, 0x9, 0x2, 0x7, 0x4, 0x1, 0x6, 0x2, 0x2, 0x9507, 0x7, 0x2, 0x9bc, 0x400, 0x7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x0, 0x800, 0xe6ef, 0x8, 0x100, 0x6, 0x2000, 0x2, 0x3], 0x8001}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x2, 0xff, 0x800, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x1772cf4f, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x400000, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(r1, &(0x7f0000002940)=[{&(0x7f0000000f80)=""/191, 0xbf}, {0x0}, {&(0x7f0000001100)=""/213, 0xd5}, {&(0x7f0000001200)=""/212, 0xd4}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/104, 0x68}, {&(0x7f0000001540)=""/184, 0xb8}, {&(0x7f0000002880)=""/134, 0x86}], 0x8, &(0x7f0000002d40)=[{0x0}, {&(0x7f0000002b00)=""/67, 0x43}, {0x0}], 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 10.772219528s ago: executing program 4 (id=4887): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpriority(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) 9.791695502s ago: executing program 4 (id=4890): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0xffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000280)={0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101201, 0x18b) linkat(0xffffffffffffff9c, 0x0, r5, &(0x7f0000000180)='./file7\x00', 0xdb24ae695b43f88d) socket(0x10, 0x80002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x3f3800, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bb", 0x4, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000006c0)="3b000000010006", 0x7) syz_usb_connect(0x5, 0x7a0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 9.649765654s ago: executing program 5 (id=4893): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000000005, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x40) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000000)={0x14, "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"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"433f0000000000000000000500"}, 0x6a, 0x9, 0x7}}}, 0xa0) r8 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x1d8, 0xf8, 0x1d8, 0xf8, 0xf8, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0xff], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) close(0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 8.683487613s ago: executing program 1 (id=4895): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x1800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04050300"], 0x8) r2 = socket$netlink(0x10, 0x3, 0xa) write(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000680)='\xfc\xa5\x13\x9c\xa1\xfdcP\x9a\xf0\x12Eu[2E\x89\xe7\xa0W%\xd2\x8d\xc2\xab\xb9y\xe9\xc0\\\r\x18u\xd4C=\xe9\xee+\xd4J\xfd\x1ew\x99\xe8<\xcdjk(\xfe\xbf\xe9\x81j;\xe7n\bG\xb5<\xcdN.\xd9Y\xee\xbd\a\xa0\xcdv\x81\xaf\x17\xfc\xa3r\xc8m\xa8\xa0t\x02\xf1\f/@\x00\x00\x009\xca\xd1q\xa1`\x99\xad*\x10\xb1\x02\x05\xde:1/N8\x03\xcbe\xb7\x9c\xcf\x15\x90E\x9e\xe06\x85!\xbe\xf3\x9d\xcc`C\x15\x959\xa4\xd0j\xf9l\x82\xe1\xeaL\xc2\xab\xc7F;\x87]\xd7\xda\x98\xddI=;\x13j\xcf\x9cw\xf8\xf7\x17\xdah\x01\x9bL\x00\x969\x8b\x04\x85\xe5\xcc,\xe0\xd3\x02%\xf7\\7\xd7d\xdbX\x9b[\x8b\xb6\xc7\xf7\x00'/223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x1800007, 0x81, 0x2, 0x8, 0x0, 0x5, 0x5, 0x4bf7, 0x4, 0x200200000002, 0xffff, 0x3, 0x5, 0x9, 0x100000090], 0x4000, 0x25812}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) 8.124152519s ago: executing program 1 (id=4898): r0 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) lseek(r4, 0x4, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) file_getattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x18, 0x1000) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0'], 0xa) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000240)={0x81, 0x7, 0xd, 0x2, 0x2af, 0x4}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 8.12084376s ago: executing program 7 (id=4899): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x40000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x24, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r4 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5.906417629s ago: executing program 7 (id=4900): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', 'lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000000000000000400020008000500", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) r2 = dup(r0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 5.871443842s ago: executing program 4 (id=4901): r0 = getpid() capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0xff, 0xaf26, 0xa0}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="01000106"]) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x400003}, 0x2}}, 0x10, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0x4048000}, 0x10) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.857233838s ago: executing program 1 (id=4902): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 5.266763981s ago: executing program 1 (id=4903): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000240)=""/56, 0x38, 0x2100, &(0x7f0000000380)={0x11, 0x18, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff4c}}, './file0\x00'}) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@local, 0x1d, r0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x0, 0x10, 0x5, 0x7, "d4a9d7c86710650414208b352cdc6c1909a11a0e4083103b497d0d18b1e5c09d"}) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000140)={0x3, 0x1, 0x9, 0x6, 0x50000000, 0x4}) 5.190849128s ago: executing program 5 (id=4904): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 4.741648001s ago: executing program 7 (id=4906): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x4008015}], 0x1, 0x200400d4) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000580)=ANY=[], 0x3c) close(r0) 4.601030032s ago: executing program 7 (id=4907): r0 = getpid() capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000200)={0x0, 0x5, 0x5, 0xff, 0xaf26, 0xa0}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) 4.592183642s ago: executing program 5 (id=4908): futex(&(0x7f0000000040)=0x1, 0x7, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newsa={0x184, 0x10, 0x1, 0xbffffffc, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x40000000000009, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffff8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0x4a, 0x8, {0x46, 0x8, 0x0, 0x6, 0x3e, "bfb83a9086d4cfd50a696eac668075ba7dcc3a3ae2e608b61720e492c539c1a9a2318a83adcf0c96e5100050048cc2484e66f64d37698d572510d59b88d9"}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x82520, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="000000007200000828bd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x4040080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000e00)={'erspan0\x00', r3, 0x8, 0x10, 0x3, 0x8, {{0x34, 0x4, 0x1, 0xc, 0xd0, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x4c, 0xca, 0x1, 0x9, [{@remote, 0x3}, {@private=0xa010102, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x94}, {@remote, 0x10001}, {@loopback, 0x15}, {@local, 0x1000}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0xf, [{@loopback}, {@multicast1, 0x3}]}, @ssrr={0x89, 0x1b, 0x9b, [@private=0xa010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @remote, @empty]}, @lsrr={0x83, 0xb, 0xa0, [@multicast1, @empty]}, @rr={0x7, 0xf, 0xa1, [@multicast1, @private=0xa010102, @loopback]}, @rr={0x7, 0x1f, 0x97, [@loopback, @broadcast, @broadcast, @remote, @empty, @multicast1, @multicast1]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x0, [0x101]}]}}}}}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000c80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200029bd7000fbdbdf250200000008000b00", @ANYRES32=r9, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030627067000fddbdf250200000004000500107c5382349aecb54b0caab9385299864869c5a1a5577de09209f9c56bcf2182680bda10cc5b94f9ce0d7295a8adaa089674ea08c2045876beadb98a10ea02784520d161f033a2c41e10c83c11c10f1f57d5"], 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r10, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0xfffffffffffffffb) 3.642643344s ago: executing program 7 (id=4911): mkdir(&(0x7f0000000000)='./bus\x00', 0x0) open$dir(&(0x7f0000000100)='./bus\x00', 0x451240, 0xad) (async) r0 = open$dir(&(0x7f0000000100)='./bus\x00', 0x451240, 0xad) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000900000004", 0x2f}], 0x1}, 0x4880) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) (async) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc, 0x200000005c832, r0, 0x3cf9b000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc, 0x200000005c832, r0, 0x3cf9b000) userfaultfd(0x801) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x76a1cb00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)={0x10}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)={0x10}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) (async) ioctl$TIOCSETD(r8, 0x5423, 0x0) 3.256913025s ago: executing program 5 (id=4912): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x3fffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)={0x68e7, 0x89, 0x7fffffff, 0x0, 0x14, "1b10b9ad000000aacd86279300"}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x7, 0x0, 0x34}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x3}, {0x0, 0x3}]}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.022497415s ago: executing program 6 (id=4914): ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0x1}) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="95cf36613bb3c32c2ac2bbae61870bdf6aba8173be01886b287684b1e8202e9aee7771", 0x23) r0 = socket(0x2b, 0x80a, 0x51) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8000, 0x24, 0x8}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x4, 0x6322}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000200)=0x4) (async) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4e21, 0x1, 0x4e23, 0x0, 0xa, 0x20, 0x10, 0x6, 0x0, r2}, {0x3, 0x4, 0x4, 0x15, 0x9, 0x1, 0x2, 0x8000000080000000}, {0xcb5, 0x3, 0x8, 0x8}, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d6, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x0, 0x0, 0xf8, 0x5, 0x8, 0x81}}, 0xe8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x17, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0xf83, @mcast1, 0xfff}, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}], 0x94) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f00000004c0)=[0x1144, 0x3ff]) r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x3, 0x209601) futex(&(0x7f0000000540)=0x2, 0x1, 0x1, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0)=0x1, 0x2) (async) r4 = accept$inet(r0, &(0x7f0000000600)={0x2, 0x0, @private}, &(0x7f0000000640)=0x10) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@gettfilter={0x44, 0x2e, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {0xf, 0xc}, {0xf, 0xfff3}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x34}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x4018000) (rerun: 32) listen(r4, 0x71f) preadv(r3, &(0x7f00000018c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/103, 0x67}, {&(0x7f0000001840)=""/122, 0x7a}], 0x3, 0xd74, 0x644783aa) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000001900)={0x6}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001940)={'wlan1\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x50, 0x3, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x800}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x401}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000001b00)={0xf97cff8c, 0x8, 'SE Linux', "f1d05e7f9d2d2e65df2449304b2a1b9b6c6d4874182ff80f85d2ef09dc3b1c2cd46ae6e3863d0aaffb9b1c47d7392248bc149dc551ea89e11d3c808da89cf39782265bd6aa70f0b549789849658a6e7e7c28d1690417d378e85110231341995da1ce482223cb2cafdd89e6f56667f6e38ecdd12c9a7fa06dd1cd7824054a3f25da41c71d7ae1d04e1d7b2d39c14fa1de87754a700fc06d32443b4969f8d9c00050c088a88e2d48735d7135ec1ef9de82ef6f18ea0c71d6021194382d55a19f29830144584ba3f6ab1253b36ca3e1ce8113fedda21acc3bb605291deecabf464b37eaac0788865613f5ce5e61f9"}, 0xfd) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000001c80)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000001c40)=0xa2f4}) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000001cc0), r6) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000001d00)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001d40)=@mmap={0x7fffffff, 0x3, 0x4, 0x100000, 0x1, {}, {0x1, 0x1, 0x81, 0x0, 0x85, 0x3, "3288bd83"}, 0x7, 0x1, {}, 0x10001, 0x0, r8}) 2.910376624s ago: executing program 7 (id=4915): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000000005, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x40) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000000)={0x14, "4b06fd1eef8b955837299a48a79b795dd15444c5ccdc7761fd4aede1db230ec517c4c01644f76a7faf2886091e9d7758a2d6cb3176a8cc20a153fe65b79299601a043843a980a8c2a60f34f3a8cc392080287dde476396707809000bcc9df3a809a331362584230997eee408696f05506bd39497c774c7025f494eccc71d5ca5ead2a3401aecc011b5688bbf3ce3d299f9da1960f6e0b21f2e451b2934aa20037634dab209b8fd429cc546b279029da2e9a246f9a142fbc4d640532e256c9866c704ca8f46b39f21a417dc857f68f331533cf93489297a6ef038e7569580771c4463b572cbd6511dfca0cc0fa8624f278cc8be4eac6720b64173dd9741492a56b08b3eabe3dd82d7135f35a869359f0f19c1a284d9fc807898cbee0b1a3901c3823e7c5f31fd5781d7828ae6b0d83693e505afabafa4bbdf982af38f1c55bead75a1e0bb55f0ada3b4aad0aebb0d79ee34e59810126eb806781c1370fb095cb66d9210b608182078b8ab7edd1568c9b2005749d676977b62b8b657fb8161fdede1bea44de79c4c8b9d329200abbab48698b94db5b14d831c2ceb36138242c3ad1f170d2cede27557dedd0faa60453ebd93cd32f2d1e7add2b69c14eefa84e91f0c83b414334e61cf2af20812a737eb83c8c5630dd16bbce66af74debf70df14fdeb1cc1491d335017271f5d310191a97859f00"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"433f0000000000000000000500"}, 0x6a, 0x9, 0x7}}}, 0xa0) r8 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x1d8, 0xf8, 0x1d8, 0xf8, 0xf8, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0xff], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) close(0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 2.907982884s ago: executing program 6 (id=4916): r0 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) socket(0x2, 0x80805, 0x0) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRESOCT, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20008080) (async, rerun: 64) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_FLOW={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@ipv6_newnexthop={0x1c, 0x68, 0xa898cf170ab9f9b9, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) 2.779222367s ago: executing program 1 (id=4917): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x209b59, 0x400, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x2, 0xb7f5, 0x0, 0x206, 0x8, "eff5e85388a0539be9e9449ddd028dc19de2b6"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x2, 0x9, 0xffffff00, 0x80000000, 0x9, "92a066cb4e240a514b93b993da2480b304eb4b", 0x2, 0x1c680}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) ioctl$KDSKBLED(r0, 0x4b65, 0x2eb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x209b59, 0x400, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x2, 0xb7f5, 0x0, 0x206, 0x8, "eff5e85388a0539be9e9449ddd028dc19de2b6"}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x2, 0x9, 0xffffff00, 0x80000000, 0x9, "92a066cb4e240a514b93b993da2480b304eb4b", 0x2, 0x1c680}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x2eb) (async) 2.684194811s ago: executing program 4 (id=4918): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 2.638661438s ago: executing program 6 (id=4919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r5, 0x8b21, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000002c0)={{0xd000, 0x0, 0xd, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x3, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x4}, {0x5000, 0x54000, 0xf, 0x7, 0x4, 0x1, 0x7, 0x6, 0x0, 0x6, 0x2}, {0xffff1000, 0x10000, 0xe, 0x2, 0x1, 0x3, 0x10, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x7000, 0x30000, 0x9, 0x0, 0x80, 0xee, 0x0, 0xa, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x46, 0x4, 0x1, 0x1, 0x0, 0x86, 0xb, 0x2}, {0x58000, 0x26000, 0xc, 0x7, 0x28, 0x2, 0x1d, 0x47, 0x30, 0x2, 0x9, 0xe1}, {0xf000, 0x60000, 0x0, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x148e45e25adee314, 0x0, 0x0, 0x40, 0x8, 0x1000, 0x50000, [0x5, 0x8001, 0x8, 0x6]}) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, &(0x7f0000003540)=[{0x0}], 0x1, 0xfffffffe, 0x80) ioctl$SOUND_PCM_READ_RATE(r7, 0x80045002, &(0x7f00000000c0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r8, 0x10000000005, 0x0) recvfrom$inet(r8, &(0x7f0000000000)=""/78, 0x4e, 0x12063, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r1, 0x1, 0x80000003, 0x25dfdbf8, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.423218529s ago: executing program 4 (id=4920): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a01040000000000000000050000090900010073797a300000000008000240000000012c000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000140000009100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) syz_clone3(&(0x7f00000009c0)={0x4000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x1d}, &(0x7f00000007c0)=""/147, 0x93, &(0x7f0000000880)=""/199, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000b00)=0x0) getresuid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x2000, 0xd, r6, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = geteuid() getresgid(0x0, 0x0, &(0x7f0000000240)=0x0) r12 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000019300)={{0x3, r10, 0xee00, r10, r11, 0x84, 0xd}, 0x0, 0x0, 0x4, 0xa000000000000000, 0x2, 0x9, 0x7, 0x101, 0x9, 0xa, r12, 0xffffffffffffffff}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x98001) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002c80)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@netkit}, 0x1c) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$MSR(&(0x7f0000002cc0), 0x3d87, 0x0) r16 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002d00)='ns/net\x00') r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002d40)='cgroup.freeze\x00', 0x0, 0x0) r18 = syz_open_dev$dvb_frontend(&(0x7f0000002d80), 0x6000, 0x200000) r19 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000002dc0), 0x80000) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002e00)={0x6, 0x80000, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002e40), 0x90202, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="7250284cc6a4a471f07e3e903d158e66b23949b9002b3eb879792f8bf468c12f537f7106624b868a4d90c1013ca736d25bcf5e4f69da151e37e5b6f35620ee40266af39a0fcd31e37bdf1e0bd95b5d7ddf618c2426d9cfb1ad7370c8f8186246b0c02c0ce8a295a0ae95e92fdfa7052c7eafc1c1dfe31824e91fa649bc", 0x7d}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000c9e306f5000100000002000000", @ANYRES32=0x0, @ANYRESOCT=r16, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRESOCT=r12, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x8080}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000640)="8ce8931cf880e1fd5b8afe7c22752a41234356750774a6789a917ec1f8477ddd55", 0x21}], 0x1, &(0x7f0000004580)=ANY=[@ANYBLOB="28000000000000ff0000000001000000", @ANYRESHEX=r8, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRESOCT=r4, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r7, @ANYRES64=r11, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r15, @ANYBLOB="ffe0f80d4a12f25d31a8aaa1de3e84424e0ae727981f3d0618db677e3425d9b73c4812b4029f7a15c437b5a1b7fb0eb4ba11f7ad93907a8818d12048cc71abf065a0c447b02a628f3e8ba8c5e938776c24a9b2fd7ddbb84ac8ad270e6cba75e28f997d166dfdfb1ad6ba1288b5588b37289b8780898341cef74a7f050ff05cd8bf76f541", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r19, @ANYRESOCT=r5], 0xe8, 0x41}}, {{&(0x7f0000002f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000003000)=')', 0x1}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="8f9520d95bd5b349ec98e4e6117aacf645003a34d7da6ae0f005f8cb98edceebde5951bb1d3159bb989a561aac06ad4f8b723140b7f762855687abe92474c993e7df65bd20e60ca3fbf9c49a6b8b5b51f6bc818312a2d0b61003a2b61e48634703a10e0e53e603a14230b746e1a812c1ed0f7e56bc843a2d2194f95b89eb4207a28fec12f1acd95a6ce5c87b465220301e2d2a45e6", 0x95}, {&(0x7f0000004100)="af40fb602633aa9db918524fdc0e901f58f838b2c0e409d1de848612c410e4ba033ca8536c3f0ca0c1bee12ac0774c6c3f787493ba0887c4254869243a4726a7e5dedf069a38c98bc5fd6afca06527ee35828a735269db258dfa5c199b3be01cbae06e775d97ed791973bb6082daf7b3e435ebbf75c98ba48621a2acb934af76ec04ae34038e826dfeb0f5589b5d53ad4fe44a2b7eced9d0379008738603d6ca30bd5f48c6fff3858230237892a51062b1e7eee0e674c9504b3e90c3a33bbbaa4cb6254a96356c9aabbb7397d008a21c005f4a36deb74ae8036b070548ce1ee8f1b8d11c3b2b3f842ce6b580ef214ec19ccbed426fa41b", 0xf7}, {&(0x7f0000004200)="23635800aabab1455448bdf96611d40e82981bcb550863747b211d39be21da63b5fa4b6ffdca5ea3cb482907849e5d9c00ab89f52937ac9537e4f123c9a0a89be856aa6331b5ebec6f2e4f48c49fea0645d7ccca0fdd7b5656fb35716b09b5fed740b27b2a93063c0046821da3806641f09d4cc5e1b68489257ac8d74ae0f3877c13758795abcb21cde82b1f8d4cdf2cb6cb26f259f5a4f846c044be4cf5f33507457af00902b8dab87e4c729243aaff402c9d186bf848c5ea7bc78985065a63b5daaa0416d9c9fb9b2e21ee0a58e56b18ec985684a742309d36c5432cb29ae5f04a713be89322f92b", 0xe9}], 0x5, 0x0, 0x0, 0x8885}}], 0x3, 0x240088d0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2.412119101s ago: executing program 6 (id=4921): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x3, 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) timer_create(0x6, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x23, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x100000000005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7e87c", 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) 2.166354554s ago: executing program 5 (id=4922): r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000700)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x2b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 435.765007ms ago: executing program 6 (id=4923): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a6fd670000fc020000000000000000000000000001fe8000000000000000000000008400aa84"], 0x0) 305.786771ms ago: executing program 5 (id=4924): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000280)={r0, 0x0, 0x10001, 0x0, 0x1, 0x0, &(0x7f0000000200)=0x401}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') read(r4, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc8f7, 0x8, 0x1, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaca, 0x1000, 0x1, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81f70, 0x400, 0x1, 0x189, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x80000, 0x2, 0xfffffffb}}], 0x1, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x40, 0x1c, 0x40, 0x5, "c545ca5366d8b686c60c11f95a01feabf44edecc9cf0e8091e620484c6139b00"}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000), 0x2aaaabc1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000", @ANYRES32=r9, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r11], 0x34}}, 0x4008000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x442, 0x0) 134.631582ms ago: executing program 1 (id=4925): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0xffffd000) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x80000) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00009ed000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000039a000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x14, 0x51b, 0x70bd28, 0x25dfdbdf, {0x28}}, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 6 (id=4926): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48) r1 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x7, @raw_data="baaa10f0c269048a21d81c5b19548dfd1140f0318425682de5f45b48102264122270843752c1a7fd7f963c355ebac3ef2f27bdded889bb4446c5b39ba523c0102e7830fc92226dba9c6cee2f815d5b86c9ae632c60070ca461cf01086eb9431ac8f5decefc1ba3975c4b7fd840619437926eadffcc9a6da163e827ace063667375bbfe896299b7fa06f38d0855d653dd5378087c8e87d43ffbf747dcaa77f25792e03c0665c7b14f3ca973ffa3f0345428966293c77a535304f7bd0c601fca22c3155439c070dfc9"}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x480, &(0x7f0000000680)={{{@in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0xc75, 0x200, 0x2, 0x40055}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008090) kernel console output (not intermixed with test programs): 6] usb 5-1: config 0 interface 0 altsetting 252 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1382.238883][ T46] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1382.251391][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1382.258058][ T46] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1382.267503][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.277103][ T46] usb 5-1: config 0 descriptor?? [ 1382.325207][T20701] usb 6-1: new low-speed USB device number 80 using dummy_hcd [ 1382.332834][ T5731] usb 8-1: Using ep0 maxpacket: 32 [ 1382.341587][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.364305][ T5731] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.377446][T20701] usb 6-1: device descriptor read/8, error -71 [ 1382.388147][ T5731] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1382.398735][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.476054][ T5731] usb 8-1: config 0 descriptor?? [ 1382.712761][T20701] usb usb6-port1: unable to enumerate USB device [ 1382.795023][ T5731] hub 8-1:0.0: USB hub found [ 1382.966481][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 1382.966496][ T29] audit: type=1400 audit(1784523172.252:3137): avc: denied { ioctl } for pid=24250 comm="syz.1.4445" path="socket:[93157]" dev="sockfs" ino=93157 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1383.002134][ T46] hid_parser_main: 209 callbacks suppressed [ 1383.002154][ T46] hkems 0003:2006:0118.002A: unknown main item tag 0x6 [ 1383.017554][ T46] hkems 0003:2006:0118.002A: unknown main item tag 0x0 [ 1383.024560][ T5731] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1383.034088][ T29] audit: type=1400 audit(1784523172.252:3138): avc: denied { open } for pid=24250 comm="syz.1.4445" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1383.062148][ T46] hkems 0003:2006:0118.002A: unknown main item tag 0x0 [ 1383.069396][ T46] hkems 0003:2006:0118.002A: unknown main item tag 0x0 [ 1383.076456][ T46] hkems 0003:2006:0118.002A: unknown main item tag 0x0 [ 1383.083617][ T29] audit: type=1400 audit(1784523172.252:3139): avc: denied { ioctl } for pid=24250 comm="syz.1.4445" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1383.109050][ T46] hkems 0003:2006:0118.002A: unknown main item tag 0x0 [ 1383.116726][ T46] hkems 0003:2006:0118.002A: unknown main item tag 0x0 [ 1383.123670][ T46] hkems 0003:2006:0118.002A: global environment stack underflow [ 1383.131644][ T46] hkems 0003:2006:0118.002A: item 0 4 1 11 parsing failed [ 1383.139189][ T46] hkems 0003:2006:0118.002A: parse failed [ 1383.146219][ T46] hkems 0003:2006:0118.002A: probe with driver hkems failed with error -22 [ 1383.205310][ T29] audit: type=1804 audit(1784523172.482:3140): pid=24228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4438" name="/newroot/287/file0" dev="tmpfs" ino=1605 res=1 errno=0 [ 1383.230405][ T5614] usb 5-1: USB disconnect, device number 60 [ 1383.285336][ T5842] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1383.327468][ T5731] hid-generic 0003:046D:C31C.002B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 1383.528976][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.651540][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.684945][ T5842] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1383.709597][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.728773][T24239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.754231][T24239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.758781][ T5842] usb 2-1: config 0 descriptor?? [ 1383.795320][T24270] overlayfs: failed to resolve './file2': -2 [ 1383.969012][T24271] netlink: 'syz.5.4449': attribute type 49 has an invalid length. [ 1384.188186][ T5842] usbhid 2-1:0.0: can't add hid device: -71 [ 1384.198193][ T5842] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1384.218717][ T5875] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1384.238431][ T5842] usb 2-1: USB disconnect, device number 48 [ 1384.546993][T24278] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4450'. [ 1384.645175][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 1384.969410][T24289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24289 comm=syz.6.4450 [ 1385.019644][ T5875] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 1385.026239][T20701] usb 8-1: USB disconnect, device number 48 [ 1385.040429][T24283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1385.071830][ T5875] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1385.079602][T24283] block device autoloading is deprecated and will be removed. [ 1385.083113][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.100696][ T5875] usb 6-1: Product: syz [ 1385.104932][ T5875] usb 6-1: Manufacturer: syz [ 1385.110884][ T5875] usb 6-1: SerialNumber: syz [ 1385.317532][ T29] audit: type=1400 audit(1784523174.602:3141): avc: denied { listen } for pid=24290 comm="syz.1.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1385.343231][ T29] audit: type=1400 audit(1784523174.602:3142): avc: denied { accept } for pid=24290 comm="syz.1.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1385.391544][ T5875] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1385.411077][ T5875] usb 6-1: found format II with max.bitrate = 1025, frame size=32767 [ 1385.444026][ T5875] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1385.726747][ T5875] usb 6-1: USB disconnect, device number 81 [ 1385.860002][T24142] udevd[24142]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.872441][T24312] ntfs3(loop4): try to read out of volume at offset 0x0 [ 1386.306423][ T29] audit: type=1326 audit(1784523175.572:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.5.4460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c19de99 code=0x7ffc0000 [ 1386.411380][ T29] audit: type=1326 audit(1784523175.572:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.5.4460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c19de99 code=0x7ffc0000 [ 1386.657915][ T29] audit: type=1326 audit(1784523175.572:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.5.4460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb18c15e6ce code=0x7ffc0000 [ 1386.862174][ T29] audit: type=1326 audit(1784523175.572:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.5.4460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c19de99 code=0x7ffc0000 [ 1386.931264][T24335] netlink: 'syz.5.4463': attribute type 1 has an invalid length. [ 1387.006168][T24339] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4463'. [ 1387.017618][T24338] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1387.037537][T24338] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1387.071719][T15381] kernel read not supported for file /media0 (pid: 15381 comm: kworker/0:2) [ 1387.072287][T24335] bond1: entered promiscuous mode [ 1387.107958][T24335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1387.145228][ T5875] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1387.227883][T24341] md: md2 stopped. [ 1387.230392][T24339] bond1: entered allmulticast mode [ 1387.233021][T24341] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4465'. [ 1387.286911][ T5875] usb 5-1: device descriptor read/64, error -71 [ 1387.298600][T24335] bond1: (slave bridge1): making interface the new active one [ 1387.310472][T24335] bridge1: entered promiscuous mode [ 1387.320355][T24335] bridge1: entered allmulticast mode [ 1387.339202][T24335] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1387.738830][ T5614] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1387.979825][ T5614] usb 7-1: device descriptor read/64, error -71 [ 1387.986198][ T5875] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1388.281905][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1388.281954][ T29] audit: type=1400 audit(1784523177.562:3172): avc: denied { kexec_image_load } for pid=24368 comm="syz.1.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1388.458299][ T29] audit: type=1400 audit(1784523177.742:3173): avc: denied { lock } for pid=24354 comm="syz.5.4470" path="socket:[93980]" dev="sockfs" ino=93980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1388.497598][ T5875] usb 5-1: device descriptor read/64, error -71 [ 1388.573445][ T5614] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1388.620186][ T5875] usb usb5-port1: attempt power cycle [ 1388.649015][T24355] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.662354][ T29] audit: type=1400 audit(1784523177.932:3174): avc: denied { write } for pid=24363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1388.734373][ T5614] usb 7-1: device descriptor read/64, error -71 [ 1388.877659][ T5614] usb usb7-port1: attempt power cycle [ 1389.109818][ T29] audit: type=1400 audit(1784523178.392:3175): avc: denied { write } for pid=24382 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.156451][ T5875] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1389.174453][T24355] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.187372][ T5875] usb 5-1: device descriptor read/8, error -71 [ 1389.301143][T24355] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.365322][ T5614] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1389.402002][ T5614] usb 7-1: device descriptor read/8, error -71 [ 1389.436123][ T5875] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1389.478040][ T9484] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.489887][ T5875] usb 5-1: device descriptor read/8, error -71 [ 1389.560971][ T9484] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.635407][ T5875] usb usb5-port1: unable to enumerate USB device [ 1389.645431][ T5614] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1389.688327][T13593] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.726305][ T5614] usb 7-1: device descriptor read/8, error -71 [ 1390.238549][ T5614] usb usb7-port1: unable to enumerate USB device [ 1390.259105][T13593] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.389568][T24395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24395 comm=syz.6.4476 [ 1390.439118][T24395] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4476'. [ 1390.591488][ T29] audit: type=1400 audit(1784523179.872:3176): avc: denied { getopt } for pid=24399 comm="syz.7.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1390.644201][ T29] audit: type=1400 audit(1784523179.872:3177): avc: denied { setopt } for pid=24399 comm="syz.7.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1390.713039][T24412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1390.745514][T24404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4479'. [ 1390.765800][T24412] block device autoloading is deprecated and will be removed. [ 1391.092936][T24421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.133106][ T29] audit: type=1400 audit(1784523180.332:3178): avc: denied { create } for pid=24408 comm="syz.6.4480" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1391.543895][ T29] audit: type=1400 audit(1784523180.342:3179): avc: denied { write } for pid=24408 comm="syz.6.4480" name="file0" dev="tmpfs" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1391.642410][ T29] audit: type=1400 audit(1784523180.342:3180): avc: denied { open } for pid=24408 comm="syz.6.4480" path="/353/file0" dev="tmpfs" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1391.750362][ T29] audit: type=1400 audit(1784523180.352:3181): avc: denied { ioctl } for pid=24408 comm="syz.6.4480" path="/353/file0" dev="tmpfs" ino=1977 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1391.785653][ T5614] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1391.925450][ T5875] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1391.948138][ T5614] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.965688][ T5614] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1391.985060][ T5614] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1392.004428][ T5614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.030148][ T5614] usb 6-1: config 0 descriptor?? [ 1392.044873][ T5614] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1392.138241][ T5614] dvb-usb: bulk message failed: -22 (3/0) [ 1392.156259][ T5614] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1392.165223][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1392.179010][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1392.195030][ T5614] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1392.216320][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1392.228922][ T5614] usb 6-1: media controller created [ 1392.242690][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1392.264846][ T5875] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1392.292279][ T5614] dvb-usb: bulk message failed: -22 (6/0) [ 1392.298359][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.308249][ T5614] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1392.321838][ T5875] usb 5-1: Product: syz [ 1392.338992][ T5875] usb 5-1: Manufacturer: syz [ 1392.362608][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input132 [ 1392.379567][ T5875] usb 5-1: SerialNumber: syz [ 1392.384501][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 1392.407348][ T5875] usb 5-1: config 0 descriptor?? [ 1392.412745][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 1392.430824][T24428] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1392.441434][ T5614] dvb-usb: schedule remote query interval to 150 msecs. [ 1392.450842][T24424] ceph: No mds server is up or the cluster is laggy [ 1392.472037][ T5614] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1392.625210][ T5614] dvb-usb: bulk message failed: -22 (1/0) [ 1392.631042][ T5614] dvb-usb: error while querying for an remote control event. [ 1392.650579][ T5875] rc_core: IR keymap rc-streamzap not found [ 1392.666122][ T5717] usb 6-1: USB disconnect, device number 82 [ 1392.668683][T24428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.678454][ T5875] Registered IR keymap rc-empty [ 1392.759891][T24428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.913513][ T5875] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1393.936935][ T5717] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1393.949008][ T5875] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input133 [ 1394.062968][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1394.062985][ T29] audit: type=1400 audit(1784523183.342:3208): avc: denied { getopt } for pid=24457 comm="syz.7.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1394.109129][ T5875] usb 5-1: USB disconnect, device number 65 [ 1394.247689][ T29] audit: type=1400 audit(1784523183.382:3209): avc: denied { bind } for pid=24462 comm="syz.5.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1394.690708][T24479] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4490'. [ 1394.715855][ T5875] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1394.735042][T24479] openvswitch: netlink: Flow key attr not present in new flow. [ 1394.779929][ T29] audit: type=1400 audit(1784523184.062:3210): avc: denied { write } for pid=24450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1394.909489][ T29] audit: type=1326 audit(1784523184.192:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24491 comm="syz.4.4493" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd25cd9de99 code=0x0 [ 1395.276503][ T29] audit: type=1400 audit(1784523184.452:3212): avc: denied { mount } for pid=24491 comm="syz.4.4493" name="/" dev="autofs" ino=95289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1395.350947][ T29] audit: type=1400 audit(1784523184.612:3213): avc: denied { write } for pid=24497 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1395.577663][ T5717] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1395.740430][ T5717] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1395.751661][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.852063][T24513] tipc: New replicast peer: 172.30.0.8 [ 1395.858742][T24513] tipc: Enabled bearer , priority 10 [ 1395.866091][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4497'. [ 1395.875070][T24513] tipc: Disabling bearer [ 1396.197720][ T5717] usb 7-1: config 0 descriptor?? [ 1396.428050][ T5717] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1396.685469][ T46] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1396.778497][ T5717] [drm:udl_init] *ERROR* Selecting channel failed [ 1396.893813][ T29] audit: type=1400 audit(1784523186.072:3214): avc: denied { write } for pid=24528 comm="syz.7.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1396.923820][ T5717] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1396.942081][ T5717] [drm] Initialized udl on minor 2 [ 1396.966460][ T5717] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1396.993121][ T5717] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1397.005434][ T5875] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1397.020665][ T5717] usb 7-1: USB disconnect, device number 64 [ 1397.026879][ T5875] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1397.069131][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1397.101467][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1397.129905][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1397.160101][ T46] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1397.170196][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.179081][ T46] usb 2-1: Product: syz [ 1397.194246][ T46] usb 2-1: Manufacturer: syz [ 1397.200643][ T46] usb 2-1: SerialNumber: syz [ 1397.208678][ T46] usb 2-1: config 0 descriptor?? [ 1397.214744][T24525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1397.389293][ T46] rc_core: IR keymap rc-streamzap not found [ 1397.413187][ T46] Registered IR keymap rc-empty [ 1397.484519][ T46] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1397.628793][T24525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.650278][ T46] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input134 [ 1397.679722][T24525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.251284][ T46] usb 2-1: USB disconnect, device number 51 [ 1398.485364][ T5875] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 1398.615191][ T5875] usb 7-1: device descriptor read/64, error -71 [ 1398.644366][T24570] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4513'. [ 1398.768686][ T5717] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1398.815264][T17068] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1398.965325][ T5875] usb 7-1: new low-speed USB device number 66 using dummy_hcd [ 1398.985264][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 1399.365208][T17068] usb 8-1: Using ep0 maxpacket: 32 [ 1399.372176][T17068] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.378113][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.383870][T17068] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.394145][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.404478][T17068] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1399.413920][ T5717] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1399.423449][T17068] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.433214][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.446187][T17068] usb 8-1: config 0 descriptor?? [ 1399.467024][ T5717] usb 6-1: config 0 descriptor?? [ 1399.479901][ T5717] hub 6-1:0.0: USB hub found [ 1399.515899][ T5875] usb 7-1: device descriptor read/64, error -71 [ 1399.671983][ T5875] usb usb7-port1: attempt power cycle [ 1399.691978][ T5717] hub 6-1:0.0: 1 port detected [ 1399.912427][T24552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.925960][T24552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.928639][T17068] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1400.045533][ T5875] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 1400.065886][ T5875] usb 7-1: device descriptor read/8, error -71 [ 1400.094479][T24568] trusted_key: encrypted_key: insufficient parameters specified [ 1400.145283][ T5614] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1400.191710][T24589] netlink: 'syz.7.4512': attribute type 10 has an invalid length. [ 1400.200878][T24589] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4512'. [ 1400.277957][ T5614] usb 2-1: device descriptor read/64, error -71 [ 1400.315346][ T5875] usb 7-1: new low-speed USB device number 68 using dummy_hcd [ 1400.345872][ T5875] usb 7-1: device descriptor read/8, error -71 [ 1400.465730][ T5875] usb usb7-port1: unable to enumerate USB device [ 1400.523539][ T5875] usb 6-1: USB disconnect, device number 83 [ 1400.529640][ T5614] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1400.537379][ T5717] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1400.676575][ T5614] usb 2-1: device descriptor read/64, error -71 [ 1400.702510][ T46] usb 8-1: USB disconnect, device number 50 [ 1400.999866][ T5614] usb usb2-port1: attempt power cycle [ 1401.066958][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4520'. [ 1401.078326][ T29] audit: type=1400 audit(1784523190.362:3215): avc: denied { write } for pid=24598 comm="syz.4.4520" laddr=fe80::fc73:9eff:fed5:e920 lport=2205 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1401.133326][ T29] audit: type=1400 audit(1784523190.392:3216): avc: denied { read } for pid=24598 comm="syz.4.4520" laddr=fe80::fc73:9eff:fed5:e920 lport=2205 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1401.167718][T24605] netlink: 'syz.4.4520': attribute type 62 has an invalid length. [ 1401.345204][ T5614] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1401.376432][ T5614] usb 2-1: device descriptor read/8, error -71 [ 1401.485515][ T5731] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1401.500012][ T29] audit: type=1400 audit(1784523190.772:3217): avc: denied { watch } for pid=24611 comm="syz.7.4524" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1401.617219][T24609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.635397][ T5614] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1401.669895][ T5614] usb 2-1: device descriptor read/8, error -71 [ 1401.675531][ T5731] usb 7-1: Using ep0 maxpacket: 8 [ 1401.682867][ T5731] usb 7-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1401.704824][ T5731] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1401.719147][ T5731] usb 7-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1401.734272][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.752994][ T5731] usb 7-1: config 0 descriptor?? [ 1401.786224][ T5614] usb usb2-port1: unable to enumerate USB device [ 1401.875376][ T5875] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 1401.970291][T24609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.004373][T24609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.336505][ T5875] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1402.352385][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1402.379961][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1402.420305][ T5875] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1402.433998][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.443503][ T5875] usb 8-1: Product: syz [ 1402.449529][ T5875] usb 8-1: Manufacturer: syz [ 1402.454612][ T5875] usb 8-1: SerialNumber: syz [ 1402.464791][ T5875] usb 8-1: config 0 descriptor?? [ 1402.472958][T24616] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1402.501255][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.515678][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.529349][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.544805][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.559462][ T5875] rc_core: IR keymap rc-streamzap not found [ 1402.567530][ T5875] Registered IR keymap rc-empty [ 1402.572500][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.579386][ T5875] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1402.586718][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.600472][ T5875] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input135 [ 1402.618158][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.638129][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.652155][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.670846][ T5731] sony 0003:054C:042F.002D: unknown main item tag 0x0 [ 1402.692066][ T5731] sony 0003:054C:042F.002D: hidraw0: USB HID v0.01 Device [HID 054c:042f] on usb-dummy_hcd.6-1/input0 [ 1402.704634][T24607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.730070][T24607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.741196][ T5731] sony 0003:054C:042F.002D: failed to claim input [ 1402.771590][T24616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.785569][T24616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.839387][T17068] usb 8-1: USB disconnect, device number 51 [ 1403.200163][T23066] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.228853][T23066] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.257421][T23066] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.285050][T23066] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.479358][ T5731] usb 7-1: USB disconnect, device number 69 [ 1405.315204][ T5614] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1405.392120][ T29] audit: type=1400 audit(1784523194.672:3218): avc: denied { write } for pid=24635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1405.527461][ T5614] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1405.545720][ T5614] usb 6-1: not running at top speed; connect to a high speed hub [ 1405.571590][ T5614] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 1405.599971][ T5614] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1405.608897][ T5614] usb 6-1: can't read configurations, error -61 [ 1405.655938][ T29] audit: type=1400 audit(1784523194.942:3219): avc: denied { write } for pid=24679 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1405.758594][ T5614] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1405.775405][ T5875] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1405.928239][ T5614] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1405.946378][ T29] audit: type=1400 audit(1784523195.232:3220): avc: denied { listen } for pid=24665 comm="syz.1.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1405.957188][ T5614] usb 6-1: not running at top speed; connect to a high speed hub [ 1405.968800][T24687] netlink: 'syz.1.4537': attribute type 2 has an invalid length. [ 1406.004000][T24691] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4540'. [ 1406.018883][ T5614] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 1406.051837][ T5614] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1406.060969][ T5614] usb 6-1: can't read configurations, error -61 [ 1406.076078][ T5614] usb usb6-port1: attempt power cycle [ 1406.116472][T24691] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4540'. [ 1406.438982][ T5614] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1406.494743][ T5614] usb 6-1: device descriptor read/8, error -71 [ 1406.503393][ T29] audit: type=1400 audit(1784523195.782:3221): avc: denied { write } for pid=24685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1406.720380][T24710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4543'. [ 1406.799333][T24713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24713 comm=syz.5.4543 [ 1406.850708][ T29] audit: type=1400 audit(1784523196.132:3222): avc: denied { write } for pid=24712 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1408.352142][T24736] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4548'. [ 1408.362584][T24737] netlink: 356 bytes leftover after parsing attributes in process `syz.6.4549'. [ 1408.668200][ T29] audit: type=1400 audit(1784523197.902:3223): avc: denied { create } for pid=24734 comm="syz.6.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1408.910540][ T5614] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1409.030463][ T29] audit: type=1804 audit(1784523198.002:3224): pid=24743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.4549" name="/newroot/362/file0/file1" dev="overlay" ino=2024 res=1 errno=0 [ 1409.074195][T16881] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 1409.109696][ T5614] usb 6-1: Using ep0 maxpacket: 16 [ 1409.264250][T24750] netlink: 'syz.1.4551': attribute type 10 has an invalid length. [ 1409.357458][T24756] netlink: 'syz.1.4551': attribute type 10 has an invalid length. [ 1409.424160][ T29] audit: type=1400 audit(1784523198.682:3225): avc: denied { write } for pid=24719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1410.005627][ T5614] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1410.047525][ T29] audit: type=1400 audit(1784523199.332:3226): avc: denied { write } for pid=24764 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1410.090949][ T5614] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1410.105382][ T5614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.165325][ T5731] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1410.167906][ T5614] usb 6-1: Product: syz [ 1410.365384][ T5614] usb 6-1: Manufacturer: syz [ 1410.385878][ T5614] usb 6-1: SerialNumber: syz [ 1410.405223][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 1410.419711][ T5614] usb 6-1: 1:1 : unsupported sample bitwidth 3 in 8 bytes [ 1410.422895][ T5731] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1410.468444][ T5614] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1410.493951][ T5731] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1410.515248][ T5731] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1410.536971][ T5731] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1410.550968][ T5731] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1410.602024][T24728] SELinux: policydb version 0 does not match my version range 15-35 [ 1410.616758][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.619031][T24728] SELinux: failed to load policy [ 1411.159188][T24780] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4557'. [ 1411.182584][ T5614] usb 6-1: unit 3 not found! [ 1411.190224][T24763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.206597][T24763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.239107][T24780] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24780 comm=syz.7.4557 [ 1411.265579][T24763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.277909][T24763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.295782][ T5731] usb 2-1: GET_CAPABILITIES returned 0 [ 1411.316137][ T5731] usbtmc 2-1:16.0: can't read capabilities [ 1411.323735][ T5614] usb 6-1: USB disconnect, device number 88 [ 1411.342245][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4561'. [ 1411.383975][T24142] udevd[24142]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.557467][ T29] audit: type=1400 audit(1784523200.832:3227): avc: denied { listen } for pid=24793 comm="syz.7.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1411.641896][T24796] x_tables: duplicate underflow at hook 4 [ 1411.658941][ T29] audit: type=1400 audit(1784523200.842:3228): avc: denied { shutdown } for pid=24793 comm="syz.7.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1411.665234][ T5731] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1411.691564][ T5875] usb 2-1: USB disconnect, device number 56 [ 1412.389809][ T29] audit: type=1326 audit(1784523201.672:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24798 comm="syz.5.4565" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb18c19de99 code=0x0 [ 1412.525948][ T5731] usb 5-1: Using ep0 maxpacket: 16 [ 1412.541066][ T5731] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1412.553098][ T5731] usb 5-1: config 0 has no interface number 0 [ 1412.596189][ T5731] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1412.623670][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.630345][T24805] trusted_key: encrypted_key: insufficient parameters specified [ 1412.637304][ T5731] usb 5-1: Product: syz [ 1412.644958][ T5731] usb 5-1: Manufacturer: syz [ 1412.654148][ T5731] usb 5-1: SerialNumber: syz [ 1412.710341][ T5731] usb 5-1: config 0 descriptor?? [ 1412.718975][ T5731] hub 5-1:0.132: bad descriptor, ignoring hub [ 1412.728442][ T5731] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1412.812501][T24816] /dev/nullb0: Can't open blockdev [ 1412.858534][ T5731] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input137 [ 1412.884840][T24816] netlink: 'syz.1.4566': attribute type 10 has an invalid length. [ 1412.892949][T24816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1412.902423][T24816] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1412.975330][ T46] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1413.235256][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 1413.282047][ T46] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1413.354185][ T46] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1413.401691][ T5614] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1413.575397][ T46] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1413.664910][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1413.745081][ T46] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1413.830146][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1414.648247][T24828] 0ªî{X¹¦: left allmulticast mode [ 1414.689058][T24828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.762695][T24828] vlan2: left allmulticast mode [ 1414.767852][T24828] veth0_to_bond: left allmulticast mode [ 1414.775700][T24828] macvtap1: left promiscuous mode [ 1414.780867][T24828] macvtap1: left allmulticast mode [ 1414.786274][T24828] veth1_vlan: left allmulticast mode [ 1414.793832][T24828] ip6gre1: left promiscuous mode [ 1414.798909][T24828] ip6gre1: left allmulticast mode [ 1415.022945][T13618] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1415.055552][ T46] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1415.230529][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1415.244553][ T46] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1415.254753][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.279769][ T46] usb 7-1: config 0 descriptor?? [ 1415.314066][ T5614] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1415.354316][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.397623][ T5614] usb 2-1: Product: syz [ 1415.413369][ T5614] usb 2-1: Manufacturer: syz [ 1415.440512][ T5614] usb 2-1: SerialNumber: syz [ 1415.470577][ T5614] usb 2-1: config 0 descriptor?? [ 1415.516186][T24832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4572'. [ 1415.526098][T24815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.552095][T24815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.585684][T24835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4573'. [ 1415.655446][T24837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24837 comm=syz.5.4573 [ 1415.755885][T13604] ip6_tnl_xmit_ctl: 629 callbacks suppressed [ 1415.755902][T13604] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1415.785907][ T46] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1415.815422][T13604] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1415.815534][ T5875] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1415.851561][ T46] usb 7-1: USB disconnect, device number 71 [ 1415.902339][ T46] usblp0: removed [ 1415.944981][ T5614] usb 2-1: can't set config #0, error -71 [ 1415.977275][ T5614] usb 2-1: USB disconnect, device number 57 [ 1416.085893][ T5731] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1416.100779][T24846] md: md2 stopped. [ 1416.106170][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1416.116299][T11247] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1416.266313][T11247] usb 6-1: Using ep0 maxpacket: 32 [ 1416.291342][T11247] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1416.340814][ T5614] usb 5-1: USB disconnect, device number 66 [ 1416.345422][T11247] usb 6-1: config 0 has no interface number 0 [ 1416.426131][T11247] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1416.538041][T11247] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1416.608699][T11247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.618836][T11247] usb 6-1: Product: syz [ 1416.623343][T11247] usb 6-1: Manufacturer: syz [ 1416.628492][T11247] usb 6-1: SerialNumber: syz [ 1416.637463][T24853] fuse: Unknown parameter 'r00000000S0001000p0' [ 1416.673984][T11247] usb 6-1: config 0 descriptor?? [ 1416.876411][ T5614] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1417.216993][T11247] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1417.288798][T11247] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1417.348681][T24870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4581'. [ 1417.505017][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1417.536777][T11247] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1417.557760][T11247] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1417.572279][ T29] audit: type=1800 audit(1784523206.852:3230): pid=24868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4582" name="file0" dev="overlay" ino=1803 res=0 errno=0 [ 1417.605545][T11247] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1417.616433][T11247] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1417.641755][T11247] usb 6-1: USB disconnect, device number 89 [ 1417.695280][ T5875] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1417.773628][T24880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4584'. [ 1417.811263][T24880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24880 comm=syz.4.4584 [ 1417.878945][ T5875] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1417.892994][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.904836][ T5875] usb 7-1: Product: syz [ 1417.912042][ T5875] usb 7-1: Manufacturer: syz [ 1417.916273][ T46] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1417.921976][ T5875] usb 7-1: SerialNumber: syz [ 1417.947676][ T5875] usb 7-1: config 0 descriptor?? [ 1418.086061][ T46] usb 8-1: Using ep0 maxpacket: 16 [ 1418.113947][ T29] audit: type=1400 audit(1784523207.392:3231): avc: denied { block_suspend } for pid=24887 comm="syz.4.4586" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1418.139093][ T46] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1418.163311][ T46] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1418.175673][ T5875] usb 7-1: Firmware version (0.0) predates our first public release. [ 1418.188293][ T5875] usb 7-1: Please update to version 0.2 or newer [ 1418.188776][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.208739][ T46] usb 8-1: Product: syz [ 1418.213042][ T46] usb 8-1: Manufacturer: syz [ 1418.218180][ T46] usb 8-1: SerialNumber: syz [ 1418.255001][ T46] usb 8-1: 1:1 : unsupported sample bitwidth 3 in 8 bytes [ 1418.279534][ T46] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1418.307241][ T29] audit: type=1400 audit(1784523207.592:3232): avc: denied { read write } for pid=24896 comm="syz.1.4588" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1418.354893][ T29] audit: type=1400 audit(1784523207.622:3233): avc: denied { open } for pid=24896 comm="syz.1.4588" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1418.392453][ T5875] usb 7-1: USB disconnect, device number 72 [ 1418.398455][ T5614] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1418.443225][ T29] audit: type=1400 audit(1784523207.622:3234): avc: denied { ioctl } for pid=24896 comm="syz.1.4588" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1418.478296][T24877] SELinux: policydb version 0 does not match my version range 15-35 [ 1418.506616][T24877] SELinux: failed to load policy [ 1418.565696][ T5614] usb 6-1: device descriptor read/64, error -71 [ 1418.655585][T11247] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1418.865622][ T5614] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1418.977687][T11247] usb 2-1: Using ep0 maxpacket: 16 [ 1418.991898][T11247] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1419.012155][T11247] usb 2-1: config 5 has an invalid interface number: 8 but max is 0 [ 1419.034932][T11247] usb 2-1: config 5 has no interface number 0 [ 1419.052169][T11247] usb 2-1: config 5 interface 8 has no altsetting 0 [ 1419.070076][ T46] usb 8-1: unit 3 not found! [ 1419.083117][T11247] usb 2-1: New USB device found, idVendor=688d, idProduct=88d0, bcdDevice=84.05 [ 1419.102712][T11247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.115431][ T5614] usb 6-1: device descriptor read/64, error -71 [ 1419.130159][T11247] usb 2-1: Product: syz [ 1419.143881][T11247] usb 2-1: Manufacturer: syz [ 1419.156597][ T46] usb 8-1: USB disconnect, device number 52 [ 1419.162573][T11247] usb 2-1: SerialNumber: syz [ 1419.211841][T24141] udevd[24141]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.235957][ T5614] usb usb6-port1: attempt power cycle [ 1419.502704][T11247] usb-storage 2-1:5.8: USB Mass Storage device detected [ 1419.675377][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1419.914783][T11247] usb 2-1: USB disconnect, device number 58 [ 1419.996079][ T5614] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1420.015667][ T5614] usb 6-1: device descriptor read/8, error -71 [ 1420.699904][ T5842] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1420.707594][ T5614] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1420.754544][ T5614] usb 6-1: device descriptor read/8, error -71 [ 1420.875382][ T5842] usb 8-1: Using ep0 maxpacket: 32 [ 1420.881013][ T5614] usb usb6-port1: unable to enumerate USB device [ 1420.894615][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.912199][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.933008][ T5842] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1420.942439][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.006148][ T5842] usb 8-1: config 0 descriptor?? [ 1421.150605][ T24] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1421.769542][ T5842] savu 0003:1E7D:2D5A.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1421.819811][ T5842] usb 8-1: USB disconnect, device number 53 [ 1421.856808][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1421.867346][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.906669][T24922] fido_id[24922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1421.958707][ T24] usb 7-1: config 0 descriptor?? [ 1421.969360][ T24] cp210x 7-1:0.0: cp210x converter detected [ 1422.235537][ T5875] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1422.315544][ T5614] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1422.776528][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 1422.921235][ T5614] usb 2-1: Using ep0 maxpacket: 8 [ 1422.922732][T24917] netlink: 'syz.6.4592': attribute type 4 has an invalid length. [ 1422.928283][ T5614] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1423.141975][ T5875] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1423.164190][ T24] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1423.168552][ T5875] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1423.194210][ T5614] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1423.214113][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.224756][ T5875] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1423.264165][ T5614] usb 2-1: Product: syz [ 1423.264673][ T24] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1423.283727][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1423.290255][ T5614] usb 2-1: Manufacturer: syz [ 1423.299881][ T5875] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1423.321617][ T5614] usb 2-1: SerialNumber: syz [ 1423.327982][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.339166][ T5875] usb 6-1: Product: syz [ 1423.343412][ T5875] usb 6-1: Manufacturer: syz [ 1423.350755][ T5875] usb 6-1: SerialNumber: syz [ 1423.352356][ T24] usb 7-1: USB disconnect, device number 73 [ 1423.490626][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1423.517634][ T24] cp210x 7-1:0.0: device disconnected [ 1423.677738][ T5614] usb 2-1: USB disconnect, device number 59 [ 1423.738688][T24062] udevd[24062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1424.465742][ T5614] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1424.781276][ T5614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.814602][ T5614] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.28 [ 1424.880801][ T5614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.987788][ T5614] usb 7-1: config 0 descriptor?? [ 1425.201982][ T5731] usb 6-1: USB disconnect, device number 94 [ 1425.554623][ T5614] hid (null): unknown global tag 0xc [ 1425.566608][ T5614] hid (null): unknown global tag 0xe [ 1425.586171][ T5614] hid (null): unknown global tag 0xd [ 1425.604767][ T5614] hid (null): invalid report_size 24548 [ 1425.637300][ T5614] hid_parser_main: 30 callbacks suppressed [ 1425.637313][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.743503][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.751719][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.760208][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.772235][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.780707][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.790237][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.801213][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.809181][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.818576][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown main item tag 0x0 [ 1425.830470][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: reserved main item tag 0xe [ 1425.839222][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: unknown global tag 0xc [ 1425.849514][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: item 0 4 1 12 parsing failed [ 1425.860761][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: parse failed (reason: -22) [ 1425.881932][ T5614] hid-corsair-void 0003:1B1C:0A1F.002F: probe with driver hid-corsair-void failed with error -22 [ 1425.987686][ T29] audit: type=1400 audit(1784523215.212:3235): avc: denied { bind } for pid=24976 comm="syz.1.4608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1426.032436][ T5614] usb 7-1: USB disconnect, device number 74 [ 1427.595309][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1427.737968][T25005] trusted_key: encrypted_key: insufficient parameters specified [ 1427.838281][T25008] netlink: 'syz.7.4616': attribute type 10 has an invalid length. [ 1427.846304][T25008] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4616'. [ 1428.026964][T16881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1428.034925][ T5624] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 1428.165488][ T5717] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1428.227707][ T29] audit: type=1400 audit(1784523217.512:3236): avc: denied { mount } for pid=25012 comm="syz.1.4618" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1428.739231][T25022] netlink: 'syz.1.4620': attribute type 1 has an invalid length. [ 1428.747120][T25022] netlink: 'syz.1.4620': attribute type 2 has an invalid length. [ 1428.863665][ T5717] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1428.872878][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.881849][ T5717] usb 8-1: Product: syz [ 1428.892703][ T5717] usb 8-1: Manufacturer: syz [ 1428.899872][ T5717] usb 8-1: SerialNumber: syz [ 1428.914641][ T5717] usb 8-1: config 0 descriptor?? [ 1428.935094][ T5717] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1428.963757][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1428.994673][ T5717] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1429.012852][ T5717] usb 8-1: media controller created [ 1429.029645][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1429.831993][ T5717] DVB: Unable to find symbol mt352_attach() [ 1429.940389][ T5717] DVB: Unable to find symbol nxt6000_attach() [ 1429.968841][ T5717] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1429.995895][ T5717] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input138 [ 1430.206106][ T5717] dvb-usb: schedule remote query interval to 1000 msecs. [ 1430.218604][ T5842] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1430.229311][ T29] audit: type=1400 audit(1784523219.492:3237): avc: denied { write } for pid=25047 comm="syz.6.4627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1430.249518][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1430.737894][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 1430.743717][ T5717] dvb-usb: bulk message failed: -22 (7/0) [ 1430.752766][ T5717] usb 8-1: USB disconnect, device number 54 [ 1430.897375][ T5842] usb 2-1: device descriptor read/64, error -71 [ 1430.973985][T25053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4628'. [ 1431.335303][ T5842] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1431.529315][T25062] trusted_key: encrypted_key: insufficient parameters specified [ 1431.586559][ T5717] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1431.597147][ T5842] usb 2-1: device descriptor read/64, error -71 [ 1432.152518][ T5842] usb usb2-port1: attempt power cycle [ 1432.515419][ T5842] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1432.647136][ T5842] usb 2-1: device descriptor read/8, error -71 [ 1432.709946][T25067] netlink: 'syz.7.4631': attribute type 10 has an invalid length. [ 1432.845961][T25067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4631'. [ 1432.866566][T25075] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1433.242252][ T5614] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1433.305415][ T5842] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1433.714529][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 1433.722270][ T5842] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.763374][ T5842] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1433.798927][ T5614] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1433.808399][ T5614] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.824249][ T5842] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1433.840165][ T5614] usb 8-1: Product: syz [ 1433.850679][ T5842] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1433.863715][ T5614] usb 8-1: Manufacturer: syz [ 1433.872821][ T5614] usb 8-1: SerialNumber: syz [ 1433.884935][ T5614] usb 8-1: config 0 descriptor?? [ 1433.896209][ T5842] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.912138][ T5614] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1433.922713][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1433.942504][ T5842] usb 2-1: SerialNumber: syz [ 1433.951105][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1433.970195][T25080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1433.982771][ T5614] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1433.993953][T25080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1434.016529][ T5842] hub 2-1:1.0: bad descriptor, ignoring hub [ 1434.022594][ T5614] usb 8-1: media controller created [ 1434.034896][ T5842] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1434.058032][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1434.229296][T25080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1434.445212][T11247] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1434.456948][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 1434.540249][ T5842] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1434.579558][ T5614] DVB: Unable to find symbol mt352_attach() [ 1434.599341][ T5842] usb 2-1: USB disconnect, device number 63 [ 1434.615233][T11247] usb 5-1: device descriptor read/64, error -32 [ 1434.669978][ T5614] DVB: Unable to find symbol nxt6000_attach() [ 1434.686785][ T5614] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1434.790059][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input139 [ 1434.807888][ T5614] dvb-usb: schedule remote query interval to 1000 msecs. [ 1434.815578][ T5614] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1434.818112][T25102] overlayfs: failed to resolve './file2': -2 [ 1434.826191][ T5614] dvb-usb: bulk message failed: -22 (7/0) [ 1434.837786][ T5614] dvb-usb: bulk message failed: -22 (7/0) [ 1435.332703][T11247] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1435.717796][T11247] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1435.723163][T25108] ALSA: mixer_oss: invalid OSS volume 'º_—ˆ:¼…âž/‘ÇÈ÷Æšù' [ 1435.745372][T11247] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1435.752269][T11247] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1435.816752][T25102] netlink: 'syz.6.4641': attribute type 49 has an invalid length. [ 1435.825801][T11247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.835529][ T5614] dvb-usb: bulk message failed: -22 (7/0) [ 1435.864418][ T5614] dvb-usb: error while querying for an remote control event. [ 1435.883564][T11247] usb 5-1: config 0 descriptor?? [ 1435.906046][T25090] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1435.966282][T25112] tipc: Enabled bearer , priority 0 [ 1435.981129][T25112] syzkaller0: entered promiscuous mode [ 1435.991555][T25112] syzkaller0: entered allmulticast mode [ 1436.055887][T25112] tipc: Resetting bearer [ 1436.075215][ T24] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1436.089574][T25111] tipc: Resetting bearer [ 1436.122068][T25111] tipc: Disabling bearer [ 1436.247237][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1436.261954][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 1436.286294][ T5731] usb 8-1: USB disconnect, device number 55 [ 1436.310139][ T24] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1436.339910][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.354023][ T5731] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1436.371854][ T24] usb 7-1: Product: syz [ 1436.376903][ T24] usb 7-1: Manufacturer: syz [ 1436.384275][ T24] usb 7-1: SerialNumber: syz [ 1436.558339][T25125] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1436.670480][ T24] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1436.677840][ T24] usb 7-1: found format II with max.bitrate = 1025, frame size=32767 [ 1436.687050][ T24] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1436.714547][ T24] usb 7-1: USB disconnect, device number 75 [ 1436.735128][T11247] hid_parser_main: 110 callbacks suppressed [ 1436.757181][ T5614] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1436.767340][T11247] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 1436.780826][T24062] udevd[24062]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1436.797189][T11247] petalynx 0003:18B1:0037.0030: unknown main item tag 0x6 [ 1436.814130][T11247] petalynx 0003:18B1:0037.0030: bogus close delimiter [ 1436.822605][ T5731] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1436.833973][T11247] petalynx 0003:18B1:0037.0030: item 0 0 2 10 parsing failed [ 1436.844777][T11247] petalynx 0003:18B1:0037.0030: parse failed [ 1436.863095][T11247] petalynx 0003:18B1:0037.0030: probe with driver petalynx failed with error -22 [ 1436.939783][ T5875] usb 5-1: USB disconnect, device number 68 [ 1436.977811][ T5614] usb 2-1: config 127 has an invalid interface number: 118 but max is 0 [ 1436.993614][ T5614] usb 2-1: config 127 has no interface number 0 [ 1437.000570][ T5614] usb 2-1: config 127 interface 118 altsetting 255 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1437.013710][ T5614] usb 2-1: config 127 interface 118 has no altsetting 0 [ 1437.022818][ T5614] usb 2-1: New USB device found, idVendor=0b05, idProduct=1779, bcdDevice=fa.b0 [ 1437.035390][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.043481][ T5614] usb 2-1: Product: syz [ 1437.048919][ T5614] usb 2-1: Manufacturer: syz [ 1437.053554][ T5614] usb 2-1: SerialNumber: syz [ 1437.471448][ T5731] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1437.487196][ T5731] usb 8-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1437.497173][T25122] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1437.506312][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.516971][ T5731] usb 8-1: config 0 descriptor?? [ 1437.524569][ T5731] smsusb:smsusb_probe: board id=8, interface number 0 [ 1437.531756][ T5731] smsusb:smsusb_probe: Device initialized with return code -19 [ 1437.727725][ T5875] usb 8-1: USB disconnect, device number 56 [ 1437.852744][ T5614] usb 2-1: USB disconnect, device number 64 [ 1437.889720][T25137] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1439.343440][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4660'. [ 1442.787437][T25235] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1442.840281][ T29] audit: type=1400 audit(1784523232.122:3238): avc: denied { bind } for pid=25231 comm="syz.4.4675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1442.955311][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1444.876681][ T5842] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 1445.940622][T25289] macsec1: entered promiscuous mode [ 1445.945897][T25289] bridge0: entered promiscuous mode [ 1447.469902][T25308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1447.479205][T25308] netlink: 90 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1447.530371][T25308] netlink: 90 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1448.165325][ T5731] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1448.905237][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 1448.925091][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1448.952395][ T5731] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1448.986986][ T5842] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1449.024352][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.050775][ T5731] usb 2-1: Product: syz [ 1449.074293][ T5731] usb 2-1: Manufacturer: syz [ 1449.090810][ T5731] usb 2-1: SerialNumber: syz [ 1449.126398][ T5731] usb 2-1: 1:1 : unsupported sample bitwidth 3 in 8 bytes [ 1449.151183][ T5731] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1449.931655][T25315] SELinux: policydb version 0 does not match my version range 15-35 [ 1449.952087][T25315] SELinux: failed to load policy [ 1450.707164][ T5731] usb 2-1: unit 3 not found! [ 1450.879510][ T5731] usb 2-1: USB disconnect, device number 66 [ 1451.408384][T24062] udevd[24062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.559623][ T5624] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1454.350977][ T29] audit: type=1400 audit(1784523243.412:3239): avc: denied { lock } for pid=25380 comm="syz.4.4715" path="socket:[97967]" dev="sockfs" ino=97967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1454.675375][ T24] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1454.837080][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1454.855120][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1454.890442][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1454.918483][ T24] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1454.931622][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.966023][ T24] usb 7-1: Product: syz [ 1454.979724][ T24] usb 7-1: Manufacturer: syz [ 1454.990357][ T24] usb 7-1: SerialNumber: syz [ 1455.013146][ T24] usb 7-1: config 0 descriptor?? [ 1455.022992][T25403] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1455.329393][T25403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.345702][T25403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.425229][ T24] rc_core: IR keymap rc-streamzap not found [ 1455.434911][ T24] Registered IR keymap rc-empty [ 1455.532194][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1455.560119][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input140 [ 1456.136344][ T24] usb 7-1: USB disconnect, device number 76 [ 1459.451540][T25433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1459.542195][T25438] ALSA: mixer_oss: invalid OSS volume 'IGAIž/‘ÇÈ÷Æšù' [ 1459.616935][ T5614] usb 8-1: new low-speed USB device number 58 using dummy_hcd [ 1459.646081][ T29] audit: type=1400 audit(1784523248.932:3240): avc: denied { mount } for pid=25435 comm="syz.6.4727" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1459.679747][T25441] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1459.688505][ T29] audit: type=1400 audit(1784523248.962:3241): avc: denied { mounton } for pid=25435 comm="syz.6.4727" path="/396/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1459.896347][ T5614] usb 8-1: device descriptor read/64, error -71 [ 1459.955732][ T5842] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1460.079427][ T29] audit: type=1400 audit(1784523249.362:3242): avc: denied { bind } for pid=25435 comm="syz.6.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1460.165368][ T5614] usb 8-1: new low-speed USB device number 59 using dummy_hcd [ 1460.320770][ T5842] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1460.330295][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.338744][ T5842] usb 2-1: Product: syz [ 1460.343068][ T5842] usb 2-1: Manufacturer: syz [ 1460.348107][ T5842] usb 2-1: SerialNumber: syz [ 1460.365339][ T5717] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1460.373065][ T5614] usb 8-1: device descriptor read/64, error -71 [ 1460.393724][ T5842] usb 2-1: config 0 descriptor?? [ 1460.820270][ T5614] usb usb8-port1: attempt power cycle [ 1460.919334][ T5717] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1460.932311][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1460.944159][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1460.965079][ T5717] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1460.975548][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.983620][ T5717] usb 6-1: Product: syz [ 1460.988656][ T5717] usb 6-1: Manufacturer: syz [ 1460.993320][ T5717] usb 6-1: SerialNumber: syz [ 1461.127177][ T5717] usb 6-1: config 0 descriptor?? [ 1461.137154][ T5842] usb 2-1: Firmware: major: 201, minor: 210, hardware type: UNKNOWN (227) [ 1461.621603][T25453] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1461.630686][ T5842] usb 2-1: failed to fetch extended address, random address set [ 1461.638549][ T5842] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1461.656053][ T5842] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1461.686066][ T5842] usb 2-1: USB disconnect, device number 67 [ 1461.726067][ T5717] rc_core: IR keymap rc-streamzap not found [ 1461.734158][ T5717] Registered IR keymap rc-empty [ 1461.749556][ T5717] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1461.767353][ T5717] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input141 [ 1461.896511][T25453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.935425][T25453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.992147][ T5717] usb 6-1: USB disconnect, device number 96 [ 1462.125392][T25479] xt_hashlimit: size too large, truncated to 1048576 [ 1462.175444][ T5842] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1462.271822][ T29] audit: type=1400 audit(1784523251.552:3243): avc: denied { unmount } for pid=16878 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1462.347275][ T5842] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1462.356813][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.448998][ T5842] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1462.458870][ T5842] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1462.478544][ T5842] usb 5-1: Manufacturer: syz [ 1462.497235][ T5842] usb 5-1: config 0 descriptor?? [ 1462.875663][ T5614] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1463.137289][ T5842] rc_core: IR keymap rc-hauppauge not found [ 1463.161132][ T5842] Registered IR keymap rc-empty [ 1463.180192][ T5614] usb 2-1: Using ep0 maxpacket: 32 [ 1463.196557][ T5842] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1463.208868][ T5614] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1463.219859][ T5842] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input142 [ 1463.234099][ T5614] usb 2-1: config 0 has no interface number 0 [ 1463.249706][ T5614] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1463.295392][ T5842] usb 5-1: USB disconnect, device number 69 [ 1463.303700][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.346361][ T5614] usb 2-1: Product: syz [ 1463.354169][ T5614] usb 2-1: Manufacturer: syz [ 1463.378967][ T5614] usb 2-1: SerialNumber: syz [ 1463.394576][ T5614] usb 2-1: config 0 descriptor?? [ 1463.413388][T25504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4747'. [ 1463.414507][ T5614] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1463.481219][T25504] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25504 comm=syz.5.4747 [ 1463.618376][ T5614] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1463.625235][ T5731] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1463.632172][ T5614] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1463.894449][ T5731] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1463.903867][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.966333][T25522] hpfs: Bad magic ... probably not HPFS [ 1463.974436][T25522] hpfs: Bad magic ... probably not HPFS [ 1464.298081][ T5731] usb 8-1: config 0 descriptor?? [ 1464.301217][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1464.317127][ T5614] usb 2-1: USB disconnect, device number 68 [ 1464.635260][ T5614] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1464.669799][ T5614] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1464.704144][ T5614] quatech2 2-1:0.51: device disconnected [ 1465.116788][T24099] Bluetooth: hci5: Frame reassembly failed (-84) [ 1465.189999][ T29] audit: type=1400 audit(1784523254.472:3244): avc: denied { bind } for pid=25538 comm="syz.1.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1465.247553][T25524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.254998][T25524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.262403][ T29] audit: type=1400 audit(1784523254.472:3245): avc: denied { listen } for pid=25538 comm="syz.1.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1465.287496][ T29] audit: type=1400 audit(1784523254.492:3246): avc: denied { wake_alarm } for pid=25538 comm="syz.1.4756" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1465.374958][T25524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.390940][T25524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.415278][ T5731] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1465.694237][ T5731] usb 6-1: Using ep0 maxpacket: 32 [ 1465.729937][ T5731] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1465.751024][ T5731] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1465.800386][ T5731] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1465.811466][ T5731] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1465.820777][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.830776][ T5731] usb 6-1: config 0 descriptor?? [ 1465.952642][T13613] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.965507][T13613] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.974773][T13613] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.992014][T13613] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.065328][T25551] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4759'. [ 1466.100127][ T29] audit: type=1400 audit(1784523255.382:3247): avc: denied { map } for pid=25550 comm="syz.1.4759" path="/proc/1254/net/igmp" dev="proc" ino=4026533478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1466.242649][ T5731] kye 0003:0458:0087.0031: item fetching failed at offset 5/6 [ 1466.264221][ T5731] kye 0003:0458:0087.0031: parse failed [ 1466.278534][ T5731] kye 0003:0458:0087.0031: probe with driver kye failed with error -22 [ 1466.382482][ T5875] usb 8-1: USB disconnect, device number 61 [ 1466.446671][ T5703] usb 6-1: USB disconnect, device number 97 [ 1467.120117][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1467.828279][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4766'. [ 1467.945361][ T5614] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1468.167924][ T5614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.207016][ T5614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.250343][ T5614] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1468.312110][ T5614] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1468.352762][ T5614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.461239][ T5614] usb 7-1: config 0 descriptor?? [ 1468.527663][ T24] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1468.719246][ T24] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1468.723526][ T29] audit: type=1400 audit(1784523257.992:3248): avc: denied { setopt } for pid=25574 comm="syz.7.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1468.845278][ T5703] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1470.083125][ T5614] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1470.138214][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.160697][ T24] usb 6-1: config 0 descriptor?? [ 1470.248415][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 1470.254886][ T5703] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.266649][ T5703] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1470.277729][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.296225][ T5703] usb 5-1: config 0 descriptor?? [ 1470.304583][ T5703] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1470.376675][T25588] netlink: zone id is out of range [ 1470.386581][T25588] netlink: zone id is out of range [ 1470.421262][ T24] usb 7-1: USB disconnect, device number 77 [ 1470.473950][T25588] netlink: zone id is out of range [ 1470.517366][T25578] syz_tun: entered allmulticast mode [ 1470.784290][T25592] overlayfs: missing 'lowerdir' [ 1471.108363][ T5842] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1471.135917][ T29] audit: type=1400 audit(1784523260.062:3249): avc: denied { connect } for pid=25577 comm="syz.4.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1471.159654][ T5703] gspca_vc032x: reg_r err -110 [ 1471.172712][ T5703] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 1471.330290][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.360402][ T5842] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1471.394590][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1471.426348][ T5842] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1471.453331][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.506712][ T5703] usb 6-1: USB disconnect, device number 98 [ 1471.514136][ T5842] usb 2-1: config 0 descriptor?? [ 1471.565060][ T5842] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1472.246715][T13593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.310089][ T5731] usb 5-1: USB disconnect, device number 70 [ 1472.324565][T13593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.595485][ T5875] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1472.740572][T25605] netlink: 'syz.6.4772': attribute type 1 has an invalid length. [ 1472.748452][T25605] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4772'. [ 1472.757773][T25605] netlink: 2060 bytes leftover after parsing attributes in process `syz.6.4772'. [ 1472.856541][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 1472.877921][ T5875] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1472.930860][ T5875] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1472.974249][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1473.010070][ T5875] usb 6-1: Product: syz [ 1473.029221][ T5875] usb 6-1: Manufacturer: syz [ 1473.044331][ T5875] usb 6-1: SerialNumber: syz [ 1473.066244][ T5875] usb 6-1: config 0 descriptor?? [ 1473.082875][T25609] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1473.099363][T25623] xt_hashlimit: size too large, truncated to 1048576 [ 1473.541505][T25631] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1473.631897][T25632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.908508][ T29] audit: type=1400 audit(1784523263.182:3250): avc: denied { write } for pid=25613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1474.193137][T25636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4777'. [ 1474.213970][ T29] audit: type=1400 audit(1784523263.452:3251): avc: denied { ioctl } for pid=25593 comm="syz.7.4771" path="socket:[99204]" dev="sockfs" ino=99204 ioctlcmd=0x9441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1474.340631][T25640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25640 comm=syz.4.4777 [ 1474.413682][ T29] audit: type=1400 audit(1784523263.692:3252): avc: denied { write } for pid=25637 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1474.449421][ T5731] usb 2-1: USB disconnect, device number 69 [ 1475.513347][T25602] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1475.515982][T15312] usb 6-1: USB disconnect, device number 99 [ 1475.668645][T25602] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1476.145382][ T5842] usb 8-1: new low-speed USB device number 62 using dummy_hcd [ 1476.229986][T25602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1476.253725][T25670] overlayfs: failed to resolve './file2': -2 [ 1476.273037][T25602] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1476.285322][ T5842] usb 8-1: device descriptor read/64, error -71 [ 1476.317302][T15312] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1476.318791][ T5703] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1476.339385][ T29] audit: type=1400 audit(1784523265.612:3253): avc: denied { write } for pid=25649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.518711][T25672] netlink: 'syz.1.4784': attribute type 49 has an invalid length. [ 1476.586950][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.617432][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.644080][ T29] audit: type=1400 audit(1784523265.922:3254): avc: denied { write } for pid=25674 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.678594][ T5703] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1476.703410][ T5703] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1476.791887][ T5842] usb 8-1: new low-speed USB device number 63 using dummy_hcd [ 1476.813863][T15312] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1476.840301][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.843037][T15312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.897951][ T5703] usb 5-1: config 0 descriptor?? [ 1476.903505][T15312] usb 6-1: config 0 descriptor?? [ 1476.917115][T25602] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1476.956555][ T5842] usb 8-1: device descriptor read/64, error -71 [ 1476.974671][T25602] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1477.007467][T25602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1477.023080][T25602] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1477.025598][ T5875] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1477.059057][T25602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1477.065549][ T5842] usb usb8-port1: attempt power cycle [ 1477.075766][T25602] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1477.195251][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 1477.235111][ T5875] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 1477.280975][ T5875] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1477.324492][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.347918][ T5703] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1477.378662][ T5875] usb 2-1: Product: syz [ 1477.395082][ T5875] usb 2-1: Manufacturer: syz [ 1477.405257][ T5842] usb 8-1: new low-speed USB device number 64 using dummy_hcd [ 1477.421782][ T5875] usb 2-1: SerialNumber: syz [ 1477.446509][ T5842] usb 8-1: device descriptor read/8, error -71 [ 1477.458976][ T29] audit: type=1400 audit(1784523266.742:3255): avc: denied { write } for pid=25677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1477.593718][ T29] audit: type=1400 audit(1784523266.872:3256): avc: denied { write } for pid=25692 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1477.925495][ T5842] usb 8-1: new low-speed USB device number 65 using dummy_hcd [ 1477.958633][ T29] audit: type=1400 audit(1784523267.242:3257): avc: denied { create } for pid=25660 comm="syz.4.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1477.980057][ T5842] usb 8-1: device descriptor read/8, error -71 [ 1478.020290][ T5875] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1478.052095][ T5875] usb 2-1: found format II with max.bitrate = 1025, frame size=32767 [ 1478.067531][T15381] usb 5-1: USB disconnect, device number 71 [ 1478.085257][ T5614] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1478.097402][ T5842] usb usb8-port1: unable to enumerate USB device [ 1478.108488][ T5875] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1478.164240][ T5875] usb 2-1: USB disconnect, device number 70 [ 1478.196855][T24062] udevd[24062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.236534][ T5614] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1478.256950][ T5614] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1478.284707][ T5614] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1478.292386][ T29] audit: type=1400 audit(1784523267.562:3258): avc: denied { write } for pid=25697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.299659][ T5614] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1478.355231][ T5614] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.367270][ T5614] usb 7-1: Product: syz [ 1478.371482][ T5614] usb 7-1: Manufacturer: syz [ 1478.377102][ T5614] usb 7-1: SerialNumber: syz [ 1478.391074][ T29] audit: type=1400 audit(1784523267.672:3259): avc: denied { write } for pid=25708 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.399181][ T5614] hub 7-1:1.0: bad descriptor, ignoring hub [ 1478.424493][ T5614] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1478.603093][ T5614] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1478.669339][ T29] audit: type=1400 audit(1784523267.942:3260): avc: denied { write } for pid=25710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1478.904897][ T29] audit: type=1400 audit(1784523268.182:3261): avc: denied { write } for pid=25725 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1479.134997][ T5614] usb 6-1: USB disconnect, device number 100 [ 1479.389821][ T24] usb 7-1: USB disconnect, device number 78 [ 1479.405888][ T24] usblp0: removed [ 1479.988893][ T29] audit: type=1400 audit(1784523269.272:3262): avc: denied { bind } for pid=25755 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1480.682846][T25774] FAULT_INJECTION: forcing a failure. [ 1480.682846][T25774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.696072][T25774] CPU: 0 UID: 0 PID: 25774 Comm: syz.5.4796 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.696098][T25774] Tainted: [L]=SOFTLOCKUP [ 1480.696102][T25774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1480.696109][T25774] Call Trace: [ 1480.696114][T25774] [ 1480.696118][T25774] dump_stack_lvl+0x100/0x190 [ 1480.696136][T25774] should_fail_ex.cold+0x5/0xa [ 1480.696150][T25774] _copy_from_user+0x2e/0xd0 [ 1480.696164][T25774] copy_msghdr_from_user+0x9f/0x4c0 [ 1480.696180][T25774] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1480.696195][T25774] ? find_held_lock+0x2b/0x80 [ 1480.696214][T25774] ? __lock_acquire+0x49f/0x1a40 [ 1480.696232][T25774] ? get_pid_task+0x106/0x250 [ 1480.696249][T25774] ___sys_recvmsg+0xdd/0x1a0 [ 1480.696265][T25774] ? __pfx____sys_recvmsg+0x10/0x10 [ 1480.696282][T25774] ? find_held_lock+0x2b/0x80 [ 1480.696305][T25774] __x64_sys_recvmsg+0x19a/0x260 [ 1480.696318][T25774] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1480.696337][T25774] do_syscall_64+0x115/0x870 [ 1480.696348][T25774] ? clear_bhb_loop+0x40/0x90 [ 1480.696361][T25774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.696372][T25774] RIP: 0033:0x7fb18c19de99 [ 1480.696381][T25774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.696392][T25774] RSP: 002b:00007fb18a3d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1480.696402][T25774] RAX: ffffffffffffffda RBX: 00007fb18c426180 RCX: 00007fb18c19de99 [ 1480.696409][T25774] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000009 [ 1480.696416][T25774] RBP: 00007fb18a3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.696422][T25774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.696428][T25774] R13: 00007fb18c426218 R14: 00007fb18c426180 R15: 00007ffcf6719b78 [ 1480.696442][T25774] [ 1480.983435][T25778] netlink: 'syz.4.4798': attribute type 10 has an invalid length. [ 1480.991484][T25778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1481.045328][ T24] usb 8-1: new low-speed USB device number 66 using dummy_hcd [ 1481.325391][ T24] usb 8-1: device descriptor read/64, error -71 [ 1481.413326][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1481.413342][ T29] audit: type=1400 audit(1784523270.692:3264): avc: denied { write } for pid=25779 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.495246][ T5614] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1481.502917][ T5875] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1481.522229][T25784] netlink: 'syz.1.4800': attribute type 7 has an invalid length. [ 1481.616641][ T24] usb 8-1: new low-speed USB device number 67 using dummy_hcd [ 1481.625656][T25783] ALSA: mixer_oss: invalid OSS volume '00000000000000000000ÿÿÿÿÿÿÿÿ0x0' [ 1481.657540][ T5875] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1481.668965][ T5614] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1481.680337][ T5875] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1481.694690][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.709849][ T5614] usb 5-1: Product: syz [ 1481.714178][ T5614] usb 5-1: Manufacturer: syz [ 1481.719374][ T5614] usb 5-1: SerialNumber: syz [ 1481.724568][ T5875] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1481.734583][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.743331][ T5614] usb 5-1: config 0 descriptor?? [ 1481.748683][ T5875] usb 7-1: Product: syz [ 1481.752875][ T5875] usb 7-1: Manufacturer: syz [ 1481.759129][ T5614] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1481.769024][ T5875] usb 7-1: SerialNumber: syz [ 1481.773956][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1481.775227][ T24] usb 8-1: device descriptor read/64, error -71 [ 1481.785413][ T5614] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1481.799651][ T5614] usb 5-1: media controller created [ 1481.810949][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1481.845639][ T5614] DVB: Unable to find symbol mt352_attach() [ 1481.871119][ T5614] DVB: Unable to find symbol nxt6000_attach() [ 1481.877557][ T5614] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1481.888683][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input143 [ 1481.903747][ T5614] dvb-usb: schedule remote query interval to 1000 msecs. [ 1481.905931][ T24] usb usb8-port1: attempt power cycle [ 1481.913309][ T5614] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1481.916539][ T5731] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1481.926979][ T5614] dvb-usb: bulk message failed: -22 (7/0) [ 1481.940587][ T5614] dvb-usb: bulk message failed: -22 (7/0) [ 1481.955309][ T5703] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1482.057806][T15381] usb 5-1: USB disconnect, device number 72 [ 1482.077560][ T5731] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1482.091293][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.094730][T15381] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1482.107346][ T5731] usb 6-1: config 0 descriptor?? [ 1482.138290][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1482.150397][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1482.163555][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1482.175444][ T5875] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1482.195618][ T5703] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1482.201868][ T5875] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1482.205218][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.227781][ T5703] usb 2-1: Product: syz [ 1482.231219][ T5875] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1482.232121][ T5703] usb 2-1: Manufacturer: syz [ 1482.248488][ T5703] usb 2-1: SerialNumber: syz [ 1482.256018][ T5703] usb 2-1: config 0 descriptor?? [ 1482.261668][T25790] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1482.263503][ T5875] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1482.285291][ T24] usb 8-1: new low-speed USB device number 68 using dummy_hcd [ 1482.289662][ T5875] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1482.305719][ T24] usb 8-1: device descriptor read/8, error -71 [ 1482.308843][ T5875] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1482.328387][ T5703] rc_core: IR keymap rc-streamzap not found [ 1482.342082][ T5703] Registered IR keymap rc-empty [ 1482.354123][ T5875] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1482.354423][ T5703] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1482.390367][ T5875] usb 7-1: failed to enable PITCH for EP 0x82 [ 1482.391421][ T5703] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input144 [ 1482.417834][ T29] audit: type=1400 audit(1784523271.702:3265): avc: denied { read } for pid=25797 comm="syz.6.4804" path="socket:[99759]" dev="sockfs" ino=99759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1482.531957][ T5875] usb 7-1: USB disconnect, device number 79 [ 1482.541601][T25790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.566458][ T24] usb 8-1: new low-speed USB device number 69 using dummy_hcd [ 1482.568287][T25790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.596575][ T24] usb 8-1: device descriptor read/8, error -71 [ 1482.633987][T25066] udevd[25066]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.666085][T15381] usb 2-1: USB disconnect, device number 71 [ 1482.716172][ T24] usb usb8-port1: unable to enumerate USB device [ 1482.902591][ T29] audit: type=1400 audit(1784523272.182:3266): avc: denied { write } for pid=25802 comm="syz.4.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1483.081079][T25809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4807'. [ 1484.913426][ T5703] usb 6-1: USB disconnect, device number 101 [ 1486.425217][T15381] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1486.586886][T15381] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1486.621490][T15381] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.723253][T15381] usb 8-1: config 0 descriptor?? [ 1487.962126][T25838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.981774][T25838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.019210][T15381] ath6kl: Failed to submit usb control message: -71 [ 1488.036880][T15381] ath6kl: unable to send the bmi data to the device: -71 [ 1488.050776][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4819'. [ 1488.068956][T15381] ath6kl: Unable to send get target info: -71 [ 1488.090858][T15381] ath6kl: Failed to init ath6kl core: -71 [ 1488.094668][T25870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1488.101357][T15381] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1488.165064][T15381] usb 8-1: USB disconnect, device number 70 [ 1488.205293][T25870] block device autoloading is deprecated and will be removed. [ 1488.635778][ T5731] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1488.826448][ T5731] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1488.842547][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.895569][ T5731] usb 2-1: config 0 descriptor?? [ 1489.193588][T25895] netlink: 'syz.6.4828': attribute type 1 has an invalid length. [ 1489.276966][T25895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1489.361431][T25900] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1489.373251][ T29] audit: type=1400 audit(1784523278.662:3267): avc: denied { execute } for pid=25897 comm="syz.7.4829" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1489.426547][T25895] vlan0: entered allmulticast mode [ 1489.446172][T25895] veth0_to_bond: entered allmulticast mode [ 1489.459912][T25895] bond4: (slave vlan0): Opening slave failed [ 1489.480020][T25904] overlayfs: failed to resolve './file2': -2 [ 1489.634727][T25905] netlink: 'syz.5.4830': attribute type 49 has an invalid length. [ 1489.767677][ T5842] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1489.939017][ T5842] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1489.947174][T15381] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1489.961953][ T5842] usb 7-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.972854][ T5842] usb 7-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1489.984410][ T5842] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1489.993830][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.015224][ T5842] usb 7-1: Product: syz [ 1490.022671][ T5842] usb 7-1: Manufacturer: syz [ 1490.134098][ T5842] usb 7-1: SerialNumber: syz [ 1490.166238][T25922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4835'. [ 1490.195961][T15381] usb 6-1: Using ep0 maxpacket: 8 [ 1490.481983][T15381] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 1490.511698][T15381] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1490.521023][ T5842] ati_remote2 7-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1490.538428][T15381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.548306][ T5842] usb 7-1: USB disconnect, device number 80 [ 1490.568309][T15381] usb 6-1: Product: syz [ 1490.579718][T15381] usb 6-1: Manufacturer: syz [ 1490.589068][T15381] usb 6-1: SerialNumber: syz [ 1490.702575][T25924] overlay: ./file0 is not a directory [ 1491.350339][T15381] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1491.368051][T15381] usb 6-1: found format II with max.bitrate = 1025, frame size=32767 [ 1491.381771][ T5731] usb 2-1: USB disconnect, device number 72 [ 1491.386378][T15381] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1491.512003][T25935] fuse: Bad value for 'fd' [ 1491.541464][T15381] usb 6-1: USB disconnect, device number 102 [ 1491.640132][T25938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4841'. [ 1491.696818][T24062] udevd[24062]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1491.739130][T25942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25942 comm=syz.6.4841 [ 1492.399498][ T5842] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1492.550876][T15312] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1492.559117][T15381] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1492.572073][ T5842] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1492.587133][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.993455][ T5842] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1493.002854][ T5842] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1493.011049][ T5842] usb 7-1: Manufacturer: syz [ 1493.020095][ T5842] usb 7-1: config 0 descriptor?? [ 1493.057030][T15381] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1493.066194][T15312] usb 5-1: Using ep0 maxpacket: 32 [ 1493.071465][T15381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.084443][T15312] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1493.094908][ T5842] rc_core: IR keymap rc-hauppauge not found [ 1493.102382][T15381] usb 6-1: config 0 descriptor?? [ 1493.110687][ T5842] Registered IR keymap rc-empty [ 1493.118143][T15312] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1493.137126][ T5842] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1493.222899][T15312] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1493.237251][T15312] usb 5-1: Product: syz [ 1493.243155][ T5842] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input146 [ 1493.256401][T15312] usb 5-1: Manufacturer: syz [ 1493.257984][T25959] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1493.261015][T15312] usb 5-1: SerialNumber: syz [ 1493.292836][T25979] fuse: Bad value for 'fd' [ 1493.297159][T15312] usb 5-1: config 0 descriptor?? [ 1493.316559][T25966] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1493.323622][T25959] VFS: Can't find a romfs filesystem on dev nullb0. [ 1493.323622][T25959] [ 1493.834040][T25961] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1493.905731][T25993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.242529][ T24] usb 5-1: USB disconnect, device number 73 [ 1495.279068][ T5731] usb 6-1: USB disconnect, device number 103 [ 1495.543636][T26001] loop5: detected capacity change from 0 to 2641 [ 1495.593107][T26001] Dev loop5: unable to read RDB block 8 [ 1495.598927][T26001] loop5: unable to read partition table [ 1495.604744][T26001] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1495.710634][ T5842] usb 7-1: USB disconnect, device number 81 [ 1495.859152][ T29] audit: type=1400 audit(1784523285.142:3268): avc: denied { read write } for pid=19988 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1495.900147][ T29] audit: type=1400 audit(1784523285.142:3269): avc: denied { open } for pid=19988 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1495.985479][ T29] audit: type=1400 audit(1784523285.142:3270): avc: denied { ioctl } for pid=19988 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1496.042218][T26024] overlayfs: failed to resolve './bus': -2 [ 1496.300739][ T29] audit: type=1400 audit(1784523285.222:3271): avc: denied { module_request } for pid=26015 comm="syz.4.4862" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1496.410634][ T29] audit: type=1400 audit(1784523285.232:3272): avc: denied { read } for pid=26021 comm="syz.7.4863" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1496.441314][ T29] audit: type=1400 audit(1784523285.232:3273): avc: denied { open } for pid=26021 comm="syz.7.4863" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1496.472226][ T29] audit: type=1400 audit(1784523285.242:3274): avc: denied { create } for pid=26021 comm="syz.7.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1496.976518][ T29] audit: type=1400 audit(1784523285.242:3275): avc: denied { shutdown } for pid=26021 comm="syz.7.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1497.043960][ T29] audit: type=1400 audit(1784523285.242:3276): avc: denied { create } for pid=26021 comm="syz.7.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1497.112496][ T29] audit: type=1400 audit(1784523285.242:3277): avc: denied { write } for pid=26021 comm="syz.7.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1497.548983][ T5842] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1497.805873][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 1497.812507][ T5842] usb 5-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 1497.833846][ T5842] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1498.151330][ T5842] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1498.163592][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.172479][ T5842] usb 5-1: Product: syz [ 1498.178138][ T5842] usb 5-1: Manufacturer: syz [ 1498.185698][ T5842] usb 5-1: SerialNumber: syz [ 1499.611097][T26068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1500.278399][T26075] overlayfs: failed to resolve './bus': -2 [ 1501.081101][T26090] ALSA: mixer_oss: invalid OSS volume '' [ 1501.243738][T26067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4876'. [ 1501.298113][ T5731] usb 5-1: USB disconnect, device number 74 [ 1503.542667][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1503.542683][ T29] audit: type=1400 audit(1784523292.822:3327): avc: denied { name_bind } for pid=26116 comm="syz.5.4888" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1503.737731][ T29] audit: type=1400 audit(1784523293.022:3328): avc: denied { create } for pid=26125 comm="syz.1.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1503.891730][T26128] Can't find a SQUASHFS superblock on nullb0 [ 1503.958900][ T29] audit: type=1400 audit(1784523293.162:3329): avc: denied { create } for pid=26123 comm="syz.4.4890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1504.257748][ T29] audit: type=1400 audit(1784523293.172:3330): avc: denied { mounton } for pid=26123 comm="syz.4.4890" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1504.285011][ T29] audit: type=1400 audit(1784523293.272:3331): avc: denied { ioctl } for pid=26125 comm="syz.1.4889" path="socket:[101706]" dev="sockfs" ino=101706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1504.310916][ T29] audit: type=1400 audit(1784523293.272:3332): avc: denied { bind } for pid=26125 comm="syz.1.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1504.337053][ T29] audit: type=1400 audit(1784523293.472:3333): avc: denied { map_create } for pid=26125 comm="syz.1.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1504.357513][T26126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1504.374512][ T29] audit: type=1400 audit(1784523293.472:3334): avc: denied { map_read map_write } for pid=26125 comm="syz.1.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1504.395609][ T29] audit: type=1400 audit(1784523293.572:3335): avc: denied { prog_run } for pid=26125 comm="syz.1.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1504.415023][ T29] audit: type=1400 audit(1784523293.642:3336): avc: denied { setopt } for pid=26125 comm="syz.1.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1504.665436][T15381] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1504.779729][T26141] ALSA: mixer_oss: invalid OSS volume '' [ 1504.915264][T15381] usb 6-1: Using ep0 maxpacket: 32 [ 1505.113504][T15381] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1505.134521][T15381] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1505.144192][T15381] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1505.153539][T15381] usb 6-1: Product: syz [ 1505.159900][T15381] usb 6-1: Manufacturer: syz [ 1505.164585][T15381] usb 6-1: SerialNumber: syz [ 1505.175299][T15381] usb 6-1: config 0 descriptor?? [ 1505.187163][T26132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1505.917461][T26155] Can't find a SQUASHFS superblock on nullb0 [ 1506.262717][T26160] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1506.346459][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.240878][ T5842] usb 6-1: USB disconnect, device number 104 [ 1508.247051][T15312] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 1508.450194][T15312] usb 5-1: device descriptor read/64, error -71 [ 1508.471970][T11247] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1508.569944][T26178] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4905'. [ 1508.650819][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1508.650835][ T29] audit: type=1400 audit(1784523297.932:3371): avc: denied { lock } for pid=26176 comm="syz.6.4905" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1508.715553][ T29] audit: type=1400 audit(1784523297.992:3372): avc: denied { create } for pid=26174 comm="syz.5.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1508.749237][T26181] ALSA: mixer_oss: invalid OSS volume '' [ 1508.776471][T15312] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 1508.794703][ T29] audit: type=1400 audit(1784523298.022:3373): avc: denied { setopt } for pid=26174 comm="syz.5.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1508.866710][T11247] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1508.875721][T11247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.896431][T11247] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1508.905749][T11247] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1508.917225][T11247] usb 2-1: Manufacturer: syz [ 1508.986195][T15312] usb 5-1: device descriptor read/64, error -71 [ 1508.986785][T11247] usb 2-1: config 0 descriptor?? [ 1509.285928][T11247] rc_core: IR keymap rc-hauppauge not found [ 1509.295113][ T29] audit: type=1400 audit(1784523298.572:3374): avc: denied { read write } for pid=26185 comm="syz.5.4908" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1509.323095][T11247] Registered IR keymap rc-empty [ 1509.336434][T11247] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1509.345566][T15312] usb usb5-port1: attempt power cycle [ 1509.354461][T11247] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input147 [ 1509.366385][ T29] audit: type=1400 audit(1784523298.572:3375): avc: denied { open } for pid=26185 comm="syz.5.4908" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1509.448230][T26192] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4908'. [ 1509.520375][ T29] audit: type=1400 audit(1784523298.712:3376): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=6389 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1509.621902][ T29] audit: type=1400 audit(1784523298.712:3377): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=6389 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1509.712855][ T29] audit: type=1400 audit(1784523298.712:3378): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=6389 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1509.784844][T26194] xt_hashlimit: size too large, truncated to 1048576 [ 1509.856710][ T29] audit: type=1400 audit(1784523298.732:3379): avc: denied { create } for pid=26185 comm="syz.5.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1509.989000][ T29] audit: type=1400 audit(1784523298.732:3380): avc: denied { write } for pid=26185 comm="syz.5.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1510.037655][T26197] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1510.045734][T26198] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1510.058677][T26198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.085249][T15312] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 1510.096501][T26198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.105909][T15312] usb 5-1: device descriptor read/8, error -71 [ 1510.108908][T11247] usb 2-1: USB disconnect, device number 73 [ 1510.295235][ T24] usb 8-1: new full-speed USB device number 71 using dummy_hcd [ 1510.446172][T15312] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1510.478078][T15312] usb 5-1: device descriptor read/8, error -71 [ 1510.503198][T26210] SELinux: policydb version 2136920305 does not match my version range 15-35 [ 1510.512226][T26210] SELinux: failed to load policy [ 1510.585427][T15312] usb usb5-port1: unable to enumerate USB device [ 1510.965311][ T24] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1511.115266][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1511.122185][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1511.143413][ T24] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1511.163949][ T24] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1511.268439][ T24] usb 8-1: Product: syz [ 1511.319733][ T24] usb 8-1: Manufacturer: syz [ 1511.342568][ T24] usb 8-1: SerialNumber: syz [ 1511.375413][ T5703] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1511.448467][ T24] usb 8-1: config 0 descriptor?? [ 1511.491953][T26214] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1511.575284][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 1511.589281][ T5703] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1511.603173][ T5703] usb 5-1: config 0 has no interface number 0 [ 1511.614564][ T5703] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1511.666903][ T5703] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1511.739730][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1511.767123][ T5703] usb 5-1: Product: syz [ 1512.734968][ T5703] usb 5-1: SerialNumber: syz [ 1512.945360][ T5703] usb 5-1: config 0 descriptor?? [ 1512.956315][ T5703] cm109 5-1:0.8: invalid payload size 20, expected 4 [ 1512.985030][ T5703] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input148 [ 1513.040096][T26245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.233121][T26249] xt_hashlimit: size too large, truncated to 1048576 [ 1513.377497][T26251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.424371][T26257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1513.501646][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1513.501724][T15312] usb 5-1: USB disconnect, device number 79 [ 1513.508629][ C1] ------------[ cut here ]------------ [ 1513.508641][ C1] URB ffff88802b6d5500 submitted while active [ 1513.508654][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#1: jbd2/sda1-8/4938 [ 1513.508698][ C1] Modules linked in: [ 1513.540844][ C1] CPU: 1 UID: 0 PID: 4938 Comm: jbd2/sda1-8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1513.552163][ C1] Tainted: [L]=SOFTLOCKUP [ 1513.556477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1513.566519][ C1] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 1513.572149][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ae cb 89 fa 48 8d 3d 87 90 af 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 1513.591740][ C1] RSP: 0018:ffffc90000a08b20 EFLAGS: 00010083 [ 1513.597805][ C1] RAX: 0000000000003e45 RBX: ffff88802b6d5500 RCX: ffffc900022a2000 [ 1513.605761][ C1] RDX: 0000000000040000 RSI: ffff88802b6d5500 RDI: ffffffff912fa180 [ 1513.613727][ C1] RBP: ffff888022a8e5c0 R08: 0000000000000001 R09: 0000000000000000 [ 1513.621680][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000083 [ 1513.629633][ C1] R13: ffff88807f52a858 R14: 000000000000000f R15: 0000000000000001 [ 1513.637586][ C1] FS: 0000000000000000(0000) GS:ffff888123ee7000(0000) knlGS:0000000000000000 [ 1513.646499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1513.653079][ C1] CR2: 0000001b342e1ff8 CR3: 00000000410d2000 CR4: 00000000003526f0 [ 1513.661044][ C1] Call Trace: [ 1513.664306][ C1] [ 1513.667141][ C1] cm109_urb_irq_callback+0x473/0xa70 [ 1513.672505][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 1513.677867][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1513.683057][ C1] dummy_timer+0xda1/0x36c0 [ 1513.687555][ C1] ? find_held_lock+0x2b/0x80 [ 1513.692231][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1513.698032][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1513.703662][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1513.709633][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1513.714573][ C1] ? rcu_is_watching+0x12/0xc0 [ 1513.719326][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1513.725144][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1513.730078][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1513.735275][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1513.740379][ C1] handle_softirqs+0x1ea/0x9b0 [ 1513.745130][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1513.750411][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1513.755681][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1513.761313][ C1] ? kernel_fpu_end+0x5f/0x80 [ 1513.765994][ C1] do_softirq+0xac/0xe0 [ 1513.770138][ C1] [ 1513.773067][ C1] [ 1513.775979][ C1] __local_bh_enable_ip+0xf8/0x120 [ 1513.781079][ C1] kernel_fpu_end+0x64/0x80 [ 1513.785572][ C1] crc32c+0x2c4/0x360 [ 1513.789539][ C1] ? jbd2_journal_next_log_block+0xf2/0x170 [ 1513.795430][ C1] jbd2_journal_commit_transaction+0x1818/0x6700 [ 1513.801783][ C1] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1513.808452][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1513.814249][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1513.819887][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1513.825857][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1513.831219][ C1] ? find_held_lock+0x2b/0x80 [ 1513.835897][ C1] ? __try_to_del_timer_sync+0x107/0x160 [ 1513.841537][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1513.847359][ C1] ? __timer_delete_sync+0x151/0x1c0 [ 1513.852643][ C1] kjournald2+0x200/0x760 [ 1513.856981][ C1] ? __pfx_kjournald2+0x10/0x10 [ 1513.861826][ C1] ? find_held_lock+0x2b/0x80 [ 1513.866496][ C1] ? __kthread_parkme+0xbb/0x230 [ 1513.871445][ C1] ? rcu_is_watching+0x12/0xc0 [ 1513.876202][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1513.882262][ C1] ? __kthread_parkme+0x18c/0x230 [ 1513.887278][ C1] ? kthread+0x13a/0x450 [ 1513.891523][ C1] ? __pfx_kjournald2+0x10/0x10 [ 1513.896362][ C1] kthread+0x370/0x450 [ 1513.900423][ C1] ? __pfx_kthread+0x10/0x10 [ 1513.905004][ C1] ret_from_fork+0x72b/0xd50 [ 1513.909585][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1513.914698][ C1] ? __switch_to+0x800/0x10f0 [ 1513.919359][ C1] ? __pfx_kthread+0x10/0x10 [ 1513.923942][ C1] ret_from_fork_asm+0x1a/0x30 [ 1513.928715][ C1] [ 1513.931725][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1513.938988][ C1] CPU: 1 UID: 0 PID: 4938 Comm: jbd2/sda1-8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1513.949907][ C1] Tainted: [L]=SOFTLOCKUP [ 1513.954210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1513.964257][ C1] Call Trace: [ 1513.967519][ C1] [ 1513.970345][ C1] dump_stack_lvl+0x100/0x190 [ 1513.975010][ C1] vpanic+0x552/0x970 [ 1513.978974][ C1] ? __pfx_vpanic+0x10/0x10 [ 1513.983478][ C1] panic+0xd1/0xe0 [ 1513.987182][ C1] ? __pfx_panic+0x10/0x10 [ 1513.991592][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1513.996949][ C1] ? usb_submit_urb+0x1689/0x19b0 [ 1514.001963][ C1] __warn.cold+0x191/0x318 [ 1514.006364][ C1] __report_bug+0x30f/0x440 [ 1514.010852][ C1] ? usb_submit_urb+0x1689/0x19b0 [ 1514.015879][ C1] ? __pfx___report_bug+0x10/0x10 [ 1514.020885][ C1] ? register_lock_class+0x187/0x560 [ 1514.026160][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1514.031432][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1514.036355][ C1] ? kasan_save_stack+0x30/0x50 [ 1514.041192][ C1] report_bug_entry+0xe1/0x290 [ 1514.045937][ C1] ? usb_submit_urb+0x168c/0x19b0 [ 1514.050954][ C1] handle_bug+0x1cd/0x2a0 [ 1514.055268][ C1] exc_invalid_op+0x17/0x50 [ 1514.059761][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1514.064593][ C1] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 1514.070216][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ae cb 89 fa 48 8d 3d 87 90 af 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 1514.089806][ C1] RSP: 0018:ffffc90000a08b20 EFLAGS: 00010083 [ 1514.095859][ C1] RAX: 0000000000003e45 RBX: ffff88802b6d5500 RCX: ffffc900022a2000 [ 1514.103814][ C1] RDX: 0000000000040000 RSI: ffff88802b6d5500 RDI: ffffffff912fa180 [ 1514.111768][ C1] RBP: ffff888022a8e5c0 R08: 0000000000000001 R09: 0000000000000000 [ 1514.119720][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000083 [ 1514.127676][ C1] R13: ffff88807f52a858 R14: 000000000000000f R15: 0000000000000001 [ 1514.135648][ C1] cm109_urb_irq_callback+0x473/0xa70 [ 1514.141023][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 1514.146387][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1514.151578][ C1] dummy_timer+0xda1/0x36c0 [ 1514.156080][ C1] ? find_held_lock+0x2b/0x80 [ 1514.160753][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1514.166551][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1514.172173][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1514.178156][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1514.183084][ C1] ? rcu_is_watching+0x12/0xc0 [ 1514.187837][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1514.193636][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1514.198575][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1514.203773][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1514.208876][ C1] handle_softirqs+0x1ea/0x9b0 [ 1514.213628][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1514.218900][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1514.224186][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1514.229811][ C1] ? kernel_fpu_end+0x5f/0x80 [ 1514.234478][ C1] do_softirq+0xac/0xe0 [ 1514.238631][ C1] [ 1514.241546][ C1] [ 1514.244458][ C1] __local_bh_enable_ip+0xf8/0x120 [ 1514.249561][ C1] kernel_fpu_end+0x64/0x80 [ 1514.254056][ C1] crc32c+0x2c4/0x360 [ 1514.258025][ C1] ? jbd2_journal_next_log_block+0xf2/0x170 [ 1514.263906][ C1] jbd2_journal_commit_transaction+0x1818/0x6700 [ 1514.270239][ C1] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1514.276906][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1514.282704][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1514.288325][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1514.294294][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1514.299655][ C1] ? find_held_lock+0x2b/0x80 [ 1514.304321][ C1] ? __try_to_del_timer_sync+0x107/0x160 [ 1514.309958][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1514.315776][ C1] ? __timer_delete_sync+0x151/0x1c0 [ 1514.321045][ C1] kjournald2+0x200/0x760 [ 1514.325378][ C1] ? __pfx_kjournald2+0x10/0x10 [ 1514.330219][ C1] ? find_held_lock+0x2b/0x80 [ 1514.334883][ C1] ? __kthread_parkme+0xbb/0x230 [ 1514.339808][ C1] ? rcu_is_watching+0x12/0xc0 [ 1514.344564][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1514.350625][ C1] ? __kthread_parkme+0x18c/0x230 [ 1514.355640][ C1] ? kthread+0x13a/0x450 [ 1514.359874][ C1] ? __pfx_kjournald2+0x10/0x10 [ 1514.364812][ C1] kthread+0x370/0x450 [ 1514.368873][ C1] ? __pfx_kthread+0x10/0x10 [ 1514.373454][ C1] ret_from_fork+0x72b/0xd50 [ 1514.378047][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1514.383154][ C1] ? __switch_to+0x800/0x10f0 [ 1514.387815][ C1] ? __pfx_kthread+0x10/0x10 [ 1514.392411][ C1] ret_from_fork_asm+0x1a/0x30 [ 1514.397185][ C1] [ 1514.400388][ C1] Kernel Offset: disabled [ 1514.404692][ C1] Rebooting in 86400 seconds..