last executing test programs: 5m10.876246321s ago: executing program 3 (id=168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r5, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 5m7.289438447s ago: executing program 3 (id=171): socket(0x11, 0xa, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) sendfile(r5, r4, 0x0, 0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x6) recvmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/173, 0xad}], 0x5, &(0x7f0000000840)=""/173, 0xad}, 0x40002000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x19) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x2) socket$unix(0x1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x41c000, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r7, 0x0, 0x32, 0x0, &(0x7f0000000880)) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000040)={0x800, 0x7}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 5m3.495841856s ago: executing program 3 (id=181): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r4, 0x0, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 5m1.619917178s ago: executing program 3 (id=186): socket(0x10, 0x2, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) syz_emit_ethernet(0x5f, &(0x7f0000000680)={@local, @random="7a08240ad356", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x51, 0x67, 0x0, 0x3, 0x67, 0x0, @remote, @broadcast}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38"}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab113288, 0x4}) io_submit(r0, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000480)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100001000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb00000000000200000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb000000000000000040000000000000000000000000000000000000000000000000000004000000000000000000000000f7ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000063500000a0002004000000000000000480003006465666c61746500"], 0x140}}, 0x0) 5m0.70317907s ago: executing program 3 (id=189): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan1\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f0000000280)="54996492857d3ffd0f726b50764382a8778596dc453cfe643fa87571d69cdb039f1e6b982690de721ff15a2e0328"}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r2 = inotify_init1(0x80800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x544, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x50c, 0x2, [@TCA_BASIC_POLICE={0x54, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x470, 0x7fffffffdffffffd, 0xbfc1, 0x7, 0x9, {0x8, 0x0, 0x0, 0x8, 0x1, 0x8}, {0x5, 0x0, 0x2a97, 0x3d, 0x5, 0x9356b6f}, 0x2, 0x1, 0x2}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xa8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x200, 0x4, 0xffff}}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0x9c73, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd, 0x7, 0x2}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x200}, {0x1, 0x81, 0x8, 0x6, 0x1, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0xe5}, {{0x3, 0x0, 0x1}, {0x1}}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0xfffe}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xd}]}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x1ff}}}]}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1000, 0x2, 0x7, 0x1, 0x67, 0x4, 0xb, 0x5, 0x0, 0x0, 0x9, 0x2b, 0x6, 0xfffffff7, 0x1, 0x7, 0x80000001, 0x7f, 0x6, 0x2, 0x9, 0x2, 0x7, 0x62f0, 0x1, 0x4, 0x3, 0x8, 0x2, 0x6, 0x10001, 0x7, 0x9, 0x2, 0x6, 0x803a, 0x7fffffff, 0xfffffffe, 0x8001, 0x7f, 0x4, 0x7, 0x9, 0x8000, 0xc4bc, 0x5, 0x7f6738d1, 0x8, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3, 0xc23e, 0x6, 0x2d, 0xc, 0xfffffff8, 0x6, 0x10001, 0x9086, 0x10000, 0xffffffff, 0x4, 0x4, 0x5, 0xffffffff, 0xffffffff, 0x725, 0x9, 0x6, 0x9b, 0x2, 0x6, 0x5, 0x4, 0xe, 0x1000, 0xffffffff, 0x4, 0xfffffff8, 0xffffbfff, 0x0, 0x7fff, 0x5, 0x400, 0x7, 0x4, 0xc4a5, 0x101, 0x8, 0x81, 0x609ac587, 0x1, 0x40, 0x0, 0x7, 0x6, 0x4, 0x101, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x7a, 0xbcaf, 0x8, 0x5, 0x7ff, 0x1, 0x4e8, 0x1ff, 0x6, 0x6, 0xfffffc8e, 0xee5f, 0x7, 0x40000000, 0x79, 0x48c, 0x0, 0xf4e, 0x2, 0x9, 0x7, 0x8000, 0xfffeffff, 0x2, 0xff, 0x7, 0x4, 0x4f, 0x200, 0x6000, 0x1, 0x8, 0xa41, 0x6, 0x7, 0x0, 0x0, 0xfffff93e, 0x3, 0x4, 0x4, 0x4, 0x8e2, 0x5, 0x32, 0x41, 0x1b, 0x7, 0x129c4ab9, 0x8, 0xfffffc43, 0x0, 0x7, 0x7857822d, 0x2, 0x10000, 0x4, 0x5, 0x9, 0x8000, 0x4, 0x4, 0x3, 0x8, 0x31e4, 0x6, 0x3980, 0x1, 0x7a, 0x6, 0x4182, 0xffff, 0x4, 0xa, 0xfffffff0, 0x9, 0x5, 0x638, 0x9, 0xc13e, 0x7, 0x2, 0xb8a8, 0x4, 0x9, 0x7, 0x6, 0x929, 0x8, 0x6, 0xca, 0xb, 0x0, 0x9, 0x3, 0x52a, 0x4, 0x87, 0x6, 0x80, 0xffff8000, 0xe, 0x1ff, 0x4, 0x6c9, 0x9, 0x3, 0x71, 0x1ff, 0x2a600000, 0x0, 0x7, 0x3, 0x70f, 0x1, 0x1, 0x8001, 0x6, 0xff, 0x9e50, 0xb, 0x0, 0x4, 0x8, 0x1f4, 0x3, 0x7fff, 0x4, 0x2, 0x5, 0xc, 0x7, 0x1, 0xa, 0x8, 0x4, 0xfffffffa, 0x3ff, 0x40, 0x8000000, 0x10, 0x0, 0x3, 0x4, 0xfffffffd, 0x0, 0x5, 0x5, 0x4]}]}]}}]}, 0x544}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) 5m0.269662148s ago: executing program 3 (id=190): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0xe37ec71d62524b12, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000400)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x1517cbdb38fd13d7) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x33, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='generic_add_lease\x00', r6, 0x0, 0x800000000000000}, 0x18) close(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040006e802001800348014403c0076657468315f746f"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRESDEC=r8, @ANYRES64=r4, @ANYRES32=r10, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000040)=0x1f) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r11 = epoll_create1(0x80000) open_by_handle_at(r11, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x400002) 4m59.945711821s ago: executing program 32 (id=190): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0xe37ec71d62524b12, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000400)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x1517cbdb38fd13d7) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x33, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='generic_add_lease\x00', r6, 0x0, 0x800000000000000}, 0x18) close(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040006e802001800348014403c0076657468315f746f"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRESDEC=r8, @ANYRES64=r4, @ANYRES32=r10, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000040)=0x1f) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r11 = epoll_create1(0x80000) open_by_handle_at(r11, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x400002) 3m23.075209442s ago: executing program 0 (id=458): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a0002000000007d50"], 0x20}}, 0x18800) r6 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000008c0)=""/4096) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 3m21.550666839s ago: executing program 0 (id=465): prlimit64(0x0, 0x1, &(0x7f0000000040)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)}}], 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) 3m15.980971692s ago: executing program 0 (id=475): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3m15.035881009s ago: executing program 0 (id=479): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="e3ffffff0000000008001b0000000000"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x22}], 0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m13.361265208s ago: executing program 0 (id=482): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="e625e5e1479260f9ffff44f308060401080006040001aaaaaaaaaaaae0000002bbbb0800000000852734ab446f6b7f1d840000"], 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) (rerun: 64) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) (async, rerun: 32) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) (async) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async, rerun: 32) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) (async, rerun: 32) r4 = socket(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) 3m13.100978317s ago: executing program 0 (id=483): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) fadvise64(r0, 0x978, 0x981, 0x3) 2m57.000317799s ago: executing program 33 (id=483): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) fadvise64(r0, 0x978, 0x981, 0x3) 14.226243298s ago: executing program 5 (id=1025): r0 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd2, 0xe4, 0x2d, 0x20, 0x5fc9, 0x63, 0x3048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd5, 0xaf, 0x53}}]}}]}}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x400000, 0x0, 0xc000, 0x1, 0x0, 0xee01, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x13, 0x4, "e2cd"}]}}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) close_range(r1, 0xffffffffffffffff, 0xc00000000000000) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x1, 0xe5}}, 0x30) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000280)={0x18, 0x4000000, {0x0, @random="0c8f1814e785", 'pimreg\x00'}}) 14.002133959s ago: executing program 2 (id=1026): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet(r2, &(0x7f0000000100)="ab", 0x1a000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) madvise(&(0x7f000046a000/0x4000)=nil, 0x4000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x90) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) kcmp(0x0, 0x0, 0x1, r4, r1) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13.355227807s ago: executing program 6 (id=1027): syz_open_dev$video4linux(&(0x7f0000000080), 0xc, 0x400) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000100092105000022050009058103000200000700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00229900000083"], 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000180)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x1c, 0x4}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r10}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7d, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x2, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x7, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x30e8, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x7, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x3, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x4, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 11.493388258s ago: executing program 2 (id=1032): syz_usb_connect(0x0, 0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="120110038121e940e604915539940102"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a0002000000007d50"], 0x20}}, 0x18800) r6 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000008c0)=""/4096) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 10.818012302s ago: executing program 4 (id=1033): syz_usb_connect(0x0, 0x38, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a0002000000007d50"], 0x20}}, 0x18800) r6 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000008c0)=""/4096) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 10.623576768s ago: executing program 5 (id=1034): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0xa, 0xffff}, {0xfff1, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x452280, 0x0) syz_emit_vhci(&(0x7f0000001240)=ANY=[@ANYBLOB="040e04091a0c03f5c7163c352042c7bd5d6a457e43f2cd762c90e0d1b612d35847f84de9628c01da2c13833b3411fab1eb15523838c4c350ab22a9417e98eb70063da96e540937789c24f37628ad09bff85bde403721debe59ebf060bcac409a69c7a10bfd0706d5cc7425268083ad1bcca8128495a04b25ce30fc21831a5eae068ebbf20e69e196b2b2f6e177f6c0c7"], 0x7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x808000}, 0x8) gettid() read(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 10.028236777s ago: executing program 6 (id=1036): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_gettime(0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 9.615365446s ago: executing program 6 (id=1037): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, 0x0) 9.589815285s ago: executing program 5 (id=1039): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) lseek(r0, 0x1000000, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[], 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f00000002c0)={0x0, 0xf1e6, 0x100, 0x1, 0x322}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x2}) io_uring_enter(r1, 0x47bf, 0xf5, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000003d00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "c1dafd", 0x2}}}, 0xd) 7.175122061s ago: executing program 5 (id=1040): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socket$isdn(0x22, 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x2800048, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x1, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x7, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x2, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x10000, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0x5, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x93de, 0x6, 0xfffffffe, 0x8001, 0x0, 0x3, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x7, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x7, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0xfffffffe, 0x80000067, 0xffffff7e, 0x7, 0xffffffd, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0xffc, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x401, 0x400, 0x40, 0x3, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x81, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x2, 0x2, 0x3, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0xc, 0x2, 0x6, 0x4, 0x5, 0x1, 0x9, 0x6, 0xfffffffa, 0x3, 0x4, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0xc, 0x0, 0x80000000, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x1, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4000004, 0x4, 0x101, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0xfffffffa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x0, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x4fe, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xfffefffd, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x8, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc90, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0x100fff, 0x8, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x100, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x0, 0xfffff5d7, 0xb, 0x1800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x8, 0xfffffe01, 0x1, 0x6, 0x0, 0x7, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8, 0x8, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0xffff, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x8, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x9, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x7, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x2, 0x4, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x4000009, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x26bc, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xf90, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xd, 0x1, 0x7, 0x9, 0x1, 0x6, 0x1, 0xff, 0x2100, 0x4, 0x2, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348b, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x417f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0x1000000e, 0x40000005, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xa2ab, 0xf28c, 0x30, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x2, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0x69f0, 0x0, 0xfff, 0x809, 0x6, 0x2, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x99, 0x1, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x2005, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7ffb, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x51, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x3, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 7.173081916s ago: executing program 4 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) prlimit64(0x0, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="e3ffffff0000000008001b0000000000"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x22}], 0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.044596522s ago: executing program 6 (id=1042): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a0002000000007d50"], 0x20}}, 0x18800) r6 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000008c0)=""/4096) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 6.877607063s ago: executing program 2 (id=1044): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)) clock_gettime(0x6, &(0x7f0000000000)) 6.340979779s ago: executing program 5 (id=1045): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) set_mempolicy(0x2, &(0x7f0000000140)=0x8, 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0xa, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sysinfo(&(0x7f0000000000)=""/196) r4 = socket(0x11, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000380)={&(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0x2}}, 0x80, 0x0}, 0x54c98c283c2f347e) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r2, &(0x7f00000098c0), 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r8, &(0x7f0000001640)=[{&(0x7f0000000140)=""/249, 0xf9}], 0x1) preadv(r7, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 5.608400786s ago: executing program 2 (id=1046): socket(0x11, 0xa, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) sendfile(r5, r4, 0x0, 0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x6) recvmsg$can_bcm(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/173, 0xad}], 0x5, &(0x7f0000000840)=""/173, 0xad}, 0x40002000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x19) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x2) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x41c000, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r8, 0x0, 0x32, 0x0, &(0x7f0000000880)) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r9, 0x4008f50a, &(0x7f0000000040)={0x800, 0x7}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 5.027483686s ago: executing program 4 (id=1047): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) socket(0x2, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xda53, 0x0, 0x3, 0xffffdf00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000200)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x400) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000040)={0x0, 0x0, 0xc12, 0x0, 0x2}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000280)) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x1b8, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x1a4, 0x1, [@m_tunnel_key={0x1a0, 0x1, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x1000, 0x0, 0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffef16, 0xfffffff7, 0x5, 0x6, 0x200}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x11c, 0x6, "27524e2580634fc64452994c61aadb9f66136b4d1e987433e8be26e874c82bd3565c0038b655ef7d501ed35779020e07ca2597d39f486a08f0867579a4efd006bfa10e6cf5f0c2986d5ed46689216b5a79b5372a392040914c0549182aeedc253239aaff14eeebcef1046b3082980c30b2272ed937b4a538c66f694139bad3f76d260d33d241acf615d59f564e815ef2a8539921d562a08ef50601c11d4cc2cc64a6584cd7232d6df5ccb71586e6f412f6fb332c17611f076ef26b27e69725ba224c346d1d21af7cba50eb8c647b1781f972b8e4b407772aa4bdb77ea07787872d97e568f4341ba0be5e997d5997af7fe5d2be94d107b726fabe90f77d7e5e46baebbe6eedf796db41a474f376697f4703e556f950a5cb90"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1b8}}, 0x0) pipe(&(0x7f0000000100)) 4.166188164s ago: executing program 4 (id=1049): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_gettime(0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.146330495s ago: executing program 6 (id=1050): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000f40)={'syz_tun\x00', 0x2c0f}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x196, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x2}, 0x1c) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f0000000140)={0x11, "03b6fd853ff9080ef36c2bd4e33982e235c9bf5f6e38f2d4315684f0a42a645872"}}) write$sndseq(r4, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0xfffffffa, 0x2}}, {0x0, 0x0, 0x80, 0x3, @tick=0xf27, {0x0, 0x32}, {}, @raw32={[0x8, 0x5, 0xce000000]}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x1, 0x1, 0xf, 0x0, 0x14a, 0x0}) 4.061744634s ago: executing program 4 (id=1051): syz_usb_connect(0x0, 0x38, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a0002000000007d50"], 0x20}}, 0x18800) r6 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000008c0)=""/4096) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 3.327106071s ago: executing program 1 (id=1052): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000300)=ANY=[]) 3.322767581s ago: executing program 2 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x22}], 0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.543036073s ago: executing program 5 (id=1054): syz_usb_connect(0x0, 0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="120110038121e940e604915539940102"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a0002000000007d50"], 0x20}}, 0x18800) r6 = msgget$private(0x0, 0x20) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000008c0)=""/4096) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 2.379349716s ago: executing program 1 (id=1055): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x3a, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) 1.792675421s ago: executing program 2 (id=1056): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcac, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0), 0x0, 0x1e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "ceeaf83cbb825f50", "bd14060000000000400092f94413582b", "02001000", "4e67cb72f328ac2f"}, 0x28) io_uring_enter(r3, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 1.406081722s ago: executing program 1 (id=1057): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d10, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xd00, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 694.436674ms ago: executing program 4 (id=1058): mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1b2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x100) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) r3 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83) ftruncate(r4, 0x3000000) sendfile(r3, r4, 0x0, 0x80000001) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000dc624666416515540182"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x2000006, 0x10003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000003c0)={0x90000, 0x0, {[0x2000000000000005, 0x5dfc, 0x100000000, 0x7fff, 0x4, 0x5, 0x19c, 0xde]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rename(0x0, &(0x7f0000000080)='./file0\x00') r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 653.522046ms ago: executing program 6 (id=1059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x22}], 0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 352.410842ms ago: executing program 1 (id=1060): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) socket(0x2, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xda53, 0x0, 0x3, 0xffffdf00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000200)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x400) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000040)={0x0, 0x0, 0xc12, 0x0, 0x2}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000280)) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x1b8, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x1a4, 0x1, [@m_tunnel_key={0x1a0, 0x1, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x1000, 0x0, 0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffef16, 0xfffffff7, 0x5, 0x6, 0x200}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x11c, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1b8}}, 0x0) pipe(&(0x7f0000000100)) 67.787489ms ago: executing program 1 (id=1061): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_gettime(0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 1 (id=1062): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x20202, 0x200, 0x2, {0x2, @pix={0x6695, 0x2, 0x3247504d, 0x8, 0x5ffffe, 0xfffffff3, 0x4, 0x983e, 0x0, 0x3, 0x1, 0x3}}, 0x9}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40042, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000001280)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',grou', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0xfffffefb, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): 91, bcdDevice=94.39 [ 283.192728][ T3094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.200861][ T3094] usb 2-1: Product: syz [ 283.205401][ T3094] usb 2-1: Manufacturer: syz [ 283.210080][ T3094] usb 2-1: SerialNumber: syz [ 283.222571][ T3094] usb 2-1: config 0 descriptor?? [ 283.232040][ T3094] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 283.243350][ T5813] usb 7-1: unable to get BOS descriptor or descriptor too short [ 283.255562][ T5813] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.270783][ T5813] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 283.281047][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.290614][ T5813] usb 7-1: Product: syz [ 283.295228][ T5813] usb 7-1: Manufacturer: syz [ 283.299882][ T5813] usb 7-1: SerialNumber: syz [ 283.314646][ T5813] usb 7-1: config 0 descriptor?? [ 283.325147][ T5813] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 284.643600][ T8386] vlan0: entered promiscuous mode [ 284.814234][ T5816] Bluetooth: hci5: command 0x041b tx timeout [ 285.605050][ T3094] usb 5-1: USB disconnect, device number 24 [ 285.872919][ T5858] usb 2-1: USB disconnect, device number 22 [ 286.074183][ T3094] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 286.271185][ T5813] usb 7-1: USB disconnect, device number 2 [ 286.310406][ T3094] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.342708][ T3094] usb 5-1: config 0 has no interface number 0 [ 286.373976][ T3094] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 286.424177][ T6120] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 286.454428][ T3094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.475337][ T3094] usb 5-1: config 0 descriptor?? [ 286.489434][ T3094] usb 5-1: selecting invalid altsetting 1 [ 286.507621][ T3094] dvb_ttusb_budget: ttusb_init_controller: error [ 286.533462][ T3094] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 286.596269][ T6120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.644877][ T3094] DVB: Unable to find symbol cx22700_attach() [ 286.645667][ T6120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.675968][ T6120] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 286.687512][ T6120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.731380][ T6120] usb 2-1: Product: syz [ 286.770220][ T6120] usb 2-1: Manufacturer: syz [ 286.873112][ T6120] usb 2-1: SerialNumber: syz [ 286.875287][ T3094] DVB: Unable to find symbol tda10046_attach() [ 286.892491][ T6120] usb 2-1: config 0 descriptor?? [ 286.893228][ T3094] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 286.904289][ T5820] Bluetooth: hci5: command 0x041b tx timeout [ 287.378638][ T3094] usb 5-1: USB disconnect, device number 25 [ 287.379140][ T6120] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 287.420992][ T30] audit: type=1400 audit(1762942148.859:860): avc: denied { getopt } for pid=8418 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.484808][ T8410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.492341][ T8410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.499039][ T8410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.505387][ T8410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 287.841494][ T8424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.848059][ T8424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.854406][ T8424] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.301648][ T5858] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.311415][ T8424] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.544848][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 288.589886][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.614157][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.760843][ T5858] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 288.822515][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.934993][ T5858] usb 3-1: config 0 descriptor?? [ 290.104245][ T8442] bridge1: entered promiscuous mode [ 290.109523][ T8442] bridge1: entered allmulticast mode [ 290.167353][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.173441][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.179611][ T5820] Bluetooth: hci4: command 0x0419 tx timeout [ 290.323878][ T5877] usb 2-1: USB disconnect, device number 23 [ 290.333659][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.344137][ T5820] Bluetooth: hci5: command 0x041b tx timeout [ 290.421273][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.452786][ T5858] usbhid 3-1:0.0: can't add hid device: -71 [ 290.459327][ T5858] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 290.479628][ T5858] usb 3-1: USB disconnect, device number 17 [ 290.804347][ T5877] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 290.884392][ T5929] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 290.899316][ T8457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.905717][ T8457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.913011][ T8457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.922116][ T8457] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 290.954618][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 290.969746][ T5877] usb 2-1: config 3 has an invalid descriptor of length 141, skipping remainder of the config [ 290.980695][ T5877] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 291.111318][ T5877] usb 2-1: New USB device found, idVendor=5b44, idProduct=d65a, bcdDevice= e.bf [ 291.116156][ T5929] usb 7-1: unable to get BOS descriptor or descriptor too short [ 291.129464][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.143608][ T5929] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 291.153779][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.162872][ T5929] usb 7-1: Product: syz [ 291.168072][ T5929] usb 7-1: Manufacturer: syz [ 291.171929][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.173044][ T5929] usb 7-1: SerialNumber: syz [ 291.299987][ T5929] usb 7-1: config 0 descriptor?? [ 291.311352][ T5929] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 291.680331][ T5877] usb 2-1: Product: syz [ 291.688222][ T5877] usb 2-1: Manufacturer: syz [ 291.693001][ T5877] usb 2-1: SerialNumber: syz [ 291.782339][ T56] block nbd0: Possible stuck request ffff888026085080: control (read@0,4096B). Runtime 150 seconds [ 291.936551][ T5877] usb 2-1: USB disconnect, device number 24 [ 292.059518][ T30] audit: type=1400 audit(1762942153.499:861): avc: denied { mounton } for pid=8480 comm="syz.2.584" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.304911][ T8484] ntfs3(nullb0): Primary boot signature is not NTFS. [ 292.314295][ T8484] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 292.381786][ T30] audit: type=1400 audit(1762942153.729:862): avc: denied { mounton } for pid=8480 comm="syz.2.584" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 292.814106][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 292.980234][ T5820] Bluetooth: hci4: command 0x0419 tx timeout [ 292.980584][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 292.992635][ T5829] Bluetooth: hci5: command 0x041b tx timeout [ 293.304271][ T5813] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 293.467034][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 293.501373][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.528224][ T5813] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 293.645547][ T8488] binder: BINDER_SET_CONTEXT_MGR already set [ 293.651538][ T8488] binder: 8487:8488 ioctl 4018620d 200000000040 returned -16 [ 293.681552][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.698901][ T5813] usb 5-1: Product: syz [ 293.703561][ T5813] usb 5-1: Manufacturer: syz [ 293.710025][ T5813] usb 5-1: SerialNumber: syz [ 293.747941][ T8500] sctp: [Deprecated]: syz.2.588 (pid 8500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.747941][ T8500] Use struct sctp_sack_info instead [ 293.814918][ T5813] usb 5-1: config 0 descriptor?? [ 294.106503][ T5813] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 295.003463][ T5813] usb 7-1: USB disconnect, device number 3 [ 295.012156][ T30] audit: type=1400 audit(1762942156.439:863): avc: denied { create } for pid=8506 comm="syz.5.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 295.057379][ T5829] Bluetooth: hci5: command 0x041b tx timeout [ 296.127937][ T5813] usb 5-1: USB disconnect, device number 26 [ 296.893204][ T30] audit: type=1400 audit(1762942158.329:864): avc: denied { setopt } for pid=8539 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.913011][ T5858] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 296.922653][ T30] audit: type=1400 audit(1762942158.339:865): avc: denied { bind } for pid=8539 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.044231][ T5870] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 297.064134][ T5858] usb 6-1: Invalid ep0 maxpacket: 64 [ 297.185966][ T5829] Bluetooth: hci5: command 0x041b tx timeout [ 297.194281][ T5858] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 297.214910][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 297.241051][ T5870] usb 3-1: config 3 has an invalid descriptor of length 141, skipping remainder of the config [ 297.265491][ T5877] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 297.281301][ T5870] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 297.312701][ T5870] usb 3-1: New USB device found, idVendor=5b44, idProduct=d65a, bcdDevice= e.bf [ 297.322221][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.330316][ T5870] usb 3-1: Product: syz [ 297.334729][ T5870] usb 3-1: Manufacturer: syz [ 297.339334][ T5870] usb 3-1: SerialNumber: syz [ 297.384361][ T5858] usb 6-1: Invalid ep0 maxpacket: 64 [ 297.390936][ T5858] usb usb6-port1: attempt power cycle [ 297.412837][ T30] audit: type=1804 audit(1762942158.849:866): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.599" name="/newroot/9/file1" dev="fuse" ino=1 res=1 errno=0 [ 297.503793][ T8543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.513712][ T8543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.562356][ T5877] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 297.582623][ T5870] usb 3-1: USB disconnect, device number 18 [ 297.591016][ T8543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 297.599970][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 297.618469][ T5877] usb 2-1: Product: syz [ 297.622696][ T8543] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 297.630379][ T5877] usb 2-1: Manufacturer: syz [ 297.636136][ T5877] usb 2-1: SerialNumber: syz [ 297.670464][ T5877] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 297.744625][ T5858] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 297.784993][ T5858] usb 6-1: Invalid ep0 maxpacket: 64 [ 297.917074][ T5858] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 297.945612][ T5858] usb 6-1: Invalid ep0 maxpacket: 64 [ 297.952161][ T5858] usb usb6-port1: unable to enumerate USB device [ 298.077089][ T5877] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 298.094241][ T5877] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 298.297496][ T5877] usb 2-1: USB disconnect, device number 25 [ 298.469199][ T5813] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 300.055125][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.061892][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.068022][ T5829] Bluetooth: hci4: command 0x0419 tx timeout [ 300.069670][ T5820] Bluetooth: hci5: command 0x041b tx timeout [ 300.712711][ T8596] sctp: [Deprecated]: syz.6.612 (pid 8596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.712711][ T8596] Use struct sctp_sack_info instead [ 301.118799][ T30] audit: type=1400 audit(1762942162.559:867): avc: denied { block_suspend } for pid=8592 comm="syz.4.613" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.165071][ T30] audit: type=1400 audit(1762942162.599:868): avc: denied { write } for pid=8598 comm="" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 301.251242][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 301.263859][ T5813] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 301.284141][ T5813] usb 3-1: can't read configurations, error -71 [ 302.150757][ T8595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.156948][ T8595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.163145][ T8595] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.170058][ T8595] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 302.774400][ T6120] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 302.811696][ T30] audit: type=1400 audit(1762942164.239:869): avc: denied { ioctl } for pid=8614 comm="syz.1.619" path="socket:[23663]" dev="sockfs" ino=23663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.350548][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 303.404271][ T6120] usb 7-1: Using ep0 maxpacket: 32 [ 303.424163][ T6120] usb 7-1: config 3 has an invalid descriptor of length 141, skipping remainder of the config [ 303.464639][ T6120] usb 7-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 303.542962][ T6120] usb 7-1: New USB device found, idVendor=5b44, idProduct=d65a, bcdDevice= e.bf [ 303.567357][ T6120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.934498][ T5870] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 303.946534][ T6120] usb 7-1: Product: syz [ 303.951086][ T6120] usb 7-1: Manufacturer: syz [ 303.956445][ T6120] usb 7-1: SerialNumber: syz [ 304.171025][ T6120] usb 7-1: USB disconnect, device number 4 [ 304.183891][ T5816] Bluetooth: hci5: command 0x041b tx timeout [ 304.183907][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 304.183942][ T5829] Bluetooth: hci4: command 0x0419 tx timeout [ 304.222984][ T5870] usb 2-1: config index 0 descriptor too short (expected 45925, got 18) [ 304.259018][ T5813] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 304.266835][ T5870] usb 2-1: config 0 has too many interfaces: 83, using maximum allowed: 32 [ 304.295635][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.330963][ T5870] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 83 [ 304.369380][ T5870] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 304.455260][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.456194][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.486181][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.499621][ T5813] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 304.512885][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.533193][ T5813] usb 5-1: Product: syz [ 304.553035][ T5813] usb 5-1: Manufacturer: syz [ 304.553632][ T5870] usb 2-1: Product: syz [ 304.573445][ T5813] usb 5-1: SerialNumber: syz [ 304.590116][ T5813] usb 5-1: config 0 descriptor?? [ 304.605615][ T5813] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 304.711735][ T5870] usb 2-1: Manufacturer: syz [ 304.728335][ T30] audit: type=1326 audit(1762942166.169:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4318f6c9 code=0x7ffc0000 [ 304.808170][ T8639] ======================================================= [ 304.808170][ T8639] WARNING: The mand mount option has been deprecated and [ 304.808170][ T8639] and is ignored by this kernel. Remove the mand [ 304.808170][ T8639] option from the mount to silence this warning. [ 304.808170][ T8639] ======================================================= [ 304.854411][ T30] audit: type=1326 audit(1762942166.169:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4318f6c9 code=0x7ffc0000 [ 305.020709][ T5870] usb 2-1: SerialNumber: syz [ 305.133579][ T30] audit: type=1326 audit(1762942166.169:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7faa4318f6c9 code=0x7ffc0000 [ 305.134649][ T5870] usb 2-1: config 0 descriptor?? [ 305.160977][ T30] audit: type=1326 audit(1762942166.169:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4318f6c9 code=0x7ffc0000 [ 305.267163][ T30] audit: type=1326 audit(1762942166.169:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4318f6c9 code=0x7ffc0000 [ 305.321976][ T30] audit: type=1326 audit(1762942166.189:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7faa4318f6c9 code=0x7ffc0000 [ 305.345232][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.949267][ T30] audit: type=1326 audit(1762942166.189:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4318f6c9 code=0x7ffc0000 [ 306.073609][ T5870] usb 2-1: can't set config #0, error -71 [ 306.096219][ T5870] usb 2-1: USB disconnect, device number 26 [ 306.200811][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 306.200821][ T30] audit: type=1400 audit(1762942167.639:888): avc: denied { unmount } for pid=6760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 306.227363][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.260113][ T5820] Bluetooth: hci5: command 0x041b tx timeout [ 306.364143][ T5929] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 306.450138][ T5870] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 306.534212][ T5813] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 306.545669][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.556741][ T5929] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 306.569344][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.583635][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.597061][ T5929] usb 3-1: Product: syz [ 306.610300][ T5929] usb 3-1: Manufacturer: syz [ 306.617219][ T5929] usb 3-1: SerialNumber: syz [ 306.735642][ T5813] usb 6-1: Using ep0 maxpacket: 32 [ 306.758828][ T5813] usb 6-1: config 0 has an invalid interface number: 72 but max is 16 [ 307.226526][ T5813] usb 6-1: config 0 has an invalid interface number: 173 but max is 16 [ 307.235893][ T42] usb 5-1: USB disconnect, device number 27 [ 307.250622][ T5813] usb 6-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 307.278420][ T5929] cdc_mbim 3-1:1.0: skipping garbage [ 307.311881][ T5813] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 17 [ 307.325414][ T5813] usb 6-1: config 0 has no interface number 0 [ 307.376271][ T5813] usb 6-1: config 0 has no interface number 1 [ 307.415583][ T5813] usb 6-1: config 0 interface 72 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.448950][ T5813] usb 6-1: too many endpoints for config 0 interface 173 altsetting 229: 45, using maximum allowed: 30 [ 307.489952][ T8641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.505782][ T5813] usb 6-1: config 0 interface 173 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 307.548417][ T5813] usb 6-1: config 0 interface 72 has no altsetting 0 [ 307.560585][ T5813] usb 6-1: config 0 interface 173 has no altsetting 0 [ 307.588936][ T5813] usb 6-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 307.598623][ T5813] usb 6-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 307.608383][ T5813] usb 6-1: Product: syz [ 307.625874][ T8664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.631852][ T5813] usb 6-1: Manufacturer: syz [ 307.646894][ T5813] usb 6-1: SerialNumber: syz [ 307.692935][ T8664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.712967][ T8664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.727398][ T8664] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 307.767715][ T5813] usb 6-1: config 0 descriptor?? [ 308.030778][ T5813] usb 6-1: USB disconnect, device number 21 [ 308.539512][ T8641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.567031][ T5929] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 309.397145][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.413762][ T5870] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 309.427180][ T5870] usb 2-1: can't read configurations, error -71 [ 309.464367][ T42] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 309.618325][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.624090][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 309.630683][ T42] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 309.638867][ T42] usb 7-1: config 0 has no interface number 0 [ 309.695028][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.704396][ T42] usb 7-1: config 0 interface 2 has no altsetting 0 [ 309.718233][ T42] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 309.740252][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.763155][ T5929] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 309.774620][ T5829] Bluetooth: hci4: command 0x0419 tx timeout [ 309.774628][ T5814] Bluetooth: hci5: command 0x041b tx timeout [ 309.795896][ T42] usb 7-1: Product: syz [ 309.813992][ T5929] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 309.824198][ T5813] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 309.831927][ T42] usb 7-1: Manufacturer: syz [ 309.858248][ T42] usb 7-1: SerialNumber: syz [ 309.887796][ T42] usb 7-1: config 0 descriptor?? [ 309.910076][ T5929] wwan wwan0: port wwan0mbim0 attached [ 310.033372][ T5929] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, a6:fa:98:64:24:04 [ 310.044150][ T5813] usb 6-1: Using ep0 maxpacket: 32 [ 310.051515][ T5813] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 310.071749][ T5929] usb 3-1: USB disconnect, device number 21 [ 310.080756][ T5813] usb 6-1: config 0 has no interface number 0 [ 310.093986][ T5929] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 310.097041][ T5813] usb 6-1: config 0 interface 2 has no altsetting 0 [ 310.204931][ T5813] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 310.215942][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.225946][ T5813] usb 6-1: Product: syz [ 310.266369][ T5929] wwan wwan0: port wwan0mbim0 disconnected [ 310.278044][ T5813] usb 6-1: Manufacturer: syz [ 310.289561][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.344975][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.374712][ T5813] usb 6-1: SerialNumber: syz [ 310.391894][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.480468][ T5813] usb 6-1: config 0 descriptor?? [ 310.555294][ T42] usb 7-1: USB disconnect, device number 5 [ 310.754581][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.816438][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.873026][ T5813] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.100883][ T5813] usb 6-1: USB disconnect, device number 22 [ 311.278025][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 311.302061][ T8702] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 311.491133][ T8706] sch_fq: defrate 4294967295 ignored. [ 311.867603][ T5820] Bluetooth: hci5: command 0x041b tx timeout [ 311.964203][ T5813] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 312.195764][ T5813] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 312.211883][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.233645][ T5813] usb 3-1: config 0 has no interface number 0 [ 312.241512][ T5813] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 312.258460][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.314124][ T5858] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 312.360419][ T5813] usb 3-1: config 0 descriptor?? [ 314.055602][ T8739] sctp: [Deprecated]: syz.4.648 (pid 8739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.055602][ T8739] Use struct sctp_sack_info instead [ 314.606065][ T5877] usb 3-1: USB disconnect, device number 22 [ 314.887285][ T8756] sctp: [Deprecated]: syz.1.652 (pid 8756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.887285][ T8756] Use struct sctp_sack_info instead [ 315.256242][ T5858] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.274426][ T5858] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 315.283097][ T5858] usb 6-1: can't read configurations, error -71 [ 315.654279][ T8760] sp0: Synchronizing with TNC [ 315.690673][ T30] audit: type=1400 audit(1762942177.119:889): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.754119][ T5858] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 315.845540][ T30] audit: type=1400 audit(1762942177.119:890): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.928779][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 315.955714][ T5858] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.965508][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.984222][ T30] audit: type=1400 audit(1762942177.119:891): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.054918][ T5858] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 316.064241][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.075750][ T30] audit: type=1400 audit(1762942177.119:892): avc: denied { read } for pid=5480 comm="dhcpcd" name="n106" dev="tmpfs" ino=4135 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.097789][ T5858] usb 6-1: Product: syz [ 316.112938][ T5858] usb 6-1: Manufacturer: syz [ 316.124198][ T5858] usb 6-1: SerialNumber: syz [ 316.138673][ T5858] usb 6-1: config 0 descriptor?? [ 316.154814][ T30] audit: type=1400 audit(1762942177.119:893): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=4135 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.155837][ T5858] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 316.187705][ T30] audit: type=1400 audit(1762942177.129:894): avc: denied { ioctl } for pid=8759 comm="syz.6.655" path="socket:[24270]" dev="sockfs" ino=24270 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 316.247905][ T30] audit: type=1400 audit(1762942177.129:895): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=4135 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.742265][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.748641][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.538458][ T30] audit: type=1400 audit(1762942178.969:896): avc: denied { map } for pid=8787 comm="syz.4.661" path="socket:[24383]" dev="sockfs" ino=24383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.539265][ T8789] veth1_to_bond: entered allmulticast mode [ 317.617256][ T8789] veth1_to_bond: left allmulticast mode [ 317.652087][ T30] audit: type=1400 audit(1762942178.969:897): avc: denied { read } for pid=8787 comm="syz.4.661" path="socket:[24383]" dev="sockfs" ino=24383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.660224][ T8796] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 317.686971][ T8796] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 317.696500][ T8797] 9pnet_fd: Insufficient options for proto=fd [ 317.703245][ T8796] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 317.713738][ T8796] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 317.759126][ T30] audit: type=1400 audit(1762942178.979:898): avc: denied { write } for pid=8787 comm="syz.4.661" path="socket:[24382]" dev="sockfs" ino=24382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 318.028170][ T8802] sctp: [Deprecated]: syz.1.665 (pid 8802) Use of int in max_burst socket option. [ 318.028170][ T8802] Use struct sctp_assoc_value instead [ 318.622985][ T42] usb 6-1: USB disconnect, device number 24 [ 318.670565][ T8811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.678838][ T8811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.685549][ T8811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 318.694128][ T8811] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 318.974503][ T5813] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 319.141644][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.227467][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.304436][ T42] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 319.508297][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.520037][ T42] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 319.530014][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.542142][ T42] usb 6-1: config 0 descriptor?? [ 319.551583][ T5813] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 319.564109][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.575361][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 319.584508][ T5813] usb 2-1: Product: syz [ 319.589404][ T5813] usb 2-1: Manufacturer: syz [ 319.594309][ T5813] usb 2-1: SerialNumber: syz [ 319.606705][ T5813] usb 2-1: config 0 descriptor?? [ 319.624853][ T5813] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 319.934197][ T5870] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 320.714128][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.726009][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 320.740195][ T5829] Bluetooth: hci5: command 0x041b tx timeout [ 320.747245][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 320.747818][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.753419][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 320.767391][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 320.775484][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 320.914559][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 320.923751][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 320.931721][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 320.938358][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 320.938974][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 320.952198][ T42] pwc: recv_control_msg error -32 req 04 val 1500 [ 320.956258][ T5870] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 321.043046][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.059038][ T5870] usb 7-1: config 0 descriptor?? [ 321.075670][ T5870] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 321.709347][ T5870] gspca_nw80x: reg_w err -110 [ 321.722176][ T5870] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 321.740089][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 321.753056][ T5858] usb 2-1: USB disconnect, device number 29 [ 321.776982][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 321.798138][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 321.831070][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 321.858551][ T56] block nbd0: Possible stuck request ffff888026085080: control (read@0,4096B). Runtime 180 seconds [ 321.985089][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.012306][ T42] pwc: Registered as video103. [ 322.017975][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 322.046611][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 322.046626][ T30] audit: type=1400 audit(1762942183.489:904): avc: denied { call } for pid=8837 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 322.306911][ T42] usb 6-1: USB disconnect, device number 25 [ 322.816998][ T30] audit: type=1400 audit(1762942184.259:905): avc: denied { write } for pid=8850 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.817815][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 322.894609][ T30] audit: type=1400 audit(1762942184.259:906): avc: denied { bind } for pid=8850 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 323.027037][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 323.291332][ T30] audit: type=1400 audit(1762942184.729:907): avc: denied { execute } for pid=8850 comm="syz.5.676" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 323.347136][ T30] audit: type=1400 audit(1762942184.759:908): avc: denied { setopt } for pid=8850 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 323.424185][ T5858] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 323.580326][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 323.587977][ T5858] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 323.596905][ T5858] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.618547][ T30] audit: type=1400 audit(1762942185.039:909): avc: denied { append } for pid=8861 comm="syz.2.680" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.642671][ T5858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.734257][ T5858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.776669][ T5858] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.232324][ T5858] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 324.248858][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.603493][ T8870] sctp: [Deprecated]: syz.5.682 (pid 8870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.603493][ T8870] Use struct sctp_sack_info instead [ 324.971301][ T8859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.679'. [ 324.988690][ T5858] usb 5-1: usb_control_msg returned -32 [ 324.998596][ T5870] usb 7-1: USB disconnect, device number 6 [ 325.017808][ T5858] usbtmc 5-1:16.0: can't read capabilities [ 325.312899][ T8874] sctp: [Deprecated]: syz.6.684 (pid 8874) Use of int in max_burst socket option. [ 325.312899][ T8874] Use struct sctp_assoc_value instead [ 325.501133][ T8878] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 325.647514][ T5813] usb 5-1: USB disconnect, device number 28 [ 326.163694][ T42] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 326.185875][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.687'. [ 326.395861][ T5929] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 326.497700][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.508326][ T42] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 326.519843][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.542987][ T42] usb 3-1: config 0 descriptor?? [ 326.552915][ T42] usb 3-1: bad CDC descriptors [ 326.565436][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.579501][ T5929] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 326.591128][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.612485][ T5929] usb 6-1: config 0 descriptor?? [ 326.624380][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 326.724194][ T5813] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 326.753020][ T42] usb 3-1: USB disconnect, device number 23 [ 326.885589][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.898086][ T5813] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 326.907517][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.919463][ T5813] usb 5-1: config 0 descriptor?? [ 326.930468][ T5813] pwc: Askey VC010 type 2 USB webcam detected. [ 327.026641][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 327.048286][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 327.056529][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 327.065675][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 327.072692][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 327.081248][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 327.089267][ T5929] pwc: recv_control_msg error -32 req 02 val 2000 [ 327.099451][ T5929] pwc: recv_control_msg error -32 req 02 val 2100 [ 327.107740][ T5929] pwc: recv_control_msg error -32 req 04 val 1500 [ 327.399368][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 327.482478][ T5870] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 327.959066][ T5813] pwc: recv_control_msg error -32 req 02 val 2700 [ 327.965617][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 327.970993][ T30] audit: type=1400 audit(1762942189.409:910): avc: denied { accept } for pid=8904 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 328.002715][ T5813] pwc: recv_control_msg error -32 req 02 val 2c00 [ 328.009361][ T30] audit: type=1400 audit(1762942189.449:911): avc: denied { listen } for pid=8904 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 328.012330][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 328.051655][ T5813] pwc: recv_control_msg error -32 req 04 val 1000 [ 328.076759][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 328.137029][ T5813] pwc: recv_control_msg error -32 req 04 val 1300 [ 328.152590][ T5870] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.169028][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 328.177998][ T5870] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 328.184135][ T5813] pwc: recv_control_msg error -32 req 04 val 1400 [ 328.192879][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.201502][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 328.202718][ T5929] pwc: Registered as video103. [ 328.218423][ T5813] pwc: recv_control_msg error -32 req 02 val 2000 [ 328.233193][ T5813] pwc: recv_control_msg error -32 req 02 val 2100 [ 328.257248][ T5813] pwc: recv_control_msg error -32 req 04 val 1500 [ 328.371361][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 328.371807][ T5870] usb 7-1: config 0 descriptor?? [ 328.400083][ T5870] ttusbir 7-1:0.0: cannot find expected altsetting [ 328.954428][ T5929] usb 6-1: USB disconnect, device number 26 [ 328.981125][ T8918] fuse: Unknown parameter '' [ 329.366137][ T5813] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.402962][ T5813] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.434623][ T5813] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.458793][ T5813] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.467067][ T5813] pwc: recv_control_msg error -71 req 04 val 1200 [ 329.480720][ T5813] pwc: Registered as video103. [ 329.507308][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 329.525794][ T5813] usb 5-1: USB disconnect, device number 29 [ 330.403552][ T30] audit: type=1400 audit(1762942191.709:912): avc: denied { write } for pid=8925 comm="syz.1.698" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 330.449785][ T5858] kernel write not supported for file /cpu/0/msr (pid: 5858 comm: kworker/0:3) [ 330.711652][ T30] audit: type=1400 audit(1762942192.149:913): avc: denied { ioctl } for pid=8931 comm="syz.5.700" path="socket:[25687]" dev="sockfs" ino=25687 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.736117][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.047652][ T8938] FAULT_INJECTION: forcing a failure. [ 331.047652][ T8938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.071988][ T30] audit: type=1400 audit(1762942192.149:914): avc: denied { accept } for pid=8931 comm="syz.5.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 331.136701][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.4.701 Not tainted syzkaller #0 PREEMPT(full) [ 331.136726][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.136737][ T8938] Call Trace: [ 331.136743][ T8938] [ 331.136749][ T8938] dump_stack_lvl+0x16c/0x1f0 [ 331.136782][ T8938] should_fail_ex+0x512/0x640 [ 331.136805][ T8938] _copy_to_user+0x32/0xd0 [ 331.136830][ T8938] video_usercopy+0xf43/0x1720 [ 331.136859][ T8938] ? __pfx___video_do_ioctl+0x10/0x10 [ 331.136884][ T8938] ? selinux_kernel_read_file+0xc0/0x130 [ 331.136904][ T8938] ? __pfx_video_usercopy+0x10/0x10 [ 331.136946][ T8938] v4l2_ioctl+0x1bd/0x250 [ 331.136969][ T8938] ? __pfx_v4l2_ioctl+0x10/0x10 [ 331.136992][ T8938] __x64_sys_ioctl+0x18e/0x210 [ 331.137017][ T8938] do_syscall_64+0xcd/0xfa0 [ 331.137028][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.137038][ T8938] RIP: 0033:0x7f6368f8f6c9 [ 331.137050][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.137060][ T8938] RSP: 002b:00007f6369ef9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.137071][ T8938] RAX: ffffffffffffffda RBX: 00007f63691e5fa0 RCX: 00007f6368f8f6c9 [ 331.137077][ T8938] RDX: 0000200000000500 RSI: 00000000c0405602 RDI: 0000000000000003 [ 331.137083][ T8938] RBP: 00007f6369ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 331.137089][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.137095][ T8938] R13: 00007f63691e6038 R14: 00007f63691e5fa0 R15: 00007ffce20e3528 [ 331.137110][ T8938] [ 331.296288][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.390586][ T8942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.252916][ T5929] usb 7-1: USB disconnect, device number 7 [ 332.829918][ T8956] siw: device registration error -23 [ 332.837807][ T30] audit: type=1400 audit(1762942194.269:915): avc: denied { create } for pid=8953 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 332.908928][ T30] audit: type=1400 audit(1762942194.269:916): avc: denied { connect } for pid=8953 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.184677][ T8964] netlink: 'syz.6.712': attribute type 4 has an invalid length. [ 333.431457][ T8971] sctp: [Deprecated]: syz.2.709 (pid 8971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.431457][ T8971] Use struct sctp_sack_info instead [ 334.251557][ T8968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8968 comm=syz.5.708 [ 334.264967][ T30] audit: type=1400 audit(1762942195.689:917): avc: denied { ioctl } for pid=8961 comm="syz.5.708" path="socket:[24862]" dev="sockfs" ino=24862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.655233][ T8978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.675031][ T8978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.682091][ T8978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.691474][ T8978] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.769222][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.717'. [ 337.674485][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 337.674500][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.674533][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 337.680605][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 338.518112][ T9000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.105201][ T9017] sctp: [Deprecated]: syz.5.725 (pid 9017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.105201][ T9017] Use struct sctp_sack_info instead [ 339.618920][ T1205] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 339.794263][ T5820] Bluetooth: hci5: command 0x0405 tx timeout [ 340.087794][ T1205] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.112460][ T1205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.892898][ T1205] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 340.903747][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.928067][ T1205] usb 2-1: Product: syz [ 340.938280][ T1205] usb 2-1: Manufacturer: syz [ 340.980118][ T1205] usb 2-1: SerialNumber: syz [ 341.232084][ T1205] usb 2-1: config 0 descriptor?? [ 341.254936][ T1205] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 341.589525][ T9034] FAULT_INJECTION: forcing a failure. [ 341.589525][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 341.602342][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.4.731 Not tainted syzkaller #0 PREEMPT(full) [ 341.602359][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.602365][ T9034] Call Trace: [ 341.602369][ T9034] [ 341.602372][ T9034] dump_stack_lvl+0x16c/0x1f0 [ 341.602393][ T9034] should_fail_ex+0x512/0x640 [ 341.602405][ T9034] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 341.602422][ T9034] should_failslab+0xc2/0x120 [ 341.602435][ T9034] kmem_cache_alloc_noprof+0x75/0x6e0 [ 341.602450][ T9034] ? getname_flags.part.0+0x4c/0x550 [ 341.602466][ T9034] ? getname_flags.part.0+0x4c/0x550 [ 341.602480][ T9034] getname_flags.part.0+0x4c/0x550 [ 341.602495][ T9034] __x64_sys_unlink+0xb0/0x110 [ 341.602506][ T9034] do_syscall_64+0xcd/0xfa0 [ 341.602517][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.602528][ T9034] RIP: 0033:0x7f6368f8f6c9 [ 341.602538][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.602548][ T9034] RSP: 002b:00007f6369ef9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 341.602558][ T9034] RAX: ffffffffffffffda RBX: 00007f63691e5fa0 RCX: 00007f6368f8f6c9 [ 341.602564][ T9034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 341.602570][ T9034] RBP: 00007f6369ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 341.602576][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.602582][ T9034] R13: 00007f63691e6038 R14: 00007f63691e5fa0 R15: 00007ffce20e3528 [ 341.602595][ T9034] [ 341.817057][ T9040] netlink: 92 bytes leftover after parsing attributes in process `syz.6.730'. [ 341.854713][ T9040] overlayfs: conflicting options: userxattr,redirect_dir=on [ 342.185994][ T30] audit: type=1400 audit(1762942203.629:918): avc: denied { unlink } for pid=9033 comm="syz.4.731" name="#3" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 342.275459][ T30] audit: type=1400 audit(1762942203.709:919): avc: denied { mount } for pid=9033 comm="syz.4.731" name="/" dev="overlay" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 343.121159][ T9058] FAULT_INJECTION: forcing a failure. [ 343.121159][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.132732][ T30] audit: type=1400 audit(1762942204.549:920): avc: denied { mount } for pid=9057 comm="syz.5.735" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.137122][ T9058] CPU: 1 UID: 0 PID: 9058 Comm: syz.5.735 Not tainted syzkaller #0 PREEMPT(full) [ 343.137144][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.137153][ T9058] Call Trace: [ 343.137158][ T9058] [ 343.137164][ T9058] dump_stack_lvl+0x16c/0x1f0 [ 343.137192][ T9058] should_fail_ex+0x512/0x640 [ 343.137214][ T9058] _copy_to_user+0x32/0xd0 [ 343.137235][ T9058] simple_read_from_buffer+0xcb/0x170 [ 343.137260][ T9058] proc_fail_nth_read+0x197/0x240 [ 343.137278][ T9058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.137297][ T9058] ? rw_verify_area+0xcf/0x6c0 [ 343.137322][ T9058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.137339][ T9058] vfs_read+0x1e4/0xcf0 [ 343.137356][ T9058] ? __pfx___mutex_lock+0x10/0x10 [ 343.137371][ T9058] ? __pfx_vfs_read+0x10/0x10 [ 343.137391][ T9058] ? __fget_files+0x20e/0x3c0 [ 343.137413][ T9058] ksys_read+0x12a/0x250 [ 343.137426][ T9058] ? __pfx_ksys_read+0x10/0x10 [ 343.137446][ T9058] do_syscall_64+0xcd/0xfa0 [ 343.137462][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.137476][ T9058] RIP: 0033:0x7ff8dd78e0dc [ 343.137489][ T9058] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 343.137502][ T9058] RSP: 002b:00007ff8de705030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.137517][ T9058] RAX: ffffffffffffffda RBX: 00007ff8dd9e5fa0 RCX: 00007ff8dd78e0dc [ 343.137526][ T9058] RDX: 000000000000000f RSI: 00007ff8de7050a0 RDI: 0000000000000005 [ 343.137535][ T9058] RBP: 00007ff8de705090 R08: 0000000000000000 R09: 0000000000000000 [ 343.137543][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.137551][ T9058] R13: 00007ff8dd9e6038 R14: 00007ff8dd9e5fa0 R15: 00007ffc76f58ed8 [ 343.137574][ T9058] [ 343.444782][ T30] audit: type=1400 audit(1762942204.889:921): avc: denied { unmount } for pid=6760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.529032][ T9061] loop6: detected capacity change from 0 to 2560 [ 343.557894][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.607097][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.615822][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.635490][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.643418][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.724213][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.744424][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.752551][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.794707][ T9061] ldm_validate_partition_table(): Disk read failed. [ 343.814142][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.824424][ T9061] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.844403][ T9061] Dev loop6: unable to read RDB block 0 [ 343.850391][ T9061] loop6: unable to read partition table [ 343.864274][ T9061] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 343.911626][ T5185] ldm_validate_partition_table(): Disk read failed. [ 343.918591][ T5185] Dev loop6: unable to read RDB block 0 [ 343.935448][ T5185] loop6: unable to read partition table [ 344.003142][ T5870] usb 2-1: USB disconnect, device number 30 [ 344.499583][ T30] audit: type=1326 audit(1762942205.939:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6368f8f6c9 code=0x7ffc0000 [ 344.553812][ T30] audit: type=1326 audit(1762942205.939:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6368f8f6c9 code=0x7ffc0000 [ 344.608594][ T30] audit: type=1326 audit(1762942205.939:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6368f8df10 code=0x7ffc0000 [ 344.633450][ T30] audit: type=1326 audit(1762942205.939:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6368f90ef7 code=0x7ffc0000 [ 344.658699][ T30] audit: type=1326 audit(1762942205.939:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6368f8f6c9 code=0x7ffc0000 [ 344.828456][ T30] audit: type=1326 audit(1762942205.939:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6368f90ef7 code=0x7ffc0000 [ 344.884791][ T9085] trusted_key: encrypted_key: keylen parameter is missing [ 344.929584][ T9085] mkiss: ax0: crc mode is auto. [ 347.594110][ T1205] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 347.794189][ T1205] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.803005][ T1205] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 347.818277][ T5929] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 347.853969][ T1205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.864504][ T1205] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 347.904509][ T1205] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 347.930492][ T1205] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.940679][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.948974][ T1205] usb 2-1: Product: syz [ 347.953350][ T1205] usb 2-1: Manufacturer: syz [ 348.128206][ T1205] cdc_wdm 2-1:1.0: skipping garbage [ 348.136449][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.147739][ T5929] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.164151][ T1205] cdc_wdm 2-1:1.0: skipping garbage [ 348.184293][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.339954][ T1205] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 348.370167][ T1205] cdc_wdm 2-1:1.0: Unknown control protocol [ 348.444946][ T5929] usb 3-1: config 0 descriptor?? [ 348.485379][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 348.604524][ T1205] usb 2-1: USB disconnect, device number 31 [ 348.883921][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 349.042163][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 349.077150][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 349.103923][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 349.112618][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 349.125870][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 349.135637][ T5929] pwc: recv_control_msg error -32 req 02 val 2000 [ 349.155284][ T5929] pwc: recv_control_msg error -32 req 02 val 2100 [ 349.163058][ T5929] pwc: recv_control_msg error -32 req 04 val 1500 [ 349.241454][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 349.241784][ T30] audit: type=1400 audit(1762942210.679:989): avc: denied { ioctl } for pid=9143 comm="syz.4.760" path="socket:[25399]" dev="sockfs" ino=25399 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.296069][ T30] audit: type=1800 audit(1762942210.729:990): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.760" name="bus" dev="overlay" ino=909 res=0 errno=0 [ 349.544399][ T30] audit: type=1400 audit(1762942210.989:991): avc: denied { ioctl } for pid=9152 comm="syz.4.763" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 349.574549][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 349.577461][ T30] audit: type=1400 audit(1762942211.019:992): avc: denied { write } for pid=9152 comm="syz.4.763" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 349.617462][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 349.627129][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 349.634280][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 349.640818][ T1205] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 349.649095][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 349.672124][ T5929] pwc: Registered as video103. [ 349.690986][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 349.767426][ T5929] usb 3-1: USB disconnect, device number 24 [ 349.818088][ T1205] usb 7-1: unable to get BOS descriptor or descriptor too short [ 349.839366][ T1205] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.864304][ T1205] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 349.941088][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.970743][ T1205] usb 7-1: Product: syz [ 349.979119][ T1205] usb 7-1: Manufacturer: syz [ 349.983711][ T1205] usb 7-1: SerialNumber: syz [ 349.990538][ T1205] usb 7-1: config 0 descriptor?? [ 350.007819][ T1205] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 351.974582][ T56] block nbd0: Possible stuck request ffff888026085080: control (read@0,4096B). Runtime 210 seconds [ 352.373042][ T5870] kernel write not supported for file /cpu/0/msr (pid: 5870 comm: kworker/0:5) [ 352.667606][ T5858] kernel write not supported for file /cpu/0/msr (pid: 5858 comm: kworker/0:3) [ 353.010875][ T5870] usb 7-1: USB disconnect, device number 8 [ 353.016817][ T5858] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 353.131292][ T9196] netlink: 256 bytes leftover after parsing attributes in process `syz.1.774'. [ 353.198711][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.225894][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.264892][ T5858] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 353.279602][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.328883][ T5858] usb 5-1: Product: syz [ 353.397856][ T5858] usb 5-1: Manufacturer: syz [ 353.405215][ T5858] usb 5-1: SerialNumber: syz [ 353.450200][ T5858] usb 5-1: config 0 descriptor?? [ 353.463984][ T5858] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 353.533419][ T5820] Bluetooth: hci5: connection err: -111 [ 353.644056][ T9218] geneve2: entered promiscuous mode [ 353.649420][ T9218] geneve2: entered allmulticast mode [ 354.783302][ T9224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.279221][ T5858] usb 5-1: USB disconnect, device number 30 [ 357.565406][ T9246] sctp: [Deprecated]: syz.5.784 (pid 9246) Use of int in max_burst socket option. [ 357.565406][ T9246] Use struct sctp_assoc_value instead [ 358.260206][ T9255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.266499][ T9255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.272684][ T9255] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 358.278895][ T9255] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 358.523121][ T30] audit: type=1400 audit(1762942219.959:993): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=49252 daddr=10.128.0.39 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 358.574123][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 358.907709][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 358.937779][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.102904][ T42] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 359.147479][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.169375][ T42] usb 7-1: Product: syz [ 359.178495][ T42] usb 7-1: Manufacturer: syz [ 359.190105][ T42] usb 7-1: SerialNumber: syz [ 359.216334][ T42] usb 7-1: config 0 descriptor?? [ 359.224352][ T42] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 360.102824][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.336032][ T5814] Bluetooth: hci5: command 0x0405 tx timeout [ 360.342269][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.349156][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.089567][ T5813] usb 7-1: USB disconnect, device number 9 [ 361.797495][ T5813] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 362.004804][ T5813] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 362.333963][ T5813] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 362.343479][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.363857][ T5813] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 362.415072][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 362.618482][ T1205] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 362.804553][ T1205] usb 3-1: Using ep0 maxpacket: 8 [ 362.875031][ T1205] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 362.885160][ T1205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.924491][ T1205] usb 3-1: config 0 has no interface number 0 [ 362.936590][ T1205] usb 3-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 363.047508][ T1205] usb 3-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 363.059073][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.074103][ T1205] usb 3-1: Product: syz [ 363.082725][ T1205] usb 3-1: Manufacturer: syz [ 363.095615][ T1205] usb 3-1: SerialNumber: syz [ 363.106210][ T1205] usb 3-1: config 0 descriptor?? [ 363.129326][ T1205] usb 3-1: bad CDC descriptors [ 363.260663][ T9311] kvm: pic: non byte read [ 363.266442][ T9311] kvm: pic: non byte read [ 363.271881][ T9311] kvm: pic: non byte read [ 363.277900][ T9311] kvm: pic: non byte read [ 363.283789][ T9311] kvm: pic: non byte read [ 363.290700][ T9311] kvm: pic: non byte read [ 363.331463][ T9311] kvm: pic: non byte read [ 363.336919][ T9311] kvm: pic: non byte read [ 363.342288][ T9311] kvm: pic: non byte read [ 363.349454][ T9311] kvm: pic: non byte read [ 363.474329][ T5813] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 364.205561][ T5813] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 364.205583][ T5813] stv0680 7-1:4.0: last error: 206, command = 0xc4 [ 364.314630][ T10] usb 7-1: USB disconnect, device number 10 [ 364.550465][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.796'. [ 364.550512][ T9318] openvswitch: netlink: Flow key attr not present in new flow. [ 365.494970][ T9336] netlink: 'syz.4.802': attribute type 10 has an invalid length. [ 365.502845][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.802'. [ 365.527481][ T9336] batman_adv: batadv0: Adding interface: virt_wifi0 [ 365.534241][ T9336] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.565729][ T9336] batman_adv: batadv0: Interface activated: virt_wifi0 [ 365.792679][ T30] audit: type=1400 audit(1762942226.929:994): avc: denied { write } for pid=9333 comm="syz.4.802" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 365.855575][ T9332] sctp: [Deprecated]: syz.6.801 (pid 9332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.855575][ T9332] Use struct sctp_sack_info instead [ 366.260523][ T5858] usb 3-1: USB disconnect, device number 25 [ 366.333852][ T30] audit: type=1400 audit(1762942227.769:995): avc: denied { view } for pid=9344 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 366.370874][ T9347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.428236][ T30] audit: type=1400 audit(1762942227.799:996): avc: denied { read write } for pid=9344 comm="syz.4.805" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 367.772389][ T30] audit: type=1400 audit(1762942227.799:997): avc: denied { open } for pid=9344 comm="syz.4.805" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 368.797088][ T9363] qnx6: unable to read the first superblock [ 368.914287][ T5813] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 368.923382][ T30] audit: type=1400 audit(1762942230.359:998): avc: denied { ioctl } for pid=9344 comm="syz.4.805" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 369.128481][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 369.288405][ T5813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.126556][ T5813] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 370.160563][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.121111][ T5813] usb 6-1: Product: syz [ 371.137742][ T5813] usb 6-1: Manufacturer: syz [ 371.152392][ T5813] usb 6-1: SerialNumber: syz [ 371.290512][ T5813] usb 6-1: config 0 descriptor?? [ 371.302800][ T5813] usb 6-1: can't set config #0, error -71 [ 371.319843][ T5813] usb 6-1: USB disconnect, device number 27 [ 372.246826][ T30] audit: type=1400 audit(1762942233.689:999): avc: denied { getopt } for pid=9399 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.283975][ T9412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 373.290348][ T9412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 373.296628][ T9412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 373.302838][ T9412] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 373.564091][ T42] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 373.725726][ T42] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.00 [ 373.743908][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.947338][ T42] usb 3-1: config 0 descriptor?? [ 374.514722][ T42] hid-corsair-void 0003:1B1C:0A51.0004: item fetching failed at offset 2/5 [ 374.541496][ T42] hid-corsair-void 0003:1B1C:0A51.0004: parse failed (reason: -22) [ 374.550780][ T42] hid-corsair-void 0003:1B1C:0A51.0004: probe with driver hid-corsair-void failed with error -22 [ 374.667541][ T42] usb 3-1: USB disconnect, device number 26 [ 375.214192][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 375.380862][ T5814] Bluetooth: hci5: command 0x0405 tx timeout [ 375.427518][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 375.434256][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 375.552485][ T9435] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 375.769554][ T9442] comedi comedi0: dt2815: I/O port conflict (0x6,2) [ 377.090576][ T5829] Bluetooth: hci4: connection err: -111 [ 377.476869][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 378.184867][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.191846][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.381517][ T9486] sctp: [Deprecated]: syz.2.840 (pid 9486) Use of int in max_burst socket option. [ 379.381517][ T9486] Use struct sctp_assoc_value instead [ 379.580261][ T9490] netlink: 'syz.4.843': attribute type 4 has an invalid length. [ 380.022327][ T5877] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 380.208350][ T5877] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.220013][ T5877] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 380.234091][ T5877] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.246666][ T5877] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 380.257990][ T5877] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 380.283529][ T5877] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 380.292797][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 380.301151][ T5877] usb 6-1: Product: syz [ 380.305952][ T5877] usb 6-1: Manufacturer: syz [ 380.316204][ T5877] cdc_wdm 6-1:1.0: skipping garbage [ 380.324029][ T5877] cdc_wdm 6-1:1.0: skipping garbage [ 380.333133][ T5877] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 380.344590][ T5877] cdc_wdm 6-1:1.0: Unknown control protocol [ 380.351443][ T30] audit: type=1400 audit(1762942241.789:1000): avc: denied { create } for pid=9498 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.489421][ T30] audit: type=1400 audit(1762942241.819:1001): avc: denied { write } for pid=9498 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.154169][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 381.865557][ T5929] usb 6-1: USB disconnect, device number 28 [ 381.875501][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.894138][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 381.945537][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.013798][ T9513] binder: BINDER_SET_CONTEXT_MGR already set [ 382.020015][ T9513] binder: 9508:9513 ioctl 4018620d 200000000040 returned -16 [ 382.036766][ T56] block nbd0: Possible stuck request ffff888026085080: control (read@0,4096B). Runtime 240 seconds [ 382.067221][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 382.087347][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 382.125510][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.145790][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.164314][ T10] usb 3-1: Product: syz [ 382.169540][ T10] usb 3-1: Manufacturer: syz [ 382.178447][ T30] audit: type=1400 audit(1762942243.609:1002): avc: denied { mount } for pid=9514 comm="syz.1.851" name="/" dev="configfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 382.337251][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 382.354080][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 382.460055][ T9519] netlink: 320 bytes leftover after parsing attributes in process `syz.1.851'. [ 382.476321][ T30] audit: type=1400 audit(1762942243.909:1003): avc: denied { search } for pid=9514 comm="syz.1.851" name="/" dev="configfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 382.494828][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 382.871228][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 383.061527][ T10] usb 3-1: USB disconnect, device number 27 [ 383.924491][ T5858] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 384.067639][ T9537] binder: BINDER_SET_CONTEXT_MGR already set [ 384.073708][ T9537] binder: 9535:9537 ioctl 4018620d 200000000040 returned -16 [ 384.356930][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.393204][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.403328][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.521439][ T5858] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.531088][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.546966][ T5858] usb 5-1: config 0 descriptor?? [ 384.804158][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 384.974498][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 384.985584][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 385.022193][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.147512][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.192817][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.247727][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.291622][ T9529] capability: warning: `syz.4.855' uses deprecated v2 capabilities in a way that may be insecure [ 385.403097][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.467866][ T5858] usbhid 5-1:0.0: can't add hid device: -71 [ 385.538314][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.643670][ T5858] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 386.108675][ T9541] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 386.118865][ T5858] usb 5-1: USB disconnect, device number 31 [ 386.163455][ T9541] 9pnet_fd: Insufficient options for proto=fd [ 386.172234][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.184139][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.196265][ T10] usb 2-1: usb_control_msg returned -32 [ 386.215093][ T10] usbtmc 2-1:16.0: can't read capabilities [ 386.269020][ T5813] usb 2-1: USB disconnect, device number 32 [ 386.600921][ T5858] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 387.136061][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 387.245354][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.256139][ T5858] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 387.274876][ T10] usb 7-1: device descriptor read/64, error -71 [ 387.374124][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.389201][ T5858] usb 5-1: config 0 descriptor?? [ 387.464104][ T9569] sctp: [Deprecated]: syz.1.867 (pid 9569) Use of int in max_burst socket option. [ 387.464104][ T9569] Use struct sctp_assoc_value instead [ 387.651294][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 387.695539][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 387.824887][ T10] usb 7-1: device descriptor read/64, error -71 [ 387.938727][ T10] usb usb7-port1: attempt power cycle [ 388.132334][ T5858] pwc: recv_control_msg error -32 req 02 val 2b00 [ 388.139630][ T5858] pwc: recv_control_msg error -32 req 02 val 2700 [ 388.146779][ T5858] pwc: recv_control_msg error -32 req 02 val 2c00 [ 388.153820][ T5858] pwc: recv_control_msg error -32 req 04 val 1000 [ 388.160849][ T5858] pwc: recv_control_msg error -32 req 04 val 1300 [ 388.167758][ T5858] pwc: recv_control_msg error -32 req 04 val 1400 [ 388.174957][ T5858] pwc: recv_control_msg error -32 req 02 val 2000 [ 388.181823][ T5858] pwc: recv_control_msg error -32 req 02 val 2100 [ 388.194336][ T5858] pwc: recv_control_msg error -32 req 04 val 1500 [ 388.348140][ T30] audit: type=1400 audit(1762942249.789:1004): avc: denied { mount } for pid=9575 comm="syz.1.870" name="/" dev="autofs" ino=28358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 388.406405][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 388.660770][ T5858] pwc: recv_control_msg error -71 req 02 val 2600 [ 388.668105][ T5858] pwc: recv_control_msg error -71 req 02 val 2900 [ 388.675883][ T5858] pwc: recv_control_msg error -71 req 02 val 2800 [ 388.682747][ T10] usb 7-1: device descriptor read/8, error -71 [ 388.706459][ T5858] pwc: recv_control_msg error -71 req 04 val 1100 [ 388.733907][ T5858] pwc: recv_control_msg error -71 req 04 val 1200 [ 388.767264][ T5858] pwc: Registered as video103. [ 388.773730][ T5858] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 388.817712][ T30] audit: type=1400 audit(1762942250.259:1005): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 388.844493][ T5858] usb 5-1: USB disconnect, device number 32 [ 389.034073][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 389.175963][ T10] usb 7-1: device descriptor read/8, error -71 [ 389.305753][ T10] usb usb7-port1: unable to enumerate USB device [ 390.510775][ T9604] Cannot find add_set index 2 as target [ 390.616338][ T30] audit: type=1400 audit(1762942252.059:1006): avc: denied { getopt } for pid=9602 comm="syz.5.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.633917][ T9606] fuse: Bad value for 'fd' [ 392.318659][ T9619] sctp: [Deprecated]: syz.6.882 (pid 9619) Use of int in max_burst socket option. [ 392.318659][ T9619] Use struct sctp_assoc_value instead [ 392.318772][ T5829] Bluetooth: hci5: unexpected event for opcode 0x0c1a [ 392.857893][ T9625] sctp: [Deprecated]: syz.4.881 (pid 9625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.857893][ T9625] Use struct sctp_sack_info instead [ 393.514065][ T42] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 393.685745][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.722714][ T42] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 393.742027][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.797694][ T42] usb 5-1: config 0 descriptor?? [ 393.818105][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 394.509399][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 394.539469][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 394.547097][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 394.555234][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 394.564373][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 394.571582][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 394.584097][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 394.598927][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 394.612604][ T42] pwc: recv_control_msg error -32 req 04 val 1500 [ 395.027707][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 395.050872][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 395.524079][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 395.531526][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 395.542389][ T30] audit: type=1400 audit(1762942256.489:1007): avc: denied { lock } for pid=9641 comm="syz.6.890" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 395.566652][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 395.587480][ T42] pwc: Registered as video103. [ 395.660322][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 395.697456][ T42] usb 5-1: USB disconnect, device number 33 [ 395.964443][ T5929] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 395.994102][ T1205] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 396.116766][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 396.142460][ T5929] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.151528][ T5929] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 396.164612][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.173762][ T5929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 396.644216][ T5929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 396.656870][ T5858] kernel write not supported for file /cpu/0/msr (pid: 5858 comm: kworker/0:3) [ 396.658712][ T5929] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.675521][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 396.684872][ T10] usb 3-1: device descriptor read/64, error -71 [ 396.685256][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.702082][ T1205] usb 7-1: config 0 has no interfaces? [ 396.707916][ T1205] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.717190][ T5929] usb 2-1: Product: syz [ 396.721645][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.730421][ T5929] usb 2-1: Manufacturer: syz [ 396.789766][ T1205] usb 7-1: config 0 descriptor?? [ 396.813447][ T5929] cdc_wdm 2-1:1.0: skipping garbage [ 396.837542][ T5929] cdc_wdm 2-1:1.0: skipping garbage [ 396.930787][ T5929] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 396.937294][ T5929] cdc_wdm 2-1:1.0: Unknown control protocol [ 397.050364][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 397.163552][ T5877] usb 7-1: USB disconnect, device number 15 [ 397.816032][ T10] usb 3-1: device descriptor read/64, error -71 [ 398.046224][ T10] usb usb3-port1: attempt power cycle [ 398.834141][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 399.118406][ T10] usb 3-1: device not accepting address 30, error -71 [ 399.159590][ T9678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.182221][ T5929] usb 2-1: USB disconnect, device number 33 [ 399.217092][ T9678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.244748][ T9678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 399.256059][ T9678] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 399.524086][ T5877] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 400.336878][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.355864][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 400.424075][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 400.432176][ T5877] usb 5-1: Product: syz [ 400.595660][ T5877] usb 5-1: Manufacturer: syz [ 400.615755][ T5877] usb 5-1: SerialNumber: syz [ 401.054060][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.137819][ T5877] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 401.294236][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 401.300677][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 401.306719][ T5136] Bluetooth: hci5: command 0x0405 tx timeout [ 401.338185][ T30] audit: type=1400 audit(1762942262.779:1008): avc: denied { read write } for pid=9686 comm="syz.4.903" name="lp0" dev="devtmpfs" ino=3257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 401.455211][ T9707] sctp: [Deprecated]: syz.2.907 (pid 9707) Use of int in max_burst socket option. [ 401.455211][ T9707] Use struct sctp_assoc_value instead [ 401.656749][ T30] audit: type=1400 audit(1762942262.779:1009): avc: denied { open } for pid=9686 comm="syz.4.903" path="/dev/usb/lp0" dev="devtmpfs" ino=3257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 402.212999][ T9721] netlink: 'syz.1.913': attribute type 4 has an invalid length. [ 402.454141][ T6120] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 402.660949][ T6120] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.677524][ T6120] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 402.688196][ T6120] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.697667][ T6120] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 402.709404][ T6120] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 402.722798][ T6120] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.733108][ T6120] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.741562][ T6120] usb 7-1: Product: syz [ 402.746110][ T6120] usb 7-1: Manufacturer: syz [ 402.851344][ T6120] cdc_wdm 7-1:1.0: skipping garbage [ 402.856745][ T6120] cdc_wdm 7-1:1.0: skipping garbage [ 402.862737][ T6120] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 402.869875][ T6120] cdc_wdm 7-1:1.0: Unknown control protocol [ 402.959778][ T9731] netlink: 'syz.5.914': attribute type 10 has an invalid length. [ 402.967739][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.5.914'. [ 403.339203][ T9731] batman_adv: batadv0: Adding interface: virt_wifi0 [ 403.345859][ T9731] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.371387][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.377800][ T9731] batman_adv: batadv0: Interface activated: virt_wifi0 [ 403.527197][ T6120] usb 5-1: USB disconnect, device number 34 [ 403.737127][ T9718] usblp0: removed [ 403.752198][ T10] usb 7-1: USB disconnect, device number 16 [ 404.419761][ T5814] Bluetooth: hci5: command 0x0405 tx timeout [ 404.495031][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 404.502217][ T9725] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 405.311809][ T9725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.318129][ T9725] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 405.324437][ T9725] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 405.469130][ T30] audit: type=1400 audit(1762942266.909:1010): avc: denied { create } for pid=9743 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 405.471390][ T9744] loop6: detected capacity change from 0 to 2560 [ 405.578643][ T9748] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 405.643271][ T9748] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 405.675003][ T9744] buffer_io_error: 27 callbacks suppressed [ 405.675019][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.689130][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.701462][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.711672][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.720354][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.736017][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.756554][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.765168][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.779798][ T9744] ldm_validate_partition_table(): Disk read failed. [ 405.787659][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.796220][ T9744] Buffer I/O error on dev loop6, logical block 0, async page read [ 405.809319][ T9744] Dev loop6: unable to read RDB block 0 [ 405.821359][ T9744] loop6: unable to read partition table [ 405.830143][ T9744] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 405.834723][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 406.037045][ T9760] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 406.059799][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 406.070955][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 406.080627][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.138123][ T10] usb 5-1: Product: syz [ 406.149708][ T10] usb 5-1: Manufacturer: syz [ 406.157620][ T10] usb 5-1: SerialNumber: syz [ 406.176016][ T10] usb 5-1: config 0 descriptor?? [ 406.447015][ T9749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.471066][ T9749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.570922][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 406.579491][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.666768][ T9766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.676528][ T9766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.684146][ T9766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.691380][ T9766] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 408.032926][ T9780] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 408.109933][ T30] audit: type=1400 audit(1762942269.539:1011): avc: denied { setopt } for pid=9781 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.129342][ T5136] Bluetooth: hci6: command 0x1003 tx timeout [ 408.142568][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 408.193669][ T30] audit: type=1400 audit(1762942269.629:1012): avc: denied { ioctl } for pid=9783 comm="syz.5.930" path="socket:[29796]" dev="sockfs" ino=29796 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 408.290032][ T9780] binder: 9763:9780 ioctl c0306201 200000000540 returned -22 [ 408.437504][ T30] audit: type=1400 audit(1762942269.629:1013): avc: denied { setopt } for pid=9783 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.738376][ T5814] Bluetooth: hci5: command 0x0405 tx timeout [ 408.744658][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 408.744683][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 408.750671][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 408.845131][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 408.886165][ T10] usb 5-1: USB disconnect, device number 35 [ 409.034403][ T1205] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 409.188797][ T1205] usb 6-1: Using ep0 maxpacket: 32 [ 409.711546][ T1205] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 409.740552][ T1205] usb 6-1: config 0 has no interface number 0 [ 409.756723][ T1205] usb 6-1: config 0 interface 2 has no altsetting 0 [ 409.766669][ T1205] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 409.779420][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.787883][ T1205] usb 6-1: Product: syz [ 409.792178][ T1205] usb 6-1: Manufacturer: syz [ 409.852090][ T1205] usb 6-1: SerialNumber: syz [ 409.989615][ T9806] sctp: [Deprecated]: syz.2.935 (pid 9806) Use of int in max_burst socket option. [ 409.989615][ T9806] Use struct sctp_assoc_value instead [ 410.147270][ T9804] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 410.160924][ T1205] usb 6-1: config 0 descriptor?? [ 410.441254][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.471168][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.513683][ T1205] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.561507][ T9816] FAULT_INJECTION: forcing a failure. [ 410.561507][ T9816] name failslab, interval 1, probability 0, space 0, times 0 [ 410.575088][ T9816] CPU: 0 UID: 0 PID: 9816 Comm: syz.6.940 Not tainted syzkaller #0 PREEMPT(full) [ 410.575113][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.575123][ T9816] Call Trace: [ 410.575129][ T9816] [ 410.575135][ T9816] dump_stack_lvl+0x16c/0x1f0 [ 410.575167][ T9816] should_fail_ex+0x512/0x640 [ 410.575186][ T9816] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 410.575212][ T9816] should_failslab+0xc2/0x120 [ 410.575232][ T9816] kmem_cache_alloc_node_noprof+0x78/0x770 [ 410.575255][ T9816] ? __alloc_skb+0x2b2/0x380 [ 410.575277][ T9816] ? __alloc_skb+0x2b2/0x380 [ 410.575294][ T9816] __alloc_skb+0x2b2/0x380 [ 410.575311][ T9816] ? __pfx___alloc_skb+0x10/0x10 [ 410.575328][ T9816] ? find_held_lock+0x2b/0x80 [ 410.575358][ T9816] alloc_skb_with_frags+0xe0/0x860 [ 410.575384][ T9816] sock_alloc_send_pskb+0x7f9/0x980 [ 410.575404][ T9816] ? avc_has_perm+0x144/0x1f0 [ 410.575427][ T9816] ? __pfx_avc_has_perm+0x10/0x10 [ 410.575451][ T9816] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 410.575473][ T9816] ? sock_has_perm+0x259/0x2f0 [ 410.575497][ T9816] ? __pfx_sock_has_perm+0x10/0x10 [ 410.575528][ T9816] hci_sock_sendmsg+0x1c7/0x25f0 [ 410.575556][ T9816] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 410.575586][ T9816] sock_write_iter+0x566/0x610 [ 410.575602][ T9816] ? __pfx_sock_write_iter+0x10/0x10 [ 410.575627][ T9816] ? bpf_lsm_file_permission+0x9/0x10 [ 410.575641][ T9816] ? security_file_permission+0x71/0x210 [ 410.575662][ T9816] ? rw_verify_area+0xcf/0x6c0 [ 410.575688][ T9816] vfs_write+0x7d3/0x11d0 [ 410.575704][ T9816] ? __pfx_sock_write_iter+0x10/0x10 [ 410.575730][ T9816] ? __pfx_vfs_write+0x10/0x10 [ 410.575745][ T9816] ? find_held_lock+0x2b/0x80 [ 410.575782][ T9816] ksys_write+0x1f8/0x250 [ 410.575797][ T9816] ? __pfx_ksys_write+0x10/0x10 [ 410.575821][ T9816] do_syscall_64+0xcd/0xfa0 [ 410.575838][ T9816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.575856][ T9816] RIP: 0033:0x7faa4318f6c9 [ 410.575870][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.575884][ T9816] RSP: 002b:00007faa440b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.575901][ T9816] RAX: ffffffffffffffda RBX: 00007faa433e5fa0 RCX: 00007faa4318f6c9 [ 410.575912][ T9816] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 410.575920][ T9816] RBP: 00007faa440b1090 R08: 0000000000000000 R09: 0000000000000000 [ 410.575929][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.575937][ T9816] R13: 00007faa433e6038 R14: 00007faa433e5fa0 R15: 00007ffe614dccb8 [ 410.575960][ T9816] [ 410.594556][ T1205] usb 6-1: USB disconnect, device number 29 [ 411.165405][ T5870] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 411.371427][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.595021][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.612263][ T5870] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 411.632965][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.641254][ T5870] usb 5-1: Product: syz [ 411.645875][ T5870] usb 5-1: Manufacturer: syz [ 411.655323][ T5870] usb 5-1: SerialNumber: syz [ 411.661875][ T5870] usb 5-1: config 0 descriptor?? [ 411.670509][ T5870] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 412.094572][ T56] block nbd0: Possible stuck request ffff888026085080: control (read@0,4096B). Runtime 270 seconds [ 412.577997][ T9839] sctp: [Deprecated]: syz.6.947 (pid 9839) Use of int in max_burst socket option. [ 412.577997][ T9839] Use struct sctp_assoc_value instead [ 413.444933][ T6120] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 413.489185][ T30] audit: type=1400 audit(1762942274.929:1014): avc: denied { ioctl } for pid=9852 comm="syz.5.951" path="socket:[29167]" dev="sockfs" ino=29167 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.576503][ T30] audit: type=1400 audit(1762942274.929:1015): avc: denied { cmd } for pid=9852 comm="syz.5.951" path="socket:[29163]" dev="sockfs" ino=29163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 413.634053][ T6120] usb 3-1: Using ep0 maxpacket: 8 [ 413.656199][ T6120] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.692445][ T6120] usb 3-1: config 11 has an invalid interface number: 98 but max is 0 [ 413.715060][ T6120] usb 3-1: config 11 has no interface number 0 [ 413.876421][ T6120] usb 3-1: config 11 interface 98 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 8 [ 413.886630][ T6120] usb 3-1: config 11 interface 98 altsetting 225 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 413.897821][ T6120] usb 3-1: config 11 interface 98 has no altsetting 0 [ 413.907650][ T6120] usb 3-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=c2.7f [ 413.917016][ T6120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.925083][ T6120] usb 3-1: Product: syz [ 413.930061][ T6120] usb 3-1: Manufacturer: syz [ 413.947656][ T6120] usb 3-1: SerialNumber: syz [ 413.984867][ T9843] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 415.050387][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 415.123393][ T9872] 9pnet_fd: Insufficient options for proto=fd [ 415.387031][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 415.435671][ T9875] overlayfs: failed to get inode (-116) [ 415.441686][ T9875] overlayfs: failed to get inode (-116) [ 415.448162][ T9875] overlayfs: failed to get inode (-116) [ 415.454493][ T9875] overlayfs: failed to get inode (-116) [ 415.646382][ T5870] usb 5-1: USB disconnect, device number 36 [ 415.654617][ T1205] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 415.688434][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 415.701691][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 415.835242][ T1205] usb 7-1: unable to get BOS descriptor or descriptor too short [ 415.869816][ T1205] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.014224][ T5929] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 416.122381][ T30] audit: type=1400 audit(1762942277.379:1016): avc: denied { read write } for pid=9886 comm="syz.4.961" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 416.164399][ T1205] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 416.177579][ T9843] ceph: No mds server is up or the cluster is laggy [ 416.186469][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.303577][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 416.318217][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 416.320756][ T1205] usb 7-1: Product: syz [ 416.325579][ T30] audit: type=1400 audit(1762942277.389:1017): avc: denied { open } for pid=9886 comm="syz.4.961" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 416.354116][ T1205] usb 7-1: Manufacturer: syz [ 416.392288][ T1205] usb 7-1: SerialNumber: syz [ 416.397344][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 416.411149][ T5929] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 416.432059][ T5929] usb 2-1: config 0 has no interface number 1 [ 416.521235][ T5929] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 416.762196][ T1205] usb 7-1: config 0 descriptor?? [ 416.859448][ T1205] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 416.928872][ T5929] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 416.975894][ T5929] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 416.987160][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.995309][ T5929] usb 2-1: Product: syz [ 416.999512][ T5929] usb 2-1: Manufacturer: syz [ 417.034234][ T5929] usb 2-1: SerialNumber: syz [ 417.222004][ T6120] usb 3-1: USB disconnect, device number 32 [ 417.237039][ T5929] usb 2-1: config 0 descriptor?? [ 417.274893][ T5929] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 417.528899][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.562689][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.596492][ T5929] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 417.599841][ T2336] pvrusb2: Invalid read control endpoint [ 417.619450][ T5929] usb 2-1: USB disconnect, device number 34 [ 417.633844][ T30] audit: type=1400 audit(1762942279.069:1018): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 417.642817][ T2336] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 417.672345][ T30] audit: type=1400 audit(1762942279.109:1019): avc: denied { firmware_load } for pid=2336 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 417.672420][ T2336] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 418.592346][ T9919] sctp: [Deprecated]: syz.2.968 (pid 9919) Use of int in max_burst socket option. [ 418.592346][ T9919] Use struct sctp_assoc_value instead [ 418.835873][ T6120] usb 7-1: USB disconnect, device number 17 [ 418.921310][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.6.970'. [ 419.007877][ T30] audit: type=1400 audit(1762942280.359:1020): avc: denied { accept } for pid=9920 comm="syz.6.970" lport=37031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 419.129000][ T30] audit: type=1400 audit(1762942280.519:1021): avc: denied { setopt } for pid=9920 comm="syz.6.970" lport=37031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 419.375571][ T9936] sctp: [Deprecated]: syz.5.975 (pid 9936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.375571][ T9936] Use struct sctp_sack_info instead [ 419.475264][ T30] audit: type=1400 audit(1762942280.519:1022): avc: denied { write } for pid=9920 comm="syz.6.970" lport=37031 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 420.702530][ T9948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.727464][ T9948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.744990][ T9948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 420.767923][ T9948] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 421.182106][ T9968] sctp: [Deprecated]: syz.6.983 (pid 9968) Use of int in max_burst socket option. [ 421.182106][ T9968] Use struct sctp_assoc_value instead [ 421.533024][ T9973] sctp: [Deprecated]: syz.6.986 (pid 9973) Use of int in max_burst socket option. [ 421.533024][ T9973] Use struct sctp_assoc_value instead [ 422.534597][ T9980] openvswitch: netlink: Missing valid actions attribute. [ 422.543214][ T9980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.583516][ T9986] sctp: [Deprecated]: syz.4.987 (pid 9986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.583516][ T9986] Use struct sctp_sack_info instead [ 422.744062][ T42] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 422.751841][ T5136] Bluetooth: hci3: command 0x0c1a tx timeout [ 422.751851][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 422.825525][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout [ 422.925890][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 422.934991][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.948057][ T42] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 422.957286][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.965385][ T42] usb 7-1: Product: syz [ 422.969718][ T42] usb 7-1: Manufacturer: syz [ 422.974838][ T42] usb 7-1: SerialNumber: syz [ 422.984770][ T42] usb 7-1: config 0 descriptor?? [ 422.995102][ T42] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 424.452916][ T30] audit: type=1400 audit(1762942285.039:1023): avc: denied { create } for pid=9997 comm="syz.2.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 424.744932][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 424.759018][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 424.805124][T10013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=10013 comm=syz.2.993 [ 424.863276][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 424.872845][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 425.283161][T10027] netlink: 'syz.2.996': attribute type 11 has an invalid length. [ 425.458472][ T30] audit: type=1400 audit(1762942286.899:1024): avc: denied { create } for pid=10023 comm="syz.2.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 425.482837][ T30] audit: type=1400 audit(1762942286.919:1025): avc: denied { ioctl } for pid=10023 comm="syz.2.996" path="socket:[30298]" dev="sockfs" ino=30298 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 426.408769][ T42] usb 7-1: USB disconnect, device number 18 [ 426.871386][T10055] overlayfs: workdir and upperdir must reside under the same mount [ 427.131686][T10046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 427.138779][T10046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 427.145008][T10046] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 427.151908][T10046] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 427.165239][T10059] sctp: [Deprecated]: syz.6.1001 (pid 10059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.165239][T10059] Use struct sctp_sack_info instead [ 429.064103][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout [ 429.078357][T10080] bridge2: entered promiscuous mode [ 429.084507][T10080] bridge2: entered allmulticast mode [ 429.364522][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 429.370698][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.409772][ T5136] Bluetooth: hci5: command 0x0405 tx timeout [ 429.495006][ T5870] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 429.677443][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 429.744659][T10090] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 429.752528][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1008'. [ 429.778751][T10090] batman_adv: batadv0: Adding interface: virt_wifi0 [ 429.785475][T10090] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.813242][T10090] batman_adv: batadv0: Interface activated: virt_wifi0 [ 429.934313][ T5870] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.040681][ T5870] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.053709][ T5870] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.063940][ T5870] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.090182][ T5870] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.104451][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.134104][ T6120] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 430.326007][ T5870] usb 3-1: GET_CAPABILITIES returned 0 [ 430.331531][ T5870] usbtmc 3-1:16.0: can't read capabilities [ 430.364135][ T6120] usb 6-1: unable to get BOS descriptor or descriptor too short [ 430.378416][ T6120] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.402234][ T6120] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 430.421630][ T6120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.430159][ T6120] usb 6-1: Product: syz [ 430.435617][ T6120] usb 6-1: Manufacturer: syz [ 430.440313][ T6120] usb 6-1: SerialNumber: syz [ 430.454601][ T3094] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 430.467546][ T6120] usb 6-1: config 0 descriptor?? [ 430.493182][ T6120] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 430.540290][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.549562][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.558629][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.567687][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.576721][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.585752][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.594787][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.603849][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.612917][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.704493][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.713601][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.722659][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.731709][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.740753][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.749885][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.854761][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.863890][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.883841][ T3094] usb 7-1: unable to get BOS descriptor or descriptor too short [ 430.893584][ T3094] usb 7-1: no configurations [ 430.904295][ T3094] usb 7-1: can't read configurations, error -22 [ 430.921304][ T10] usb 3-1: USB disconnect, device number 33 [ 431.068143][ T3094] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 431.226671][ T3094] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.240048][ T3094] usb 7-1: no configurations [ 431.244883][ T3094] usb 7-1: can't read configurations, error -22 [ 431.252745][ T3094] usb usb7-port1: attempt power cycle [ 431.520596][T10110] SELinux: Context Ü is not valid (left unmapped). [ 431.595148][ T3094] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 431.726440][ T3094] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.739473][ T3094] usb 7-1: no configurations [ 431.744786][ T3094] usb 7-1: can't read configurations, error -22 [ 431.964256][ T3094] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 431.997858][ T3094] usb 7-1: unable to get BOS descriptor or descriptor too short [ 432.006743][ T3094] usb 7-1: no configurations [ 432.011420][ T3094] usb 7-1: can't read configurations, error -22 [ 432.018526][ T3094] usb usb7-port1: unable to enumerate USB device [ 432.908287][ T42] usb 6-1: USB disconnect, device number 30 [ 433.058778][ T30] audit: type=1400 audit(1762942294.489:1026): avc: denied { connect } for pid=10122 comm="syz.5.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.507489][ T30] audit: type=1400 audit(1762942294.949:1027): avc: denied { bind } for pid=10127 comm="syz.6.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 433.616165][ T30] audit: type=1400 audit(1762942295.059:1028): avc: denied { kexec_image_load } for pid=10131 comm="syz.6.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 433.972942][ T42] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 434.392769][ T30] audit: type=1400 audit(1762942295.599:1029): avc: denied { ioctl } for pid=10124 comm="syz.4.1021" path="socket:[30644]" dev="sockfs" ino=30644 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 434.614253][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 434.674882][ T42] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 434.684341][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.692338][ T42] usb 6-1: Product: syz [ 434.704082][ T42] usb 6-1: Manufacturer: syz [ 434.785893][ T42] usb 6-1: SerialNumber: syz [ 434.798818][ T42] usb 6-1: config 0 descriptor?? [ 435.304060][ T10] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 435.557248][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.704355][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.744163][ T30] audit: type=1326 audit(1762942297.149:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.5.1025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8dd78f6c9 code=0x0 [ 435.884762][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 435.956370][T10155] 9pnet_fd: Insufficient options for proto=fd [ 436.033723][T10153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10153 comm=syz.5.1025 [ 436.177693][ T42] usb 6-1: USB disconnect, device number 31 [ 436.222444][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.257836][ T10] usb 7-1: config 0 descriptor?? [ 436.300916][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 437.134069][ T5870] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 437.798702][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 437.806469][ T5870] usb 3-1: no configurations [ 437.814352][ T5870] usb 3-1: can't read configurations, error -22 [ 437.819644][ T1205] usb 7-1: USB disconnect, device number 23 [ 438.016677][T10173] sctp: [Deprecated]: syz.5.1034 (pid 10173) Use of int in max_burst socket option. [ 438.016677][T10173] Use struct sctp_assoc_value instead [ 438.109866][ T5870] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 438.345998][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 438.357958][ T5870] usb 3-1: no configurations [ 438.367829][ T5870] usb 3-1: can't read configurations, error -22 [ 438.381290][ T5870] usb usb3-port1: attempt power cycle [ 440.129274][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.135617][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.263638][ T5870] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 440.896161][ T5870] usb 3-1: device descriptor read/8, error -71 [ 441.115857][T10197] 9pnet_fd: Insufficient options for proto=fd [ 441.624531][T10207] bridge3: entered promiscuous mode [ 441.629802][T10207] bridge3: entered allmulticast mode [ 442.121762][ T30] audit: type=1400 audit(1762942303.559:1031): avc: denied { bind } for pid=10209 comm="syz.5.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 442.174476][ T56] block nbd0: Possible stuck request ffff888026085080: control (read@0,4096B). Runtime 300 seconds [ 442.719539][T10215] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1045'. [ 442.792028][T10218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.799212][T10218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 442.806756][T10218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 442.820813][T10215] gretap0: entered promiscuous mode [ 442.827277][T10218] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 442.946911][T10222] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1045'. [ 442.956076][T10222] 0ªî{X¹¦: renamed from gretap0 [ 443.128550][T10222] 0ªî{X¹¦: left promiscuous mode [ 443.139444][T10222] 0ªî{X¹¦: entered allmulticast mode [ 443.427223][T10222] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 443.532922][T10225] netlink: 'syz.4.1047': attribute type 4 has an invalid length. [ 443.800941][ T30] audit: type=1400 audit(1762942305.239:1032): avc: denied { relabelfrom } for pid=10229 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 443.843097][ T30] audit: type=1400 audit(1762942305.269:1033): avc: denied { relabelto } for pid=10229 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 444.138891][ T3094] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 444.524086][ T3094] usb 7-1: Using ep0 maxpacket: 32 [ 444.539930][ T3094] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 444.555822][ T3094] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.580341][ T3094] usb 7-1: config 0 descriptor?? [ 445.246143][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout [ 445.247499][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 445.252272][ T5136] Bluetooth: hci5: command 0x0405 tx timeout [ 445.252335][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 445.283172][ T3094] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 445.408211][ T3094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.494513][ T3094] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 445.507446][ T3094] usb 7-1: media controller created [ 445.613632][ T30] audit: type=1400 audit(1762942307.039:1034): avc: denied { listen } for pid=10250 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 445.649218][ T3094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.654581][ T30] audit: type=1400 audit(1762942307.039:1035): avc: denied { accept } for pid=10250 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 445.734182][ T5813] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 445.897229][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.905624][ T5813] usb 6-1: no configurations [ 445.910310][ T5813] usb 6-1: can't read configurations, error -22 [ 446.044160][ T5813] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 446.206528][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 446.214390][ T5813] usb 6-1: no configurations [ 446.219687][ T5813] usb 6-1: can't read configurations, error -22 [ 446.226431][ T5813] usb usb6-port1: attempt power cycle [ 446.594866][ T5813] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 446.617995][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 446.627057][ T5813] usb 6-1: no configurations [ 446.632036][ T5813] usb 6-1: can't read configurations, error -22 [ 447.135971][ T5813] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 447.171835][ T3094] az6027: usb out operation failed. (-71) [ 447.197616][T10261] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 447.207211][ T3094] az6027: usb out operation failed. (-71) [ 447.217648][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.233202][ T30] audit: type=1400 audit(1762942308.669:1036): avc: denied { read open } for pid=10264 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.258931][ T5813] usb 6-1: no configurations [ 447.275985][T10261] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 447.286000][ T3094] stb0899_attach: Driver disabled by Kconfig [ 447.289753][ T5813] usb 6-1: can't read configurations, error -22 [ 447.344343][ T5813] usb usb6-port1: unable to enumerate USB device [ 447.347493][ T3094] az6027: no front-end attached [ 447.347493][ T3094] [ 447.351835][ T30] audit: type=1400 audit(1762942308.669:1037): avc: denied { getattr } for pid=10264 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.362228][T10261] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 447.618248][ T3094] az6027: usb out operation failed. (-71) [ 447.636451][T10275] netlink: 'syz.1.1060': attribute type 4 has an invalid length. [ 447.646884][ T3094] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 447.747074][ T3094] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 447.843849][ T3094] dvb-usb: schedule remote query interval to 400 msecs. [ 447.877990][ T3094] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 448.117467][ T31] INFO: task syz.0.483:8062 blocked for more than 164 seconds. [ 448.139108][ T31] Not tainted syzkaller #0 [ 448.205815][ T3094] usb 7-1: USB disconnect, device number 24 [ 448.216853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.248471][ T31] task:syz.0.483 state:D stack:28856 pid:8062 tgid:8060 ppid:5810 task_flags:0x400040 flags:0x00080002 [ 448.274746][ T31] Call Trace: [ 448.290859][ T31] [ 448.304488][ T31] __schedule+0x1190/0x5de0 [ 448.322892][ T31] ? look_up_lock_class+0x6b/0x150 [ 448.368955][ T31] ? __lock_acquire+0x622/0x1c90 [ 448.394504][ T31] ? __pfx___schedule+0x10/0x10 [ 448.450770][ T31] ? find_held_lock+0x2b/0x80 [ 448.488222][ T31] ? schedule+0x2d7/0x3a0 [ 448.504083][ T30] audit: type=1400 audit(1762942309.939:1038): avc: denied { add_name } for pid=10263 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.550250][ T31] ? bdev_open+0x41a/0xe40 [ 448.572838][ T31] schedule+0xe7/0x3a0 [ 448.607927][ T31] schedule_preempt_disabled+0x13/0x30 [ 448.618265][ T30] audit: type=1400 audit(1762942309.969:1039): avc: denied { create } for pid=10263 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.640926][ T30] audit: type=1400 audit(1762942309.969:1040): avc: denied { write } for pid=10263 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=5135 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.661124][ T31] __mutex_lock+0x818/0x1060 [ 448.668165][ T30] audit: type=1400 audit(1762942309.969:1041): avc: denied { append } for pid=10263 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5135 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.701669][ T31] ? bdev_open+0x41a/0xe40 [ 448.706472][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 448.711618][ T31] ? bdev_open+0x41a/0xe40 [ 448.716389][ T31] bdev_open+0x41a/0xe40 [ 448.723217][ T31] ? iput+0x35/0x40 [ 448.727221][ T31] blkdev_open+0x34e/0x4f0 [ 448.731738][ T31] do_dentry_open+0x982/0x1530 [ 448.737573][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 448.774816][ T31] vfs_open+0x82/0x3f0 [ 448.779026][ T31] path_openat+0x1de4/0x2cb0 [ 448.783724][ T31] ? __pfx_path_openat+0x10/0x10 [ 448.788793][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 448.793828][ T30] audit: type=1400 audit(1762942310.229:1042): avc: denied { remove_name } for pid=10293 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5135 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.822442][ T31] do_filp_open+0x20b/0x470 [ 448.827157][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 448.832316][ T31] ? alloc_fd+0x471/0x7d0 [ 448.836959][ T31] do_sys_openat2+0x11b/0x1d0 [ 448.841738][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.847402][ T30] audit: type=1400 audit(1762942310.259:1043): avc: denied { unlink } for pid=10293 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=5135 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.870725][ T31] ? find_held_lock+0x2b/0x80 [ 448.882939][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 448.894250][ T31] __x64_sys_openat+0x174/0x210 [ 448.899317][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 448.905257][ T31] ? do_user_addr_fault+0x843/0x1370 [ 448.910701][ T31] do_syscall_64+0xcd/0xfa0 [ 448.930139][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.936596][ T31] RIP: 0033:0x7f9d1ef8df10 [ 448.941279][ T31] RSP: 002b:00007f9d1fdbab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 448.950316][ T31] RAX: ffffffffffffffda RBX: 0000000000000100 RCX: 00007f9d1ef8df10 [ 448.962763][ T31] RDX: 0000000000000100 RSI: 00007f9d1fdbac10 RDI: 00000000ffffff9c [ 448.979593][ T31] RBP: 00007f9d1fdbac10 R08: 0000000000000000 R09: 002364626e2f7665 [ 448.989752][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 449.003746][ T31] R13: 00007f9d1f1e6038 R14: 00007f9d1f1e5fa0 R15: 00007ffc554b8dd8 [ 449.012084][ T31] [ 449.015395][ T31] [ 449.015395][ T31] Showing all locks held in the system: [ 449.023166][ T31] 1 lock held by khungtaskd/31: [ 449.029128][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 449.042947][ T31] 3 locks held by kworker/u8:3/50: [ 449.048793][ T31] 2 locks held by pvrusb2-context/2336: [ 449.057883][ T31] #0: ffff888046a80188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xb6/0x4510 [ 449.068600][ T31] #1: ffffffff8e2772b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 449.079260][ T31] 7 locks held by kworker/0:2/3094: [ 449.084736][ T31] #0: ffff8880232c4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.095926][ T31] #1: ffffc9000be97d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.107472][ T31] #2: ffff888145787198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 449.116666][ T31] #3: ffff8880783c4198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9c0 [ 449.126169][ T31] #4: ffff888035a48160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 449.139603][ T31] #5: ffffffff8f9120e8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x184/0x4d0 [ 449.153557][ T31] #6: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 449.164289][ T31] 2 locks held by getty/5570: [ 449.169027][ T31] #0: ffff888035ada0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 449.179218][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 449.189646][ T31] 1 lock held by udevd/5821: [ 449.194511][ T31] #0: ffff888143386358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 449.203938][ T31] 4 locks held by udevd/5823: [ 449.208957][ T31] #0: ffff8880592418b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 449.221637][ T31] #1: ffff888033280488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 449.231375][ T31] #2: ffff8880590df3c8 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 449.241190][ T31] #3: ffff88803086f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 449.250824][ T31] 6 locks held by kworker/1:5/5929: [ 449.259668][ T31] #0: ffff8880232c4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.270923][ T31] #1: ffffc900046dfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.282794][ T31] #2: ffff888145357198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 449.292031][ T31] #3: ffff88803086f198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9c0 [ 449.301602][ T31] #4: ffff88802488f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 449.312427][ T31] #5: ffff888046a80188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x8a/0x630 [ 449.322904][ T31] 1 lock held by syz.0.483/8062: [ 449.328036][ T31] #0: ffff888143386358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 449.337600][ T31] 1 lock held by syz.6.1059/10266: [ 449.342838][ T31] #0: ffffffff8e3cfb80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 449.352959][ T31] 1 lock held by dhcpcd-run-hook/10310: [ 449.359241][ T31] [ 449.378061][ T31] ============================================= [ 449.378061][ T31] [ 449.412736][ T31] NMI backtrace for cpu 1 [ 449.412754][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 449.412774][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.412783][ T31] Call Trace: [ 449.412789][ T31] [ 449.412796][ T31] dump_stack_lvl+0x116/0x1f0 [ 449.412827][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 449.412846][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 449.412879][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 449.412905][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 449.412928][ T31] watchdog+0xf3f/0x1170 [ 449.412954][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.412976][ T31] ? __pfx_watchdog+0x10/0x10 [ 449.412995][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.413012][ T31] ? __kthread_parkme+0x19e/0x250 [ 449.413038][ T31] ? __pfx_watchdog+0x10/0x10 [ 449.413058][ T31] kthread+0x3c5/0x780 [ 449.413075][ T31] ? __pfx_kthread+0x10/0x10 [ 449.413093][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.413114][ T31] ? __pfx_kthread+0x10/0x10 [ 449.413131][ T31] ret_from_fork+0x675/0x7d0 [ 449.413145][ T31] ? __pfx_kthread+0x10/0x10 [ 449.413162][ T31] ret_from_fork_asm+0x1a/0x30 [ 449.413198][ T31] [ 449.413204][ T31] Sending NMI from CPU 1 to CPUs 0: [ 449.543381][ C0] NMI backtrace for cpu 0 [ 449.543396][ C0] CPU: 0 UID: 0 PID: 5798 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 449.543413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.543421][ C0] RIP: 0010:filter_irq_stacks+0x24/0x90 [ 449.543456][ C0] Code: 90 90 90 90 90 90 f3 0f 1e fa 85 f6 74 61 53 31 c0 48 bb 00 00 00 00 00 fc ff df 48 83 ec 10 48 89 fa 48 c1 ea 03 80 3c 1a 00 <75> 4a 48 8b 17 48 81 fa 30 02 00 81 72 16 48 81 fa 70 16 00 81 73 [ 449.543470][ C0] RSP: 0018:ffffc90000007ae8 EFLAGS: 00000246 [ 449.543482][ C0] RAX: 000000000000000f RBX: dffffc0000000000 RCX: 0000000000000001 [ 449.543491][ C0] RDX: 1ffff92000000f7b RSI: 0000000000000012 RDI: ffffc90000007bd8 [ 449.543500][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 449.543508][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 449.543516][ C0] R13: 0000000000000000 R14: ffff88803325a000 R15: ffffc90000007b60 [ 449.543524][ C0] FS: 0000555565507500(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 449.543538][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.543548][ C0] CR2: 00007f4ea8fbea10 CR3: 00000000353e1000 CR4: 00000000003526f0 [ 449.543557][ C0] Call Trace: [ 449.543562][ C0] [ 449.543568][ C0] stack_depot_save_flags+0x29/0x9c0 [ 449.543586][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 449.543600][ C0] kasan_save_stack+0x42/0x60 [ 449.543619][ C0] ? kasan_save_stack+0x33/0x60 [ 449.543632][ C0] ? kasan_save_track+0x14/0x30 [ 449.543644][ C0] ? __kasan_save_free_info+0x3b/0x60 [ 449.543662][ C0] ? __kasan_slab_free+0x5f/0x80 [ 449.543675][ C0] ? __rcu_free_sheaf_prepare+0x52/0x300 [ 449.543692][ C0] ? rcu_free_sheaf+0x1a/0xd0 [ 449.543710][ C0] ? rcu_core+0x79c/0x1530 [ 449.543725][ C0] ? handle_softirqs+0x219/0x8e0 [ 449.543741][ C0] ? do_softirq+0xb2/0xf0 [ 449.543756][ C0] ? __local_bh_enable_ip+0x100/0x120 [ 449.543772][ C0] ? tcp_recvmsg+0x115/0x680 [ 449.543788][ C0] ? inet_recvmsg+0x129/0x6a0 [ 449.543803][ C0] ? sock_recvmsg+0x1b2/0x250 [ 449.543815][ C0] ? sock_read_iter+0x2b9/0x3b0 [ 449.543826][ C0] ? vfs_read+0xa98/0xcf0 [ 449.543838][ C0] ? ksys_read+0x1f8/0x250 [ 449.543849][ C0] ? do_syscall_64+0xcd/0xfa0 [ 449.543863][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.543890][ C0] kasan_save_track+0x14/0x30 [ 449.543903][ C0] __kasan_save_free_info+0x3b/0x60 [ 449.543921][ C0] __kasan_slab_free+0x5f/0x80 [ 449.543935][ C0] __rcu_free_sheaf_prepare+0x52/0x300 [ 449.543953][ C0] ? rcu_core+0x797/0x1530 [ 449.543971][ C0] rcu_free_sheaf+0x1a/0xd0 [ 449.543993][ C0] rcu_core+0x79c/0x1530 [ 449.544015][ C0] ? __pfx_rcu_core+0x10/0x10 [ 449.544038][ C0] ? mark_held_locks+0x49/0x80 [ 449.544054][ C0] handle_softirqs+0x219/0x8e0 [ 449.544076][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 449.544095][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 449.544119][ C0] ? tcp_recvmsg+0x115/0x680 [ 449.544138][ C0] do_softirq+0xb2/0xf0 [ 449.544157][ C0] [ 449.544162][ C0] [ 449.544168][ C0] __local_bh_enable_ip+0x100/0x120 [ 449.544188][ C0] tcp_recvmsg+0x115/0x680 [ 449.544206][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 449.544225][ C0] ? sock_has_perm+0x259/0x2f0 [ 449.544251][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 449.544274][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 449.544292][ C0] inet_recvmsg+0x129/0x6a0 [ 449.544311][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 449.544333][ C0] sock_recvmsg+0x1b2/0x250 [ 449.544348][ C0] sock_read_iter+0x2b9/0x3b0 [ 449.544364][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 449.544383][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 449.544400][ C0] ? security_file_permission+0x71/0x210 [ 449.544421][ C0] ? rw_verify_area+0xcf/0x6c0 [ 449.544441][ C0] vfs_read+0xa98/0xcf0 [ 449.544455][ C0] ? __pfx_vfs_read+0x10/0x10 [ 449.544467][ C0] ? __might_fault+0x13b/0x190 [ 449.544490][ C0] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 449.544514][ C0] ksys_read+0x1f8/0x250 [ 449.544526][ C0] ? __pfx_ksys_read+0x10/0x10 [ 449.544542][ C0] do_syscall_64+0xcd/0xfa0 [ 449.544555][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.544568][ C0] RIP: 0033:0x7f352a18e09d [ 449.544579][ C0] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb bd e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d c1 a4 22 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 449.544591][ C0] RSP: 002b:00007fff191e6818 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.544609][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f352a18e09d [ 449.544618][ C0] RDX: 0000000000000004 RSI: 00007fff191e682c RDI: 0000000000000003 [ 449.544626][ C0] RBP: 0000000000000000 R08: 00000000000151e0 R09: 00007f352afea000 [ 449.544634][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff191e6c40 [ 449.544643][ C0] R13: 0000000000000004 R14: 00007fff191e682c R15: 00007fff191e68c0 [ 449.544658][ C0] [ 450.046983][ T3094] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 453.097606][ T5185] udevd[5185]: worker [5821] /devices/virtual/block/nbd0 timeout; kill it [ 453.107747][ T5185] udevd[5185]: seq 11868 '/devices/virtual/block/nbd0' killed