last executing test programs: 10m30.680902538s ago: executing program 2 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x8, 0x700, 0xff, 0x7ff, {{0x5, 0x4, 0x1, 0x14, 0x14, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000005001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 10m29.464332974s ago: executing program 2 (id=666): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000400)="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", 0x1000) 10m29.381293354s ago: executing program 2 (id=668): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty=0x97ff}}}], 0x20}}], 0x2, 0x0) 10m29.319307403s ago: executing program 2 (id=669): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef) write$FUSE_ATTR(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000940)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000080)={r10, 0x3, r9, 0x120000}) mount_setattr(r8, &(0x7f0000000040)='./file0\x00', 0x9100, &(0x7f0000000300)={0x80, 0x0, 0x80000, {r8}}, 0x20) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r12 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r13 = fsopen(&(0x7f00000002c0)='pipefs\x00', 0x1) fsmount(r13, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109021b00010000800009040bfd0133776100090587038800c5ff07"], 0x0) accept4(r12, &(0x7f0000000000)=@generic, &(0x7f0000000200)=0x80, 0x80800) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}}, 0x8004) 10m25.268688219s ago: executing program 2 (id=684): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) socket(0x11, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x1}}, 0xffffff30) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x8, 0x1}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@delchain={0xc0, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc2c895195e482108, 0xfff2}, {0xb, 0x8}, {0x2, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x3c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff6, 0xffff}}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xfff}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x47}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "7ca465de22aefb73dbe904dda135248d"}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "db938db170faa4703fe6a1d1b4feb977"}]}}]}, 0xc0}}, 0x0) 10m24.656878249s ago: executing program 2 (id=686): socket$inet_udp(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f0000000d00)=""/194, 0xc2}, {&(0x7f0000000c00)=""/166, 0xa6}, {0x0}, {&(0x7f0000001000)=""/180, 0xb4}, {&(0x7f00000010c0)=""/201, 0xc9}], 0x9, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r5, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000180)=0x1) userfaultfd(0x80001) 10m24.443674163s ago: executing program 32 (id=686): socket$inet_udp(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f0000000d00)=""/194, 0xc2}, {&(0x7f0000000c00)=""/166, 0xa6}, {0x0}, {&(0x7f0000001000)=""/180, 0xb4}, {&(0x7f00000010c0)=""/201, 0xc9}], 0x9, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r5, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000180)=0x1) userfaultfd(0x80001) 1m8.44589942s ago: executing program 0 (id=3275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) 1m8.384393409s ago: executing program 0 (id=3277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000016, 0x8001, 0x0, 0x9, 0x1, 0x827, 0xfa11, 0x3}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x21, &(0x7f00000006c0)={&(0x7f0000000000)=@deltaction={0x28, 0x32, 0x101, 0x1, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffffffe}}]}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x208f) acct(&(0x7f0000000040)='./file0/file0\x00') syz_fuse_handle_req(r8, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292477c2cea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935db9941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee026131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b46060050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e4d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749406e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74bd2447ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aabc882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc20c00bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc384d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df83203b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0xffffffffffffffff, {0x2, 0x1, 0x101, 0x4, 0x100, 0x28000, {0x40, 0xd08, 0x549619e3, 0xff, 0x0, 0xcb7, 0x8, 0x60d, 0x122, 0x6000, 0xcf32, 0x0, 0xffffffffffffffff, 0xff, 0x2f7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000440)={0x50, 0xffffffffffffffda, r9, {0x7, 0x29, 0x0, 0x40, 0x0, 0x7, 0xfffffff9, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r10 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r10, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m7.240824974s ago: executing program 0 (id=3281): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0x0, 0x8000000}, &(0x7f0000000240), &(0x7f0000000280)) r4 = fsmount(r3, 0x0, 0xa) fchownat(r4, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008f9000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000008000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) 1m6.383641502s ago: executing program 0 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000780)=@newtaction={0x254, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x240, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xffffda98, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x1f8, 0xa, 0x0, 0x0, {{0x7}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x101, 0x6, {0x0, 'security\x00', 0xc5, 0x7, "7fe6be5990f39cc8a0fe5e78f37ea3f3a3ed0e170da449649a0b34fff5a8206684bb0607cd5d93ad1dd082fdff2bf7276924a278481a3ca127c984883ea62ecad11bc67b2ee03246dc5e9fd1f33096cb3ed02af75a66e7cda444fa8bd6b6425a83dac95ef39e89536b2d975769837b18d1c584af21dac15e050656d0bb79333b4fbf85a346ccfa77cb324d01ef1be1e60097a2e0e5905f70964092188264ae28d8c6518c146435175f7792db55e86d2377e721e12544e197d7870d34d91b10a57eb4efa36ccd1da52cf860cbf86f8358575848e5777d84"}}]}, {0xcb, 0x6, "569f98ca317208e3a6d5b9ab44751f0a8544c4247486bef52d031093b11bfcf6e0919aa08e062d1343932ead291ad7aec1dc5f9c63324059578ebf4af6d8c21297e0a14d2205b1dfe327327859bd9c8775e13d1a606bc0d7be0fc40740f9bfcfb8284017c1e55746b6fb953cd0e98679fb8eeb022fd2fa01582688727dbd5cf2762b2b30f338d58fc6a85e8f80e34b152b24b48e51f11fbc793493a35f163f4911b172e5b8e5f30ea3802f3f01855796aacb045cea4c5be7f8fd33b90b69302f9eac26d08d747a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x1, @any, 0x100, 0x2}, 0xe) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r6, 0x0) setpgid(0x0, r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r8, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r6, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c00024000000000000000030800044000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 1m6.263207494s ago: executing program 0 (id=3283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c010000100013072cbd7000fcdbdf25fc02000000000000000000000000000020010000000000000000000002000001000000204e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m5.36096898s ago: executing program 0 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xf5ffffff}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) 1m4.991544692s ago: executing program 33 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xf5ffffff}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) 9.654027596s ago: executing program 6 (id=3513): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000001100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0xffffffff, 0x5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000002000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000002c0)=0x108005, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, r6, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x4}}, @ext_ch_sw={0x4, 0x4, {{0x8}, @void}}}}]}, 0x40}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e80000000000007e000000002c0000"], 0x48) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0x200, 0x260, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x1d, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x0, 0x0, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 7.248567976s ago: executing program 4 (id=3522): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000400)="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", 0xffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000140012800b00010067726574617000000400028008000a"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x610, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3, 0x8000000}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8000000260001"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r5 = syz_open_dev$video(&(0x7f00000001c0), 0x3, 0x2500) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x9, 0x5, 0x0, 0x0, @adapter={0x51, 0x7fffffffffffffff, 0x8, 0x80, 0x8}}]}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x3, 0x8248}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000001400)=@ethtool_per_queue_op={0x4b, 0xf, [0x200, 0x9, 0x44c5be01, 0x3, 0x101, 0x0, 0xc, 0x7, 0x7fffffff, 0x80000000, 0x7f, 0x5884dd77, 0xcd7f, 0x74a, 0xe960, 0x101, 0x47a, 0x400, 0xfffffff3, 0xfff, 0xb, 0x4, 0xf, 0x0, 0x7, 0x0, 0x180, 0x9, 0x6, 0x5, 0x6, 0x3, 0xc, 0x5, 0x139b, 0x8, 0xa, 0x8, 0x5, 0x1, 0x3, 0x6, 0x2, 0x2d6, 0x80000001, 0x4, 0x101, 0x5, 0xfff, 0x73, 0x57, 0xfffffffa, 0x0, 0x6, 0x7fff, 0x9, 0xffffffff, 0x6, 0x5, 0x55, 0x9, 0xfff, 0x6, 0x8000, 0xf, 0x4, 0x0, 0xffffffff, 0x2, 0x3, 0x5, 0x4, 0x1, 0x0, 0x3, 0x9, 0x0, 0x6, 0x7fff, 0x0, 0x3, 0x0, 0xfffffffb, 0x5, 0xf, 0x1, 0x5, 0x0, 0x0, 0x2, 0x1, 0x9, 0x2, 0x1, 0xece, 0xc, 0xadb6, 0xd, 0x10001, 0xd, 0x6, 0x6, 0x3, 0x3353a7, 0x295, 0x6, 0x8, 0x5, 0xfffffffb, 0x7, 0x8, 0xffff8001, 0x2, 0xf, 0x559, 0x3, 0x5, 0x1, 0x7, 0x2, 0x6, 0x800, 0xa, 0x6, 0x6, 0x6, 0x3ff, 0x6], "10b7823dc98cf93874a0c19957dca6"}}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x9) 7.211751737s ago: executing program 5 (id=3523): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r1, 0x1, 0x70bd28, 0x25dfdc03, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20000840) 7.028939608s ago: executing program 5 (id=3524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x953}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x56) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000480)) 6.780493764s ago: executing program 6 (id=3525): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 6.709188161s ago: executing program 4 (id=3526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0xf, 0xa, 0x2, "020000000000006825052e8bd9e6660201000000000000000000000200e7ffff", 0x30314442}) 6.561554619s ago: executing program 6 (id=3527): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x7, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)=ANY=[@ANYBLOB="d75f010000000000000063855554"], &(0x7f0000002180), 0x700) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000020c0)=ANY=[@ANYRES8=0x0]) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = add_key(&(0x7f00000021c0)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000002400)="ae274b72f67e4ad00588d8707e64d356354c968c80bb14cb6eb8676660316d32e5573b2883de7a3535669f4a1b06bfd1449bda537d685a8b78e70c33b4f702e4619b6fc4defec50ce5bf8781da7c281be570347b4f710e82035e9ab53866418ba6162458041bfa2ce18c8404ed19507091afe3d7e87496c8109e7cfdceaf60ac7d8f182ee9949d8bec042dce90ab01ce1d721475b237f0e70b52c7cd5366af54795d6918df76d73006b15d4c1db8882928d91942c3e15ef0e79bdd3557f76ad062d6933f35b1cd1cb99a7ef95b783bbc6cbf0edbc5", 0xd5, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000023c0)=[0x0]}) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') 6.031808731s ago: executing program 1 (id=3529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) socket$inet(0x2b, 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x5, 0x0, r7}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) 5.901033762s ago: executing program 1 (id=3530): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd70007f001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.811445535s ago: executing program 4 (id=3531): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = inotify_init() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="63296f62bd5b16d7a496d62cd8bb810be9dcb97471decb814774da3acbc074f7fd14ac0b95ee52ab5b4080813a67b324e31958", 0x33}, {0x0}], 0x2}}], 0x1, 0x480e0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) tkill(0x0, 0xb) execveat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x1) (fail_nth: 3) 5.75750188s ago: executing program 3 (id=3532): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x8) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$media(&(0x7f0000000000), 0x33ac98ac, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setrlimit(0x7, &(0x7f0000000640)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)=0x80000003) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 5.13291115s ago: executing program 4 (id=3533): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) socket(0x11, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x1}}, 0xffffff30) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x8, 0x1}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@delchain={0x78, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc2c895195e482108, 0xfff2}, {0xb, 0x8}, {0x2, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x3c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff6, 0xffff}}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xfff}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x78}}, 0x0) 5.009746501s ago: executing program 5 (id=3534): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@private2}, &(0x7f0000000180)=0x14) openat$kvm(0xffffffffffffff9c, 0x0, 0x602, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @remote}}}, 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x300008c, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f727400"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 4.86542025s ago: executing program 1 (id=3535): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}], {0x4}}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4.096809262s ago: executing program 3 (id=3536): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x1ff}, 0x0) inotify_init() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000140), &(0x7f00000002c0)=0xfffffffffffffffc) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="63296f62bd5b16d7a496d62cd8bb810be9dcb97471decb814774da3acbc074f7fd14ac0b95ee52ab5b4080813a67b324e31958", 0x33}, {0x0}], 0x2}}], 0x1, 0x480e0) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r7, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) 4.088223585s ago: executing program 5 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000000ffcef34ea09bed2a3732e1f3de06311050e82dedd80ac994d268075a49edde400ba6407713ef19577240f304fa77ac1b7aaadd13fcccb457ecb89ba30a7c3cbadc083a266964ddc1f705617f6e58cc8684794de9284b9439aa5037b6d8e0fc5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) semop(0x0, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2}}}}]}, 0x4c}}, 0x0) 3.630448217s ago: executing program 1 (id=3538): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 3.427818793s ago: executing program 1 (id=3539): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$sg(&(0x7f00000000c0), 0x3, 0x202101) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc08c5334, &(0x7f0000000400)={0x0, 0x2}) 3.335569253s ago: executing program 1 (id=3540): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="df000180040001803dd3d3e1e1647384"], 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x22, 0x2, 0x3) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r6, 0xffffffffffffffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r13, 0x4138ae84, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) close_range(0xffffffffffffffff, r10, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 3.136999527s ago: executing program 3 (id=3541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x2, 0x1000000}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) 3.132835023s ago: executing program 6 (id=3542): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000180)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e000108000740"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x4084) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x308, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x2, 0x40, 0x12, 0xff, 0x100, 0x200}}, @common=@rt={{0x138}, {0xa, [0x4b, 0x1], 0x1, 0x8, 0x2, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @loopback, @mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x20}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_to_hsr\x00', '\x00', {0xff}, {0xff}, 0x19, 0x9, 0x2, 0x38}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8000}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xfffffa2f, 0x4, 0x0, [0x8, 0x0, 0x53, 0x4, 0x7, 0x1, 0x4, 0x8, 0x2, 0x1, 0x3565, 0xc, 0x7, 0x5, 0x8, 0x5], 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 2.809584719s ago: executing program 5 (id=3543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) (async) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async, rerun: 32) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r10) (async) ptrace$setregs(0xd, r10, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r10, 0x200, &(0x7f0000000080)={0x0, 0x30}) 2.32431887s ago: executing program 3 (id=3544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0500030001"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0x0, 0x6}}, 0x18) (async, rerun: 32) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x541e, 0x0) (async, rerun: 64) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x3, {0x0, 0xff, 0x3}, 0xfe}, 0x18) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r10 = socket(0x1d, 0x2, 0x6) r11 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000001840)={0x90000001}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, r12, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x6, 0x0, 0x10, @private0, @empty, 0x8, 0x8, 0x85a, 0x5}}) (rerun: 64) bind$xdp(r10, &(0x7f00000003c0)={0x2c, 0x8, r12, 0x1c, r10}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x1, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 2.079666955s ago: executing program 5 (id=3545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a6970"], 0x50}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) close(r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x4010) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYBLOB="4d2a5ac1c9b0a8af59646c8b268a7dcec7d0e542a7c553909c9c2f24c35aa92c99b621e1378b7cb1e8c1ddcb9e"], 0x74}, 0x1, 0x0, 0x0, 0x10008803}, 0x0) 1.959951927s ago: executing program 6 (id=3546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x3f, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) 1.796872033s ago: executing program 3 (id=3547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/40, 0x28}], 0x1, 0x81, 0x3) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x14, 0xc, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4004010) 695.432834ms ago: executing program 6 (id=3548): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x55f6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10278e, 0x0, &(0x7f00000005c0), &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c0000010000008eff070000000000002ae9db06abff846c91b930f8881f9581a736e5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r3}, 0x38) 689.229753ms ago: executing program 3 (id=3549): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200280, 0x0) write$char_usb(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x5, 0xffffffffffffffff, 'id1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x7, 0x2, 0x5, 0x8001, r0, 0x2, '\x00', 0x0, r1, 0x1, 0x4, 0x4, 0x0, @value=r2}, 0x50) r3 = getpgrp(0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000080)={0x1, 0xffffffff, 0x10, 0x9, 0xea1, 0x4, 0x3, 0x0, 0x61, 0x0, 0xffffffff, 0x80, 0x401, 0x9}) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0xffff, 0x2, {0x0}, 0x10000003}) syz_emit_vhci(&(0x7f0000000680)=ANY=[], 0xa) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, 0x0, 0x400c006) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='msdos\x00', 0x1) socket(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r9, 0x0, 0x3}) 59.849411ms ago: executing program 4 (id=3550): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$sg(&(0x7f00000000c0), 0x3, 0x202101) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc08c5334, &(0x7f0000000400)={0x0, 0x2}) 0s ago: executing program 4 (id=3551): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2739}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x2151a, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa072, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x5, {0x5, 0xa, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) kernel console output (not intermixed with test programs): 10978][T16640] nfnetlink_rcv_batch+0x154a/0x2350 [ 784.211019][T16640] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 784.211062][T16640] ? avc_has_perm_noaudit+0x149/0x3b0 [ 784.211114][T16640] ? __nla_parse+0x40/0x60 [ 784.211137][T16640] nfnetlink_rcv+0x3c1/0x430 [ 784.211162][T16640] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 784.211195][T16640] netlink_unicast+0x5aa/0x870 [ 784.211219][T16640] ? __pfx_netlink_unicast+0x10/0x10 [ 784.211250][T16640] netlink_sendmsg+0x8c8/0xdd0 [ 784.211275][T16640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.211306][T16640] ____sys_sendmsg+0xa5d/0xc30 [ 784.211338][T16640] ? copy_msghdr_from_user+0x10a/0x160 [ 784.211355][T16640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.211389][T16640] ___sys_sendmsg+0x134/0x1d0 [ 784.211409][T16640] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.211456][T16640] __sys_sendmsg+0x16d/0x220 [ 784.211475][T16640] ? __pfx___sys_sendmsg+0x10/0x10 [ 784.211510][T16640] do_syscall_64+0xcd/0xf80 [ 784.211534][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.211552][T16640] RIP: 0033:0x7f70e4d8f749 [ 784.211566][T16640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.211582][T16640] RSP: 002b:00007f70e5cfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.211599][T16640] RAX: ffffffffffffffda RBX: 00007f70e4fe5fa0 RCX: 00007f70e4d8f749 [ 784.211610][T16640] RDX: 0000000020008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 784.211621][T16640] RBP: 00007f70e5cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 784.211631][T16640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.211641][T16640] R13: 00007f70e4fe6038 R14: 00007f70e4fe5fa0 R15: 00007ffe85c2d968 [ 784.211665][T16640] [ 784.666121][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 784.787733][T16366] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 785.329933][T16366] usb 6-1: Using ep0 maxpacket: 16 [ 785.337128][T16366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.354515][T16366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.375369][T16366] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 785.403388][T16366] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 785.421030][T16366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.421623][T16660] FAULT_INJECTION: forcing a failure. [ 785.421623][T16660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.450223][T16660] CPU: 0 UID: 0 PID: 16660 Comm: syz.0.3178 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.450249][T16660] Tainted: [L]=SOFTLOCKUP [ 785.450255][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.450266][T16660] Call Trace: [ 785.450272][T16660] [ 785.450279][T16660] dump_stack_lvl+0x16c/0x1f0 [ 785.450310][T16660] should_fail_ex+0x512/0x640 [ 785.450340][T16660] _copy_from_iter+0x2a4/0x16c0 [ 785.450369][T16660] ? __alloc_skb+0x220/0x410 [ 785.450393][T16660] ? __alloc_skb+0x35d/0x410 [ 785.450418][T16660] ? __pfx__copy_from_iter+0x10/0x10 [ 785.450446][T16660] ? netlink_autobind.isra.0+0x158/0x370 [ 785.450476][T16660] netlink_sendmsg+0x820/0xdd0 [ 785.450501][T16660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.450531][T16660] ____sys_sendmsg+0xa5d/0xc30 [ 785.450555][T16660] ? copy_msghdr_from_user+0x10a/0x160 [ 785.450572][T16660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.450606][T16660] ___sys_sendmsg+0x134/0x1d0 [ 785.450624][T16660] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.450671][T16660] __sys_sendmsg+0x16d/0x220 [ 785.450689][T16660] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.450722][T16660] do_syscall_64+0xcd/0xf80 [ 785.450745][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.450762][T16660] RIP: 0033:0x7f1fe2d8f749 [ 785.450776][T16660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.450792][T16660] RSP: 002b:00007f1fe3b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.450808][T16660] RAX: ffffffffffffffda RBX: 00007f1fe2fe5fa0 RCX: 00007f1fe2d8f749 [ 785.450819][T16660] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000004 [ 785.450830][T16660] RBP: 00007f1fe3b87090 R08: 0000000000000000 R09: 0000000000000000 [ 785.450839][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.450849][T16660] R13: 00007f1fe2fe6038 R14: 00007f1fe2fe5fa0 R15: 00007fffce9ad1b8 [ 785.450874][T16660] [ 785.452831][T16366] usb 6-1: config 0 descriptor?? [ 785.586026][T15884] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 785.989841][T15884] usb 4-1: Using ep0 maxpacket: 8 [ 785.992709][T15884] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 785.992733][T15884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.001526][T15884] usb 4-1: config 0 descriptor?? [ 786.012674][T15884] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 786.109133][ T30] audit: type=1400 audit(1766304261.605:937): avc: denied { read } for pid=16672 comm="syz.0.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 786.247807][T16366] hid_parser_main: 1 callbacks suppressed [ 786.247826][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.261583][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.269383][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.282065][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.289910][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.297879][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.306080][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.313904][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.322091][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.356586][T16366] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 786.380145][T16366] hid-multitouch 0003:0457:07DA.001E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 786.542206][T15884] usb 6-1: USB disconnect, device number 78 [ 786.600072][T16679] sit0: entered promiscuous mode [ 786.623056][T16679] netlink: 'syz.0.3184': attribute type 1 has an invalid length. [ 786.656974][T16679] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3184'. [ 786.765572][T16681] xt_connbytes: Forcing CT accounting to be enabled [ 786.772676][T16681] Cannot find set identified by id 0 to match [ 786.868257][T16683] loop3: detected capacity change from 0 to 7 [ 786.878811][T16683] Dev loop3: unable to read RDB block 7 [ 786.884587][T16683] loop3: unable to read partition table [ 786.892266][T16683] loop3: partition table beyond EOD, truncated [ 786.898573][T16683] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 786.930094][ T789] usb 4-1: USB disconnect, device number 83 [ 786.993481][ T30] audit: type=1800 audit(1766304262.495:938): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3187" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 787.222117][T16691] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 787.245192][ T30] audit: type=1400 audit(1766304262.745:939): avc: denied { bind } for pid=16692 comm="syz.4.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 787.402075][T16366] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 787.469859][ T5880] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 787.535668][T16702] FAULT_INJECTION: forcing a failure. [ 787.535668][T16702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.550010][T16702] CPU: 1 UID: 0 PID: 16702 Comm: syz.3.3193 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.550043][T16702] Tainted: [L]=SOFTLOCKUP [ 787.550049][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.550059][T16702] Call Trace: [ 787.550065][T16702] [ 787.550072][T16702] dump_stack_lvl+0x16c/0x1f0 [ 787.550098][T16702] should_fail_ex+0x512/0x640 [ 787.550126][T16702] _copy_to_user+0x32/0xd0 [ 787.550152][T16702] simple_read_from_buffer+0xcb/0x170 [ 787.550177][T16702] proc_fail_nth_read+0x197/0x240 [ 787.550196][T16702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.550215][T16702] ? rw_verify_area+0xcf/0x6c0 [ 787.550233][T16702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.550249][T16702] vfs_read+0x1e4/0xcf0 [ 787.550270][T16702] ? __pfx___mutex_lock+0x10/0x10 [ 787.550294][T16702] ? __pfx_vfs_read+0x10/0x10 [ 787.550321][T16702] ? __fget_files+0x20e/0x3c0 [ 787.550352][T16702] ksys_read+0x12a/0x250 [ 787.550372][T16702] ? __pfx_ksys_read+0x10/0x10 [ 787.550391][T16702] ? v4l2_ioctl+0x1c5/0x250 [ 787.550410][T16702] ? fput+0x70/0xf0 [ 787.550429][T16702] do_syscall_64+0xcd/0xf80 [ 787.550452][T16702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.550469][T16702] RIP: 0033:0x7f4ba5f8e15c [ 787.550482][T16702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 787.550499][T16702] RSP: 002b:00007f4ba6e36030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.550514][T16702] RAX: ffffffffffffffda RBX: 00007f4ba61e5fa0 RCX: 00007f4ba5f8e15c [ 787.550525][T16702] RDX: 000000000000000f RSI: 00007f4ba6e360a0 RDI: 0000000000000004 [ 787.550535][T16702] RBP: 00007f4ba6e36090 R08: 0000000000000000 R09: 0000000000000000 [ 787.550545][T16702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 787.550555][T16702] R13: 00007f4ba61e6038 R14: 00007f4ba61e5fa0 R15: 00007ffdc8513798 [ 787.550579][T16702] [ 787.757444][T16366] usb 1-1: Using ep0 maxpacket: 16 [ 787.765127][T16366] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.775648][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 787.785592][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 787.796002][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 787.805579][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 787.816641][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 787.826329][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 787.836287][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 787.841895][T16706] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3195'. [ 787.845841][T16700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 787.864284][T16700] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 787.873351][T16366] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 787.883202][T16366] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 787.898978][T16366] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 787.908149][T16366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.916502][T16366] usb 1-1: Product: syz [ 787.921316][T16366] usb 1-1: Manufacturer: syz [ 787.925922][T16366] usb 1-1: SerialNumber: syz [ 787.934770][T16688] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 787.949830][ T5880] usb 2-1: device descriptor read/64, error -71 [ 788.022959][T16704] team0 (unregistering): Port device ip6tnl1 removed [ 788.189896][ T5880] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 788.355457][ T5880] usb 2-1: device descriptor read/64, error -71 [ 788.513228][ T5880] usb usb2-port1: attempt power cycle [ 789.259834][ T5880] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 789.283693][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 789.298679][T16721] team_slave_0: entered promiscuous mode [ 789.304393][T16721] team_slave_1: entered promiscuous mode [ 789.311225][ T5880] usb 2-1: device descriptor read/8, error -71 [ 789.311289][T16721] macsec1: entered promiscuous mode [ 789.322826][T16721] team0: entered promiscuous mode [ 789.328280][T16721] macsec1: entered allmulticast mode [ 789.333793][T16721] team0: entered allmulticast mode [ 789.338899][T16721] team_slave_0: entered allmulticast mode [ 789.344810][T16721] team_slave_1: entered allmulticast mode [ 789.353360][T16721] team0: left allmulticast mode [ 789.358343][T16721] team_slave_0: left allmulticast mode [ 789.363894][T16721] team_slave_1: left allmulticast mode [ 789.369478][T16721] team0: left promiscuous mode [ 789.374801][T16721] team_slave_0: left promiscuous mode [ 789.380257][T16721] team_slave_1: left promiscuous mode [ 789.589797][ T5880] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 789.620350][ T5880] usb 2-1: device descriptor read/8, error -71 [ 789.898293][ T5814] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 789.909604][ T5880] usb usb2-port1: unable to enumerate USB device [ 790.405472][T16366] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 790.412718][T16366] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 790.435802][T16366] cdc_ncm 1-1:1.0: bind() failure [ 790.446812][T16366] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 790.454403][T16366] cdc_ncm 1-1:1.1: bind() failure [ 790.463270][T16366] usb 1-1: USB disconnect, device number 77 [ 790.491380][ T5814] usb 6-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 790.500809][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.512687][ T5814] usb 6-1: config 0 descriptor?? [ 790.520061][ T5814] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 790.530334][ T5814] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 790.622799][T16743] netlink: zone id is out of range [ 790.627909][T16743] netlink: zone id is out of range [ 790.633590][T16743] netlink: zone id is out of range [ 790.638698][T16743] netlink: zone id is out of range [ 790.644211][T16743] netlink: zone id is out of range [ 790.649457][T16743] netlink: zone id is out of range [ 790.679907][T16743] netlink: zone id is out of range [ 790.685242][T16743] netlink: zone id is out of range [ 790.690550][T16743] netlink: zone id is out of range [ 790.695833][T16743] netlink: zone id is out of range [ 790.820590][ T5814] usb 6-1: USB disconnect, device number 79 [ 790.899849][ T789] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 791.028073][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3208'. [ 791.069431][T16753] bond5: (slave vcan0): Releasing backup interface [ 791.076108][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 791.084615][T16753] vcan0 (unregistering): left promiscuous mode [ 791.094417][T16753] bond5: Destroying bond [ 791.124917][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.138422][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.198392][ T789] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 791.212343][ T789] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 791.221897][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.359570][ T789] usb 2-1: config 0 descriptor?? [ 791.583051][T16753] bond5 (unregistering): Released all slaves [ 791.810539][ T789] hid_parser_main: 17 callbacks suppressed [ 791.810553][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 791.884041][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 791.960632][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 791.970796][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 791.978424][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 792.068025][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 792.100812][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 792.127616][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 792.161260][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 792.188691][ T789] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 792.218998][ T789] hid-multitouch 0003:0457:07DA.001F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 792.280271][ T789] usb 2-1: USB disconnect, device number 49 [ 792.508022][ T5136] Bluetooth: hci4: unexpected event for opcode 0x040d [ 793.939267][T16785] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 793.959731][ T5951] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 794.060635][T16786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16786 comm=syz.3.3218 [ 794.119777][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 794.126614][ T5951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 794.167082][ T5951] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 794.189043][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.197660][T16785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1005 sclass=netlink_tcpdiag_socket pid=16785 comm=syz.3.3218 [ 794.210669][ T5951] usb 2-1: Product: syz [ 794.214800][ T5951] usb 2-1: Manufacturer: syz [ 794.219427][ T5951] usb 2-1: SerialNumber: syz [ 794.225997][T16785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3218'. [ 794.241411][ T5951] usb 2-1: config 0 descriptor?? [ 794.277614][ T5951] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 794.286859][ T5951] usb 2-1: Detected FT232R [ 794.439245][T16798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3222'. [ 794.902919][ T5951] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 795.538243][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'. [ 796.684798][ T5951] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 796.694561][ T5951] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 796.703095][ T5951] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 796.713165][ T5951] usb 2-1: USB disconnect, device number 50 [ 796.722765][ T5951] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 796.735653][ T5951] ftdi_sio 2-1:0.0: device disconnected [ 796.789384][T16833] batadv_slave_1: entered promiscuous mode [ 796.843040][ T30] audit: type=1400 audit(1766304272.345:940): avc: denied { write } for pid=16834 comm="syz.3.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 797.112620][ T5951] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 797.210397][T16841] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3235'. [ 797.269948][ T5964] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 797.282115][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 797.420265][ T5951] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 797.460923][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.503387][ T5951] usb 2-1: config 0 descriptor?? [ 797.527330][ T5964] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 797.537918][T16832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 797.545259][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.559922][ T5964] usb 6-1: Product: syz [ 797.564116][ T5964] usb 6-1: Manufacturer: syz [ 797.568770][ T5964] usb 6-1: SerialNumber: syz [ 797.580857][T16825] batadv_slave_1: left promiscuous mode [ 797.647753][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.658596][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.666374][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.677909][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.688083][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.753136][T16843] lo speed is unknown, defaulting to 1000 [ 797.768152][T16843] lo speed is unknown, defaulting to 1000 [ 798.117149][T16843] chnl_net:caif_netlink_parms(): no params data found [ 798.240791][T16843] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.247957][T16843] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.255132][T16843] bridge_slave_0: entered allmulticast mode [ 798.262443][T16843] bridge_slave_0: entered promiscuous mode [ 798.269793][T16843] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.276997][T16843] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.284195][T16843] bridge_slave_1: entered allmulticast mode [ 798.291698][T16843] bridge_slave_1: entered promiscuous mode [ 798.344976][T16843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.355907][T16832] netlink: 'syz.1.3232': attribute type 10 has an invalid length. [ 798.365597][T16843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.375119][T16832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3232'. [ 798.406520][T16832] dummy0: entered promiscuous mode [ 798.413119][T16832] bridge0: port 1(dummy0) entered blocking state [ 798.419618][T16832] bridge0: port 1(dummy0) entered disabled state [ 798.426450][T16832] dummy0: entered allmulticast mode [ 798.434392][T16832] bridge0: port 1(dummy0) entered blocking state [ 798.440853][T16832] bridge0: port 1(dummy0) entered forwarding state [ 798.451314][T16843] team0: Port device team_slave_0 added [ 798.468008][T16843] team0: Port device team_slave_1 added [ 798.509521][T16843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.517299][T16843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.549985][T16843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.562379][T16843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.574413][T16843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.600906][T16843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.714373][T16843] hsr_slave_0: entered promiscuous mode [ 798.722428][T16843] hsr_slave_1: entered promiscuous mode [ 798.730577][T16843] debugfs: 'hsr0' already exists in 'hsr' [ 798.739473][T16843] Cannot create hsr debugfs directory [ 798.909893][ T5964] net_ratelimit: 99 callbacks suppressed [ 798.909913][ T5964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 798.949864][ T5964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 798.992343][ T5964] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 799.039313][ T5964] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 799.069626][ T5964] usb 6-1: USB disconnect, device number 80 [ 799.108192][T16862] No control pipe specified [ 799.176492][T16843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.219971][T15884] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 799.270205][T16843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.366260][T16843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.413174][T15884] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.423015][T15884] usb 1-1: config 0 interface 0 has no altsetting 0 [ 799.429598][T15884] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 799.460060][T15884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.470535][ T5964] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 799.482133][T15884] usb 1-1: config 0 descriptor?? [ 799.557184][T16843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.619845][ T5964] usb 6-1: device descriptor read/64, error -71 [ 799.690418][T16870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.700961][T16870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.719889][ T5813] Bluetooth: hci0: command tx timeout [ 799.731238][T16843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 799.774020][T16843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 799.784568][T16843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 799.812518][T16843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 799.921982][ T5964] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 799.938348][ T5951] usbhid 2-1:0.0: can't add hid device: -71 [ 799.948156][T15884] aquacomputer_d5next 0003:0C70:F0B6.0020: item fetching failed at offset 5/7 [ 799.957479][ T5813] Bluetooth: hci5: command 0x0406 tx timeout [ 799.965132][ T5951] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 799.969303][T16843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.976612][ T5951] usb 2-1: USB disconnect, device number 51 [ 799.986635][T15884] aquacomputer_d5next 0003:0C70:F0B6.0020: probe with driver aquacomputer_d5next failed with error -22 [ 800.029060][T16843] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.047360][T12605] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.054499][T12605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.089725][ T5964] usb 6-1: device descriptor read/64, error -71 [ 800.103437][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.110530][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.200231][ T5964] usb usb6-port1: attempt power cycle [ 800.238007][ T5814] usb 1-1: USB disconnect, device number 78 [ 800.406023][T16886] Bluetooth: MGMT ver 1.23 [ 800.642961][ T5964] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 800.674216][ T5964] usb 6-1: device descriptor read/8, error -71 [ 800.716145][T16843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.948146][T16896] netlink: 'syz.3.3248': attribute type 4 has an invalid length. [ 801.319568][ T5964] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 801.350538][ T5964] usb 6-1: device descriptor read/8, error -71 [ 801.472580][ T5964] usb usb6-port1: unable to enumerate USB device [ 801.533896][T16843] veth0_vlan: entered promiscuous mode [ 801.623698][T16843] veth1_vlan: entered promiscuous mode [ 801.930859][ T5136] Bluetooth: hci0: command tx timeout [ 801.964198][T16843] veth0_macvtap: entered promiscuous mode [ 801.973652][T16843] veth1_macvtap: entered promiscuous mode [ 802.034290][T16912] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 802.042299][T16912] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 802.051252][T16912] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 802.059054][T16912] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 802.476945][T16843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.495749][T16843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.510383][T12605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.534510][T12605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.545707][T12605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.570263][T12605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.827970][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 802.838623][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 802.850822][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 802.860853][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 802.872503][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 802.882529][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 802.893612][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 802.903380][T16926] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 802.912963][T16926] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 802.925323][T16366] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 803.067501][ T30] audit: type=1326 audit(1766304278.565:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.092364][ T30] audit: type=1326 audit(1766304278.595:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.137356][T16924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3256'. [ 803.148619][ T30] audit: type=1326 audit(1766304278.625:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.152907][T16927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 803.191300][T16927] block device autoloading is deprecated and will be removed. [ 803.198861][ T30] audit: type=1326 audit(1766304278.625:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.222518][T12620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.230375][T12620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.244522][ T30] audit: type=1326 audit(1766304278.625:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.263097][T12622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.289499][T12622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.291353][ T30] audit: type=1326 audit(1766304278.625:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.347338][T16366] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 803.356693][T16366] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.375955][ T30] audit: type=1326 audit(1766304278.625:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.376412][T16366] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 803.411716][T16366] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.424037][ T30] audit: type=1326 audit(1766304278.625:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.509265][ T30] audit: type=1326 audit(1766304278.635:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.522080][T16366] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 803.542203][ T30] audit: type=1326 audit(1766304278.635:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.5.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3146f8f749 code=0x7ffc0000 [ 803.611321][T16366] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 803.620627][T16366] usb 2-1: Product: syz [ 803.637723][T16366] usb 2-1: Manufacturer: syz [ 803.664456][T16366] cdc_wdm 2-1:1.0: skipping garbage [ 803.676855][T16366] cdc_wdm 2-1:1.0: skipping garbage [ 803.705478][T16366] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 803.719049][T16366] cdc_wdm 2-1:1.0: Unknown control protocol [ 803.908725][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.921885][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.949919][ T5136] Bluetooth: hci0: command tx timeout [ 803.952175][T16917] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 804.042925][T16917] bond0: entered promiscuous mode [ 804.076945][T16917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.441614][T16952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.473371][T16952] bond0: (slave vcan3): The slave device specified does not support setting the MAC address [ 804.525637][T16952] bond0: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 804.543436][T16952] bond0: (slave vcan3): making interface the new active one [ 804.551159][T16952] vcan3: entered promiscuous mode [ 804.584452][T16952] bond0: (slave vcan3): Enslaving as an active interface with an up link [ 804.691345][T16964] netlink: zone id is out of range [ 804.691353][T16964] netlink: zone id is out of range [ 804.691391][T16964] netlink: zone id is out of range [ 804.691448][T16964] netlink: zone id is out of range [ 804.691474][T16964] netlink: zone id is out of range [ 804.691695][T16964] netlink: zone id is out of range [ 804.692703][T16964] netlink: zone id is out of range [ 804.692720][T16964] netlink: zone id is out of range [ 804.693200][T16964] netlink: zone id is out of range [ 804.693285][T16964] netlink: zone id is out of range [ 806.209883][ T5136] Bluetooth: hci0: command tx timeout [ 806.368504][ T5880] usb 2-1: USB disconnect, device number 52 [ 806.664246][T16994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3277'. [ 806.673662][T16994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3277'. [ 806.840256][ T790] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 806.847890][ T5814] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 807.011539][ T5814] usb 5-1: device descriptor read/64, error -71 [ 807.018538][ T790] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 807.037553][ T790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.075494][ T790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 807.110104][T15884] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 807.131107][ T790] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.192594][ T790] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 807.204262][ T790] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 807.228009][ T790] usb 2-1: Product: syz [ 807.243951][ T790] usb 2-1: Manufacturer: syz [ 807.265741][ T790] cdc_wdm 2-1:1.0: skipping garbage [ 807.271749][ T5814] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 807.279879][T15884] usb 4-1: Using ep0 maxpacket: 16 [ 807.286345][T15884] usb 4-1: config 0 has no interfaces? [ 807.294534][T15884] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 807.304477][T15884] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 807.313111][ T790] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 807.372008][T15884] usb 4-1: Manufacturer: syz [ 807.398799][T15884] usb 4-1: config 0 descriptor?? [ 807.440127][ T5814] usb 5-1: device descriptor read/64, error -71 [ 807.480377][T16992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.526160][T16992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.544619][T16992] netlink: 'syz.1.3278': attribute type 1 has an invalid length. [ 807.554274][ T5814] usb usb5-port1: attempt power cycle [ 807.594137][T16992] bond3: entered promiscuous mode [ 807.599563][T16992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 807.661487][T16999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3279'. [ 807.684161][T16992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 807.694215][T16992] bond3: (slave vcan4): The slave device specified does not support setting the MAC address [ 807.704311][T16992] bond3: (slave vcan4): Setting fail_over_mac to active for active-backup mode [ 807.718103][T16992] bond3: (slave vcan4): making interface the new active one [ 807.726025][T16992] vcan4: entered promiscuous mode [ 807.734469][T16992] bond3: (slave vcan4): Enslaving as an active interface with an up link [ 807.789785][ T790] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 807.920100][ T5814] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 807.972147][ T5814] usb 5-1: device descriptor read/8, error -71 [ 808.057073][T15884] usb 2-1: USB disconnect, device number 53 [ 808.099772][ T790] usb 6-1: Using ep0 maxpacket: 16 [ 808.106207][ T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.117312][ T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.123768][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.133553][ T790] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 808.147791][ T790] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 808.157589][ T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.167097][ T790] usb 6-1: config 0 descriptor?? [ 808.209851][ T5814] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 808.230137][ T5814] usb 5-1: device descriptor read/8, error -71 [ 808.339975][ T5814] usb usb5-port1: unable to enumerate USB device [ 808.457067][T17008] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3282'. [ 808.536497][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3282'. [ 808.587282][ T790] hid_parser_main: 24 callbacks suppressed [ 808.587299][ T790] hid-multitouch 0003:0457:07DA.0021: unknown main item tag 0x0 [ 808.616139][ T790] hid-multitouch 0003:0457:07DA.0021: unknown main item tag 0x0 [ 808.627879][ T790] hid-multitouch 0003:0457:07DA.0021: unknown main item tag 0x0 [ 808.720690][ T790] hid-multitouch 0003:0457:07DA.0021: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 809.306062][ T789] usb 6-1: USB disconnect, device number 85 [ 809.562172][ T1086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.698617][ T1086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.817885][ T790] usb 4-1: USB disconnect, device number 84 [ 809.884704][ T1086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.607796][ T1086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.687304][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.696622][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 810.705703][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 810.720844][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 810.728877][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 810.863857][T17028] lo speed is unknown, defaulting to 1000 [ 810.871921][T17028] lo speed is unknown, defaulting to 1000 [ 810.979866][ T790] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 811.036786][ T1086] bridge_slave_1: left allmulticast mode [ 811.049776][ T1086] bridge_slave_1: left promiscuous mode [ 811.056746][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.076603][ T1086] bridge_slave_0: left allmulticast mode [ 811.083328][ T1086] bridge_slave_0: left promiscuous mode [ 811.090555][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.129862][ T5814] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 811.169268][ T790] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 811.192393][ T790] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 811.203160][ T790] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 811.215896][ T790] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.230889][ T790] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 811.240213][ T790] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 811.248241][ T790] usb 6-1: Product: syz [ 811.256376][ T790] usb 6-1: Manufacturer: syz [ 811.270061][ T790] cdc_wdm 6-1:1.0: skipping garbage [ 811.275382][ T790] cdc_wdm 6-1:1.0: skipping garbage [ 811.280819][ T790] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 811.291303][ T5814] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 811.304098][ T5814] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 811.317693][ T5814] usb 4-1: config 7 has no interface number 0 [ 811.331784][ T5814] usb 4-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.345597][ T5814] usb 4-1: config 7 interface 252 has no altsetting 0 [ 811.355178][ T5814] usb 4-1: string descriptor 0 read error: -22 [ 811.362182][ T5814] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 811.376518][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.425084][T17038] FAULT_INJECTION: forcing a failure. [ 811.425084][T17038] name failslab, interval 1, probability 0, space 0, times 0 [ 811.437813][T17038] CPU: 0 UID: 0 PID: 17038 Comm: syz.4.3294 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.437829][T17038] Tainted: [L]=SOFTLOCKUP [ 811.437833][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 811.437840][T17038] Call Trace: [ 811.437844][T17038] [ 811.437848][T17038] dump_stack_lvl+0x16c/0x1f0 [ 811.437865][T17038] should_fail_ex+0x512/0x640 [ 811.437881][T17038] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 811.437892][T17038] should_failslab+0xc2/0x120 [ 811.437907][T17038] kmem_cache_alloc_noprof+0x83/0x770 [ 811.437918][T17038] ? skb_clone+0x190/0x3f0 [ 811.437931][T17038] ? skb_clone+0x190/0x3f0 [ 811.437941][T17038] skb_clone+0x190/0x3f0 [ 811.437952][T17038] netlink_deliver_tap+0xabd/0xd30 [ 811.437967][T17038] netlink_unicast+0x64c/0x870 [ 811.437982][T17038] ? __pfx_netlink_unicast+0x10/0x10 [ 811.438000][T17038] netlink_sendmsg+0x8c8/0xdd0 [ 811.438015][T17038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.438037][T17038] ____sys_sendmsg+0xa5d/0xc30 [ 811.438052][T17038] ? copy_msghdr_from_user+0x10a/0x160 [ 811.438062][T17038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.438082][T17038] ___sys_sendmsg+0x134/0x1d0 [ 811.438093][T17038] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.438120][T17038] __sys_sendmsg+0x16d/0x220 [ 811.438130][T17038] ? __pfx___sys_sendmsg+0x10/0x10 [ 811.438149][T17038] do_syscall_64+0xcd/0xf80 [ 811.438164][T17038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.438175][T17038] RIP: 0033:0x7f3214f8f749 [ 811.438184][T17038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.438194][T17038] RSP: 002b:00007f3215d8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.438204][T17038] RAX: ffffffffffffffda RBX: 00007f32151e5fa0 RCX: 00007f3214f8f749 [ 811.438211][T17038] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000004 [ 811.438217][T17038] RBP: 00007f3215d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 811.438223][T17038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.438229][T17038] R13: 00007f32151e6038 R14: 00007f32151e5fa0 R15: 00007ffce1187068 [ 811.438243][T17038] [ 811.438262][T17038] netlink: 'syz.4.3294': attribute type 4 has an invalid length. [ 811.488695][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.513631][T17038] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3294'. [ 811.522038][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.698332][ T790] usb 4-1: USB disconnect, device number 85 [ 811.729648][T17031] netlink: 'syz.5.3291': attribute type 1 has an invalid length. [ 811.764656][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.774538][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.784268][ T1086] bond0 (unregistering): Released all slaves [ 811.813535][T17038] .`: renamed from bond0 (while UP) [ 811.903073][T17031] bond5: entered promiscuous mode [ 811.912590][T17031] 8021q: adding VLAN 0 to HW filter on device bond5 [ 812.003176][T17039] 8021q: adding VLAN 0 to HW filter on device bond5 [ 812.013883][T17039] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 812.024361][T17039] bond5: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 812.164354][T17039] bond5: (slave vcan0): making interface the new active one [ 812.171772][T17039] vcan0: entered promiscuous mode [ 812.182101][T17039] bond5: (slave vcan0): Enslaving as an active interface with an up link [ 812.459504][ T1086] tipc: Left network mode [ 812.593537][ T5880] usb 6-1: USB disconnect, device number 86 [ 812.625337][T17028] chnl_net:caif_netlink_parms(): no params data found [ 812.704039][T17028] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.712110][T17028] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.719247][T17028] bridge_slave_0: entered allmulticast mode [ 812.726809][T17028] bridge_slave_0: entered promiscuous mode [ 812.735671][T17028] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.743279][T17028] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.751333][T17028] bridge_slave_1: entered allmulticast mode [ 812.758003][T17028] bridge_slave_1: entered promiscuous mode [ 812.769878][ T789] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 812.784806][ T1086] hsr_slave_0: left promiscuous mode [ 812.790659][ T1086] hsr_slave_1: left promiscuous mode [ 812.808942][ T1086] veth1_macvtap: left promiscuous mode [ 812.816993][ T1086] veth0_macvtap: left promiscuous mode [ 812.822961][ T1086] veth1_vlan: left promiscuous mode [ 812.828189][ T1086] veth0_vlan: left promiscuous mode [ 812.833461][ T5813] Bluetooth: hci2: command tx timeout [ 812.879787][T15884] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 812.940460][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 812.947226][ T789] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 812.965977][ T789] usb 4-1: config 0 has no interface number 0 [ 812.976631][ T789] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 813.004056][ T789] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 813.022148][ T789] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 813.030575][ T789] usb 4-1: Product: syz [ 813.034730][ T789] usb 4-1: SerialNumber: syz [ 813.052129][T15884] usb 5-1: Using ep0 maxpacket: 16 [ 813.057687][ T789] usb 4-1: config 0 descriptor?? [ 813.064765][ T789] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 813.084358][T15884] usb 5-1: config 0 has no interfaces? [ 813.107865][T15884] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 813.121767][T15884] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 813.133237][T15884] usb 5-1: Manufacturer: syz [ 813.147273][T15884] usb 5-1: config 0 descriptor?? [ 813.273110][ T5880] usb 4-1: USB disconnect, device number 86 [ 813.326211][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 813.345433][T17067] Bluetooth: MGMT ver 1.23 [ 813.385939][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 813.396026][T17060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3299'. [ 813.427188][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3300'. [ 813.815615][T17028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.830266][T17028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.424633][T17028] team0: Port device team_slave_0 added [ 814.439134][T17028] team0: Port device team_slave_1 added [ 814.473153][T17028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.480693][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.507558][T17028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.525071][T17028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.534061][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.561803][T17028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.631509][ T1086] IPVS: stop unused estimator thread 0... [ 814.843608][T17028] hsr_slave_0: entered promiscuous mode [ 814.860698][T17028] hsr_slave_1: entered promiscuous mode [ 814.873712][T17028] debugfs: 'hsr0' already exists in 'hsr' [ 814.950975][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 814.961239][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 814.973816][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 814.983679][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 814.995324][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 815.005264][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 815.016347][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 815.026125][T17084] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 815.035733][T17084] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 815.049735][ T5813] Bluetooth: hci2: command tx timeout [ 815.216057][T17028] Cannot create hsr debugfs directory [ 815.481098][ T5813] Bluetooth: hci5: unexpected event for opcode 0x040d [ 815.525849][T17028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 815.545081][T17028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 815.699581][ T789] usb 5-1: USB disconnect, device number 108 [ 816.196319][T17028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 816.245119][T17028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 816.312882][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 816.319092][ T30] audit: type=1400 audit(1766304292.821:965): avc: denied { write } for pid=17093 comm="syz.4.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 816.498142][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3309'. [ 816.718767][T17028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.080300][ T5813] Bluetooth: hci2: command tx timeout [ 817.223104][T17028] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.280979][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.288105][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.315365][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.322501][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.329892][ T5880] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 817.358208][ T30] audit: type=1800 audit(1766304293.861:966): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3312" name="file1" dev="overlay" ino=2574 res=0 errno=0 [ 817.514061][ T5880] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 817.522736][ T5880] usb 4-1: config 0 has no interface number 0 [ 817.532792][ T5880] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 817.542701][ T5880] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 817.548832][T17028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.552881][ T5880] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 817.568765][ T5814] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 817.576989][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.587550][ T5880] usb 4-1: config 0 descriptor?? [ 817.594358][ T5880] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 817.630022][ T78] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 817.707791][T17028] veth0_vlan: entered promiscuous mode [ 817.725334][T17028] veth1_vlan: entered promiscuous mode [ 817.741435][ T5814] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 817.743704][T17028] veth0_macvtap: entered promiscuous mode [ 817.751952][ T5814] usb 2-1: config 1 has no interface number 0 [ 817.758352][T17028] veth1_macvtap: entered promiscuous mode [ 817.768125][ T5814] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 817.780490][ T78] usb 6-1: Using ep0 maxpacket: 32 [ 817.785637][ T5880] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 817.797297][ T5814] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 817.807416][ T5814] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 817.819047][ T78] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 817.827157][ T78] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 817.836330][ T78] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.836987][T17028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.846722][ T78] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 817.846745][ T78] usb 6-1: config 1 has no interface number 1 [ 817.873736][ T5814] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 817.883520][T16366] usb 4-1: USB disconnect, device number 87 [ 817.884227][T17028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.892958][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.906732][ T78] usb 6-1: too many endpoints for config 1 interface 5 altsetting 249: 41, using maximum allowed: 30 [ 817.911192][T12598] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.918856][ T5814] usb 2-1: Product: syz [ 817.931127][ T78] usb 6-1: config 1 interface 5 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 817.944834][ T5814] usb 2-1: Manufacturer: syz [ 817.949086][T12598] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.949418][ T5814] usb 2-1: SerialNumber: syz [ 817.962867][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 817.969226][ T78] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 817.971785][T12598] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.979016][ T5880] usb 5-1: config index 0 descriptor too short (expected 12799, got 27) [ 817.999510][ T78] usb 6-1: config 1 interface 5 has no altsetting 0 [ 818.006327][ T5880] usb 5-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 818.008913][T12598] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.024463][ T5880] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 818.035635][ T5880] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 818.038561][T17111] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 818.048121][ T5880] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 818.063660][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.063811][ T78] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.081395][ T5880] usb 5-1: Product: syz [ 818.083177][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.085562][ T5880] usb 5-1: Manufacturer: syz [ 818.098003][ T78] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.102209][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.109492][ T78] usb 6-1: Product: syz [ 818.118195][ T5880] usb 5-1: SerialNumber: syz [ 818.123784][ T78] usb 6-1: Manufacturer: syz [ 818.131565][ T78] usb 6-1: SerialNumber: syz [ 818.136262][T12598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.144599][T12598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.360353][T17124] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3313'. [ 818.375626][T17124] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3313'. [ 818.408331][ T78] usb 6-1: 0:2 : does not exist [ 818.462328][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 818.472708][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 818.485376][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 818.495495][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 818.507065][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 818.517280][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 818.528702][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 818.538758][T17137] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 818.548498][T17137] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 818.685671][ T78] usb 6-1: USB disconnect, device number 87 [ 818.685740][T17108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 818.705727][ T5880] usb 5-1: USB disconnect, device number 109 [ 818.956839][ T30] audit: type=1400 audit(1766304295.461:967): avc: denied { getopt } for pid=17107 comm="syz.1.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 819.154561][ T5813] Bluetooth: hci2: command tx timeout [ 819.161057][ T5814] usb 2-1: Incompatible driver and firmware versions [ 819.168236][T17131] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 819.181679][ T5814] usb 2-1: USB disconnect, device number 54 [ 819.331494][T17131] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 819.838495][T17150] net_ratelimit: 44 callbacks suppressed [ 819.838507][T17150] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 819.859871][T17131] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 819.884191][T17131] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 819.918698][T17131] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 819.939067][T17131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.959648][T17131] usb 4-1: Product: syz [ 819.965368][T17131] usb 4-1: Manufacturer: syz [ 819.983497][T17131] usb 4-1: SerialNumber: syz [ 819.998849][T17131] usb 4-1: config 0 descriptor?? [ 820.013170][T17142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.025095][T17142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.067914][T17131] usb 4-1: ucan: probing device on interface #0 [ 820.464295][T17166] tipc: Failed to remove unknown binding: 66,1,1/0:3209529255/3209529257 [ 820.473423][T17166] tipc: Failed to remove unknown binding: 66,1,1/0:3209529255/3209529257 [ 820.717309][T17131] ucan 4-1:0.0 can0: registered device [ 821.233983][T17131] ucan 4-1:0.0 can0: firmware string: unknown [ 821.273732][T17131] usb 4-1: USB disconnect, device number 88 [ 821.290111][ T5813] Bluetooth: hci5: unexpected event for opcode 0x040d [ 821.444895][T17181] fuse: Unknown parameter '0x000000000000000c' [ 821.610048][ T30] audit: type=1400 audit(1766304298.111:968): avc: denied { create } for pid=17182 comm="syz.5.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 821.670962][ T30] audit: type=1400 audit(1766304298.111:969): avc: denied { write } for pid=17182 comm="syz.5.3328" path="socket:[55035]" dev="sockfs" ino=55035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 821.971048][T17189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3329'. [ 823.439831][ T790] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 823.523178][T17207] xt_hashlimit: max too large, truncated to 1048576 [ 823.738010][ T30] audit: type=1400 audit(1766304300.241:970): avc: denied { ioctl } for pid=17205 comm="syz.1.3335" path="socket:[55825]" dev="sockfs" ino=55825 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 824.069890][ T790] usb 6-1: Using ep0 maxpacket: 16 [ 824.076558][ T790] usb 6-1: config 65 has an invalid interface number: 87 but max is 0 [ 824.084850][ T790] usb 6-1: config 65 has no interface number 0 [ 824.091704][ T790] usb 6-1: config 65 interface 87 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 16 [ 824.101783][ T790] usb 6-1: config 65 interface 87 has no altsetting 0 [ 824.124787][ T790] usb 6-1: New USB device found, idVendor=0af9, idProduct=0010, bcdDevice=da.47 [ 824.161729][ T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.170248][ T790] usb 6-1: Product: syz [ 824.177083][ T790] usb 6-1: Manufacturer: syz [ 824.187297][ T790] usb 6-1: SerialNumber: syz [ 824.341278][T17200] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 824.509968][ T790] gspca_main: spca508-2.14.0 probing 0af9:0010 [ 824.627753][ T5813] Bluetooth: hci5: unexpected event for opcode 0x040d [ 824.665720][ T790] gspca_spca508: reg_read err -32 [ 824.688055][T17219] netlink: zone id is out of range [ 824.693272][T17219] netlink: zone id is out of range [ 824.698499][T17219] netlink: zone id is out of range [ 824.704486][T17219] netlink: zone id is out of range [ 824.709860][T17219] netlink: zone id is out of range [ 824.715389][T17219] netlink: zone id is out of range [ 824.720826][T17219] netlink: zone id is out of range [ 824.726214][T17219] netlink: zone id is out of range [ 824.731710][T17219] netlink: zone id is out of range [ 825.276781][ T790] gspca_spca508: reg_read err -110 [ 825.286557][ T790] gspca_spca508: reg_read err -32 [ 825.297783][ T790] gspca_spca508: reg_read err -32 [ 825.309335][ T790] gspca_spca508: reg write: error -32 [ 825.324963][ T790] spca508 6-1:65.87: probe with driver spca508 failed with error -32 [ 825.469184][T17241] 9p: Bad value for 'rfdno' [ 825.642004][ T790] usb 6-1: USB disconnect, device number 88 [ 826.708380][T17259] fuse: Bad value for 'group_id' [ 826.717660][T17259] fuse: Bad value for 'group_id' [ 827.120239][T17265] fuse: Bad value for 'fd' [ 827.359318][ T30] audit: type=1400 audit(1766304303.861:971): avc: denied { accept } for pid=17269 comm="syz.4.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 827.362800][T17268] fuse: Bad value for 'fd' [ 827.385443][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 827.802467][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 827.812248][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 827.822648][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 827.832337][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 827.842303][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 827.852361][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 827.862928][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 827.872618][T17278] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 827.882092][T17278] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 828.130468][T17287] netlink: 'syz.3.3363': attribute type 4 has an invalid length. [ 828.142029][T17287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 828.337128][ T30] audit: type=1400 audit(1766304304.841:972): avc: denied { mounton } for pid=17283 comm="syz.5.3361" path="/492/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 828.392753][ T5964] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 828.952254][ T5964] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.963429][T17300] fuse: Bad value for 'fd' [ 828.970284][ T5964] usb 2-1: config 0 interface 0 has no altsetting 0 [ 828.996623][ T5964] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 829.011134][ T789] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 829.031700][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.047056][ T5964] usb 2-1: config 0 descriptor?? [ 829.213690][ T789] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 829.224127][ T789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.235462][ T789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 829.244873][ T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.257575][ T789] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 829.368842][ T789] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 829.377240][ T789] usb 4-1: Product: syz [ 829.382102][ T789] usb 4-1: Manufacturer: syz [ 829.403526][ T789] cdc_wdm 4-1:1.0: skipping garbage [ 829.415818][ T789] cdc_wdm 4-1:1.0: skipping garbage [ 829.897353][ T5964] aquacomputer_d5next 0003:0C70:F0B6.0022: item fetching failed at offset 5/7 [ 829.907645][ T789] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 829.907841][T17294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.914366][ T5964] aquacomputer_d5next 0003:0C70:F0B6.0022: probe with driver aquacomputer_d5next failed with error -22 [ 829.939895][T17294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.949801][ T789] cdc_wdm 4-1:1.0: Unknown control protocol [ 829.968384][T17294] netlink: 'syz.3.3365': attribute type 1 has an invalid length. [ 829.995498][T17294] bond0: entered promiscuous mode [ 830.017338][T17294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.038393][ T5964] usb 2-1: USB disconnect, device number 55 [ 830.051339][T17312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.069352][T17312] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 830.223427][T17312] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 830.259456][T17312] bond0: (slave vcan1): making interface the new active one [ 830.286177][T17312] vcan1: entered promiscuous mode [ 830.402198][T17312] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 831.378416][T17328] netlink: 'syz.6.3375': attribute type 33 has an invalid length. [ 831.389831][T17328] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3375'. [ 831.609844][ T5964] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 831.873343][T17337] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3376'. [ 832.185630][ T5964] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 832.199733][ T5964] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.219034][ T5964] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 832.228680][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.300053][T17341] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 832.449012][ T5964] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 832.458324][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 832.468428][ T78] usb 4-1: USB disconnect, device number 89 [ 832.574720][ T5964] usb 2-1: Product: syz [ 832.687105][ T5964] usb 2-1: Manufacturer: syz [ 832.692496][ T30] audit: type=1400 audit(1766304309.201:973): avc: denied { mounton } for pid=17345 comm="syz.6.3381" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 832.740233][ T5964] cdc_wdm 2-1:1.0: skipping garbage [ 832.764622][ T5964] cdc_wdm 2-1:1.0: skipping garbage [ 832.783989][ T5964] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 832.801998][ T5964] cdc_wdm 2-1:1.0: Unknown control protocol [ 832.809594][T17348] ./file0: Can't open blockdev [ 832.944039][T17327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.967302][T17327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.169966][ T790] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 833.231364][T17327] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 833.282555][ T78] libceph: connect (1)[c::]:6789 error -101 [ 833.302337][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 833.372921][T17360] ceph: No mds server is up or the cluster is laggy [ 833.376628][T17327] bond4: entered promiscuous mode [ 833.386550][T17327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 833.389708][ T790] usb 7-1: Using ep0 maxpacket: 16 [ 833.430138][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.652659][T17366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 833.663649][T17366] bond4: (slave vcan5): The slave device specified does not support setting the MAC address [ 833.673807][T17366] bond4: (slave vcan5): Setting fail_over_mac to active for active-backup mode [ 833.694357][T17366] bond4: (slave vcan5): making interface the new active one [ 833.701736][T17366] vcan5: entered promiscuous mode [ 833.715961][T17366] bond4: (slave vcan5): Enslaving as an active interface with an up link [ 833.755935][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 833.763681][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 833.782998][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.820043][ T790] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 833.850006][ T790] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 833.873634][ T790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.091237][ T790] usb 7-1: config 0 descriptor?? [ 834.226405][ T30] audit: type=1400 audit(1766304310.731:974): avc: denied { watch_mount } for pid=17376 comm="syz.3.3387" path="/" dev="mqueue" ino=50265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 834.513730][ T790] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 834.559817][ T789] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 834.927043][ T790] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 834.952541][ T790] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 834.963760][ T790] hid-multitouch 0003:0457:07DA.0023: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 834.978196][ T790] usb 7-1: USB disconnect, device number 2 [ 835.109749][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 835.116263][ T789] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 835.124707][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.134500][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.153641][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.167257][ T5849] usb 2-1: USB disconnect, device number 56 [ 835.180452][ T789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.217233][ T789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 835.227381][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.239748][ T5964] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 835.421627][ T5964] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 835.430756][ T5964] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.441460][ T5964] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 835.450839][ T5964] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.464194][ T5964] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 835.475887][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 835.488356][ T789] usb 4-1: GET_CAPABILITIES returned 0 [ 835.498226][ T5964] usb 6-1: Product: syz [ 835.502597][ T5849] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 835.510396][ T789] usbtmc 4-1:16.0: can't read capabilities [ 835.516962][ T5964] usb 6-1: Manufacturer: syz [ 835.530729][ T5964] cdc_wdm 6-1:1.0: skipping garbage [ 835.536052][ T5964] cdc_wdm 6-1:1.0: skipping garbage [ 835.550731][ T5964] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 835.569984][ T5964] cdc_wdm 6-1:1.0: Unknown control protocol [ 835.691086][ T5849] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.706277][ T5849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 835.710320][T17380] netlink: 'syz.3.3388': attribute type 1 has an invalid length. [ 835.726170][ T5849] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 835.760227][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.768876][T17386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.777821][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3388'. [ 835.807993][ T5849] usb 2-1: config 0 descriptor?? [ 835.813165][T17386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.825190][T17386] netlink: 'syz.5.3390': attribute type 1 has an invalid length. [ 835.860538][T17380] bond2: entered promiscuous mode [ 835.868988][T17380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 835.884790][T17398] bond2: entered allmulticast mode [ 835.913449][T17386] bond9: entered promiscuous mode [ 835.918796][T17386] 8021q: adding VLAN 0 to HW filter on device bond9 [ 835.952635][T17398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17398 comm=syz.3.3388 [ 836.081278][T17400] 8021q: adding VLAN 0 to HW filter on device bond9 [ 836.093072][T17400] bond9: (slave vcan8): The slave device specified does not support setting the MAC address [ 836.103600][T17400] bond9: (slave vcan8): Setting fail_over_mac to active for active-backup mode [ 836.131808][T17400] bond9: (slave vcan8): making interface the new active one [ 836.139319][T17400] vcan8: entered promiscuous mode [ 836.155378][T17400] bond9: (slave vcan8): Enslaving as an active interface with an up link [ 836.346325][ T5849] aquacomputer_d5next 0003:0C70:F0B6.0024: item fetching failed at offset 5/7 [ 836.358439][ T5849] aquacomputer_d5next 0003:0C70:F0B6.0024: probe with driver aquacomputer_d5next failed with error -22 [ 836.385230][T17398] bond2: (slave bridge1): making interface the new active one [ 836.413115][T17398] bridge1: entered promiscuous mode [ 836.427410][T17398] bridge1: entered allmulticast mode [ 836.441398][T17398] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 836.479580][ T5849] usb 4-1: USB disconnect, device number 90 [ 836.491544][T17406] sit0: entered promiscuous mode [ 836.504754][T17406] netlink: 'syz.6.3395': attribute type 1 has an invalid length. [ 836.522956][T17406] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3395'. [ 836.642163][ T5880] usb 2-1: USB disconnect, device number 57 [ 836.659881][ T790] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 836.852631][ T790] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 836.862407][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.875585][ T790] usb 5-1: config 0 descriptor?? [ 837.408361][T17418] Cannot find set identified by id 0 to match [ 838.265263][ T5880] usb 6-1: USB disconnect, device number 89 [ 838.418485][ T30] audit: type=1400 audit(1766304314.871:975): avc: denied { connect } for pid=17423 comm="syz.1.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 838.751172][ T30] audit: type=1400 audit(1766304315.241:976): avc: granted { setsecparam } for pid=17432 comm="syz.6.3403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 839.318048][ T790] pegasus 5-1:0.0: can't reset MAC [ 839.342486][ T5880] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 839.567452][ T790] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 839.638425][ T790] usb 5-1: USB disconnect, device number 110 [ 839.699759][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 839.707970][ T5880] usb 6-1: config index 0 descriptor too short (expected 12799, got 27) [ 839.727239][ T5880] usb 6-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 839.750379][ T5880] usb 6-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 839.761182][ T5880] usb 6-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 839.773175][ T5880] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 839.783901][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.880672][ T5880] usb 6-1: Product: syz [ 839.885140][ T5880] usb 6-1: Manufacturer: syz [ 839.889813][ T5880] usb 6-1: SerialNumber: syz [ 840.400223][T17427] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3401'. [ 840.436197][T17427] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3401'. [ 840.473003][T17458] fuse: Unknown parameter '0000000000000000000400000000000000000004' [ 840.629970][ T5880] usb 6-1: USB disconnect, device number 90 [ 841.537513][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 841.559064][T17464] macsec1: entered promiscuous mode [ 841.579791][T17464] team0: entered promiscuous mode [ 841.584958][T17464] macsec1: entered allmulticast mode [ 841.609910][T17464] team0: entered allmulticast mode [ 841.635019][T17464] team0: left allmulticast mode [ 841.643070][T17464] team0: left promiscuous mode [ 842.456645][ T30] audit: type=1400 audit(1766304319.956:977): avc: denied { create } for pid=17473 comm="syz.1.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 842.767940][T17487] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3412' sets config #0 [ 842.778334][T17487] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3412' sets config #1 [ 842.846474][T17486] netlink: 744 bytes leftover after parsing attributes in process `syz.6.3417'. [ 842.877524][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3417'. [ 843.279724][ T5814] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 843.481374][ T5814] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.492887][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 843.538144][ T5814] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 843.568228][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.611946][ T5814] usb 7-1: config 0 descriptor?? [ 844.052722][ T5814] aquacomputer_d5next 0003:0C70:F0B6.0025: item fetching failed at offset 5/7 [ 844.170896][ T30] audit: type=1400 audit(1766304321.676:978): avc: denied { lock } for pid=17502 comm="syz.3.3422" path="socket:[57378]" dev="sockfs" ino=57378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 844.213486][ T5814] aquacomputer_d5next 0003:0C70:F0B6.0025: probe with driver aquacomputer_d5next failed with error -22 [ 844.306990][T17505] syz_tun: entered allmulticast mode [ 844.318800][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'. [ 844.683137][T17505] syz_tun (unregistering): left allmulticast mode [ 844.734501][ T789] usb 7-1: USB disconnect, device number 3 [ 845.059334][T17515] fuse: Unknown parameter '_;׀-Eva8#d8h]x#olר%V6|;qIb`sly ø3:' [ 845.109881][ T5814] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 845.256743][T17515] sctp: [Deprecated]: syz.1.3426 (pid 17515) Use of int in maxseg socket option. [ 845.256743][T17515] Use struct sctp_assoc_value instead [ 845.271726][ T5880] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 845.279396][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 845.286157][ T5814] usb 5-1: config index 0 descriptor too short (expected 12799, got 27) [ 845.308475][ T5814] usb 5-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 845.465527][ T5814] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 845.540611][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 845.594506][ T5814] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 845.648814][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 845.712156][ T5814] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 845.728513][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.742558][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.750901][ T5814] usb 5-1: Product: syz [ 845.913977][ T5814] usb 5-1: Manufacturer: syz [ 845.918674][ T5814] usb 5-1: SerialNumber: syz [ 845.932578][ T5880] usb 4-1: language id specifier not provided by device, defaulting to English [ 845.946306][ T5880] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 845.963129][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.156467][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 846.166126][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 846.176323][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 846.185921][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 846.195885][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 846.205460][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 846.215329][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 846.224950][T17533] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 846.234496][T17533] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 846.878703][ T5880] usb 4-1: Manufacturer: ‰ [ 846.883347][ T5880] usb 4-1: SerialNumber: syz [ 846.904910][ T5880] usb 4-1: config 0 descriptor?? [ 846.937588][ T5880] em28xx 4-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 846.946721][ T5880] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 846.974733][T17511] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3424'. [ 846.985307][T17511] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3424'. [ 847.329534][ T5814] usb 5-1: USB disconnect, device number 111 [ 847.471287][T17540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.493951][T17540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.689723][ T78] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 847.748803][T17546] tmpfs: Unknown parameter 'bpol' [ 848.175015][ T5880] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 848.181795][ T5880] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 848.188975][ T5880] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 848.196116][ T5880] em28xx 4-1:0.0: No AC97 audio processor [ 848.209545][ T5880] usb 4-1: USB disconnect, device number 91 [ 848.221772][ T5880] em28xx 4-1:0.0: Disconnecting em28xx [ 848.243067][ T5880] em28xx 4-1:0.0: Freeing device [ 848.341164][ T78] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 848.352235][ T78] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.363221][ T78] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 848.374750][ T78] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.446663][ T78] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 848.465894][ T78] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 848.480436][ T78] usb 6-1: Product: syz [ 848.485490][ T78] usb 6-1: Manufacturer: syz [ 848.491155][T17131] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 848.541854][T17557] fuse: Unknown parameter 'user_i00000000000000000000' [ 848.563803][ T78] cdc_wdm 6-1:1.0: skipping garbage [ 848.617140][ T78] cdc_wdm 6-1:1.0: skipping garbage [ 848.719968][ T78] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 848.749993][T17131] usb 2-1: Using ep0 maxpacket: 16 [ 848.769005][ T78] cdc_wdm 6-1:1.0: Unknown control protocol [ 848.795073][T17537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.880459][T17537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.894640][T17131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 849.065285][T17131] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 849.122667][T17537] netlink: 'syz.5.3432': attribute type 1 has an invalid length. [ 849.147649][T17131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.206720][T17131] usb 2-1: Product: syz [ 849.244522][T17131] usb 2-1: Manufacturer: syz [ 849.301550][T17131] usb 2-1: SerialNumber: syz [ 849.341392][T17131] usb 2-1: config 0 descriptor?? [ 849.439244][T17131] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 849.443090][T17537] bond10: entered promiscuous mode [ 849.455490][T17537] 8021q: adding VLAN 0 to HW filter on device bond10 [ 849.462218][T17131] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 849.509432][T17558] 8021q: adding VLAN 0 to HW filter on device bond10 [ 849.517671][T17558] bond10: (slave vcan9): The slave device specified does not support setting the MAC address [ 849.528596][T17558] bond10: (slave vcan9): Setting fail_over_mac to active for active-backup mode [ 849.563497][T17558] bond10: (slave vcan9): making interface the new active one [ 849.571079][T17558] vcan9: entered promiscuous mode [ 849.581678][T17558] bond10: (slave vcan9): Enslaving as an active interface with an up link [ 849.714195][T17550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.743604][T17550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.859731][ T78] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 849.982436][T17572] net_ratelimit: 45 callbacks suppressed [ 849.982451][T17572] openvswitch: netlink: Invalid VLAN frame [ 850.151024][ T78] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.182750][T17131] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 850.279923][ T78] usb 5-1: config 0 interface 0 has no altsetting 0 [ 850.286913][ T78] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 850.335457][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.421251][ T78] usb 5-1: config 0 descriptor?? [ 850.674881][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3442'. [ 850.811814][ T789] usb 6-1: USB disconnect, device number 91 [ 850.819973][T17131] em28xx 2-1:0.0: board has no eeprom [ 850.989090][ T78] aquacomputer_d5next 0003:0C70:F0B6.0026: item fetching failed at offset 5/7 [ 851.011677][ T78] aquacomputer_d5next 0003:0C70:F0B6.0026: probe with driver aquacomputer_d5next failed with error -22 [ 851.079808][T17131] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 851.087931][T17131] em28xx 2-1:0.0: dvb set to bulk mode. [ 851.479573][ T78] em28xx 2-1:0.0: Binding DVB extension [ 851.509801][T17131] usb 2-1: USB disconnect, device number 58 [ 851.536656][T17131] em28xx 2-1:0.0: Disconnecting em28xx [ 851.594446][ T78] em28xx 2-1:0.0: Registering input extension [ 851.602485][T17131] em28xx 2-1:0.0: Closing input extension [ 851.641300][ T789] usb 5-1: USB disconnect, device number 112 [ 851.641364][T17131] em28xx 2-1:0.0: Freeing device [ 851.929924][ T78] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 851.967183][ T30] audit: type=1400 audit(1766304329.466:979): avc: denied { append } for pid=17590 comm="syz.1.3448" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 852.099800][ T78] usb 4-1: Using ep0 maxpacket: 32 [ 852.110566][ T78] usb 4-1: config index 0 descriptor too short (expected 12799, got 27) [ 852.137022][ T78] usb 4-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 852.196599][ T78] usb 4-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 852.257092][ T78] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 852.340548][ T78] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 852.362040][ T78] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.370124][ T78] usb 4-1: Product: syz [ 852.374413][ T78] usb 4-1: Manufacturer: syz [ 852.381247][ T78] usb 4-1: SerialNumber: syz [ 852.419807][T17131] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 852.559081][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 852.601538][T17131] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 852.612275][T17131] usb 6-1: config 0 has no interface number 0 [ 852.625299][T17587] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3446'. [ 852.635251][T17587] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3446'. [ 852.653601][T17131] usb 6-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 852.674622][ T78] usb 4-1: USB disconnect, device number 92 [ 852.689321][T17131] usb 6-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 852.708303][T17131] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 852.719624][T17131] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.761511][T17131] usb 6-1: config 0 descriptor?? [ 852.769893][T17131] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 852.945238][T17606] lo speed is unknown, defaulting to 1000 [ 852.963693][T17606] lo speed is unknown, defaulting to 1000 [ 853.116798][ T789] usb 6-1: USB disconnect, device number 92 [ 853.449855][ T789] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 853.499952][ T5964] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 853.560759][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 853.601709][ T789] usb 7-1: Using ep0 maxpacket: 16 [ 853.613720][ T789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.626572][ T789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.654239][ T789] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 853.673880][ T5964] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 853.692241][ T789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.705452][ T5964] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.719832][ T5964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 853.730653][ T5964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.742256][ T789] usb 7-1: config 0 descriptor?? [ 853.750625][ T5964] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 853.759744][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 853.767985][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 853.777181][ T5964] usb 4-1: Product: syz [ 853.781397][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.789397][ T5964] usb 4-1: Manufacturer: syz [ 853.795461][ T10] usb 2-1: Product: syz [ 853.801079][ T10] usb 2-1: Manufacturer: syz [ 853.806075][ T10] usb 2-1: SerialNumber: syz [ 853.812165][ T5964] cdc_wdm 4-1:1.0: skipping garbage [ 853.817380][ T5964] cdc_wdm 4-1:1.0: skipping garbage [ 853.828133][ T5964] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 853.834606][ T5964] cdc_wdm 4-1:1.0: Unknown control protocol [ 853.845278][T17622] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 853.919725][T17131] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 854.015303][T17612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.023995][T17612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.035398][T17624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.049971][T17612] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 854.058268][T17624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.089818][T17131] usb 5-1: Using ep0 maxpacket: 32 [ 854.096419][T17131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.099066][T17612] bond3: entered promiscuous mode [ 854.113649][T17612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 854.123079][T17131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.135354][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0a:64:03:de:c5:67 [ 854.151564][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.161300][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.168836][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.176472][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.185059][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.189186][T17131] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 854.194591][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.213430][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.214601][T17627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 854.221457][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.221482][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.221502][ T789] hid-picolcd 0003:04D8:F002.0027: unknown main item tag 0x0 [ 854.221523][ T789] hid-picolcd 0003:04D8:F002.0027: item fetching failed at offset 10/11 [ 854.221960][ T789] hid-picolcd 0003:04D8:F002.0027: device report parse failed [ 854.266740][ T789] hid-picolcd 0003:04D8:F002.0027: probe with driver hid-picolcd failed with error -22 [ 854.268017][T17131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.288735][T17627] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 854.295993][T17131] usb 5-1: config 0 descriptor?? [ 854.298862][T17627] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 854.349614][T17627] bond3: (slave vcan2): making interface the new active one [ 854.357036][T17627] vcan2: entered promiscuous mode [ 854.372441][T17627] bond3: (slave vcan2): Enslaving as an active interface with an up link [ 854.765643][T17131] hub 5-1:0.0: USB hub found [ 854.774392][ T10] rtl8150 2-1:1.0: eth9: rtl8150 is detected [ 854.785360][ T10] usb 2-1: USB disconnect, device number 59 [ 854.791681][ T789] usb 7-1: USB disconnect, device number 4 [ 854.974170][T17636] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3460'. [ 854.974405][T17131] hub 5-1:0.0: 1 port detected [ 855.529732][T15884] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 855.637633][T17637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.646430][T17637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.654947][ T10] usb 5-1: USB disconnect, device number 113 [ 855.692316][T15884] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.713830][T15884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.723643][T15884] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 855.737299][T15884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.755692][T15884] usb 2-1: config 0 descriptor?? [ 855.867199][ T30] audit: type=1400 audit(1766304333.366:980): avc: denied { append } for pid=17645 comm="syz.5.3463" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 856.139826][ T789] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 856.182592][T15884] aquacomputer_d5next 0003:0C70:F0B6.0028: item fetching failed at offset 5/7 [ 856.218973][T15884] aquacomputer_d5next 0003:0C70:F0B6.0028: probe with driver aquacomputer_d5next failed with error -22 [ 856.255247][ T5880] usb 4-1: USB disconnect, device number 93 [ 856.294583][T17651] openvswitch: netlink: Invalid VLAN frame [ 856.309792][ T789] usb 6-1: Using ep0 maxpacket: 8 [ 856.316266][ T789] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 856.324885][ T789] usb 6-1: config 0 has no interface number 0 [ 856.331208][ T789] usb 6-1: too many endpoints for config 0 interface 109 altsetting 227: 207, using maximum allowed: 30 [ 856.361911][ T789] usb 6-1: config 0 interface 109 altsetting 227 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 856.431191][ T789] usb 6-1: config 0 interface 109 has no altsetting 0 [ 856.448632][T15884] usb 2-1: USB disconnect, device number 60 [ 856.471320][ T789] usb 6-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=7e.b6 [ 856.493345][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.501711][ T789] usb 6-1: Product: syz [ 856.505892][ T789] usb 6-1: Manufacturer: syz [ 856.515814][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 856.702987][ T789] usb 6-1: SerialNumber: syz [ 856.802010][ T789] usb 6-1: config 0 descriptor?? [ 857.110802][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'. [ 857.288312][T17663] sit0: entered promiscuous mode [ 857.304236][T17663] netlink: 'syz.4.3467': attribute type 1 has an invalid length. [ 857.319451][ T789] HFC-S_USB 6-1:0.109: probe with driver HFC-S_USB failed with error -5 [ 857.337497][T17663] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3467'. [ 857.357412][ T789] usb 6-1: USB disconnect, device number 93 [ 857.571755][T17674] fuse: Unknown parameter 'user_i00000000000000000000' [ 858.016295][T17678] 9p: Bad value for 'rfdno' [ 858.120683][ T30] audit: type=1400 audit(1766304335.516:981): avc: denied { setopt } for pid=17675 comm="syz.5.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 858.772024][T17698] 9p: Bad value for 'wfdno' [ 858.827442][T17697] 9pnet_fd: p9_fd_create_unix (17697): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 858.850919][ T30] audit: type=1400 audit(1766304336.346:982): avc: denied { open } for pid=17696 comm="syz.1.3479" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 858.972008][T17131] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 859.009541][T17698] bond1: Removing last arp target with arp_interval on [ 859.021981][T17698] bond1: entered promiscuous mode [ 859.027201][T17698] bond1: entered allmulticast mode [ 859.034509][T17698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 859.049502][T17703] team0: Port device ip6tnl1 added [ 859.150939][T17131] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 859.159255][T17131] usb 5-1: config 4 has no interface number 0 [ 859.165475][T17131] usb 5-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 859.176333][T17131] usb 5-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 859.190010][T17131] usb 5-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 859.214083][T17131] usb 5-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 859.232613][T17131] usb 5-1: config 4 interface 88 has no altsetting 0 [ 859.241378][T17131] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 859.253318][T17131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.262004][T17131] usb 5-1: Product: syz [ 859.266322][T17131] usb 5-1: Manufacturer: syz [ 859.271334][T17131] usb 5-1: SerialNumber: syz [ 859.279637][T17680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 859.288366][T17711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3483'. [ 859.411282][T17715] syzkaller0: entered promiscuous mode [ 859.420902][T17715] syzkaller0: entered allmulticast mode [ 859.429341][ T30] audit: type=1326 audit(1766304336.926:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17716 comm="syz.3.3486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ba5f8f749 code=0x0 [ 859.467801][T17715] tipc: Started in network mode [ 859.484294][T17715] tipc: Node identity 368139594e29, cluster identity 4711 [ 859.488922][T17680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.495475][T17715] tipc: Enabled bearer , priority 0 [ 859.514124][T17680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.522161][T17714] tipc: Resetting bearer [ 859.529199][T17680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.590578][T17721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.610473][T17714] tipc: Disabling bearer [ 859.617430][T17680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.640162][T17721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.654026][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3489'. [ 859.681249][T17131] usb 5-1: USB disconnect, device number 114 [ 859.961535][ T5951] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 860.251468][ T5951] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 860.260483][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.271813][ T5951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 860.282231][ T5951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.295702][ T5951] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 860.306316][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 860.314449][ T5951] usb 4-1: Product: syz [ 860.318713][ T5951] usb 4-1: Manufacturer: syz [ 860.336008][ T5951] cdc_wdm 4-1:1.0: skipping garbage [ 860.351415][ T5951] cdc_wdm 4-1:1.0: skipping garbage [ 860.359758][ T789] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 860.409135][ T5951] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 860.415602][ T5951] cdc_wdm 4-1:1.0: Unknown control protocol [ 860.472836][ T10] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 860.564656][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 860.608469][ T789] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 860.649880][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 860.939840][ T10] usb 6-1: config 65 has an invalid interface number: 87 but max is 0 [ 860.948572][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.970558][T17729] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 860.971659][ T10] usb 6-1: config 65 has no interface number 0 [ 860.990574][ T789] usb 2-1: config 0 has no interface number 0 [ 861.024568][ T789] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 861.040772][ T10] usb 6-1: config 65 interface 87 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 16 [ 861.057846][T17729] bond4: entered promiscuous mode [ 861.063033][ T789] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 861.073056][ T10] usb 6-1: config 65 interface 87 has no altsetting 0 [ 861.080270][T17729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 861.086867][ T789] usb 2-1: config 0 interface 98 has no altsetting 0 [ 861.095377][ T10] usb 6-1: New USB device found, idVendor=0af9, idProduct=0010, bcdDevice=da.47 [ 861.105727][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.131649][T17744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 861.139926][ T789] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 861.149772][ T10] usb 6-1: Product: syz [ 861.156373][T17744] bond4: (slave vcan3): The slave device specified does not support setting the MAC address [ 861.166563][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.174655][ T10] usb 6-1: Manufacturer: syz [ 861.179724][ T789] usb 2-1: Product: syz [ 861.183901][ T10] usb 6-1: SerialNumber: syz [ 861.189532][ T789] usb 2-1: Manufacturer: syz [ 861.196389][T17738] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 861.203900][T17744] bond4: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 861.261630][ T10] gspca_main: spca508-2.14.0 probing 0af9:0010 [ 861.273370][ T789] usb 2-1: SerialNumber: syz [ 861.294417][ T789] usb 2-1: config 0 descriptor?? [ 861.332091][T17744] bond4: (slave vcan3): making interface the new active one [ 861.339517][T17744] vcan3: entered promiscuous mode [ 861.361782][T17734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.368987][T17744] bond4: (slave vcan3): Enslaving as an active interface with an up link [ 861.369169][T17734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.587360][T17734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.594769][T17734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.712091][ T78] IPVS: starting estimator thread 0... [ 861.819887][T17753] IPVS: using max 77 ests per chain, 184800 per kthread [ 862.080019][ T10] gspca_spca508: reg_read err -110 [ 862.085898][ T10] gspca_spca508: reg_read err -32 [ 862.091528][ T10] gspca_spca508: reg_read err -32 [ 862.097017][ T10] gspca_spca508: reg_read err -32 [ 862.102648][ T10] gspca_spca508: reg write: error -32 [ 862.108386][ T10] spca508 6-1:65.87: probe with driver spca508 failed with error -32 [ 862.251335][ T30] audit: type=1400 audit(1766304339.756:984): avc: denied { setopt } for pid=17757 comm="syz.6.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 862.255000][T17759] veth0_to_bridge: entered promiscuous mode [ 862.297805][ T10] usb 6-1: USB disconnect, device number 94 [ 862.345478][T17761] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3500'. [ 862.416283][T17734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.439288][T17734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.452669][ T789] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 862.464402][ T789] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 862.477347][ T789] asix 2-1:0.98: probe with driver asix failed with error -71 [ 862.492054][ T789] usb 2-1: USB disconnect, device number 61 [ 862.718336][T17757] veth0_to_bridge: left promiscuous mode [ 862.759774][ T10] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 862.778960][T17771] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 862.790624][ T78] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 862.798323][ T30] audit: type=1400 audit(1766304340.296:985): avc: denied { relabelto } for pid=17770 comm="syz.6.3505" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 862.824879][ T30] audit: type=1400 audit(1766304340.296:986): avc: denied { associate } for pid=17770 comm="syz.6.3505" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 862.874765][ T789] usb 4-1: USB disconnect, device number 94 [ 862.931542][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 862.942577][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.952977][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 862.959735][ T78] usb 5-1: device descriptor read/64, error -71 [ 862.962008][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.001435][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 863.012957][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 863.021501][ T10] usb 6-1: Product: syz [ 863.041702][ T10] usb 6-1: Manufacturer: syz [ 863.052157][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 863.057368][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 863.137845][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 863.144040][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 863.189751][T15884] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 863.249825][ T78] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 863.263830][T17765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.273300][T17765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.285201][T17765] netlink: 'syz.5.3502': attribute type 1 has an invalid length. [ 863.303351][T17765] bond11: entered promiscuous mode [ 863.310054][T17765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 863.329604][T17765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 863.337246][T17765] bond11: (slave vcan10): The slave device specified does not support setting the MAC address [ 863.347684][T15884] usb 7-1: Using ep0 maxpacket: 8 [ 863.354718][T15884] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 863.364665][T15884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 863.375498][T17765] bond11: (slave vcan10): Setting fail_over_mac to active for active-backup mode [ 863.390041][T17131] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 863.392104][T17765] bond11: (slave vcan10): making interface the new active one [ 863.397737][ T78] usb 5-1: device descriptor read/64, error -71 [ 863.409095][T17765] vcan10: entered promiscuous mode [ 863.426454][T17765] bond11: (slave vcan10): Enslaving as an active interface with an up link [ 863.535799][ T78] usb usb5-port1: attempt power cycle [ 863.580427][T17131] usb 2-1: Using ep0 maxpacket: 32 [ 863.598163][T17131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 35, changing to 9 [ 863.721397][T17131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33096, setting to 1024 [ 863.734944][T17131] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 863.746230][T17131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.755354][T15884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 863.771263][T17131] usb 2-1: config 0 descriptor?? [ 863.797899][T15884] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.811246][T15884] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 863.820314][T15884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.979804][ T78] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 864.017491][ T78] usb 5-1: device descriptor read/8, error -71 [ 864.034121][T15884] usb 7-1: GET_CAPABILITIES returned 0 [ 864.043115][T15884] usbtmc 7-1:16.0: can't read capabilities [ 864.212805][T17131] savu 0003:1E7D:2D5A.0029: hiddev2,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 864.236330][T17131] usb 7-1: USB disconnect, device number 5 [ 864.259834][ T78] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 864.280377][ T78] usb 5-1: device descriptor read/8, error -71 [ 864.299767][T15884] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 864.389879][ T78] usb usb5-port1: unable to enumerate USB device [ 864.412804][T17780] loop2: detected capacity change from 0 to 7 [ 864.420488][T17780] Dev loop2: unable to read RDB block 7 [ 864.426088][T17780] loop2: unable to read partition table [ 864.432799][T17780] loop2: partition table beyond EOD, truncated [ 864.438956][T17780] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 864.450557][T17131] usb 2-1: USB disconnect, device number 62 [ 864.459713][T15884] usb 4-1: Using ep0 maxpacket: 32 [ 864.466137][T15884] usb 4-1: config index 0 descriptor too short (expected 12799, got 27) [ 864.474661][T15884] usb 4-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 864.483704][T15884] usb 4-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 864.494756][T15884] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 864.505639][T15884] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 864.514840][T15884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.522965][T15884] usb 4-1: Product: syz [ 864.527117][T15884] usb 4-1: Manufacturer: syz [ 864.531721][T15884] usb 4-1: SerialNumber: syz [ 864.744374][T17789] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3509'. [ 864.754670][T17789] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3509'. [ 864.788021][T15884] usb 4-1: USB disconnect, device number 95 [ 865.260377][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 865.481114][T17131] usb 6-1: USB disconnect, device number 95 [ 865.509050][T17804] xt_connbytes: Forcing CT accounting to be enabled [ 865.516130][T17804] Cannot find del_set index 1 as target [ 865.980024][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 865.987622][ T10] usb 2-1: config index 0 descriptor too short (expected 12799, got 27) [ 865.996011][ T10] usb 2-1: config 52 has too many interfaces: 56, using maximum allowed: 32 [ 866.011355][ T10] usb 2-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 866.041473][ T10] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 56 [ 866.061793][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 866.079245][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.103151][ T10] usb 2-1: Product: syz [ 866.108825][ T10] usb 2-1: Manufacturer: syz [ 866.140432][ T10] usb 2-1: SerialNumber: syz [ 867.334009][T17794] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3511'. [ 867.354227][T17794] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3511'. [ 867.684269][ T10] usb 2-1: USB disconnect, device number 63 [ 867.722812][ T30] audit: type=1400 audit(1766304345.226:987): avc: denied { accept } for pid=17833 comm="syz.5.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 867.834218][ T30] audit: type=1400 audit(1766304345.266:988): avc: denied { append } for pid=17831 comm="syz.4.3522" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 868.904941][T17860] program syz.6.3527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.121301][T17865] FAULT_INJECTION: forcing a failure. [ 869.121301][T17865] name failslab, interval 1, probability 0, space 0, times 0 [ 869.134409][T17865] CPU: 0 UID: 0 PID: 17865 Comm: syz.4.3531 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.134439][T17865] Tainted: [L]=SOFTLOCKUP [ 869.134445][T17865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 869.134452][T17865] Call Trace: [ 869.134457][T17865] [ 869.134461][T17865] dump_stack_lvl+0x16c/0x1f0 [ 869.134479][T17865] should_fail_ex+0x512/0x640 [ 869.134495][T17865] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 869.134509][T17865] should_failslab+0xc2/0x120 [ 869.134523][T17865] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 869.134534][T17865] ? __d_lookup+0x25c/0x4a0 [ 869.134547][T17865] ? __d_alloc+0x35/0xa80 [ 869.134558][T17865] ? __d_alloc+0x35/0xa80 [ 869.134566][T17865] __d_alloc+0x35/0xa80 [ 869.134577][T17865] d_alloc+0x4a/0x1e0 [ 869.134587][T17865] lookup_one_qstr_excl+0x175/0x250 [ 869.134598][T17865] ? mnt_want_write+0x161/0x450 [ 869.134612][T17865] filename_create+0x1cf/0x400 [ 869.134626][T17865] ? __pfx_filename_create+0x10/0x10 [ 869.134641][T17865] ? find_held_lock+0x2b/0x80 [ 869.134656][T17865] ? __might_fault+0xe3/0x190 [ 869.134669][T17865] do_mknodat+0x19c/0x6f0 [ 869.134684][T17865] ? __pfx_do_mknodat+0x10/0x10 [ 869.134698][T17865] ? getname_flags.part.0+0x1c5/0x550 [ 869.134708][T17865] ? __pfx_ksys_write+0x10/0x10 [ 869.134724][T17865] __x64_sys_mknodat+0xaf/0xe0 [ 869.134741][T17865] do_syscall_64+0xcd/0xf80 [ 869.134755][T17865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.134766][T17865] RIP: 0033:0x7f3214f8f749 [ 869.134775][T17865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.134785][T17865] RSP: 002b:00007f3215d6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 869.134795][T17865] RAX: ffffffffffffffda RBX: 00007f32151e6090 RCX: 00007f3214f8f749 [ 869.134802][T17865] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 869.134808][T17865] RBP: 00007f3215d6a090 R08: 0000000000000000 R09: 0000000000000000 [ 869.134814][T17865] R10: 0000000000000709 R11: 0000000000000246 R12: 0000000000000001 [ 869.134820][T17865] R13: 00007f32151e6128 R14: 00007f32151e6090 R15: 00007ffce1187068 [ 869.134835][T17865] [ 869.460129][ T5136] Bluetooth: hci2: command 0x0405 tx timeout [ 869.597703][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.536760][ T30] audit: type=1400 audit(1766304349.036:989): avc: denied { ioctl } for pid=17891 comm="syz.1.3540" path="socket:[58192]" dev="sockfs" ino=58192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 871.567552][T17892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3540'. [ 871.726612][T17894] kAFS: unable to lookup cell '({^@' [ 871.857864][ T30] audit: type=1400 audit(1766304349.356:990): avc: denied { mount } for pid=17896 comm="syz.6.3542" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 872.116157][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3542'. [ 872.125184][T17902] netlink: 'syz.6.3542': attribute type 5 has an invalid length. [ 872.133048][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3542'. [ 872.164190][T17902] geneve3: entered promiscuous mode [ 872.174018][T17902] geneve3: entered allmulticast mode [ 872.187773][ T30] audit: type=1400 audit(1766304349.606:991): avc: denied { watch_sb } for pid=17896 comm="syz.6.3542" path="/50/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 872.399480][ T7049] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 872.477266][ T7049] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 872.486479][ T7049] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 872.495193][ T7049] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 874.769701][ T789] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 874.867926][T17933] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 874.879976][T17933] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 874.888367][T17933] CPU: 1 UID: 0 PID: 17933 Comm: syz.4.3551 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.899289][T17933] Tainted: [L]=SOFTLOCKUP [ 874.903596][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.910164][ T30] audit: type=1400 audit(1766304352.366:992): avc: denied { add_name } for pid=17932 comm="syz.4.3551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 874.913621][T17933] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 874.943750][T17933] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 874.963328][T17933] RSP: 0018:ffffc9000fc37ae0 EFLAGS: 00010202 [ 874.969365][T17933] RAX: dffffc0000000000 RBX: ffff88802a715780 RCX: ffffc9000c439000 [ 874.977306][T17933] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 874.985246][T17933] RBP: ffff88802a715818 R08: 0000000000000005 R09: 0000000000000000 [ 874.993185][T17933] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92001f86f6b [ 875.001126][T17933] R13: 0000000000000000 R14: ffff888073f18d60 R15: 0000000000000038 [ 875.009066][T17933] FS: 00007f3215d8b6c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 875.017963][T17933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.024517][T17933] CR2: 00007f3215d8af98 CR3: 000000005e6b6000 CR4: 00000000003526f0 [ 875.032461][T17933] Call Trace: [ 875.035711][T17933] [ 875.038612][T17933] __kernfs_new_node+0x7b4/0x990 [ 875.043534][T17933] ? __pfx___kernfs_new_node+0x10/0x10 [ 875.048964][T17933] ? find_held_lock+0x2b/0x80 [ 875.053613][T17933] ? kernfs_root+0xee/0x2a0 [ 875.058087][T17933] kernfs_new_node+0x13c/0x1e0 [ 875.062822][T17933] ? kasan_save_track+0x14/0x30 [ 875.067656][T17933] kernfs_create_dir_ns+0x4c/0x1a0 [ 875.072739][T17933] cgroup_mkdir+0x40f/0x12e0 [ 875.077300][T17933] ? __pfx_cgroup_mkdir+0x10/0x10 [ 875.082294][T17933] kernfs_iop_mkdir+0x111/0x190 [ 875.087115][T17933] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 875.092112][T17933] vfs_mkdir+0x731/0xb60 [ 875.096325][T17933] do_mkdirat+0x442/0x5e0 [ 875.100631][T17933] ? __pfx_do_mkdirat+0x10/0x10 [ 875.105453][T17933] ? strncpy_from_user+0x203/0x2e0 [ 875.110536][T17933] ? getname_flags.part.0+0x1c5/0x550 [ 875.115877][T17933] __x64_sys_mkdir+0xef/0x140 [ 875.120526][T17933] do_syscall_64+0xcd/0xf80 [ 875.125001][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.130862][T17933] RIP: 0033:0x7f3214f8f749 [ 875.135249][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.154823][T17933] RSP: 002b:00007f3215d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 875.163202][T17933] RAX: ffffffffffffffda RBX: 00007f32151e5fa0 RCX: 00007f3214f8f749 [ 875.171144][T17933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 875.179084][T17933] RBP: 00007f3215013f91 R08: 0000000000000000 R09: 0000000000000000 [ 875.187024][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.194964][T17933] R13: 00007f32151e6038 R14: 00007f32151e5fa0 R15: 00007ffce1187068 [ 875.202907][T17933] [ 875.205898][T17933] Modules linked in: [ 875.210360][T17933] ---[ end trace 0000000000000000 ]--- [ 875.253695][T17933] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 875.267587][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 875.277853][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.290233][T17933] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 875.328989][ T30] audit: type=1400 audit(1766304352.366:993): avc: denied { create } for pid=17932 comm="syz.4.3551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 875.352877][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.362724][ T789] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 875.371788][ T30] audit: type=1400 audit(1766304352.366:994): avc: denied { associate } for pid=17932 comm="syz.4.3551" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 875.399670][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.407696][T17933] RSP: 0018:ffffc9000fc37ae0 EFLAGS: 00010202 [ 875.418349][ T789] usb 4-1: config 0 descriptor?? [ 875.426423][T17933] RAX: dffffc0000000000 RBX: ffff88802a715780 RCX: ffffc9000c439000 [ 875.440095][T17933] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 875.449250][T17933] RBP: ffff88802a715818 R08: 0000000000000005 R09: 0000000000000000 [ 875.458167][T17933] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92001f86f6b [ 875.467252][T17933] R13: 0000000000000000 R14: ffff888073f18d60 R15: 0000000000000038 [ 875.475965][T17933] FS: 00007f3215d8b6c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 875.485059][T17933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.491964][T17933] CR2: 00007f8781db6ad8 CR3: 000000005e6b6000 CR4: 00000000003526f0 [ 875.500601][T17933] Kernel panic - not syncing: Fatal exception [ 875.506930][T17933] Kernel Offset: disabled [ 875.511225][T17933] Rebooting in 86400 seconds..