last executing test programs: 10m4.609067246s ago: executing program 4 (id=117): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x100, 0x0, 0x3ab}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c, 0x0, 0x0, 0x3000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x3ae60f63ae8b7b20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 10m4.45331338s ago: executing program 4 (id=118): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0xfbfff2d4, @mcast2, 0x80001}, 0x10) capset(0x0, &(0x7f00000001c0)={0x7, 0x1b, 0x7, 0xfe5b, 0x8, 0x3b6}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850020000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m3.084062776s ago: executing program 4 (id=121): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000580)=""/218, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xffffffa1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001806fffe80000000000000000000000000000afe8000000000000000000000000000aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000308020000ecbe41e5d8020f8a667c95e9fe1ee91cdc359cca6b84d05760920a68d52ddb0a4b6a8a57a929f7191cd3204a4d1f7a93248851fd233eb7848c56dc57261e8493d4422e7d51ab87129cc798198de5bfeff221c4143e423aa2475f"], 0x0) syz_usb_connect(0x4, 0x6b, &(0x7f0000000100)=ANY=[@ANYRES8=r4], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140), 0x80) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)='\v', 0x1}, {&(0x7f0000003300)="fcfe", 0x2}], 0x2) 9m58.683346827s ago: executing program 4 (id=138): gettid() sched_setscheduler(0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) syz_emit_vhci(&(0x7f0000001880)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x7, 0x4, &(0x7f0000000080)={0x1d, "146f060000000000000000000000000000000000000000000000000000000400"}}) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000001c0)={0x0, r4}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)=@arm64) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b00000008000200"], 0x1c}, 0x1, 0xf000, 0x0, 0x20004080}, 0xc4) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 9m56.325850394s ago: executing program 4 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './bus\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xc, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r4, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpgid(0x0, r6) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 9m55.737225514s ago: executing program 4 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9m39.659566643s ago: executing program 32 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 30.915891937s ago: executing program 1 (id=2125): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000640)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0xea60}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="36bce004281fb1efc01a100000c8d4000000100000000062d835b754ec82fe828c0122a171d5325ab20000003d273416cc27a5021857a9b6a6eddac480fe7fae42f8c7a099197f8951f88ef46006c3796b46f0505f6ab9071fbe652ad71b33570beac061c83069b5637edf96d853cd3354a4d16b370fc5398cb52bf9618cfdf374c1ae03b52c0fce89f736896a"], 0x10}, 0x50) io_setup(0x7fff, &(0x7f0000000000)=0x0) io_cancel(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x3c}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 27.25177349s ago: executing program 1 (id=2137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x200, 0xffffffff, 0x2, 0x4008, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x20000000000000d}, 0x50) (async) r2 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xfb81, 0x400, 0x80002, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000090b60cb576575fa100000200000000000000000e0013000000000000"], 0x0, 0x26}, 0x20) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r12, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) close(r13) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r16, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) write$binfmt_misc(r12, &(0x7f0000000000), 0xfffffecc) (async) splice(r11, 0x0, r13, 0x0, 0x4ffe2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{0x0}, {0x0}], 0x2, 0x1d, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) r17 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r17, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000015c0)={@val={0x6f01, 0xc}, @val={0x1, 0x0, 0x6, 0x0, 0x20}, @mpls={[], @generic="933f6a9b9feaaade283a60cb6871465a43e2f22ce37953bb481d9911e381f969edcafd529600c922962f72e3b81e15d202a5bdd2e0f1f96df8"}}, 0x47) 26.977350516s ago: executing program 1 (id=2139): mount$tmpfs(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB="73697a653d332c0004ac57ae2fa7780599d55d9024739c16c366bf2759618d8aff13cd04de257eccefd313cc09f0c58407774f251e4c825813bd4a454fe6ce09fe5ea86c0cf8ea3ae2ea36a7ccffc8"]) r0 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00030400000004030a"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) 24.208668029s ago: executing program 1 (id=2152): r0 = epoll_create(0x5) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x6) landlock_restrict_self(r3, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x10000000}) sendmmsg(r4, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r6 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_getparam(r6, &(0x7f0000000000)) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003dc0)='/sys/kernel/fscaps', 0x228c0, 0x8) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000013c0)={0x81, 0x94}, 0x2) read$midi(r7, &(0x7f0000003e00)=""/75, 0x4b) r8 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x1, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x7}, {0x2, 0x2}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) r9 = io_uring_setup(0x4a3, &(0x7f0000000000)={0x0, 0xb2ec, 0x100, 0x0, 0x2f}) pause() close(r9) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback}, &(0x7f0000000180)=0xc) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr={0x1, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x6f, 0x30, 0x30]}}, &(0x7f0000000200)=""/4096, 0x2a, 0x1000, 0x1, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x14, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0x80, 0x8, 0xd, 0x7, 0xe7}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xee85}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x30003, 0x0, 0x0, 0x41100, 0x1, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000001240)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0xc, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x94) 22.987666986s ago: executing program 1 (id=2156): r0 = syz_io_uring_setup(0x1105, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x202, 0x0, 0x1}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0x91, &(0x7f00000000c0)="8e800761627d74786b6120ba93d45276c07e86f2befd5e992d5661252e474a41036914c7d1450affd707e7d2f1ceed36b58de2ebddcb5b47d9ab678b776f5507c66ca0f2d022bad88132893c3fb541c86a97d631563393d2a8de473277a8947feead4fd084047697de62aecc9775e7cf22a1c848acac6341559d7a943ab9842072f5efb371747d4ce5c08a1efc9eaf8e94", 0xa6, 0x0, &(0x7f0000000400)="aa1f8c74a0bc70576069cb847dc704ed4771bdc9321c6b64d1e3ec23be9b9114103540d9f2bdb95ac7a63849469b853e0dbdc20c0dd3a3719e965a12ba7ef56b40d2e86a96e26444d7152e5d33e5d20f34cf6afb44a692a9520412832dbc5265b6efe6d875b2eebc4f939967131d647ceca6f089c9fe6880be88806c2543d95013587abe5cd7a2ab2736a54cf5406c539d90ef9c6d26bb0f2e6caa9e222dc73ef5e42cdf1416"}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(r4, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10002) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r12, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 21.204633416s ago: executing program 1 (id=2162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x29, 0x1f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x4, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x1}, @rr={0x7, 0x17, 0xb7, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x5, [0x8, 0x4, 0xcb5, 0x7fff, 0x1, 0x2, 0x1, 0x4]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.536222224s ago: executing program 3 (id=2197): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) 6.981726641s ago: executing program 3 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x401, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc02c5625, &(0x7f0000000000)={0x7, 0x1, @name="a62631f58c61aa8e668d76875f477741d19b4d62f9135b50fad9494b8058429c"}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r12 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x6, 0xf, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfdf1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x201, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r15, 0x3b70, &(0x7f0000000340)={0x80, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}]}}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f0000000280)={r16, 0x3, 0x30}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x6, &(0x7f0000000400)={r17, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}}, &(0x7f00000001c0)=0x84) 6.689549449s ago: executing program 3 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r1 = fanotify_init(0x1a, 0x800) (async, rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000ea0000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000170900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES64], 0xd8}}, 0x80) (rerun: 32) 6.523197804s ago: executing program 3 (id=2202): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r0, 0x6a83) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="03010000ac0fce405d0501904431000000010902120009000080040904"], 0x0) 4.690209255s ago: executing program 5 (id=2208): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x892031, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d756e69782c646972656374696f2c6163636573733d636c69656e742c6163636573733d216cf7b05c"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x91) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './bus/file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0xc0, &(0x7f0000000380)=0x6, 0x0, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x1, 0x38a7, 0x1, 0x4530528f, {{0x1e, 0x4, 0x1, 0x31, 0x78, 0x64, 0x0, 0x56, 0x2f, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0xdb, 0x3, 0x5, [{@multicast2, 0xc}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x5}, {@remote, 0x7f}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x3d8000}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}]}, @rr={0x7, 0xf, 0x94, [@broadcast, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x13, 0x1, 0x1, [{@local, 0x10001}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x2200a, 0x30010}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x12) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x18040, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}], [{@euid_gt={'euid>', r1}}]}) 4.252999251s ago: executing program 5 (id=2210): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$nci(0xffffffffffffffff, &(0x7f0000000280)=""/134, 0x86) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xf, {0x2, 0x4e24, @multicast1}}, 0xfc23, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x10b8}, 0x200008c0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) unlink(&(0x7f0000000040)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.581834018s ago: executing program 3 (id=2212): syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) syz_usb_connect$uac1(0x4, 0xde, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x7, 0xf0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa6f7, 0x2}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x4], 0xa3}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x5, 0xfc, "92f6"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x5, 0x40, 0x8, 0x0, 0x7f}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x1ff, 0x8a, "218654eb72"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x3], 0xb9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd6, 0x8, 0x6, {0x7, 0x25, 0x1, 0x80, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x2, "3fa607e472"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0xa9, "", "ff"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf, 0x1, 0x6, 0x8, "", "cf7e5f"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xe, 0x2, 0x2, 0xa7, "a6bf20ef7e0cff"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xa, 0xa, 0xb, 'c'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xe, 0x5, {0x7, 0x25, 0x1, 0x1, 0xb, 0x3}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0xfb, 0x8, 0x8, 0x3}, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "207dde637cb60e48fc58bd080915ec76"}, @ptm_cap={0x3}]}, 0x7, [{0xfa, &(0x7f0000000200)=@string={0xfa, 0x3, "eaa44baeeda6d3260c572b7201c948a0fe4f472b08510c339e67428cd0e6554a1b3926fa9733fb4ee9cebac03fe7f9a7ae14cd1f736cf84dce3eb5e3ed5bcf6b46c2cf5a492da3315349c6fab47dc7a216e2c5a56034ef46d53dc39695e532b2f193a0d8c30d5b36a5f7fd49ff4e56fed0dfd49eddd77e72a5f99c3e0cf6386ac7b1c2be91334f7cecce8b3af9d895040782b3dc7e088020812bfd7d7aa115ad79e0a14323fe45a08d7266b5ef146500ce8d116de8a93914ad71810ab009547b0eb8ce240a7a2eecbbf8150f32fc3f0c8816d40acea7da6012507c02dbca64af19828b70be96034017d36df835c49618e1b757233edb9ef8"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}, {0x9a, &(0x7f0000000340)=@string={0x9a, 0x3, "e31c28a3df2c2114609ec150a1e9662fa3a06e9c96ddb779b1c7ec3bb3ce8343e325ca9a25a587a9fda9454adae9d00e4194196a9012ff1f9f9407d9e81c0100758497cb8535b871f9c56eb737589c9f8f7c597eced4e663e5f3a7172414406a63e19e8376e118e4d4adfd455406bbd5b655f5337278355871f31456f767811e7ba6c149bb2530c4e7c6e39957f19c14f4d6139b8d4c4cfd"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x408}}, {0xf3, &(0x7f0000000480)=@string={0xf3, 0x3, "31e0515b4e86738f44164e29e58ec9751c333347609e0b70af0c670a0c26e0b8e8a899a7ba7233f84d2125f8390164f46a66a2ff2d7894e009ed4fe05933ffc8ac295f3b628e1e33f1837284154e63d03c35d433f74302765658061b47dd56918f497509a2b996d749ec1a76f2b25c126094e2d6c9b504b2ead0435a1cf1b2855e3f536f8a705fe5937b28ef3311b5d683d074826a24c87512592e5ab18fde821c4b1621e575be087e9a8342d7976884024b02a2dca44b8c354f7f8a26ff5964ae3b4816735c6c72b5eed222dd24a4b4bb0248608e2db56de951441d4032f69858ecbc040b34a191e89f0e18f9da13b142"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}]}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.529022345s ago: executing program 0 (id=2213): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed0000620300ff000000001d440000000000507a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 3.331131164s ago: executing program 2 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x4, 0x0) mq_notify(r1, &(0x7f0000000200)={0x0, 0x26, 0x0, @thr={0x0, 0x0}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4, 0x8, 0xffffffffffffffff, 0x3ffffe}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r5, &(0x7f0000000200), 0x0}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050029bd7000000000044400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0070000400050004000700"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 3.316788606s ago: executing program 0 (id=2215): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001580)=ANY=[], 0x3d0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0xc1d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1, 0xe9}}, 0x40) 3.177668669s ago: executing program 2 (id=2216): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x1f\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) 3.044884636s ago: executing program 0 (id=2217): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x2000094}, 0x64048080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x29, 0x1, 0xd, 0x101, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x7, 0x80005}}) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xfffffffffffffebe}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x10000000000003, &(0x7f0000000040), 0x111, 0x4}}, 0x20) 3.044666872s ago: executing program 2 (id=2218): pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x15, 0x800000000004, @thr={&(0x7f00000003c0), 0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="294fcf5a1122f0d49df400"/26], 0x1c}}, 0x24000090) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000006000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 2.074644273s ago: executing program 2 (id=2219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x13, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010425bde00000000000000000007b3c2f3ae1b63477d542eea39d4fa8120d6d45ca5e6fb9e3f6c9e58dcd6382484bbe11c33475d2e667c7e3dd8132dbadf4988852059a114290ff9d17ff3810cbfa2218cf3c88f2baf83658b69bdcc8792880747d07bb1b3fd74eb286e068539fe4c187d546fb798e01d87579dc46cf95ddeeadc2438e174d33fe89", @ANYRES32=0x0, @ANYBLOB="2b030000815000002c0012800b00010069703667726500001c000280060010004e2100000800040008000000080014000a000000"], 0x4c}}, 0x20000080) 1.804639158s ago: executing program 2 (id=2220): socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x100143) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000a40)=@urb_type_iso={0x0, {0x9}, 0x9, 0x81, &(0x7f0000000800)="f306e2e560c9aab3fa5a9791bdd793d37bc6aad9189bbbee9dee5c99e7cb55a99777baf3651cb430ab07382fe528ed073964aa194da15b47bda6bf5b592ec89271c41c2efb596cbf782f9c83eb1651610528a50d06c7", 0x56, 0xe2, 0x0, 0x46, 0x8, 0x8, &(0x7f0000000980)="c0d725095eb58a454295e9c6e366adaf539ffcdbd0a73cc89a92f430d7ce6daee98e9290ce02dcfb35e1c255bc3f7147ec1202a97d3c1c8cb91d21a366aee0619a89304d8ae7df72671521da7682e3e36c2f0e03a3f576d2cd1de576bfb67f30efec140f7e2d46f08a8cc7ea702147e1bac26ec2eeb4ad27b07f563ff5e33bc59d182ef3b0c54ad4b62c2752885ae0d7b30695bb4e75e0fc3e21b70386b1a7f6243571717cd09e6af956f07f36", [{0xffffff1a, 0x8, 0x401}, {0x10, 0x5, 0xada}, {0x9, 0x9, 0x2}, {0x101, 0x2, 0x6}, {0x5, 0x9f, 0xd}, {0x5, 0x7, 0x4}, {0x1, 0x5, 0x6}, {0x9, 0x0, 0x8000}, {0x5, 0x200, 0xfffffff7}, {0x7eeafc6d, 0x8, 0x100}, {0x6, 0x3, 0x4}, {0x77c, 0x80000001, 0x6}, {0x6, 0xe7, 0x4}, {0x4, 0x7, 0x5}, {0x9bb, 0x10000, 0x81}, {0x9, 0x8, 0x3}, {0x2, 0x8, 0x5}, {0xffff, 0x101, 0xff}, {0x487, 0x7, 0xded}, {0x401, 0x9, 0x8}, {0x3c, 0x0, 0x8}, {0x2, 0x80000000, 0x5}, {0x9, 0xc, 0x10}, {0xd, 0x5, 0x73d}, {0x6d8b, 0x4, 0x6}, {0x1, 0x59d, 0x2}, {0x5, 0xffffffff, 0xe}, {0x0, 0x8, 0x3ff8}, {0x4, 0xd, 0x9}, {0x0, 0x63ad93cc, 0x9}, {0x10001, 0x3}, {0x1, 0x8, 0x2}, {0xc5ec, 0x6, 0x5ec}, {0x6, 0x8001, 0x7}, {0xfffff01c, 0x7041650d, 0x4}, {0x9, 0x2, 0x9fc}, {0x1, 0x7, 0x401}, {0xc9, 0x9, 0x1}, {0x7fff, 0xce, 0xfe}, {0x570, 0x6, 0x5}, {0xc, 0x7, 0x2}, {0xfff, 0x80000001, 0x4}, {0x2, 0x1, 0x2}, {0xb0, 0x8, 0xffffffff}, {0x5b, 0x8, 0x1}, {0x599, 0x1, 0x8}, {0xf3, 0x68f6fdd9, 0x6}, {0x7, 0x7, 0x27c7}, {0xa9e, 0x9, 0x3d95}, {0x6c, 0x4, 0x4}, {0x19, 0x3, 0x8759}, {0x1, 0x2, 0x6}, {0x3, 0x5, 0xacc}, {0x9, 0x7ff, 0x8}, {0x7, 0x3, 0x3}, {0xa0, 0x10, 0x7}, {0xfffffe01, 0x5, 0x800}, {0x6, 0x2, 0x3}, {0xb59d, 0x8, 0xff}, {0x30, 0xa, 0xa6f}, {0xfff, 0x604, 0x10001}, {0x1, 0x7, 0x4}, {0x6, 0x3, 0xfffffffc}, {0x5, 0x1000, 0x3}, {0x390e, 0x9, 0x80000000}, {0xfe95, 0xc, 0x7}, {0x1, 0x0, 0x36}, {0x570, 0x4, 0x90}, {0x5877, 0x8, 0xfffffd24}, {0x5, 0x8, 0x2}]}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000a40)=@urb_type_iso={0x0, {0x9}, 0x9, 0x81, &(0x7f0000000800)="f306e2e560c9aab3fa5a9791bdd793d37bc6aad9189bbbee9dee5c99e7cb55a99777baf3651cb430ab07382fe528ed073964aa194da15b47bda6bf5b592ec89271c41c2efb596cbf782f9c83eb1651610528a50d06c7", 0x56, 0xe2, 0x0, 0x46, 0x8, 0x8, &(0x7f0000000980)="c0d725095eb58a454295e9c6e366adaf539ffcdbd0a73cc89a92f430d7ce6daee98e9290ce02dcfb35e1c255bc3f7147ec1202a97d3c1c8cb91d21a366aee0619a89304d8ae7df72671521da7682e3e36c2f0e03a3f576d2cd1de576bfb67f30efec140f7e2d46f08a8cc7ea702147e1bac26ec2eeb4ad27b07f563ff5e33bc59d182ef3b0c54ad4b62c2752885ae0d7b30695bb4e75e0fc3e21b70386b1a7f6243571717cd09e6af956f07f36", [{0xffffff1a, 0x8, 0x401}, {0x10, 0x5, 0xada}, {0x9, 0x9, 0x2}, {0x101, 0x2, 0x6}, {0x5, 0x9f, 0xd}, {0x5, 0x7, 0x4}, {0x1, 0x5, 0x6}, {0x9, 0x0, 0x8000}, {0x5, 0x200, 0xfffffff7}, {0x7eeafc6d, 0x8, 0x100}, {0x6, 0x3, 0x4}, {0x77c, 0x80000001, 0x6}, {0x6, 0xe7, 0x4}, {0x4, 0x7, 0x5}, {0x9bb, 0x10000, 0x81}, {0x9, 0x8, 0x3}, {0x2, 0x8, 0x5}, {0xffff, 0x101, 0xff}, {0x487, 0x7, 0xded}, {0x401, 0x9, 0x8}, {0x3c, 0x0, 0x8}, {0x2, 0x80000000, 0x5}, {0x9, 0xc, 0x10}, {0xd, 0x5, 0x73d}, {0x6d8b, 0x4, 0x6}, {0x1, 0x59d, 0x2}, {0x5, 0xffffffff, 0xe}, {0x0, 0x8, 0x3ff8}, {0x4, 0xd, 0x9}, {0x0, 0x63ad93cc, 0x9}, {0x10001, 0x3}, {0x1, 0x8, 0x2}, {0xc5ec, 0x6, 0x5ec}, {0x6, 0x8001, 0x7}, {0xfffff01c, 0x7041650d, 0x4}, {0x9, 0x2, 0x9fc}, {0x1, 0x7, 0x401}, {0xc9, 0x9, 0x1}, {0x7fff, 0xce, 0xfe}, {0x570, 0x6, 0x5}, {0xc, 0x7, 0x2}, {0xfff, 0x80000001, 0x4}, {0x2, 0x1, 0x2}, {0xb0, 0x8, 0xffffffff}, {0x5b, 0x8, 0x1}, {0x599, 0x1, 0x8}, {0xf3, 0x68f6fdd9, 0x6}, {0x7, 0x7, 0x27c7}, {0xa9e, 0x9, 0x3d95}, {0x6c, 0x4, 0x4}, {0x19, 0x3, 0x8759}, {0x1, 0x2, 0x6}, {0x3, 0x5, 0xacc}, {0x9, 0x7ff, 0x8}, {0x7, 0x3, 0x3}, {0xa0, 0x10, 0x7}, {0xfffffe01, 0x5, 0x800}, {0x6, 0x2, 0x3}, {0xb59d, 0x8, 0xff}, {0x30, 0xa, 0xa6f}, {0xfff, 0x604, 0x10001}, {0x1, 0x7, 0x4}, {0x6, 0x3, 0xfffffffc}, {0x5, 0x1000, 0x3}, {0x390e, 0x9, 0x80000000}, {0xfe95, 0xc, 0x7}, {0x1, 0x0, 0x36}, {0x570, 0x4, 0x90}, {0x5877, 0x8, 0xfffffd24}, {0x5, 0x8, 0x2}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x2000080, &(0x7f0000000300), &(0x7f0000000240), &(0x7f00000002c0)=0x0, {0x1a}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000080)=[r1, r1, 0xffffffffffffffff, 0x0, r1], 0x5}, 0x58) ptrace$cont(0x20, r2, 0x0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="aa7c6b6d17bb406f0abbaf6423e33a5ff8240630f9d407b0a47fa13279ab64167190b68c33c72b05edcbc43ad11ef6778fe014a71402f2255ecc5a79f031d4a50a5155cfce57ae399c2c806f381f981a973ef1d7465965802ab3695a533aca12499ccc7a8cada2e20e7981aa5f8d85ccd6bae43bd72f6d44ba4ca89ea51d3c068fe9d2ad0a3d26cb03fd7fcb4d8a1bb7571f19b7", @ANYRESDEC=r3, @ANYRES32=r1, @ANYRES32=0x0, @ANYRESOCT=r4], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000280)={0x1335, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0xfd) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8932, &(0x7f0000000000)={'ip6_vti0\x00'}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8932, &(0x7f0000000000)={'ip6_vti0\x00'}) 1.764675124s ago: executing program 5 (id=2221): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x497, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000800000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r6], 0x44}}, 0x804) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@getqdisc={0x2c, 0x26, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd}, {0x7, 0x10}, {0x3, 0xffff}}, [{0x4}, {0x4}]}, 0x2c}}, 0x880) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x40, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000400)=ANY=[@ANYRES32=r0]) 1.30603325s ago: executing program 5 (id=2222): syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120011000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200000000000000000000f5ff0001"], 0xfdef) 1.227315421s ago: executing program 0 (id=2223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x4000, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x20) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000c07000/0x2000)=nil) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES8=r3, @ANYRESOCT=r0], 0x23c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fb5bdf250100000006001c00951e000006001c000208000005002100fe00000006001c008000000006000300070000000500220001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000060240000090a010400000000000000000700000508000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f2c00128028000180090001006c61737400000000180002800c000240fffffffffffffffc08000140000000a30800034000000106f023128010"], 0x29d0}}, 0x20050800) sendmsg$NL802154_CMD_SET_CHANNEL(r5, 0x0, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000600)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2, 0x3a, '*#/*\xdeq\a\xa5!\xa4\xaa\x9b[\x9a\xb5&a\x90\xf5(i\xc3\x7f\x90dz\xa0\xee\x8d\xf3\xc30]\b0P\xa0\xc9\x8a8A\x14\xd4\xf9\xc0\x03E\x04g\x04jS\tA-|\x8c\xf8ki\x16\n\x92\v\xfd\xc0\x8b\xc3nyCn\x00\xd21*ey\x12\xb8\xdb\xa3\x05\xd3?*3*\xaa\xa5~\x81\xc6\x1ax^H\x9f\x88\v\x83\xcd\x93\xebb\xfaX\xebb\xc5A\x14\xf3f\xf7\xd7\xdf\xfc\xe3+\xebg\xe9@Jr\xad\x87\xc8\xc9\x00\xb5\xe3\xac\x9b\a\xa6\x0e\x01C\x97\xee\xcc\xf7\xc7\xa9\v\xa2\x05m\xe8~\x1d\x1d(\xf9\x97\xb0\x06\x9d\a\r\xa3\xb1\xead\xcaYw\x82ZI\a\xc9\xbe[XF~\xc5\xf2.?Z\xcdEo\xc2L9\x17N\x1f\x94\xafd9\xc7\xab\xe6j\xc9\x9a9#\xa3G\xdf\xf6`\xb7\xc1\xfaB\xe4\xda\xc1||\x8b\x8d: M\xfa\xb8O\xe2\xfa\x18\xa7\xd4\xae\xf9,Oh?!\'E\x89\xfd\x88\x19\x7f\xca\x00\a\xf6Ve\x92T\xc6\x06\xaf\x98d\x86\xf4\xd3JAS\t\xd5\xd2\x98\xa54\x96\xcf\xcd\x94\xc5\'j\x89\xb9PHV|,\xb2\x14\x8cJ5\xe1P\x83\xcb\xdfb\\\xbb\xb3\xefn&\x00=', 0x3a, '\xd2D\xb5\x9bx\xd3O\x02\xb5p\xef\xb9\x89\x9fb&\xe2L\x00\xde\xffT\xba\xce\x80\x8f5;7\xab\t\xa30%V\xf9\xb1\x17~\v,\x7f\x02H\xf9u\x7f>\xe4\\\xbd/P\xd1\xaa\x9c\xf8-\x81E\xcc\xc8\xf6\xa0d\x97\xa5j\xbf\x8c\xc6\x84\x1f\x8f\xea\b\x1f\xe4YJw\xca\x9fs\x04\rD\xb1F$\x0f\rr\xe7', 0x3a, './file0'}, 0x1b5) request_key(0x0, &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) 1.023514102s ago: executing program 5 (id=2224): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r1, 0x0, 0x0, 0xfc0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 302.975933ms ago: executing program 3 (id=2225): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x20, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call, @call={0x85, 0x0, 0x0, 0xc2}, @call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11c3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0xc2, &(0x7f0000000300)=""/194, 0x41100, 0x5, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x4, 0xfffffffb, 0xd2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x1, 0xa, 0x8}, {0x1, 0x1, 0xf, 0x4}, {0x2, 0x5, 0x2, 0x9}, {0x1, 0x2, 0x1, 0x5}], 0x10, 0x93}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xff8f, 0x0, 0x7, 0x0, 0x200]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008844}, 0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040061) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r5, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000000000), 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 258.126985ms ago: executing program 0 (id=2226): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x4e23, @empty}}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1fff, 0x80, 0x3231564e, 0x3, [0x2], [0x80, 0xfffffffc], [0x0, 0x4], [0x3fffffffffffffe, 0x2000000000, 0x10000000000, 0x7]}) 130.249477ms ago: executing program 5 (id=2227): socket$inet6(0xa, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 37.067272ms ago: executing program 0 (id=2228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) fcntl$setstatus(r0, 0x4, 0x2000) socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000dea00000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 2 (id=2229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x9, 0x2, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000100)=0x2f) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) statx(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0x4000, 0x200, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000d00), &(0x7f0000000d40)=0x0, &(0x7f0000000d80)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) sendmsg$netlink(r6, &(0x7f0000000e80)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc, &(0x7f0000000b80)=[{&(0x7f0000000280)={0x2c0, 0x10, 0x800, 0x70bd28, 0x25dfdbff, "", [@generic="3848d0376d60addd0b0d6302ba1b3ab871f70e6bc8b7ff0336af40573bb6e719160a6c03110f501d63da404737fff5663a462c15eff1eae7b08c6591c80a031a37f822e922df87d1685b89597a0b37257fd54ec3a69789f16f55797cefe0b6b264099946bda5cfe465ceb7604f930363994da94ffd66d044d5ad652b", @nested={0xe5, 0x32, 0x0, 0x1, [@generic="90012cb4af232b6ba03a59bdf77e493dd458de086c6dcd34ced3e0adb8f5f1a98aefe661242b4f0a11ebb472a1e6552be73e401a6204aceec2182a", @nested={0x4, 0x108}, @generic="e4f38a72afdd3926a05a64225551e6f4d1c75503d60776c203c2429da5288e17e7c204c9c02104da5d2b64cdd9caea9d2ce84698ae45b16bc3e5d25fcfa8cdb925cd0fe50a1cfa89aebd99854a8c1382c70692f7cbca79a1ed4cb38d6ea114cf9402da41ef612edf6a0c1f298674447fc5876d92840cebc8270e128c5c65a8709d317952baac9e8d712abdfbbd851e4dd1e6ce40129cbf7da26dc7cfd986", @nested={0x4, 0x5b}]}, @generic="b51608018e197b0cd764d79bfa900d5e27c810bbefba1f961afd4d03d9f7608f4279c55bbbd5692c1088c7e225709753ca3458e89d3418f7da42d751ade2a312cbbfdb5e05181fc7af58488872af795f699643d8ecf3", @generic="cf8f9e013904991fbb802fb3b0fec5c51f3bcc60d9963f9e5cd5fd615e34c36df3de791f6b6e62c456fb1e4eb75ec7d1d6a4c879e6e9d4da63a349eab82ea6aba00c8c0f76818625e32012865c1db70943f03a843811405fe23e4853cc669276d6789c5f39b8a7844e8c0da6e70bdbbf7b1f33e6c1be42cb1fcc6c0af7d7118e368b9a0995ae78a70b91272fc6ba01902b46f8b32f7d2db99a9dcd44484cffd5de23aee8ef901ab7a27b2cd8606d077d05bffb0bca7ecb6ba507f2e83ea5e19d9f6fdab531882f4749a7988c5815a9ef9508852859cdaf52e9104e4c2a2ae2a900697d95897a309987d928cd0203d05729d5dab4472f"]}, 0x2c0}, {&(0x7f0000000540)={0x1b4, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, "", [@generic="787977aefceed31ea427a83a2d0d64127e098ef25208bfb3535402a46e75804d79c89c04a4e3450611f106cd26d5aced04f42c8ba7774af5c32fab91bb146579b055d0efc082bd126e66468c6b2de308b5e61450ca8f6a54b9731dc5ed509f6988184c2eaac169062349f8fdd15fea2a12b77ab1bc639af760965b42d64ed346b6f19b43295068be29b19185c6b144344b916997bde93a4c886b924ffcbf241c92e36a8e073fd8149c2e466f4f4a4452d9378cfed407cdefaf2ccc405ea22661c09b61442ae687d3ac91c60b47a69f95212a23eb", @generic="4f70cf4303433d0b9c7543d5bb9538d0905dce6612539ee5636ac9b4c41ee79deaca0be64141eb87c666116193a9d3491567265e3622bce71e99d4344d1729fe5ce5874d18d181d7986a67a6c20b4ae2028aa402e54881413f29d8ceb5246c929d4e9964b647863e4330dde12012bf6d19846131e596553321f9e00880ed8548dc4e3ac61f22aacb3fddb24772858efc5e33329288344f15f665a767038c72933fabecc2dee7a5394ecd5ba232e0620e3b03eda6d1c45c74b667c978f860e159acaf6435ca960710267294e535"]}, 0x1b4}, {0x0}, {&(0x7f0000000ac0)={0xb8, 0x39, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x4, 0x7e}, @generic="1a276761b0fe3977cd4399080d015a1eef75b080127a0e24176ad3a5c05d741fffdf2d204b7446ca47be491edeaa836a077602b9c7178f62a28d7c3e4885bc81d402a9ca992691f53a6e3a237e00a3246197ee21ce0700159bed1e6703b819f552e6ccee98f210f0fe040e76b95428200362a44985d7410aab379613044653052c6fabdfb646ed3fc1834db568a936a595117e", @typed={0x8, 0xe8, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r8}]}, 0xb8}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r0, r10, r11}}}], 0x40, 0x4048040}, 0x8040) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): : syz [ 520.451209][ T48] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 520.455891][ T793] usb 3-1: SerialNumber: syz [ 520.486798][ T793] usb 3-1: config 0 descriptor?? [ 520.521026][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 520.527949][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.539135][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.554691][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.564076][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.572366][ T5878] usb 4-1: Product: syz [ 520.576645][ T5878] usb 4-1: Manufacturer: syz [ 520.581377][ T5878] usb 4-1: SerialNumber: syz [ 520.611562][ T5899] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 520.612705][ T48] usb 2-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 520.630520][ T48] usb 2-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 520.643723][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 520.650532][ T48] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 520.661884][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.680132][ T48] usb 2-1: config 0 descriptor?? [ 520.690877][T11750] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 520.792675][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 520.802448][ T793] usb 3-1: USB disconnect, device number 46 [ 520.812109][ T5899] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 520.824300][ T5899] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 520.835646][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 520.845397][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 520.856595][ T5899] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 520.867359][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 520.883910][ T5899] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 520.893652][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.906468][ T5899] usb 1-1: config 0 descriptor?? [ 521.015529][ T5878] usb 4-1: 0:2 : does not exist [ 521.040041][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 521.217782][T11759] input: syz1 as /devices/virtual/input/input53 [ 521.453516][ T5878] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 521.546458][ T5878] usb 4-1: USB disconnect, device number 38 [ 521.742807][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.872367][ T5899] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 521.936102][ T5899] usb 1-1: USB disconnect, device number 59 [ 521.974575][ T5899] usblp0: removed [ 522.544743][T11783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 522.554828][T11783] block device autoloading is deprecated and will be removed. [ 522.619994][T11782] md: md2 stopped. [ 522.916722][ T30] audit: type=1400 audit(1770624896.614:543): avc: denied { getopt } for pid=11784 comm="syz.2.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 524.530438][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 524.561558][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 524.575251][T11813] tmpfs: Too small a size for current use [ 524.593746][ T48] usb 2-1: USB disconnect, device number 63 [ 525.801040][ T793] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 525.964654][ T793] usb 6-1: Using ep0 maxpacket: 16 [ 525.973478][ T793] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.984091][ T793] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.003522][ T793] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.013654][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.033217][ T793] usb 6-1: Product: syz [ 526.041993][ T793] usb 6-1: Manufacturer: syz [ 526.052401][ T793] usb 6-1: SerialNumber: syz [ 526.261117][ T48] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 526.424463][ T48] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 526.449663][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.470665][ T793] usb 6-1: 0:2 : does not exist [ 526.475702][ T48] usb 3-1: Product: syz [ 526.491067][ T48] usb 3-1: Manufacturer: syz [ 526.496985][ T48] usb 3-1: SerialNumber: syz [ 526.515075][ T48] hub 3-1:24.0: bad descriptor, ignoring hub [ 526.528990][ T48] hub 3-1:24.0: probe with driver hub failed with error -5 [ 526.988387][ T793] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 527.145920][ T793] usb 6-1: USB disconnect, device number 41 [ 527.218869][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.403517][ T30] audit: type=1400 audit(1770624901.104:544): avc: denied { load_policy } for pid=11843 comm="syz.3.1570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 527.822260][ T48] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 527.863961][ T48] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 527.894363][ T48] dib0700: firmware download failed at 7 with -22 [ 527.931906][ T48] usb 3-1: USB disconnect, device number 48 [ 530.331380][ T793] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 532.015943][ T793] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 532.117430][ T793] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 532.126494][ T793] usb 4-1: Product: syz [ 532.130758][ T793] usb 4-1: Manufacturer: syz [ 532.140873][ T793] usb 4-1: SerialNumber: syz [ 532.156896][T11901] tipc: Enabled bearer , priority 0 [ 532.171992][T11901] syzkaller0: entered promiscuous mode [ 532.173587][ T793] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 532.742155][T11901] syzkaller0: entered allmulticast mode [ 533.102903][T11901] tipc: Resetting bearer [ 533.151808][T11899] tipc: Resetting bearer [ 533.221701][ T793] vp7045: USB control message 'in' went wrong. [ 533.443937][T11899] tipc: Disabling bearer [ 533.450354][ T793] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 533.461104][ T793] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 533.477572][ T48] tipc: Node number set to 3915819099 [ 533.486413][ T793] usb 4-1: USB disconnect, device number 39 [ 533.527613][ T30] audit: type=1400 audit(1770624907.224:545): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 534.052262][ T5815] Bluetooth: hci4: command 0x1003 tx timeout [ 534.058785][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 535.134245][ T30] audit: type=1400 audit(1770624908.834:546): avc: denied { bind } for pid=11931 comm="syz.0.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 535.180273][ T793] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 535.364140][ T793] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 535.380047][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.388451][ T793] usb 2-1: Product: syz [ 535.403410][ T793] usb 2-1: Manufacturer: syz [ 535.408045][ T793] usb 2-1: SerialNumber: syz [ 535.446640][ T793] hub 2-1:24.0: bad descriptor, ignoring hub [ 535.454910][ T793] hub 2-1:24.0: probe with driver hub failed with error -5 [ 535.595978][ T48] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 535.731078][ T5899] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 535.769738][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 535.785244][ T48] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 535.802853][ T48] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 535.832748][ T48] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 535.854555][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 535.875366][ T48] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 535.881488][ T30] audit: type=1400 audit(1770624909.564:547): avc: denied { connect } for pid=11951 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 535.921079][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 535.943301][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 535.947582][ T48] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 535.950573][ T5899] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 535.973875][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.979244][ T5899] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 535.993290][ T48] usb 4-1: config 0 descriptor?? [ 536.045018][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 536.348259][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.376228][ T793] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 536.393324][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 536.408070][ T793] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 536.416991][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 536.438470][ T793] dib0700: firmware download failed at 7 with -22 [ 536.508372][T11957] input: syz1 as /devices/virtual/input/input55 [ 536.734982][ T5899] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 536.792123][ T793] usb 2-1: USB disconnect, device number 64 [ 536.814728][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.861378][ T5899] usb 6-1: config 0 descriptor?? [ 536.995305][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 537.005065][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 537.231556][ T48] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 537.347123][T11962] input: syz1 as /devices/virtual/input/input56 [ 537.546690][ T48] usb 4-1: USB disconnect, device number 40 [ 537.590857][ T48] usblp0: removed [ 537.989131][ T5899] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 538.036916][ T5899] usb 6-1: USB disconnect, device number 42 [ 538.054864][ T5899] usblp0: removed [ 538.100480][ T30] audit: type=1400 audit(1770624911.794:548): avc: denied { getopt } for pid=11971 comm="syz.2.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.503355][T11990] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 539.656914][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 539.665904][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 539.674896][T11995] netlink: 'syz.2.1612': attribute type 13 has an invalid length. [ 539.682771][T11995] netlink: 'syz.2.1612': attribute type 12 has an invalid length. [ 539.969975][T11990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.011093][ T5923] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 540.121286][ T793] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 540.161036][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 540.167799][ T5923] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 540.176620][ T5923] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 540.187322][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 540.196476][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 540.215748][ T5923] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 540.287384][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 540.304270][ T5923] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 540.304756][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 540.314005][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.331431][ T793] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 540.340909][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.347656][ T5923] usb 6-1: config 0 descriptor?? [ 540.356928][ T793] usb 1-1: config 0 has no interface number 0 [ 540.365377][ T793] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 540.371257][ T5815] Bluetooth: hci4: command 0x1003 tx timeout [ 540.375714][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 540.406432][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.414676][ T793] usb 1-1: Product: syz [ 540.418996][ T793] usb 1-1: Manufacturer: syz [ 540.423670][ T793] usb 1-1: SerialNumber: syz [ 540.438803][T12001] libceph: resolve '400' (ret=-3): failed [ 540.446366][ T793] usb 1-1: config 0 descriptor?? [ 540.453961][ T793] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 540.638405][T12006] input: syz1 as /devices/virtual/input/input57 [ 540.654289][ T5899] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 540.984417][T11990] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 541.033337][ T30] audit: type=1400 audit(1770624914.684:549): avc: denied { mounton } for pid=11988 comm="syz.0.1613" path="/334/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 541.074812][ T5899] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 541.084193][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.101952][ T5899] usb 3-1: Product: syz [ 541.106362][ T5899] usb 3-1: Manufacturer: syz [ 541.111262][ T5899] usb 3-1: SerialNumber: syz [ 541.122647][ T793] usb 1-1: USB disconnect, device number 60 [ 541.162743][ T5899] hub 3-1:24.0: bad descriptor, ignoring hub [ 541.173077][ T5899] hub 3-1:24.0: probe with driver hub failed with error -5 [ 541.175941][ T5923] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 541.339842][ T5923] usb 6-1: USB disconnect, device number 43 [ 541.352977][ T5923] usblp0: removed [ 541.508828][T12010] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 542.723149][ T30] audit: type=1400 audit(1770624916.414:550): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 542.785786][ T5899] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 542.797219][T12020] tipc: Started in network mode [ 543.680778][ T5899] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 543.690460][ T5899] dib0700: firmware download failed at 7 with -22 [ 543.703539][T12020] tipc: Node identity 02abd5fa1d43, cluster identity 4711 [ 543.721320][T12020] tipc: Enabled bearer , priority 0 [ 543.721835][ T5899] usb 3-1: USB disconnect, device number 49 [ 543.743262][T12019] tipc: Disabling bearer [ 543.821391][ T5923] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 543.983845][ T5923] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 544.004084][ T5923] usb 2-1: New USB device found, idVendor=d36e, idProduct=e90a, bcdDevice= c.5b [ 544.952682][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.973341][ T5923] usb 2-1: can't set config #2, error -71 [ 544.992075][ T5923] usb 2-1: USB disconnect, device number 65 [ 545.042243][T12036] tmpfs: Too small a size for current use [ 545.462347][ T5923] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 545.631159][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 545.640803][ T5923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.936516][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.947970][ T5923] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.960584][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.969290][ T5923] usb 2-1: Product: syz [ 545.979907][ T5923] usb 2-1: Manufacturer: syz [ 545.985409][ T5923] usb 2-1: SerialNumber: syz [ 546.520178][ T5923] usb 2-1: 0:2 : does not exist [ 546.952753][ T5923] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 547.099123][ T5923] usb 2-1: USB disconnect, device number 66 [ 548.051850][ T30] audit: type=1400 audit(1770624920.874:551): avc: denied { watch_mount } for pid=12066 comm="syz.5.1633" path="/279" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 548.083371][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.281477][ T48] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 549.401078][ T793] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 549.521045][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 549.529303][ T48] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 549.538695][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.546758][ T48] usb 1-1: Product: syz [ 549.551039][ T48] usb 1-1: Manufacturer: syz [ 549.555639][ T48] usb 1-1: SerialNumber: syz [ 549.575207][ T48] usb 1-1: config 0 descriptor?? [ 549.605851][ T48] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 549.813070][ T48] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 549.990395][ T793] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 550.002830][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.011377][ T793] usb 6-1: Product: syz [ 550.015553][ T793] usb 6-1: Manufacturer: syz [ 550.020148][ T793] usb 6-1: SerialNumber: syz [ 550.040230][ T793] hub 6-1:24.0: bad descriptor, ignoring hub [ 550.049747][ T793] hub 6-1:24.0: probe with driver hub failed with error -5 [ 550.421096][ T48] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 550.677210][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.859238][ T9] usb 1-1: USB disconnect, device number 61 [ 551.879968][ T48] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 551.937898][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 551.985933][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 551.994298][ T793] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 552.048889][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 552.144885][ T793] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 552.168843][ T793] dib0700: firmware download failed at 7 with -22 [ 552.333086][T12107] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 552.392518][ T793] usb 6-1: USB disconnect, device number 44 [ 552.398777][ T48] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 552.495076][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1645'. [ 552.659066][T12107] CIFS mount error: No usable UNC path provided in device string! [ 552.659066][T12107] [ 552.671762][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 552.698669][ T48] usb 4-1: Product: syz [ 552.728908][ T48] usb 4-1: Manufacturer: syz [ 552.739237][T12107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 552.748292][ T48] usb 4-1: SerialNumber: syz [ 552.762709][ T48] usb 4-1: config 0 descriptor?? [ 552.908610][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 552.917837][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 553.355904][ T48] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 553.371075][ T48] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 554.045229][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 555.407241][T12139] loop5: detected capacity change from 0 to 4096 [ 555.459629][ T5878] usb 4-1: USB disconnect, device number 41 [ 555.751324][ T30] audit: type=1400 audit(1770624929.414:552): avc: denied { write } for pid=12142 comm="syz.1.1652" path="socket:[37082]" dev="sockfs" ino=37082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 558.031314][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 558.063929][ T5878] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 558.074955][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.084175][ T30] audit: type=1400 audit(1770624931.774:553): avc: denied { override_creds } for pid=12163 comm="syz.5.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 558.113810][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.212325][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 558.225982][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.245128][ T9] usb 4-1: Product: syz [ 558.249368][ T9] usb 4-1: Manufacturer: syz [ 558.265354][ T9] usb 4-1: SerialNumber: syz [ 558.271005][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 558.282066][ T9] hub 4-1:24.0: bad descriptor, ignoring hub [ 558.289855][ T5878] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.298404][ T9] hub 4-1:24.0: probe with driver hub failed with error -5 [ 558.308628][ T5899] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 558.316344][ T5878] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.316384][ T5878] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 558.316410][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 558.316443][ T5878] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 558.316463][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.416639][ T5878] usb 3-1: config 0 descriptor?? [ 558.856686][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.869124][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.884703][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 558.894906][ T5899] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 558.904049][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 558.915847][ T5899] usb 6-1: Product: syz [ 558.920066][ T5899] usb 6-1: Manufacturer: syz [ 558.929200][ T5899] usb 6-1: SerialNumber: syz [ 558.944293][ T5899] usb 6-1: config 0 descriptor?? [ 558.993164][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 559.009599][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 559.019102][ T9] dib0700: firmware download failed at 7 with -22 [ 559.071029][ T5923] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 559.211986][ T9] usb 4-1: USB disconnect, device number 42 [ 559.232854][ T5899] usb 6-1: USB disconnect, device number 45 [ 559.491746][T12182] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 559.501705][T12182] block device autoloading is deprecated and will be removed. [ 559.584792][T12181] md: md2 stopped. [ 559.684937][ T5923] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 559.701704][ T5923] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 559.712777][ T5923] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 54297, setting to 1023 [ 559.724108][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 559.732905][ T5923] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 559.743843][ T793] usb 3-1: USB disconnect, device number 50 [ 559.743935][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 559.757967][ T5923] usb 2-1: Product: syz [ 559.762196][ T5923] usb 2-1: Manufacturer: syz [ 559.766799][ T5923] usb 2-1: SerialNumber: syz [ 559.781797][ T5923] usb 2-1: config 0 descriptor?? [ 559.790736][ T5923] usb 2-1: selecting invalid altsetting 0 [ 560.015722][T12184] veth5: entered promiscuous mode [ 562.257085][T12202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.534318][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.542571][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.705387][T12216] netlink: 'syz.5.1672': attribute type 1 has an invalid length. [ 562.705446][T12216] netlink: 'syz.5.1672': attribute type 4 has an invalid length. [ 562.705495][T12216] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1672'. [ 563.041821][T12220] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 564.519592][ T793] usb 2-1: USB disconnect, device number 67 [ 564.531362][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 564.533231][ T5815] Bluetooth: hci4: command 0x1003 tx timeout [ 564.682427][ T30] audit: type=1400 audit(1770624938.384:554): avc: denied { execute } for pid=12238 comm="syz.0.1678" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 565.225770][T12240] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.242428][T12240] bridge0: entered allmulticast mode [ 565.380000][T12250] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1680'. [ 565.629935][T12255] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 565.644302][T12255] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 565.650974][ T30] audit: type=1400 audit(1770624939.344:555): avc: denied { firmware_load } for pid=12252 comm="syz.0.1681" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 565.652320][T12251] bridge_slave_0: left allmulticast mode [ 565.680003][T12251] bridge_slave_0: left promiscuous mode [ 565.699508][T12251] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.874258][T12261] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1683'. [ 566.542835][T12270] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 566.561317][ T30] audit: type=1400 audit(1770624940.094:556): avc: denied { relabelfrom } for pid=12262 comm="syz.2.1684" name="" dev="pipefs" ino=37310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 566.584137][ T30] audit: type=1400 audit(1770624940.094:557): avc: denied { shutdown } for pid=12262 comm="syz.2.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 567.721751][ T5878] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 567.901015][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 567.926917][ T5878] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 568.032402][ T5878] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 568.060206][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 568.072364][ T5878] usb 1-1: Product: syz [ 568.076693][ T5878] usb 1-1: Manufacturer: syz [ 568.081946][ T5878] usb 1-1: SerialNumber: syz [ 568.107826][ T5878] usb 1-1: config 0 descriptor?? [ 568.135714][ T5878] pwc: Philips SPC 880NC USB webcam detected. [ 568.327924][T12278] openvswitch: netlink: IP tunnel dst address not specified [ 568.351049][ T793] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 568.411041][ T9] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 568.522619][ T793] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 568.534948][ T793] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 568.546164][ T793] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 54297, setting to 1023 [ 568.558571][ T793] usb 6-1: config 0 interface 0 has no altsetting 0 [ 568.567415][ T793] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.576760][ T793] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 568.585434][ T793] usb 6-1: Product: syz [ 568.589660][ T793] usb 6-1: Manufacturer: syz [ 568.594448][ T793] usb 6-1: SerialNumber: syz [ 568.599316][ T9] usb 2-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 568.611631][ T9] usb 2-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 568.625690][ T793] usb 6-1: config 0 descriptor?? [ 568.636290][ T793] usb 6-1: selecting invalid altsetting 0 [ 568.643603][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 568.652723][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 568.662937][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.685534][ T9] usb 2-1: config 0 descriptor?? [ 568.711370][T12301] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 569.275964][T12313] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 569.702135][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'. [ 569.702726][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 569.861468][ T5815] Bluetooth: hci4: command 0x1003 tx timeout [ 569.862259][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 570.090915][T12318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.440293][ T9] dragonrise 0003:0079:0006.0016: unknown main item tag 0x0 [ 570.452791][ T9] dragonrise 0003:0079:0006.0016: unknown main item tag 0x0 [ 570.461986][ T9] dragonrise 0003:0079:0006.0016: unknown main item tag 0x0 [ 570.480754][ T9] dragonrise 0003:0079:0006.0016: unknown main item tag 0x0 [ 570.548565][ T9] dragonrise 0003:0079:0006.0016: hidraw0: USB HID v0.04 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 570.771979][ T9] dragonrise 0003:0079:0006.0016: no inputs found [ 571.835162][ T9] dragonrise 0003:0079:0006.0016: force feedback init failed [ 572.447849][ T48] usb 2-1: USB disconnect, device number 68 [ 572.693445][ T9] usb 6-1: USB disconnect, device number 46 [ 573.201071][ T5878] pwc: Warning: more than 1 configuration available. [ 573.211130][ T5878] pwc: Failed to set LED on/off time (-32) [ 573.232911][ T5878] pwc: send_video_command error -32 [ 573.238156][ T5878] pwc: Failed to set video mode VGA@30 fps; return code = -32 [ 573.450000][T12356] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 573.457390][T12356] overlayfs: failed to set xattr on upper [ 573.463183][T12356] overlayfs: ...falling back to redirect_dir=nofollow. [ 573.470033][T12356] overlayfs: ...falling back to index=off. [ 573.475901][T12356] overlayfs: ...falling back to uuid=null. [ 573.523788][T12357] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 573.751626][ T5878] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -32 [ 573.851107][T12353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.012676][T12353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.255090][T12360] input: syz1 as /devices/virtual/input/input59 [ 574.489650][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 574.516092][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 576.151923][T12389] Failed to initialize the IGMP autojoin socket (err -2) [ 576.726106][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1720'. [ 576.954222][T12398] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 577.027039][T12398] overlayfs: failed to set xattr on upper [ 577.033716][T12398] overlayfs: ...falling back to redirect_dir=nofollow. [ 577.040594][T12398] overlayfs: ...falling back to index=off. [ 577.046641][T12398] overlayfs: ...falling back to uuid=null. [ 577.061417][T12399] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 577.074451][ T5878] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 577.417670][ T5878] usb 3-1: config 0 has no interfaces? [ 577.436347][ T5878] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 577.453411][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.462111][ T5878] usb 3-1: Product: syz [ 577.466286][ T5878] usb 3-1: Manufacturer: syz [ 577.470880][ T5878] usb 3-1: SerialNumber: syz [ 577.479273][ T5878] usb 3-1: config 0 descriptor?? [ 578.551053][ T5923] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 578.559026][ T5878] usb 3-1: USB disconnect, device number 51 [ 578.772560][ T5923] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 578.799671][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.844189][T12420] ubi31: attaching mtd0 [ 578.850521][T12420] ubi31: scanning is finished [ 578.855384][T12420] ubi31: empty MTD device detected [ 578.891155][ T5923] usb 4-1: config 0 descriptor?? [ 579.060659][ T5923] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 579.162095][ T5878] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 579.190160][T12420] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 579.198106][T12420] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 579.205653][T12420] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 579.212790][T12420] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 579.220284][T12420] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 579.227472][T12420] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 579.236379][T12420] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1342127145 [ 579.246534][T12420] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 579.258155][T12422] ubi31: background thread "ubi_bgt31d" started, PID 12422 [ 579.413461][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 579.461902][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.470620][ T30] audit: type=1400 audit(1770624953.154:558): avc: denied { read } for pid=12423 comm="syz.2.1731" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.619213][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.778792][ T30] audit: type=1400 audit(1770624953.154:559): avc: denied { open } for pid=12423 comm="syz.2.1731" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.968994][ T5878] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 579.977596][ T5878] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 579.986578][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 579.995661][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.068090][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1732'. [ 580.155261][ T30] audit: type=1400 audit(1770624953.334:560): avc: denied { write } for pid=6786 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 580.182789][ T30] audit: type=1400 audit(1770624953.334:561): avc: denied { ioctl } for pid=6786 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 580.407862][ T5878] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 580.431025][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.484086][ T5878] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 580.501515][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.554071][ T5878] usb 2-1: config 0 descriptor?? [ 580.941226][T12437] input: syz1 as /devices/virtual/input/input60 [ 581.648899][ T5878] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 581.732866][ T5878] usb 2-1: USB disconnect, device number 69 [ 581.757289][ T5878] usblp0: removed [ 583.018238][ T5923] gp8psk: usb out operation failed. [ 583.048864][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.119810][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 583.420535][ T5923] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 583.449639][ T5923] usb 4-1: media controller created [ 583.593117][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.202629][ T5923] gp8psk_fe: Frontend attached [ 584.212105][ T5923] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 584.227869][ T5923] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 584.321578][ T5923] gp8psk: usb in 138 operation failed. [ 584.327395][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 584.340270][ T5923] gp8psk: found Genpix USB device pID = 203 (hex) [ 584.393244][ T5923] usb 4-1: USB disconnect, device number 43 [ 586.012401][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 586.094085][T12467] IPVS: Error during creation of socket; terminating [ 586.913073][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 588.119703][ T5899] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 588.173880][ T9] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 588.192076][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.291131][ T30] audit: type=1400 audit(1770624961.974:562): avc: denied { create } for pid=12493 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 588.291221][ T9] usb 6-1: Product: syz [ 588.472666][T12507] vlan0: entered allmulticast mode [ 588.477863][T12507] macsec0: entered allmulticast mode [ 588.483230][T12507] veth1_macvtap: entered allmulticast mode [ 588.845258][ T9] usb 6-1: Manufacturer: syz [ 588.850412][ T9] usb 6-1: SerialNumber: syz [ 588.855949][ T5899] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 588.889645][ T5899] usb 3-1: New USB device found, idVendor=d36e, idProduct=e90a, bcdDevice= c.5b [ 588.953716][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.106452][ T9] hub 6-1:24.0: bad descriptor, ignoring hub [ 589.122059][ T9] hub 6-1:24.0: probe with driver hub failed with error -5 [ 589.166858][ T30] audit: type=1400 audit(1770624962.014:563): avc: denied { write } for pid=12493 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 590.389831][T12515] nbd: must specify at least one socket [ 590.406551][T12515] sp0: Synchronizing with TNC [ 590.412338][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1754'. [ 590.422494][T12515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12515 comm=syz.3.1754 [ 590.493000][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 590.536715][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 590.561264][ T9] dib0700: firmware download failed at 7 with -22 [ 590.651440][ T9] usb 6-1: USB disconnect, device number 47 [ 590.668438][ T5885] usb 3-1: USB disconnect, device number 52 [ 590.732508][T12522] tipc: Enabled bearer , priority 0 [ 590.782036][T12521] tipc: Disabling bearer [ 591.801987][ T30] audit: type=1400 audit(1770624965.504:564): avc: denied { sys_module } for pid=12532 comm="syz.1.1750" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 592.115752][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 592.124765][T12549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1762'. [ 595.380821][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.391574][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.209790][T12594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1767'. [ 596.240618][T12595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12595 comm=syz.1.1767 [ 596.836794][T12601] IPVS: Error during creation of socket; terminating [ 597.095821][T12588] affs: No valid root block on device nullb0 [ 597.369111][ T852] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 597.871059][ T852] usb 4-1: Using ep0 maxpacket: 16 [ 597.884961][ T852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.911691][ T852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.946022][ T852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.966867][ T852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.053904][ T852] usb 4-1: Product: syz [ 598.058101][ T852] usb 4-1: Manufacturer: syz [ 598.071651][ T852] usb 4-1: SerialNumber: syz [ 598.534114][ T852] usb 4-1: 0:2 : does not exist [ 599.192383][T12637] Failed to initialize the IGMP autojoin socket (err -2) [ 599.423524][ T852] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 599.573258][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 599.582427][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1789'. [ 599.874462][ T852] usb 4-1: USB disconnect, device number 44 [ 600.472501][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.564077][T12677] Failed to initialize the IGMP autojoin socket (err -2) [ 602.614726][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.656935][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.728091][T12682] nvme_fabrics: unknown parameter or missing value 'd:' in ctrl creation request [ 603.856665][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1805'. [ 604.041358][ T5885] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 604.461150][ T5885] usb 4-1: device descriptor read/64, error -71 [ 604.717178][ T5885] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 604.789238][ T30] audit: type=1400 audit(1770624978.484:565): avc: denied { set_context_mgr } for pid=12712 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 604.882992][ T5885] usb 4-1: device descriptor read/64, error -71 [ 604.943413][ T793] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 605.038612][ T5885] usb usb4-port1: attempt power cycle [ 605.101074][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 605.111894][ T793] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 605.508821][ T793] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 605.522060][ T793] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 605.533433][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 605.543994][ T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 605.556688][ T793] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 605.572644][ T793] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 605.582450][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.633120][ T793] usb 2-1: config 0 descriptor?? [ 605.771527][ T5885] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 605.853095][ T5885] usb 4-1: device descriptor read/8, error -71 [ 606.048873][T12730] input: syz1 as /devices/virtual/input/input61 [ 606.141148][ T5885] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 606.164332][ T5885] usb 4-1: device descriptor read/8, error -71 [ 606.280397][ T5885] usb usb4-port1: unable to enumerate USB device [ 607.052110][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 608.151090][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 608.257575][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.771923][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.785820][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.941619][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.950526][ T793] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 608.986734][ T9] usb 6-1: Product: syz [ 609.005814][ T9] usb 6-1: Manufacturer: syz [ 609.010452][ T9] usb 6-1: SerialNumber: syz [ 609.021727][ T793] usb 2-1: USB disconnect, device number 70 [ 609.044821][ T793] usblp0: removed [ 609.468324][ T9] usb 6-1: 0:2 : does not exist [ 609.888153][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 609.920706][T12781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12781 comm=syz.3.1824 [ 609.941679][T12781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12781 comm=syz.3.1824 [ 610.171547][ T9] usb 6-1: USB disconnect, device number 48 [ 610.217306][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.639853][T12806] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 610.646910][T12806] overlayfs: failed to set xattr on upper [ 610.652838][T12806] overlayfs: ...falling back to redirect_dir=nofollow. [ 610.659675][T12806] overlayfs: ...falling back to index=off. [ 610.665516][T12806] overlayfs: ...falling back to uuid=null. [ 610.691292][T12807] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 611.142376][T12814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1835'. [ 611.147215][T12813] Mount JFS Failure: -22 [ 611.173620][T12813] jfs_mount failed w/return code = -22 [ 611.232806][T12822] Failed to initialize the IGMP autojoin socket (err -2) [ 611.288249][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.303248][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.541008][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 611.629650][ T30] audit: type=1400 audit(1770624985.324:566): avc: denied { getopt } for pid=12836 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 611.701745][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 611.721580][ T9] usb 6-1: config 0 has no interfaces? [ 611.727496][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 611.823066][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.882207][ T9] usb 6-1: config 0 descriptor?? [ 612.368890][T12846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.379169][T12846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.818597][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 612.827651][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 613.009840][ T30] audit: type=1326 audit(1770624986.674:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b299aeb9 code=0x7ffc0000 [ 613.033824][ T9] usb 6-1: USB disconnect, device number 49 [ 613.051010][ T30] audit: type=1326 audit(1770624986.674:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b299aeb9 code=0x7ffc0000 [ 613.351046][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 613.362964][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1850'. [ 613.500977][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 613.511911][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.578775][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.595896][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 613.648200][ T9] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 613.661869][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.681508][ T9] usb 4-1: config 0 descriptor?? [ 613.691882][ T5899] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 613.831019][ T793] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 613.841000][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 613.847412][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 613.858964][ T5899] usb 3-1: config 0 has no interface number 0 [ 613.865926][ T5899] usb 3-1: New USB device found, idVendor=9d6c, idProduct=75e1, bcdDevice=d2.34 [ 613.875137][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.894992][ T5899] usb 3-1: config 0 descriptor?? [ 613.907900][ T5899] usb-storage 3-1:0.1: USB Mass Storage device detected [ 614.011333][ T793] usb 6-1: Using ep0 maxpacket: 32 [ 614.019070][ T793] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 614.028076][ T793] usb 6-1: config 0 has no interface number 0 [ 614.037316][ T793] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=a5.e1 [ 614.046969][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.072621][ T793] usb 6-1: Product: syz [ 614.077732][ T793] usb 6-1: Manufacturer: syz [ 614.086660][ T793] usb 6-1: SerialNumber: syz [ 614.110054][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.122393][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.133694][ T9] hid-multitouch 0003:0457:07DA.0017: unexpected long global item [ 614.151704][ T793] usb 6-1: config 0 descriptor?? [ 614.157824][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.173783][ T9] hid-multitouch 0003:0457:07DA.0017: probe with driver hid-multitouch failed with error -22 [ 614.185960][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.198620][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.212221][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.222245][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.232425][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.242718][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.253637][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.268707][ T9] usb 3-1: USB disconnect, device number 53 [ 614.290229][T12883] block nbd1: not configured, cannot reconfigure [ 614.309839][T12883] SELinux: policydb string does not match my string SE Linux [ 614.319804][T12883] SELinux: failed to load policy [ 614.336719][ T5899] usb 4-1: USB disconnect, device number 49 [ 614.361023][ T793] peak_usb 6-1:0.211 can0: unable to request usb[type=0 value=1] err=-71 [ 614.369896][ T793] peak_usb 6-1:0.211: unable to read PCAN-USB Pro FD firmware info (err -71) [ 614.428752][ T793] peak_usb 6-1:0.211: probe with driver peak_usb failed with error -71 [ 614.447926][ T793] usb 6-1: USB disconnect, device number 50 [ 614.905902][T12896] tipc: Enabled bearer , priority 0 [ 614.922745][T12895] tipc: Disabling bearer [ 614.940705][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1856'. [ 616.312891][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 616.322282][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 616.743241][ T30] audit: type=1400 audit(1770624990.444:569): avc: denied { append } for pid=12921 comm="syz.0.1865" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 619.762133][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 619.771108][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 619.780050][T12958] netlink: 'syz.0.1870': attribute type 13 has an invalid length. [ 619.788033][T12958] netlink: 'syz.0.1870': attribute type 12 has an invalid length. [ 620.586138][ T30] audit: type=1400 audit(1770624994.284:570): avc: denied { write } for pid=12962 comm="syz.5.1873" path="socket:[41248]" dev="sockfs" ino=41248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 621.902242][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1874'. [ 622.102804][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 623.400521][ T30] audit: type=1400 audit(1770624997.094:571): avc: denied { map } for pid=12991 comm="syz.2.1881" path="socket:[40367]" dev="sockfs" ino=40367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 623.424298][ T30] audit: type=1400 audit(1770624997.094:572): avc: denied { read } for pid=12991 comm="syz.2.1881" path="socket:[40367]" dev="sockfs" ino=40367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 623.447570][ T30] audit: type=1400 audit(1770624997.094:573): avc: denied { setopt } for pid=12991 comm="syz.2.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 623.943308][T13005] [U]  [ 623.946443][T13005] [U] K{ [ 623.949586][T13005] [U] T 1ŠFFˊ`GJǘGO/MC [ 623.956874][T13005] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 623.975563][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.991251][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.025718][T13005] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 624.111762][T13005] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 624.744959][T13005] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 626.224167][ T30] audit: type=1400 audit(1770624997.894:574): avc: denied { write } for pid=13003 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 626.245302][T13005] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 626.270877][T13005] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 627.241670][T13005] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< [ 638.595592][T13180] dump_stack_lvl+0x100/0x190 [ 638.595621][T13180] should_fail_ex.cold+0x5/0xa [ 638.595641][T13180] _copy_from_user+0x2e/0xd0 [ 638.595666][T13180] copy_msghdr_from_user+0x9f/0x4f0 [ 638.595685][T13180] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 638.595715][T13180] ___sys_sendmsg+0x106/0x1e0 [ 638.595735][T13180] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.595770][T13180] ? find_held_lock+0x2b/0x80 [ 638.595810][T13180] __sys_sendmsg+0x170/0x220 [ 638.595833][T13180] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.595871][T13180] do_syscall_64+0xc9/0xf80 [ 638.595893][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.595910][T13180] RIP: 0033:0x7fe1e1d9aeb9 [ 638.595924][T13180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.595940][T13180] RSP: 002b:00007fe1e2bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.595958][T13180] RAX: ffffffffffffffda RBX: 00007fe1e2015fa0 RCX: 00007fe1e1d9aeb9 [ 638.595969][T13180] RDX: 0000000020004800 RSI: 0000200000006040 RDI: 0000000000000006 [ 638.595979][T13180] RBP: 00007fe1e2bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 638.595989][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.595999][T13180] R13: 00007fe1e2016038 R14: 00007fe1e2015fa0 R15: 00007ffdeabc26b8 [ 638.596023][T13180] [ 638.785359][ T5885] usb 2-1: USB disconnect, device number 71 [ 639.035191][ T5885] usblp0: removed [ 639.074430][T13184] netlink: 'syz.3.1929': attribute type 12 has an invalid length. [ 639.082464][ T30] audit: type=1326 audit(1770625012.774:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.115691][ T30] audit: type=1326 audit(1770625012.774:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.140969][ T30] audit: type=1326 audit(1770625012.774:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.169944][ T30] audit: type=1326 audit(1770625012.774:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.271036][ T30] audit: type=1326 audit(1770625012.774:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.295353][ T30] audit: type=1326 audit(1770625012.774:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.352494][ T30] audit: type=1326 audit(1770625012.774:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.376388][T13178] tipc: Enabling of bearer rejected, failed to enable media [ 639.384864][ T30] audit: type=1326 audit(1770625012.774:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.465537][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1934'. [ 639.521584][ T30] audit: type=1326 audit(1770625012.864:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 639.546129][ T30] audit: type=1326 audit(1770625012.864:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13168 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 640.472197][T13209] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 640.481968][T13209] block device autoloading is deprecated and will be removed. [ 640.503698][T13208] md: md2 stopped. [ 641.462292][ T5885] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 641.553315][T13225] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1942'. [ 641.634409][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 641.647091][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 641.666416][ T5885] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 641.701110][ T5885] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 641.704265][T13233] tipc: Enabled bearer , priority 0 [ 641.711914][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.729131][ T5885] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 641.760087][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.769540][ T5885] usb 6-1: Product: syz [ 641.770300][T13232] tipc: Disabling bearer [ 641.774074][ T5885] usb 6-1: Manufacturer: syz [ 641.793527][ T5885] usb 6-1: SerialNumber: syz [ 641.834693][T13235] syzkaller0: entered promiscuous mode [ 641.840174][T13240] tmpfs: Bad value for 'mpol' [ 641.845115][T13235] syzkaller0: entered allmulticast mode [ 643.163243][ T5885] usb 6-1: 0:2 : does not exist [ 643.185340][ T5885] usb 6-1: USB disconnect, device number 52 [ 643.305274][T13253] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 643.554718][T13258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 643.564427][T13258] block device autoloading is deprecated and will be removed. [ 643.588037][T13257] md: md2 stopped. [ 643.723076][ T5885] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 643.972334][ T5885] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 643.999342][ T5885] usb 6-1: config 0 has no interface number 0 [ 644.006286][ T5885] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 644.019958][ T5885] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 644.029354][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.037646][ T5885] usb 6-1: Product: syz [ 644.042010][ T5885] usb 6-1: Manufacturer: syz [ 644.046598][ T5885] usb 6-1: SerialNumber: syz [ 644.061825][ T5885] usb 6-1: config 0 descriptor?? [ 644.072227][T13216] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 644.137999][ T5885] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fa:87:39:66:c5:eb [ 644.441021][ T852] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 644.717575][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 644.726588][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 644.735576][T13280] netlink: 'syz.3.1954': attribute type 13 has an invalid length. [ 644.743450][T13280] netlink: 'syz.3.1954': attribute type 12 has an invalid length. [ 645.941019][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 645.948558][ T5815] Bluetooth: hci4: command 0x1003 tx timeout [ 646.018681][ T852] usb 6-1: USB disconnect, device number 53 [ 646.035280][ T852] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 647.098508][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 647.098524][ T30] audit: type=1326 audit(1770625020.794:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 647.247612][ T30] audit: type=1326 audit(1770625020.794:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 647.343674][ T30] audit: type=1326 audit(1770625020.794:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 647.440004][ T30] audit: type=1326 audit(1770625020.794:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 647.838944][ T30] audit: type=1326 audit(1770625020.794:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 647.872558][T13356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1972'. [ 647.935095][ T30] audit: type=1326 audit(1770625020.794:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 648.005216][ T30] audit: type=1326 audit(1770625020.794:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 648.033868][ T30] audit: type=1326 audit(1770625020.794:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 648.058348][ T30] audit: type=1326 audit(1770625020.794:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 648.096077][ T30] audit: type=1326 audit(1770625020.794:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13322 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b57d9aeb9 code=0x7fc00000 [ 648.642322][ T5885] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 648.652832][ T852] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 648.841085][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 648.855106][ T852] usb 2-1: Using ep0 maxpacket: 32 [ 648.865998][ T5885] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 648.875153][ T5885] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 648.887498][ T5885] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 648.897649][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 648.907679][ T852] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 648.916278][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 648.983039][ T852] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 648.992235][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 649.047380][ T852] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 649.069240][ T852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 649.079081][ T5885] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 649.088343][ T852] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 649.108084][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.132219][ T852] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 649.146095][ T5885] usb 4-1: config 0 descriptor?? [ 649.163578][ T852] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 649.178660][ T852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.198822][ T852] usb 2-1: config 0 descriptor?? [ 649.545442][T13365] input: syz1 as /devices/virtual/input/input64 [ 649.574726][T13364] input: syz1 as /devices/virtual/input/input65 [ 649.621893][ T852] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 649.676607][ T5885] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 649.693790][ T852] usb 2-1: USB disconnect, device number 73 [ 649.727843][ T852] usblp0: removed [ 649.735767][ T5885] usb 4-1: USB disconnect, device number 51 [ 649.765369][ T5885] usblp1: removed [ 649.853892][T13388] sp0: Synchronizing with TNC [ 650.126851][T13396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1986'. [ 650.304719][T13403] [ 651.321376][ T852] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 651.521028][ T852] usb 3-1: Using ep0 maxpacket: 16 [ 651.557497][ T852] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.567827][ T852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.592677][ T852] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.621250][ T852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.634323][ T852] usb 3-1: Product: syz [ 651.639949][ T852] usb 3-1: Manufacturer: syz [ 651.668674][ T852] usb 3-1: SerialNumber: syz [ 651.749039][T13435] netlink: 'syz.3.1998': attribute type 2 has an invalid length. [ 651.759223][T13435] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 651.767818][T13435] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 651.776079][T13435] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 651.796000][T13435] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 652.257945][ T852] usb 3-1: 0:2 : does not exist [ 652.429422][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 652.429441][ T30] audit: type=1800 audit(1770625026.124:629): pid=13443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1999" name="file0" dev="tmpfs" ino=2334 res=0 errno=0 [ 652.932794][ T852] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 652.976490][ T852] usb 3-1: USB disconnect, device number 55 [ 654.074287][T13465] openvswitch: netlink: EtherType 0 is less than min 600 [ 654.481150][ T5923] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 654.660210][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 654.734714][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.744655][ T5923] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 654.755660][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.776987][ T5923] usb 6-1: config 0 descriptor?? [ 654.800688][ T5923] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 655.568087][ T852] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 655.802672][ T852] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 655.819682][ T852] usb 2-1: New USB device found, idVendor=d36e, idProduct=e90a, bcdDevice= c.5b [ 655.831317][ T852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.328712][ T30] audit: type=1400 audit(1770625030.024:630): avc: denied { append } for pid=13496 comm="syz.3.2014" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 656.726880][T13502] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2016'. [ 656.762033][T13502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2016'. [ 656.784376][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 656.925106][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'. [ 656.971035][ T852] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 657.115950][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 657.156170][ T852] usb 3-1: config 127 has an invalid interface number: 220 but max is 1 [ 657.166519][ T852] usb 3-1: config 127 has an invalid interface number: 10 but max is 1 [ 657.177827][ T852] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 657.189849][ T852] usb 3-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 657.800783][ T852] usb 3-1: config 127 has no interface number 0 [ 657.809006][ T852] usb 3-1: config 127 has no interface number 1 [ 657.816231][ T852] usb 3-1: config 127 interface 220 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 657.845285][ T852] usb 3-1: config 127 interface 220 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 657.870559][ T852] usb 3-1: config 127 interface 220 altsetting 249 endpoint 0xB has invalid wMaxPacketSize 0 [ 657.892756][ T852] usb 3-1: config 127 interface 220 altsetting 249 has a duplicate endpoint with address 0xB, skipping [ 657.904651][ T852] usb 3-1: config 127 interface 220 altsetting 249 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 657.917950][ T852] usb 3-1: config 127 interface 10 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 657.929230][ T852] usb 3-1: config 127 interface 10 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 657.994971][ T5923] usb 2-1: USB disconnect, device number 74 [ 658.003694][ T852] usb 3-1: config 127 interface 10 altsetting 1 endpoint 0xD has an invalid bInterval 127, changing to 4 [ 658.008421][ T793] usb 6-1: USB disconnect, device number 54 [ 658.015422][ T852] usb 3-1: config 127 interface 10 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 658.032542][ T852] usb 3-1: config 127 interface 10 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 658.045000][ T852] usb 3-1: config 127 interface 10 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 658.059699][ T852] usb 3-1: config 127 interface 10 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 658.262342][ T852] usb 3-1: config 127 interface 10 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 658.367441][ T852] usb 3-1: config 127 interface 10 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 658.411147][ T852] usb 3-1: config 127 interface 10 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 658.423056][ T852] usb 3-1: config 127 interface 10 altsetting 1 has a duplicate endpoint with address 0x8E, skipping [ 658.436935][ T852] usb 3-1: config 127 interface 10 altsetting 1 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 658.449088][ T852] usb 3-1: config 127 interface 10 altsetting 1 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 658.470523][T13519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=13519 comm=syz.0.2021 [ 658.646448][ T852] usb 3-1: config 127 interface 220 has no altsetting 0 [ 658.653522][ T852] usb 3-1: config 127 interface 10 has no altsetting 0 [ 658.667995][ T852] usb 3-1: New USB device found, idVendor=04e8, idProduct=6632, bcdDevice=72.8f [ 658.686618][ T852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.695717][ T852] usb 3-1: Product: Ꞥ⤚音퇽殦䧇瀩뵀莇봃䨈鿍҄嶛䵻㍇ꋩ䚙秺承㎼댻婧鑿츅էჰ첸眯礳앰弬㍲ꑏ慄㏕썔䵴ｊ爌믹筬堠嗵燯ᢨ [ 659.304288][T13529] vivid-001: kernel_thread() failed [ 659.658435][T13535] vlan2: entered allmulticast mode [ 659.663710][T13535] macsec0: entered allmulticast mode [ 659.668997][T13535] veth1_macvtap: entered allmulticast mode [ 659.677295][ T852] usb 3-1: Manufacturer: 뇏铱铆Ა逞텫ꉢ榘஢꾱筀矛缲⥰紏ힻ꾧内舘Ⴛ䃒䖎펁Ջ狄ႃ觻戉裶斞烼톿嶯䀴墊꽃⽹後㌹ᜀ哕磹ꀳ⬫羭㘟䣎㎷톅풏ᄓ⺒ጧደ꺯㄃湄ˀ奵ᾶ呂㏡蘆鮋뙙暝큗㙑䯅鸴툀㓣ꂎ觭敢轍॑㐐砿蕝⳻㹫毽賳牃婳声檚넾⇲Ϙ饥旎㦦⯫ಃ [ 659.714133][ T852] usb 3-1: SerialNumber: syz [ 659.786066][ T852] usb 3-1: can't set config #127, error -71 [ 659.806967][ T852] usb 3-1: USB disconnect, device number 56 [ 659.905616][T13542] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 659.915901][T13542] overlayfs: failed to set xattr on upper [ 659.923238][T13542] overlayfs: ...falling back to redirect_dir=nofollow. [ 659.930194][T13542] overlayfs: ...falling back to index=off. [ 659.936146][T13542] overlayfs: ...falling back to uuid=null. [ 660.044147][T13545] program syz.2.2027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.114942][T13542] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 660.734047][T13552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 663.251399][T13597] loop6: detected capacity change from 0 to 524287999 [ 663.274147][ T30] audit: type=1400 audit(1770625036.934:631): avc: denied { append } for pid=13591 comm="syz.5.2041" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.321336][ T5885] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 663.636071][ T30] audit: type=1400 audit(1770625037.324:632): avc: denied { read } for pid=13594 comm="syz.0.2042" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 663.725529][ T30] audit: type=1400 audit(1770625037.324:633): avc: denied { open } for pid=13594 comm="syz.0.2042" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 663.750455][ T30] audit: type=1400 audit(1770625037.324:634): avc: denied { ioctl } for pid=13594 comm="syz.0.2042" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 663.776345][T13606] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[13606] [ 663.790536][ T30] audit: type=1400 audit(1770625037.494:635): avc: denied { search } for pid=13603 comm="syz.3.2043" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 664.013048][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 664.035496][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 664.138360][ T5885] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 664.157331][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 664.280331][ T5885] usb 3-1: Product: syz [ 664.294017][ T30] audit: type=1400 audit(1770625037.494:636): avc: denied { setattr } for pid=13603 comm="syz.3.2043" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 664.320527][ T5885] usb 3-1: Manufacturer: syz [ 664.325589][ T5885] usb 3-1: SerialNumber: syz [ 664.334982][ T5885] usb 3-1: config 0 descriptor?? [ 664.346909][T13592] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 664.391161][ T5878] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 664.541603][ T30] audit: type=1400 audit(1770625038.234:637): avc: denied { read } for pid=13621 comm="syz.1.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 664.622058][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 664.636460][ T5878] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 664.645686][ T5878] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.658998][ T5878] usb 6-1: config 0 has no interface number 0 [ 664.937751][ T5878] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 664.938720][ T5892] usb 3-1: USB disconnect, device number 57 [ 664.948947][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.961447][ T5878] usb 6-1: Product: syz [ 664.986056][ T5878] usb 6-1: Manufacturer: syz [ 665.000339][ T5878] usb 6-1: SerialNumber: syz [ 665.026012][T13633] sp0: Synchronizing with TNC [ 665.113109][T13634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13634 comm=syz.1.2052 [ 665.130278][T13634] 9p: Bad value for 'wfdno' [ 665.155679][ T5878] usb 6-1: config 0 descriptor?? [ 665.170179][ T5878] uvcvideo 6-1:0.105: Found Unit with invalid ID 0 [ 665.177691][ T5878] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 665.185393][ T5878] uvcvideo 6-1:0.105: No valid video chain found. [ 665.644235][ T5878] usb 6-1: USB disconnect, device number 55 [ 667.163469][T13659] netlink: 'syz.3.2058': attribute type 21 has an invalid length. [ 667.253602][ T30] audit: type=1400 audit(1770625040.954:638): avc: denied { accept } for pid=13668 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 667.280634][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 667.340705][ T52] Bluetooth: hci4: sending frame failed (-49) [ 667.349902][ T5815] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 667.551074][ T793] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 667.719803][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.749865][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.852777][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.955293][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.153197][ T793] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 668.159102][T13683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.162377][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.186857][ T793] usb 6-1: config 0 descriptor?? [ 668.197881][T13683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.416557][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 668.479778][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'. [ 668.488791][T13690] netlink: 'syz.2.2068': attribute type 13 has an invalid length. [ 668.498336][T13690] netlink: 'syz.2.2068': attribute type 12 has an invalid length. [ 668.601844][ T793] hackrf 6-1:0.0: Board ID: 00 [ 668.606919][ T793] hackrf 6-1:0.0: Firmware version: {]x̔Kg> [ 668.625711][ T793] hackrf 6-1:0.0: Registered as swradio24 [ 668.638942][ T793] videodev: could not get a free minor [ 668.649246][ T793] hackrf 6-1:0.0: Failed to register as video device (-23) [ 668.663192][ T793] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 668.842377][T13672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.855802][T13672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.875425][ T30] audit: type=1400 audit(1770625042.574:639): avc: denied { ioctl } for pid=13670 comm="syz.5.2062" path="socket:[44210]" dev="sockfs" ino=44210 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 668.905356][T13672] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2062'. [ 668.916680][ T30] audit: type=1400 audit(1770625042.614:640): avc: denied { write } for pid=13670 comm="syz.5.2062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 668.917595][T13672] netlink: 'syz.5.2062': attribute type 13 has an invalid length. [ 668.945073][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 668.954428][T13672] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 669.261851][ T5885] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 669.413167][ T5885] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 669.427095][ T5885] usb 2-1: config 0 has no interface number 0 [ 669.479847][ T5885] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 669.493604][ T5885] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 669.643625][ T5885] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 669.918442][ T5885] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 670.434043][ T5892] usb 6-1: USB disconnect, device number 56 [ 670.546712][ T5885] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 670.560050][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.568215][ T5885] usb 2-1: Product: syz [ 670.581091][ T5885] usb 2-1: Manufacturer: syz [ 670.585740][ T5885] usb 2-1: SerialNumber: syz [ 670.734725][ T5885] usb 2-1: config 0 descriptor?? [ 670.743844][ T5885] iguanair 2-1:0.255: failed to get version [ 670.751203][ T5885] iguanair 2-1:0.255: probe with driver iguanair failed with error -90 [ 671.235565][ T30] audit: type=1326 audit(1770625044.924:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 671.265801][T13739] tipc: Enabling of bearer rejected, failed to enable media [ 671.277879][ T5885] usb 2-1: USB disconnect, device number 75 [ 671.303957][ T30] audit: type=1326 audit(1770625044.924:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 671.574188][ T30] audit: type=1326 audit(1770625044.934:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 671.597714][ T30] audit: type=1326 audit(1770625044.934:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 671.621477][ T30] audit: type=1326 audit(1770625044.934:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ecb9aeb9 code=0x7ffc0000 [ 672.001704][T13747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2084'. [ 672.047879][T13749] tipc: Enabled bearer , priority 0 [ 672.057902][T13748] tipc: Disabling bearer [ 672.071163][ T30] audit: type=1326 audit(1770625044.934:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42ecb9c747 code=0x7ffc0000 [ 672.101218][ T30] audit: type=1326 audit(1770625044.934:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f42ecb5b78e code=0x7ffc0000 [ 672.134732][ T30] audit: type=1326 audit(1770625044.934:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.3.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f42ecb5b78e code=0x7ffc0000 [ 672.694006][ T5815] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 672.717294][T13758] vlan0: entered allmulticast mode [ 672.722572][T13758] macsec0: entered allmulticast mode [ 672.727900][T13758] veth1_macvtap: entered allmulticast mode [ 672.742055][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.784948][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.864915][T13753] netlink: 'syz.0.2087': attribute type 3 has an invalid length. [ 672.877171][T13753] netlink: 'syz.0.2087': attribute type 3 has an invalid length. [ 673.314612][T13770] SELinux: policydb string does not match my string SE Linux [ 673.341111][T13770] SELinux: failed to load policy [ 674.221140][T13778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2095'. [ 674.239587][T13782] 9p: Bad value for 'wfdno' [ 674.253982][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 674.253998][ T30] audit: type=1400 audit(1770625047.954:815): avc: denied { block_suspend } for pid=13780 comm="syz.2.2094" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 674.256559][T13781] tipc: Enabled bearer , priority 0 [ 675.644358][T13779] tipc: Disabling bearer [ 675.681080][ T5878] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 675.800690][T13802] vlan0: entered allmulticast mode [ 675.805901][T13802] macsec0: entered allmulticast mode [ 675.811513][T13802] veth1_macvtap: entered allmulticast mode [ 675.901007][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 675.938823][ T5878] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 676.034281][ T5878] usb 4-1: config 179 has no interface number 0 [ 676.114631][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 676.219166][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 676.248959][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.357253][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 676.369890][ T5878] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 676.383615][ T5878] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 676.393906][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.861713][T13790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 677.059703][T13816] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2105'. [ 677.144463][ T5878] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 677.242508][ T5923] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input70 [ 677.324049][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 677.364483][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.399781][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.454287][ T793] usb 4-1: USB disconnect, device number 52 [ 677.454363][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 677.469701][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 677.485704][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.496174][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.508074][ T5878] usb 2-1: Product: syz [ 677.512816][ T5878] usb 2-1: Manufacturer: syz [ 677.519403][ T5878] usb 2-1: SerialNumber: syz [ 677.540172][T13822] SELinux: policydb string does not match my string SE Linux [ 677.551817][T13822] SELinux: failed to load policy [ 677.572128][ T5892] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 677.980970][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 677.987344][ T5892] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 678.102021][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.113036][ T5892] usb 6-1: config 0 has no interface number 0 [ 678.129942][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 678.141151][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.150364][ T5892] usb 6-1: Product: syz [ 678.155313][ T5892] usb 6-1: Manufacturer: syz [ 678.160334][ T5892] usb 6-1: SerialNumber: syz [ 678.167886][ T5878] usb 2-1: 0:2 : does not exist [ 678.176098][ T5892] usb 6-1: config 0 descriptor?? [ 678.368619][ T5885] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 678.392224][ T5892] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 678.399530][ T5892] uvcvideo 6-1:0.31: No valid video chain found. [ 678.629210][T13833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 678.639120][T13833] block device autoloading is deprecated and will be removed. [ 678.716724][T13832] md: md2 stopped. [ 678.870345][ T5878] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 678.981067][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 679.034565][T13838] wireguard: wireguard0: Could not create IPv4 socket [ 679.042761][T13838] wireguard0: entered promiscuous mode [ 679.048367][T13838] wireguard0: entered allmulticast mode [ 679.059299][T13840] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2110'. [ 679.796063][ T5885] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 679.811224][ T5878] usb 2-1: USB disconnect, device number 76 [ 679.821423][ T5885] usb 3-1: config 0 has no interface number 0 [ 679.827556][ T5885] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 679.858349][ T5885] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 679.870258][ T5885] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 679.886273][T13030] udevd[13030]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.905237][ T30] audit: type=1400 audit(1770625053.594:816): avc: denied { connect } for pid=13843 comm="syz.1.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 680.227817][ T5885] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.275511][ T30] audit: type=1400 audit(1770625053.954:817): avc: denied { append } for pid=13846 comm="syz.0.2111" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 680.300200][ T5885] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 680.311342][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.333948][ T5885] usb 3-1: config 0 descriptor?? [ 680.361006][ T5885] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 680.524527][T13851] tipc: Enabled bearer , priority 0 [ 680.538019][T13850] tipc: Disabling bearer [ 681.003336][ T5885] usb 3-1: USB disconnect, device number 58 [ 681.026423][ T5885] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 681.068346][ T5878] usb 6-1: USB disconnect, device number 57 [ 682.230206][ T30] audit: type=1400 audit(1770625055.674:818): avc: denied { mounton } for pid=13869 comm="syz.1.2119" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 682.397585][T13882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.473551][T13882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.907888][T13886] loop9: detected capacity change from 0 to 7 [ 683.081182][T13030] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 683.095551][T13030] loop9: partition table partially beyond EOD, truncated [ 683.109529][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.118662][T13030] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 683.191215][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.219522][ T30] audit: type=1400 audit(1770625056.844:819): avc: denied { create } for pid=13889 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 683.276722][T13901] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2127'. [ 683.341081][ T5878] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 683.381549][ T30] audit: type=1400 audit(1770625056.844:820): avc: denied { write } for pid=13889 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 683.504390][T13886] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 683.509845][T13886] loop9: partition table partially beyond EOD, truncated [ 683.551736][T13886] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 683.627449][T13030] udevd[13030]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 683.712845][T13030] udevd[13030]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 683.727215][ T30] audit: type=1400 audit(1770625057.414:821): avc: denied { create } for pid=13905 comm="syz.2.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 683.857098][ T30] audit: type=1400 audit(1770625057.444:822): avc: denied { setopt } for pid=13905 comm="syz.2.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 683.991834][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 685.225614][ T9] usb 3-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 685.237987][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 685.375087][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 685.385718][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.415082][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.420975][ T9] usb 3-1: Product: syz [ 685.421872][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.485904][ T9] usb 3-1: Manufacturer: syz [ 685.500744][ T9] usb 3-1: SerialNumber: syz [ 685.521573][ T9] usb 3-1: config 0 descriptor?? [ 686.110978][ T9] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 686.119136][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 686.126903][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 686.138414][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 686.162606][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 686.170315][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 686.186292][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 686.202864][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 686.220584][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 686.278158][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 686.306920][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 686.324632][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 686.381406][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 686.389409][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 686.397132][ T5892] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 686.436060][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 686.464223][ T9] usb 3-1: USB disconnect, device number 59 [ 686.498976][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 686.542609][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 686.566952][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 686.578823][ T9] keyspan 3-1:0.0: device disconnected [ 686.595351][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.616603][ T5892] usb 4-1: Product: syz [ 686.620941][ T5892] usb 4-1: Manufacturer: syz [ 686.629030][ T5892] usb 4-1: SerialNumber: syz [ 686.648242][ T5892] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 686.697566][ T5899] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 686.811013][ T5878] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 687.001739][ C0] usb 4-1: ath9k_htc: invalid pkt_len (fce2) [ 687.006546][T13951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.021927][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 687.028168][T13951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.043366][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.054033][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.075860][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.086147][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.101125][T13952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 687.110661][T13952] block device autoloading is deprecated and will be removed. [ 687.127093][ T5878] usb 2-1: Product: syz [ 687.131943][ T5878] usb 2-1: Manufacturer: syz [ 687.136663][T13949] md: md2 stopped. [ 687.142719][ T5878] usb 2-1: SerialNumber: syz [ 687.269896][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2143'. [ 687.427666][ T852] usb 4-1: USB disconnect, device number 53 [ 687.560515][ T5878] usb 2-1: 0:2 : does not exist [ 687.739673][ T5899] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 687.746951][ T5899] ath9k_htc: Failed to initialize the device [ 687.874480][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2145'. [ 687.910705][ T852] usb 4-1: ath9k_htc: USB layer deinitialized [ 687.987698][T13959] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2144'. [ 688.149001][ T5878] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 688.243637][ T30] audit: type=1400 audit(1770625061.944:823): avc: denied { attach_queue } for pid=13963 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 688.253152][T13966] SELinux: policydb string length 65544 does not match expected length 8 [ 688.275957][T13966] SELinux: failed to load policy [ 688.577676][ T5878] usb 2-1: USB disconnect, device number 77 [ 688.646173][T13030] udevd[13030]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.017123][T13975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 689.027038][T13975] block device autoloading is deprecated and will be removed. [ 689.108316][T13974] md: md2 stopped. [ 689.312861][T13977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2151'. [ 689.323385][T13977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2151'. [ 691.936247][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2158'. [ 692.468280][ T3523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.645212][ T3523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.113144][T14018] nvme_fabrics: missing parameter 'transport=%s' [ 693.119594][T14018] nvme_fabrics: missing parameter 'nqn=%s' [ 693.139321][ T3523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.264594][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.278841][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.289201][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.299862][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.399898][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 693.755910][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.773450][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.782666][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.790109][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.798641][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 693.804952][T14030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 693.815223][T14030] block device autoloading is deprecated and will be removed. [ 693.824224][T14030] md: md2 stopped. [ 693.922845][ T3523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.953504][T14023] Failed to initialize the IGMP autojoin socket (err -2) [ 694.472532][T14023] chnl_net:caif_netlink_parms(): no params data found [ 694.707569][ T5923] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 695.705460][T14054] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 695.715348][T14054] block device autoloading is deprecated and will be removed. [ 695.761040][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 695.905554][ T52] Bluetooth: hci1: command tx timeout [ 695.926562][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 695.935521][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'. [ 695.944606][T14060] netlink: 'syz.0.2173': attribute type 13 has an invalid length. [ 695.952464][T14060] netlink: 'syz.0.2173': attribute type 12 has an invalid length. [ 695.960535][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 695.980004][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 695.994611][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.005129][ T5923] usb 4-1: Product: syz [ 696.009296][ T5923] usb 4-1: Manufacturer: syz [ 696.020682][ T5923] usb 4-1: SerialNumber: syz [ 696.050094][ T5923] usb 4-1: config 0 descriptor?? [ 696.172338][ T5923] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 696.247274][ T5923] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 696.406256][T14023] smc: adding net device wg2 with user defined pnetid SY [ 696.559142][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.586684][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.845297][ T5923] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 697.275696][ T5923] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 697.289177][ T5923] em28xx 4-1:0.0: board has no eeprom [ 697.298884][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.309835][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.320430][ T3523] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 697.330995][ T3523] bond0 (unregistering): Released all slaves [ 697.379430][T14023] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.386703][T14023] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.395191][T14023] bridge_slave_0: entered allmulticast mode [ 697.411935][T14023] bridge_slave_0: entered promiscuous mode [ 697.440475][ T3523] tipc: Left network mode [ 697.448116][T14023] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.456368][T14023] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.470311][T14023] bridge_slave_1: entered allmulticast mode [ 697.507864][ T3523] IPVS: stopping backup sync thread 6584 ... [ 697.522406][T14023] bridge_slave_1: entered promiscuous mode [ 697.811421][ T5923] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 697.883898][ T5923] em28xx 4-1:0.0: dvb set to bulk mode. [ 697.925526][ T852] em28xx 4-1:0.0: Binding DVB extension [ 699.037983][ T52] Bluetooth: hci1: command tx timeout [ 699.201858][T14040] em28xx 4-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 699.255393][T14107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.310621][ T852] em28xx 4-1:0.0: Registering input extension [ 699.341969][T14107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.717157][T14023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.777945][T14023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.884303][ T852] usb 4-1: USB disconnect, device number 54 [ 699.893893][ T852] em28xx 4-1:0.0: Disconnecting em28xx [ 699.899410][ T852] em28xx 4-1:0.0: Closing input extension [ 700.005240][ T852] em28xx 4-1:0.0: Freeing device [ 700.486190][T14023] team0: Port device team_slave_0 added [ 700.687145][T14023] team0: Port device team_slave_1 added [ 700.815346][T14023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.850256][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.922045][T14023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.090995][ T52] Bluetooth: hci1: command tx timeout [ 701.564448][ T3523] hsr_slave_0: left promiscuous mode [ 701.583673][ T3523] hsr_slave_1: left promiscuous mode [ 701.763343][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 701.772338][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'. [ 701.781991][T14146] netlink: 'syz.3.2188': attribute type 13 has an invalid length. [ 701.789801][T14146] netlink: 'syz.3.2188': attribute type 12 has an invalid length. [ 701.875958][ T3523] pimreg3 (unregistering): left allmulticast mode [ 702.132243][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 702.175592][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 702.696707][T14023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.705029][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.733941][T14023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.013506][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 703.023113][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 703.221143][ T52] Bluetooth: hci1: command tx timeout [ 704.747766][T14023] hsr_slave_0: entered promiscuous mode [ 704.814750][T14023] hsr_slave_1: entered promiscuous mode [ 705.041752][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.052559][ T3523] IPVS: stop unused estimator thread 0... [ 705.088676][ T30] audit: type=1400 audit(1770625078.774:824): avc: denied { bind } for pid=14173 comm="syz.2.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 705.113720][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.919478][ T30] audit: type=1400 audit(1770625080.614:825): avc: denied { watch_sb } for pid=14193 comm="syz.3.2201" path="/471/file0" dev="tmpfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 707.331347][ T5899] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 707.445747][T14023] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 708.386424][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.406287][ T5899] usb 4-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 708.547101][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.742829][T14023] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 708.764891][ T5899] usb 4-1: config 0 descriptor?? [ 708.792468][T14023] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 708.802472][ T5899] pwc: Samsung MPC-C30 USB webcam detected. [ 708.833825][T14023] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 708.894307][ T30] audit: type=1400 audit(1770625082.594:826): avc: denied { mounton } for pid=14225 comm="syz.5.2208" path="/388/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 708.958521][ T30] audit: type=1400 audit(1770625082.624:827): avc: denied { remount } for pid=14225 comm="syz.5.2208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 709.015133][T14226] overlayfs: failed to resolve './bus/file0': -2 [ 709.023732][ T5899] pwc: send_video_command error -71 [ 709.030968][ T30] audit: type=1400 audit(1770625082.714:828): avc: denied { mounton } for pid=14225 comm="syz.5.2208" path="/388/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 709.037721][ T5899] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 709.119588][ T5899] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 709.180274][ T5899] usb 4-1: USB disconnect, device number 55 [ 709.333803][T14228] md: md2 stopped. [ 709.426879][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2210'. [ 709.445814][T14023] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.454907][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2210'. [ 709.523991][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.531211][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.894923][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.902052][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.032384][ T30] audit: type=1400 audit(1770625083.724:829): avc: denied { ioctl } for pid=14237 comm="syz.2.2206" path="/dev/input/mouse0" dev="devtmpfs" ino=923 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 710.273246][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 710.282240][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 710.291195][T14248] netlink: 'syz.2.2214': attribute type 13 has an invalid length. [ 710.299001][T14248] netlink: 'syz.2.2214': attribute type 12 has an invalid length. [ 710.502309][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.517959][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.524864][T14261] input: syz1 as /devices/virtual/input/input74 [ 711.566486][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2219'. [ 711.572630][T14023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.827290][T14023] veth0_vlan: entered promiscuous mode [ 711.837717][T14268] netlink: 'syz.5.2221': attribute type 1 has an invalid length. [ 711.879838][T14268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.901431][T14023] veth1_vlan: entered promiscuous mode [ 712.005805][T14268] bond1: (slave gretap1): making interface the new active one [ 712.020044][T14268] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 712.132205][ T5815] Bluetooth: hci4: command 0x1003 tx timeout [ 712.140126][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 712.188342][T14023] veth0_macvtap: entered promiscuous mode [ 712.256591][T14023] veth1_macvtap: entered promiscuous mode [ 712.417305][T14023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.459093][T14023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.487113][T14023] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 712.565408][T14281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'. [ 712.900555][T14023] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 713.077858][T14023] wireguard: wg0: Could not create IPv4 socket [ 713.113764][T14023] wireguard: wg1: Could not create IPv4 socket [ 713.255089][T14023] wireguard: wg2: Could not create IPv4 socket [ 713.322641][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 713.423671][ T30] audit: type=1400 audit(1770625087.094:830): avc: denied { create } for pid=14285 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 713.484256][ T30] audit: type=1400 audit(1770625087.094:831): avc: denied { write } for pid=14285 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 713.530104][T14023] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 713.542181][T14023] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 713.550566][T14023] CPU: 1 UID: 0 PID: 14023 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 713.561656][T14023] Tainted: [L]=SOFTLOCKUP [ 713.565948][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 713.575973][T14023] RIP: 0010:klist_put+0x4d/0x1d0 [ 713.580892][T14023] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc ef 0c [ 713.600485][T14023] RSP: 0018:ffffc9001cdc7950 EFLAGS: 00010202 [ 713.606526][T14023] RAX: dffffc0000000000 RBX: ffff8880558dec60 RCX: 0000000000000000 [ 713.614470][T14023] RDX: 000000000000000b RSI: ffffffff8b6cc295 RDI: 0000000000000058 [ 713.622413][T14023] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff213515c [ 713.630354][T14023] R10: ffffffff909a8ae3 R11: 0000000000000001 R12: 0000000000000000 [ 713.638393][T14023] R13: 0000000000000001 R14: ffffffff909a8aa0 R15: dffffc0000000000 [ 713.646356][T14023] FS: 0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000 [ 713.655270][T14023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.662182][T14023] CR2: 000020000000f000 CR3: 000000005c442000 CR4: 00000000003526f0 [ 713.670134][T14023] Call Trace: [ 713.673395][T14023] [ 713.676321][T14023] klist_remove+0x14c/0x2e0 [ 713.680808][T14023] ? __pfx_klist_remove+0x10/0x10 [ 713.685812][T14023] ? kobject_move+0x15d/0x260 [ 713.690470][T14023] ? __pfx_kobject_move+0x10/0x10 [ 713.695474][T14023] ? kobject_put+0xb9/0x640 [ 713.699960][T14023] device_move+0x12d/0x1140 [ 713.704447][T14023] hci_conn_del_sysfs+0x86/0x1a0 [ 713.709370][T14023] hci_conn_del+0x506/0x1180 [ 713.713961][T14023] hci_conn_hash_flush+0x186/0x280 [ 713.719061][T14023] hci_dev_close_sync+0x5a7/0x1240 [ 713.724159][T14023] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 713.729689][T14023] ? up_write+0x290/0x4f0 [ 713.734004][T14023] hci_dev_do_close+0x2e/0xb0 [ 713.738665][T14023] hci_unregister_dev+0x227/0x670 [ 713.743672][T14023] vhci_release+0x17d/0x230 [ 713.748160][T14023] ? __pfx_vhci_release+0x10/0x10 [ 713.753167][T14023] __fput+0x3ff/0xb40 [ 713.757137][T14023] task_work_run+0x150/0x240 [ 713.761707][T14023] ? __pfx_task_work_run+0x10/0x10 [ 713.766805][T14023] do_exit+0x829/0x2a30 [ 713.770943][T14023] ? do_raw_spin_lock+0x128/0x260 [ 713.775949][T14023] ? __pfx_do_exit+0x10/0x10 [ 713.780516][T14023] ? do_group_exit+0x1bd/0x2a0 [ 713.785262][T14023] ? do_group_exit+0x1bd/0x2a0 [ 713.790003][T14023] ? rcu_is_watching+0x12/0xc0 [ 713.794758][T14023] do_group_exit+0xd5/0x2a0 [ 713.799252][T14023] __x64_sys_exit_group+0x3e/0x50 [ 713.804256][T14023] x64_sys_call+0x14fd/0x1510 [ 713.808909][T14023] do_syscall_64+0xc9/0xf80 [ 713.813393][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.819274][T14023] RIP: 0033:0x7f884299aeb9 [ 713.823668][T14023] Code: Unable to access opcode bytes at 0x7f884299ae8f. [ 713.830659][T14023] RSP: 002b:00007ffe06391a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 713.839055][T14023] RAX: ffffffffffffffda RBX: 00007f8842a08125 RCX: 00007f884299aeb9 [ 713.847006][T14023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 713.854954][T14023] RBP: 00007f8842a08168 R08: 0000000000000000 R09: 000000000000002e [ 713.862950][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 713.870901][T14023] R13: 000000000000002e R14: 0000000000000025 R15: 00007ffe06391b62 [ 713.878856][T14023] [ 713.881857][T14023] Modules linked in: [ 713.886513][T14023] ---[ end trace 0000000000000000 ]--- [ 714.540197][T14023] RIP: 0010:klist_put+0x4d/0x1d0 [ 714.545668][T14023] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc ef 0c [ 714.567546][T14023] RSP: 0018:ffffc9001cdc7950 EFLAGS: 00010202 [ 714.574439][T14023] RAX: dffffc0000000000 RBX: ffff8880558dec60 RCX: 0000000000000000 [ 714.582781][T14023] RDX: 000000000000000b RSI: ffffffff8b6cc295 RDI: 0000000000000058 [ 714.592257][T14023] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff213515c [ 714.603858][T14023] R10: ffffffff909a8ae3 R11: 0000000000000001 R12: 0000000000000000 [ 714.651318][T14023] R13: 0000000000000001 R14: ffffffff909a8aa0 R15: dffffc0000000000 [ 714.659429][T14023] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 714.668924][T14023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.675724][T14023] CR2: 00007f91705e8600 CR3: 000000004d877000 CR4: 00000000003526f0 [ 714.685491][T14023] Kernel panic - not syncing: Fatal exception [ 714.691868][T14023] Kernel Offset: disabled [ 714.696168][T14023] Rebooting in 86400 seconds..