last executing test programs: 8.381620418s ago: executing program 2 (id=2323): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x5, 0x4}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) semctl$SETALL(0x0, 0x0, 0x11, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r0, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f0000003840), 0x0, 0x20, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/23, 0x17, 0x1, &(0x7f0000000280)=""/179, 0xb3}, &(0x7f0000000340)=0x40) ioctl$TCFLSH(r0, 0x540b, 0x1) 7.772429789s ago: executing program 1 (id=2326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x524, 0x25dfdbfd, {0x2, 0x1f, 0x8b, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0xf, 0xfcf4, @vifc_lcl_ifindex=r4, @rand_addr=0x64010102}, 0x10) 7.031984609s ago: executing program 1 (id=2328): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x2d, 0x0, @tid=r2}, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/153}, 0x20) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'pcl726\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0xfffff000, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0xc, 0x40000, 0x8, 0x7, 0x746f, 0x48, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0xa28f, &(0x7f0000002140)={0x0, 0xfa5f, 0x20, 0x3, 0x10000000}) io_uring_enter(r5, 0x0, 0x2, 0xf, 0x0, 0x18) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500)=[{{&(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="b441b70382a05a0085f26b3f179a4c08046e111fdac7e20b", 0x18}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x20000040}}], 0x1, 0x4080120) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="2e00000011008b88040f80ee59acbc041308000800000000000000421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) connect$pppoe(r9, &(0x7f0000000140)={0x18, 0x0, {0x0, @multicast, 'ip6erspan0\x00'}}, 0x1e) 6.420745071s ago: executing program 2 (id=2330): write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', '.', [{0x20, 'bpf\x00'}, {0x20, 'bpf\x00'}, {0x20, '\x00'}, {0x20, 'bpf\x00'}, {0x20, 'bpf\x00'}], 0xa, "a6f9050ffc18cd76286dde74481bba68a90a15631eb2912ba4ed285630bf7b5640d51112b9685aa05c60bb3f81c5dc4c46d2bfd50ba52c918c0b105316bdad8cd8701617209a65d40c06fb1062d9388ecb"}, 0x6c) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0xfffffffffffffe36, 0x3, 0x8001}, @TCA_ACT_BPF_FD={0x0, 0x5, r0}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000005c0)={0x4, 0x0, 0x4, 0x8, '\x00', 0x4}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x0, 0xf}, 0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r6, 0xa, 0x1c) (async) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r7, 0x404c4701, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x400000, 0x14, "ffe865ea84f6b03b00000010000000040100"}) (async) syz_usb_control_io$uac2(r2, 0x0, 0x0) 5.891622829s ago: executing program 1 (id=2331): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) lsm_list_modules(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x8, 0xffff, {r0}, {0xffffffffffffffff}, 0x8, 0x1ff}) keyctl$chown(0x4, 0x0, r1, 0xee00) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 5.88772343s ago: executing program 3 (id=2333): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(0x0, 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x56, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffe, {0x1, 0xff}}, 0x18) recvfrom(r0, &(0x7f0000000100)=""/133, 0x85, 0x40000020, &(0x7f0000000240)=@ax25={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x80) sendmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000040)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0xf5) 5.161813319s ago: executing program 2 (id=2335): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000340)={0x143801, 0x110, 0x10}, 0x18) mknodat(r0, &(0x7f0000000300)='./file1\x00', 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r9 = semget$private(0x0, 0x4000000009, 0x668) semop(r9, &(0x7f00000002c0)=[{0x0, 0x9b6a, 0x1000}], 0x1) semctl$IPC_RMID(r9, 0x0, 0x0) semtimedop(r9, &(0x7f0000000240)=[{0x1, 0x5, 0x1800}, {0x3, 0x8, 0x1000}], 0x2, &(0x7f0000000280)={0x77359400}) 5.031978143s ago: executing program 4 (id=2337): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.88558338s ago: executing program 3 (id=2338): madvise(&(0x7f0000bdc000/0x1000)=nil, 0x1000, 0x65) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x53ed, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtaction={0x78, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x64, 0x1, [@m_mirred={0x34, 0x4, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x61, 0x0, @fd_index, 0x7, 0x0, 0x6, 0x0, 0x1}) r8 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r8, &(0x7f0000000240)={&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f00000000c0)=""/5, 0x5}], 0x2, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x10000) 4.106482616s ago: executing program 4 (id=2339): r0 = fspick(0xffffffffffffffff, &(0x7f0000000540)='./file0/file0\x00', 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r2, 0x2}], 0x1, 0xfa) (async) r3 = dup2(r1, r2) mkdir(&(0x7f00000020c0)='./file0\x00', 0xce) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x10880, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x4}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x10010, r0, 0xec776000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, r0, 0x2) (async) pipe2$9p(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1, &(0x7f00000003c0)={0x3d, 0x1851, 0x6}) sendmsg$kcm(r4, 0x0, 0x845) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x801, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000000)={{&(0x7f00000001c0)={'Accelerator\x00', {&(0x7f0000000580)=@adf_hex={@normal='NumberDcInstances\x00', {0x10000}, {&(0x7f0000000300)=@adf_str={@format={'Cy', '2', 'RingTx\x00'}, {"a9fd0e29cd90f307090c6fee090618f1d87ea609c985d69369f862a4e58e2b9805b253bcb87ec9f5c0f9c64f9d0472a0f62cf9299c8f1621bc17f7d98686738c"}}}}}, {&(0x7f0000000080)={'GENERAL\x00', {&(0x7f0000000700)=@adf_str={@normal='NumberDcInstances\x00', {"db532fc874635d4cd89b40786e44f50bd0747886f2279a38766b6b95882bd4d4ec1153957356f77ebd3bc8d9a655deed17112953e8b33a12a13a77369930c34c"}, {&(0x7f0000000640)=@adf_hex={@format={'Dc', '5', 'NumConcurrentSymRequests\x00'}, {0x100}}}}}}}}}, 0xac}) ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000480)) (async) ioctl$BLKRRPART(r5, 0x125f, 0x0) 3.929093609s ago: executing program 4 (id=2340): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x8, 0x4) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x5c717ad, 0xc00498, 0xfef, 0x9a, 0x7, 0x1000, 0x0, 0x0, 0x80, 0x1}}, 0x50) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x18) syz_open_dev$usbmon(&(0x7f0000000440), 0x4, 0x40000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r1, 0x9, 0xd}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e20, @multicast1}}, [0xc7c, 0x200, 0xf, 0x7fffffffffffffff, 0x6, 0x4, 0x4, 0x0, 0x5, 0x6, 0x7, 0xaa05, 0xdf1d, 0x216, 0x2]}, &(0x7f00000005c0)=0x100) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000600)="3eb65d8b7e7eeded2da2821edc83ccff4a1edb11bc50653fe3819419b50b06c839bf6d8a09a11aa6") r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000680)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$dh_compute(0x17, &(0x7f00000006c0), &(0x7f0000000700)=""/4096, 0x1000, 0x0) mkdir(&(0x7f0000001700)='./file0\x00', 0x22) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001740)={0x3, 'nicvf0\x00', {0x1599}, 0x72}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001800)={'gre0\x00', &(0x7f0000001780)={'erspan0\x00', 0x0, 0x40, 0x40, 0x6, 0x7, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @remote, {[@ssrr={0x89, 0x13, 0x24, [@multicast2, @broadcast, @local, @private=0xa010100]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x3, 0x80, 0x8, 0x3, 0x8, 0xffffffffffffffff, 0x9, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000018c0)={r3, 0x7}, &(0x7f0000001900)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001940)={r8, 0x3}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000001980)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r6, 0x9c141000) r9 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000001c80)={&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="0449f506912ae3d52ad4c2f4d905ddeb351950a58ced143ced0f3fd66f0c4ec71b40a94ca9e4e94dcaf02615be14dd7a2fafb0673b3861ca6781481dd7279be6201f650d460bfac2066c42b3c1206c920533a7690189208752392eb35069ccda70cea22596927bbdd4e8768871ae0e464be480", 0x73}], 0x1, &(0x7f0000001b00)=[{0x70, 0x111, 0x7, "fd10a43a3f49f60d874450977a6b5979daaccf90d21184551c0c3d9afdc1a6cc1db7255f21289557babe008a8d6b351e2789c66f839568637509a4930568a2637771cb1b96a33ce2e102a7f024d9bacbac19415b47f5fdade734d96338e277"}, {0xe0, 0x32e, 0x4, "844cf9c30b3be1c12d3e8299bd90b91b27a240d28532f96553a1dc711e41bf612c349bbf904f8e0f0bdb90639af8a97d1591d34c0be5a999a7fda0bd7db74d9252e786414a69c17a6f9b97df5fcdddc845026bbf3f8d12432578fa911b3c6747d882fca1dbf93241abd0118339456ef372725de21ac995dbe9caff0bc0990bbd3006b1fd1050818d096325ea613dfbc81838c7301dcccca3af20ab40382b5534d20e56ee2db1ffe09916e06a2c37ee23b76d56361565412fb71c3eea49d017b43b0725dac141f8a2ba"}], 0x150}, 0x40010) r10 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001cc0), &(0x7f0000001d00)=0xc) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x44, 0x0, 0x200, 0x6, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 3.50919619s ago: executing program 4 (id=2342): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) (async) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) getrlimit(0x3, &(0x7f00000000c0)) (async) getrlimit(0x3, &(0x7f00000000c0)) recvmmsg(r5, &(0x7f00000000c0), 0x40000fe, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x10}, {0x0, 0x8, 0x8, 0x1, 0x3, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x10}, {0x0, 0x8, 0x8, 0x1, 0x3, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.543330749s ago: executing program 4 (id=2343): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r8, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.494579798s ago: executing program 1 (id=2344): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="01040000000000000000010000000000000008410000004c0018ffffffff62726f6164636173742d6c696e6b00"/92], 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8884}, 0x24000880) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=@delqdisc={0x5c, 0x25, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xe}, {0x2, 0xfff3}, {0x0, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff0001}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x4006080) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0xb0, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "4daf0ce96648de366a6d7702ac753113b587b7b770b6ed71c8fcaf520c4d07ecb712e4d1157b8a9539bf70f4268f96e0cb7d7b3b25afa515e7ad3b0ef1f4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 2.333095637s ago: executing program 3 (id=2345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) prlimit64(r1, 0x5, &(0x7f0000000040)={0x6, 0x1}, &(0x7f0000000080)) r2 = eventfd2(0x0, 0x80801) read$eventfd(r2, &(0x7f0000000b40), 0x8) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x286c}, 0xe) r4 = syz_open_dev$vcsa(&(0x7f0000000180), 0xb, 0x242742) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010100}], 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1b0000001a005f0400f9f407000904018000200000000000000000", 0x1b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 2.191207064s ago: executing program 3 (id=2347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c00038004"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) sched_setscheduler(r4, 0x6, &(0x7f0000000100)=0x5) 2.107173914s ago: executing program 0 (id=2348): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(0x0, 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x56, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffe, {0x1, 0xff}}, 0x18) recvfrom(r0, &(0x7f0000000100)=""/133, 0x85, 0x40000020, &(0x7f0000000240)=@ax25={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x80) sendmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000040)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0xf5) 2.015980102s ago: executing program 2 (id=2349): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) prlimit64(0x0, 0xb, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @remote}, 0x8, 0x0, 0x0, 0x4}}, 0x26) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000db5000/0x3000)=nil, 0x3000, 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0xd6fe2, 0xf1641, 0xca03}) shutdown(0xffffffffffffffff, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)={0x200480, 0x1, 0x18}, 0x18) execveat$binfmt(r6, r4, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, 0x0, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 1.094538893s ago: executing program 0 (id=2350): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000efff00000a030000000000000000000002"], 0x0, 0x56}, 0x28) 1.093682363s ago: executing program 2 (id=2351): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000300), 0x7fffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}]}) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x100, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x1400) lgetxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 933.275854ms ago: executing program 3 (id=2352): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x93, 0x81, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x74) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000140)) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x101, 0x40000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40401, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000200)=0x6) socket$netlink(0x10, 0x3, 0x6) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='}/\x00', 0x0, r0) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x21) connect$l2tp6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1, 0x8000, 0x3}, 0x20) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$kcm(0x29, 0x1, 0x0) recvfrom$l2tp6(r2, &(0x7f0000000300)=""/229, 0xe5, 0x1, &(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, 0x20) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r6, 0x879a3000) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {0x80000001}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x2, 0xfff, 0x3, {0x0, @sliced={0x5, [0x6, 0x0, 0x8, 0x5, 0x3, 0x8, 0x4, 0xff, 0xf000, 0xdfe, 0xe68a, 0x6, 0x1, 0x8, 0x0, 0x2, 0x838a, 0xc00, 0x4, 0x2, 0xb1, 0xfffa, 0x40, 0x3dd, 0x400, 0x8, 0x401, 0x1, 0x9, 0x101, 0x0, 0x2, 0x1, 0x3, 0xcd5, 0xe, 0x5, 0x3, 0x7, 0x9, 0x1, 0x49c, 0x0, 0x3, 0x2, 0x6, 0x6, 0x1], 0xfffffffc}}, 0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x41}, @void, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20008005) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x8001}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000740)=r10, 0x4) read$FUSE(r2, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r2, &(0x7f00000027c0)={0x20, 0xfffffffffffffffe, r11, {0x0, 0x1d}}, 0x20) 887.823609ms ago: executing program 0 (id=2353): r0 = syz_io_uring_setup(0x4ffe, &(0x7f0000000000)={0x0, 0xcb59, 0x200, 0x2, 0xd2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x3, 0x5}, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x48801}, 0xc81a85c2a38b9573) r2 = getpgrp(0x0) r3 = syz_clone3(&(0x7f00000004c0)={0x400, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x36}, &(0x7f0000000380)=""/151, 0x97, &(0x7f0000000440)=""/35, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r7 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r6, &(0x7f0000000580)={r7, r0, 0xfc000000}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000005c0)={0x75}) r8 = getpid() ptrace$setopts(0x4206, r2, 0x7d, 0x0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'veth1_to_team\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r9) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f00000006c0)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x9, 0x123124, 0x32c0f7}) r10 = syz_io_uring_setup(0x2265, &(0x7f0000000740)={0x0, 0xa1dd, 0xc080, 0x2, 0x157, 0x0, r9}, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r10, 0x17, &(0x7f0000000880)={&(0x7f0000001000)={[{&(0x7f0000000840)="ce770aa975f93dc08d9761df2ceb978ecfaf118a077014aa53cffec3f1503b1febc69b92e04259c18dff47ac265089880905", 0x32}]}, 0x1, 0x3}, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r6, 0x2d404000) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r9) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000000900)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) getpid() r11 = accept4(r9, &(0x7f0000000a00)=@nfc, &(0x7f0000000a80)=0x80, 0x800) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000ac0)={0x7fffffff, {{0x2, 0x4e23, @private=0xa010101}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) r13 = accept4(r11, 0x0, &(0x7f0000000fc0), 0x0) r14 = getuid() sendmmsg$unix(r9, &(0x7f000000bfc0)=[{{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c00)="1765b61489f59bd9c7cd31e496286d5b0a9f85ac20d0ebc9664c5b446617139d89d15d310d1d3219fcdf4449de4d4a8a610c79cfc750ba9901e6c099a2e68f578f5d54e3bafad6e0668f8c6a84aa14749430d896dbd4d0cd2f0a9422bf9b811002e8d89a6208e5593c60d00b42608dd1e4d26f9f2a46ab32da086b11919dc57a48fd9ed92022609a760e707ebc4fdfc0cf98cc4b17302f2537aaf2c510f466a20b2260ece5a3e00c11640d41d703f1dc23786c62fa1134198174bb5141325c28ffabf34240a4ae8474521914bf7a3a22dc4ac7b11e6f974e268bfecd5a50fc1b5dbf61c590f50917a786b48dbd880beb383671261413d6", 0xf7}, {&(0x7f0000000d00)="61c0389973e09903dda646f292a8e887836640b8564a06b7eb7748665ee5dfc2c5fc196e1c0008b66e6a6a8cca8466e7cced045c077858f2051780acc2a811589dbb5cc84417", 0x46}, {&(0x7f0000000d80)="5b83faa62dabce253e7fd64bc1250767fe59b438976efdf16c967042a3434441629d4ce87a20fe09571310d6a1fbc9836a7aa462a6e73ba77d3193ea16dbea4479a3b38394bc7ecdf2dd6c7c6c375e5cd233d29250bab66fd3cfb46690702f1e7baf82223d1160a8f655d8c1595e4c127a", 0x71}], 0x3, &(0x7f0000000e40), 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)="9772533267d0267f1ec68478ab04b6689b9c541732522af10e4aa560cd4ecd472668dce65fcb4705d573218328a2abe06e9e91ef418712617c00482476ec72b733d9f071976f4c4b4b852de30b54729267f3340edae873916e4bbb269782c06e3c06e3eb3210b3fcc7189179843f5aef6e7890e5cbcb8c333872fc686d5388f78e1a1c3e509f307eeddb78e69f4f48b45ffb65426bf595526a1e89cd6226dc1bf0f3f48dff65a0e2879404cc4c43c8f06233", 0xb2}], 0x1, &(0x7f0000004680)=[@rights={{0x24, 0x1, 0x1, [r10, r0, r9, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r5, r14, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r11, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r6, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x150}}, {{&(0x7f0000004800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005b80)=[{&(0x7f0000004880)="68c5c7315dd44ef9c0050f7d678b54dcfcd8bb5455db8ce35c2b1b64af02947464a8fa41e00652414263c5b6d54ebc4852d439cf793bf32aaf2a58f44bfce7466f303ffea51c0ad3e3f6007fcb8bc61d43a11c6eb99694aeb0bcdb3afb22ece42a093d4906298f2b981fcc95ef9a0c3018cd0f2146651a3de845d63b72ed04f19ac0f7c664ce2e32b731da3eddb36941477f2ebb70c9c738015f05e5cebf405b32664c56fca3478491aa99851e3012b50be0211f96d081c0e593e72fd8f72ec258f390b308f9cb1a225a1e180fe0", 0xce}, {&(0x7f0000004980)="78ae03dd958ea50689c99ff60d83daf2c101ce573e92715001eae1b0c752bd036bcb164268cf026b5ea686a1446aa4a3a91252e2d188775a4d7b29b772ddbb5253e586221261be2e0534019e137628a5d5e2241f311fc1c750ba666b3a990f105aa93052a26087f024d505a981f20624d362dfd9535c07b005f08816c88b404a76f21856edd73bdfae2b30e4aa7922a3048db02f2654b9769bfa63912431c4284702624d38d8c866ba44dd4bc761e916478cb2cf4de75b82aa063757b3bb1339c7b25c6b772ab9f2325101bdc3fc9a0d64392ed7b7019e8676b8c6b7ce527bf9fe0644ca393c97f97c8acb02ed959d39f0f872bc", 0xf4}, {&(0x7f0000004a80)="781b9011d7794544756ec1e67f76f52694dca108a0d752e93efc3415dc8b63cbd08edce58a184b32305d85f4bad34af19d342ed3efee5e58c497b937860dc009507b534c8d40c9528838a23927b29fb5c449ed823eb3695710934c869c2cdb9b04a8eb83732441098ac030057dac8c4c974e08f8bd14b6e30c43509b1ce9b4123c41333740eebba479f2cdeb1807a153ef", 0x91}, {&(0x7f0000004b40)="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", 0x1000}, {&(0x7f0000005b40)="1a0ce2e0652d139ba1dc3f7ae8dec4bd4b033283a50dfda119ee9c71f1da91f681040f9dcc01be907b06c90f92f0fe", 0x2f}], 0x5, &(0x7f0000009ec0)=[@rights={{0x20, 0x1, 0x1, [r7, r7, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r10, r7, r10, r7, r10, r0]}}, @rights={{0x1c, 0x1, 0x1, [r7, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000009fc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000a340)=[{&(0x7f000000a040)="dd289ed5d9c63f5248ea17dfc196dab983bae4221d410f11741832bec715e0b7812e15b7a6a78b63c9281d1fc032723776fc8d8a303d1e817dcf1391bd59bab8e8d111b24c9247f0b9249d3d1253cf455c323bda333f6616e85baf4e7e8bed647d94e812699328d93af5ff1ca848bc01118e2801b7643dda50394d6eb26ee9b93fd3eaf1e9ce9141f8f79ef19d88205b559a9d966cea50c220c9288bb0225de6ad654e7b797c7ad3f45de5cdc0990e34df7f", 0xb2}, {&(0x7f000000a100)="52368edd9ed6b4cf9c3bcd27048c8cd42c22116cb8739f1dbb0e1b397af5f427d0f268e3efd8391c8d36ce1ef2fe0b3604b819ccc039b06308dab27e607471a8f08b7c21f9e0e8f84e114aed924c106656d8d7a6", 0x54}, {&(0x7f000000a180)="42598148185efaedbdeae086d763c308ab4b8263898e64292ea8bcb54fcaa2c29af31547565020a1441d0a811995ed68da3a7924fb3a3ab7d92c68d7164d245ae3cd94c4b58c94bd5a87bd1fc499100e5776a8a8de64a93bd0b4a864f6bb7a04ddd09fa00ddcb47ca6fcad413d82b7022c34479365dc4c085a55be3ff4022479bc9bee6892c6f37ca1a8589ad2532a8c93cf49b1baf053f51dbe14606e3dc4", 0x9f}, {&(0x7f000000a240)="fed7e0235ef0c9c1c0eecf02696188031b2157172762", 0x16}, {&(0x7f000000a280)="3cae0a35f70370ac175811f6bef8713d999d13e59e714ff49ef606cfca592383ec92637c385e53c013a0f875856b4f16460d6e1cb296bcebfc34edf9965b1b74a3a075ca39424ad6c1f6d511fc7fca431ffc0001211acd72d24184e07d00aff214f87a6c3d2cd8a342f990c9ff24eee4d06d1149a8a3", 0x76}, {&(0x7f000000a300)="094e8b59672ec4392b367fc5256020d28ccc92893a580634", 0x18}], 0x6, 0x0, 0x0, 0x4040054}}, {{&(0x7f000000a3c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a900)=[{&(0x7f000000a440)="695ba278359e6bbe90f2667c4678d73b0e0793e1d37654d73aa479400fe89812be70913cdf6315a6e3f6ca873584d4fcbc1d8b4299597b7c6bc835c884f29bfae3cf1e11aa44042caf8019dfc7480ac676fb78e766ed2aeceb4303df8d8ab335913c04832791ab4a38949d3bb4aae5a4b6baef2c5abb3a", 0x77}, {&(0x7f000000a4c0)="73ef02e6230ba3f23bdd4ca5f0ca7cc4ac4ee991a95142762a9ad57e17fdc68362e628a1dcafd86fa01fdc29e9ab4d3678084df218d603d1b489cb62a7c134f79b0003dc07b091a6c2adb07d6cae797ec0334af3abe5330b1e771337aa0d65d9ddf8e0122fac5e1a0c4ab2521c99d0e6411f586320b169cde3241d2795b9bac7ecb56e3a9616e61eec13353006de71efc5d8782eb2790c57c37cb2aec367f8cbaa40a9af4fed89336177af673b0964ce61d3c7cd085dabce7fe9b3870bf30a8c329b3cdde8cbb83722691338f989582045dbc43233d97c9ad14b45f1d86a09fb8973348587fec99a7534835455bdb3", 0xef}, {&(0x7f000000a5c0)="87e6258589bbc998537042663a8c89bbf9c90b53e17bc85a4359931a90d8df3db1c2d4f30d0c54c4e167c648e2a427b67e5fce585b776d2d0b8295700ebc425b57653a79c2bd0e116fd0c7e0b11c01d12bd0dfaa3a7f0912dd8b7647baaa7d074f1a23151fae5859699c7aa09c72151c4ebe964b5bfe4561c2eaf8a1e276d55cc223322bad5f3b271824255e1db16441cf4b77182bd60a10fdc0698f4983c710a3520a03", 0xa4}, {&(0x7f000000a680)="8fcd65480f2dfc492d063d67ddaf8b1de8dcd28150338b55e499afe4fc5a918c324b2fda285ec63ce46da1d2113924a0241ce3b36db69253af7b03fa64f531793d279b58c8adec7c690d24a99c341e1207eab1af695c7078d0ec0cc196055d7c48abd72c8f612c1ecf8d20f8e4f61bf8a8fb6817255c0513bf3fcdc6c7716dbd61b3bfd5ffe3c6a0642f4dbcb7c22c1efe08e59475c8fc84eeff89264453d45fd41a366e81b4129bcfe50a9bccb6c74135a21b1bff744f57b67b1074956529ac64ce17f8f037", 0xc6}, {&(0x7f000000a780)="ee7325c6085a8ba5fe5a66f76548c1feaef80fd9c286991adfdae7be24455cfefd9ed20a9b4d7f185002cf729595b9b134e7227aeae05fd673a4829e86e583caedab039ca9eade770d3913c18ded309321b2239be9ce03301f87e0e629108335f7c85c421667dc3e8468c9aa0e9fe595488d523cde1d48be4cb29d6d34a248c1", 0x80}, {&(0x7f000000a800)="e183e145af6d2d79cab872c4f597bf9db5f4f89bc4b6ae18a8", 0x19}, {&(0x7f000000a840)="217f3cfa4bc966d42bb0e6e1905dc300e69c957ea4b37504ac30065c21b28fa04f9d27997eff94d6d19aac482e1f28a2649663263952947864f0e14f9e715170b8748787f0dec908e2286ff3225f74b623b60a9024877f6095a6e581558cfe0a507f866456112e83f0bd613189c8166b4b42c26632d35c1e6c0dc5a2499c8cff405e7c506b5030b3a49d754af67b67a0b464381895c8a95feee917e2818e9667e48213915cfaf4f33c62eaec3c4904edd3", 0xb1}], 0x7, &(0x7f000000af40)=[@rights={{0x20, 0x1, 0x1, [r0, r9, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r11, r4, r6, r9, r10]}}, @rights={{0x1c, 0x1, 0x1, [r11, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x120, 0x44804}}, {{&(0x7f000000b080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b600)=[{&(0x7f000000b100)="68b2da508467d1a30e55ed480a3cda67ff5baa5ff07643352634e34443968d690c29a62ae4aa87a7b5d68c15ea34b63030a44294f0dee1b86b0781f3ad01da7c1c5d55646f32217ac4ca2719c393907c47356c39a737d834cb851f09aa21cf19d2aaca0782c6b97927b0bbc5fd064e2d087a39e88f7e22908ad545af6c0db569ee7bc3f2db8756baacf80f7d47f36d845aaa4b9c34d50212a07eac5da88ad2e4814198e768993bcd3a99dd40ef22d2a7", 0xb0}, {&(0x7f000000b1c0)="f721afd8af336e960dd5079aab28e025406804d825dac87185fee59473f4cdcd3698ee6bc014397c51fa93d9572223c58021d25dc1a3d8c07d86341cdda59d9ea5b1b28660c80b304aec8d4aee75f23688620a3581af19353ef2324954f31db91f14a034c9d90e89b416eb2d933ee6e09558432beca389d7e2063f", 0x7b}, {&(0x7f000000b240)="5f2080df8f9d6aa25cffba7520ba07df532f1ad38eab9c0117b8da2e88c14ab5f1627d3d1ca0bff0ab44a3eff749db87a44f9574235fa132e4932640f2c31ac8ca72191314577a6a3a605e1cbb7751859a164ffdd223897866f2875df86795732b722b7f5eb65f6470201bf17ef9a2f01c345a17b0e0a31e7d82", 0x7a}, {&(0x7f000000b2c0)="c85e26648e41c2", 0x7}, {&(0x7f000000b300)="8c25ea5db90b18670cf30d5164b57384c67562945349ced74335fe7e2e4420a8c6301a70a08f16edad61b92285e98348d3b35f202fbc8e58546ea602a39ea815c422744054e94093f642e0911066f699861e1de97afe16012fbd9aba239617ebf376df4e148fd0ca188875fbce1fdc7dc0d9947e20247c231bf0d95c7f5aac171cd1eb80af2546e7fb94b72eb06421dc3193fbd2df5bfd971ae2d196157d10fd3391cd3ffde6392afc9042e7e40fbfaf15ddf34ee0c95f49373204400bb85885d61628d6bdcd5cd0436ef456c49abc0c50f74f4b93d2eca7f5c82e072dde8b8f91f95a9f88377583f3c890e15ea0d97b298c8ae4ae81fb40d85c55dc", 0xfc}, {&(0x7f000000b400)="ab283e862da041209a09f16b10077b1fb9ad47eae764083920e246dc9cd08645fd5a0c24cea209b3bc520627d90684fecca0d5ae62640e137198f8fdeef888fb24c7801008ab01a10f99ec560f9bdf6ce2afa162646226907863723a0141e81529081d2bf3f115aa3fe154fd02befcbcf1b464fcde33a902c498e6bf0ee939e0f1b63d2a8e11f97b9f47e071fa2edd1c50f0dc4e72b4cb02ec859a3a69e136c5e9e861dde85f2a497289516a34a04bfebf1668cfc072463a2c48b5af578818d999be9e920a3a0e5d9d2f17c85d8337a4fc0eaef82f168c10d62f63eed3e662045f6950b2c5", 0xe5}, {&(0x7f000000b500)="cbfb25e20196d87b8da64ad488284a812a755646cdfdfe5fca266d3079dcf85d82e528f1c9fff191178fbc65c71f645be9647c0a7e255ff58af30da607a3db59bfbbf995d96ff410be644c9481c7099f26e8c431a638bde3633dc1f19fe15db1038dcc53159fd82b1aa24aff82107360c873272d18b52ddbf80899ff1c6f7b8e9d6c71c39eb7b46ddc9f6ab17f3dbfeced74e0d32b46dea58222ced59c6d4a96af25520844f76d82b4a4165e5a4ba051d00eede31599d7f3e172651da35cf55ff92f652b4acfd7d04b07064b58e7752b7930240b8ecab737f236", 0xda}], 0x7, &(0x7f000000b9c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r9, r7]}}, @rights={{0x30, 0x1, 0x1, [r7, r6, r0, r9, r7, 0xffffffffffffffff, r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x90, 0x4000080}}, {{&(0x7f000000ba80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000bf00)=[{&(0x7f000000bb00)="b857564cd79de02eacaa577959ff04a225d47f3f9d1b6de2735749f9a6a55174d6fdf12797d04d82bc6adb6f4618015c437e66ec17ee34fc17a98dbd336b0fc643b5566b133924f61ea1d971ac7c47eb342754861626e7aaaea5526403462cb9311d40d4963408c588b45a7f736aeb969b33882aec8c4714673a6703e93545a38ea6dc5e7a204182987f5e83b251ada8d7969c1211bef0970520", 0x9a}, {&(0x7f000000bbc0)="c45e5d94895ed996e7fa25407d68576a79217d8834ba16137d46005d291864042642f29693a8e807487012965c8449fafb38e0d9f70d349434382e7dbcb52313eb7db1acd0fec13c82f139fb588ad9332f071e20a0c2a14319b338fb5b7f29eda1596da83008cbba2bd0423524022cfc41b8c3083b0bfa6235f82ccefe7b65663c149e7918b5f2a4babfc9d7d251795ed2f0214ca648f92ee32934f8e8e30b9352a6cb147a709ce2ced3843e29fb427be4e9862bd94fc9bd30ec53ad501a687a20c4001b82e8228044cd3c0722b1bd4c95e564c170533339b9c6282e6daa084c2f626b3c71e2", 0xe6}, {&(0x7f000000bcc0)="5eb675dcb822bb276022603c1b8378363184bdd914136d1a4f2f014efec9cba5e0841339bf71ccb993773e00cfe01bf021d5b4c3ccf0416b3cd9780bd672d5ff9aff3deabc08dcaab68904cfa099b0ade892ee34e6e42da3e03d655d4c665e0cd4fc5f8b266e034b20118692593fb5bde615e297ca", 0x75}, {&(0x7f000000bd40)="c32b1ad267ab657c6d3d29779b73c5a77b09b35376609beb657bc3f152aa4f3d4284b69b8540b0813f53197ee938ca63bb09a333ba38c76e3a89b64594bce2c53e", 0x41}, {&(0x7f000000bdc0)="7fb02d291f97c5adf5b239ba1c3252bd65c7d0b7b861d645d234b6477fa2de812627679e5f98fd05c973687fc2e9d49ac2853eee274194511b58639d09bc62b398eb03863b829309dcf1204d8b", 0x4d}, {&(0x7f000000be40)="5df995d372765f039aec8dcbeea3d8b7a72fbd9c2d5026974ac190b505835655d415f0b24f8f2a659ec2b8f973c5957fd4661424b5aa8a0f423f5a2d02d80d0035c2ff1c14023aa4eda63d224e4530e02d1bb9f12f80114db79836da4cb8d4016f5d244ea3d91c79fe0c3261a8b59ae46bef26afe226934bef34e743be4b60d5e97b29ab7dca6642db9f99079a129d5b3c7da90bfdfbd7473b4da6881d1c7cc4d01a", 0xa2}], 0x6, &(0x7f000000bf80)=[@rights={{0x18, 0x1, 0x1, [r0, r7]}}], 0x18}}], 0x7, 0x20008820) 887.464666ms ago: executing program 1 (id=2354): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900010000000000feffffffffffffff00004ec38794c100000000000000000000ff02000000000000000000000000000100000008000000000a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x5813f000) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0020a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000001e000a0017a5189dfaad985a5df9db59e6ed6f2be919d90369e552752f7c74a079d559078e949587"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x15, 0x200, &(0x7f0000000880)="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"}) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 744.305775ms ago: executing program 0 (id=2355): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff02000000000000fddd0000000000014f194e20"], 0xfdef) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) 705.253608ms ago: executing program 3 (id=2356): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000000000000a000040000000030000000008000a0003"], 0x2c}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0xb7, 0x0) r2 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = dup(0xffffffffffffffff) read(r3, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f046}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000400)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0x7, 0x2, 0x642, 0x3b]}, &(0x7f0000000280)=0x78) mq_timedreceive(r2, &(0x7f0000000140)=""/140, 0x8c, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x400103, 0x0) mmap$IORING_OFF_SQES(&(0x7f00003d4000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r5, 0x10000000) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000040)) r7 = socket$inet6(0xa, 0x800, 0x2ea2) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x94653058}, @in6={0xa, 0x4e24, 0x4, @local}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xfb8}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa7e0}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x3, 0x0}}], 0xb0) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x4200) ioctl$CEC_ADAP_G_LOG_ADDRS(r10, 0x805c6103, &(0x7f00000004c0)) 569.664111ms ago: executing program 1 (id=2357): socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000"]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e20, 0x4000b, @mcast2, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001a80)={'macvlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000200)="050316", 0x3, 0x4, &(0x7f0000000180)={0x11, 0x86dd, r7, 0x1, 0x6}, 0x14) sendmmsg$inet6(r4, &(0x7f0000003880)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400e02d000000002900000032000000fc00000000000000000000000000000023e5d88fcc6832c1f30917c78c0d0b58f2e978ac9a0f91d4ad73e7ca4fe6c55d1fb523d331cb2f4cd6767f4bbc4e3d69c66757fe2a8f3bff18e796863e7c5b1d5dbeb8e90aa6fd4165a038c496d33d91dde990590e49d79daa", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000038c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x4, r8, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x150, 0x24, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x8, 0x9}, {0x1, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa0, 0x4, 0xfff, 0x2c6, 0x2, 0xd, 0x5, 0x5}}, {0xe, 0x2, [0xaa, 0x3, 0xfffb, 0x8, 0x5]}}, {{0x1c, 0x1, {0x0, 0x9, 0x800, 0x7f, 0x0, 0x46, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x1, 0x2ec0, 0x5, 0x2, 0x8001, 0x1, 0x2}}, {0x8, 0x2, [0x6ab, 0x2]}}, {{0x1c, 0x1, {0x1, 0xb, 0x4, 0xe3f, 0x1, 0x18, 0x5, 0x6}}, {0x10, 0x2, [0x40, 0xff, 0x8000, 0x4, 0x271, 0x2]}}, {{0x1c, 0x1, {0x31, 0x2, 0x2, 0x2, 0x2, 0x8, 0x80, 0x6}}, {0x10, 0x2, [0x8, 0x5, 0x7f, 0x7fff, 0x36, 0x6]}}, {{0x1c, 0x1, {0x0, 0xc0, 0x69, 0x10001, 0x0, 0xff, 0x5, 0x6}}, {0x10, 0x2, [0x10, 0x9, 0x100, 0x7, 0x1, 0x7f]}}, {{0x1c, 0x1, {0x1, 0x0, 0xfff7, 0xffffffff, 0x2, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0x1, 0xfffb, 0x3]}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x10) fcntl$addseals(r10, 0x409, 0x12) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) dup(r11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r12 = getpid() sched_setscheduler(r12, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r13, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) 411.413106ms ago: executing program 4 (id=2358): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x40, 0xc1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x20, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xd, 0x6, 0xf, {0xa, 0x25, 0x25, 0x5, 0xd4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x80, 0x3, 0x3, {0xa, 0x25, 0x25, 0x822, 0x80, 0x9}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 347.630896ms ago: executing program 0 (id=2359): r0 = socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x62, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/1324], 0x520}}], 0x1, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r8, 0x0, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(cast6))\x00'}, 0x58) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 92.911603ms ago: executing program 2 (id=2360): r0 = io_uring_setup(0x403f, &(0x7f00000003c0)={0x0, 0x9358, 0x0, 0x3, 0x211}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000700)=""/69, 0x45}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000001940)=""/99, 0x63}], 0x7) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfe}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000008000d00fe800000000000000200000000000000"], 0x20}, 0x41) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) getpeername$netrom(r3, &(0x7f0000001a40)={{}, [@remote, @netrom, @netrom, @rose, @default, @rose, @default, @bcast]}, &(0x7f0000000040)=0x48) fadvise64(r4, 0x6, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 0s ago: executing program 0 (id=2361): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(0x0, 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x56, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffe, {0x1, 0xff}}, 0x18) recvfrom(r0, &(0x7f0000000100)=""/133, 0x85, 0x40000020, &(0x7f0000000240)=@ax25={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x80) sendmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000040)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0xf5) kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 616.048299][ T5888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 616.164534][ T5888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 616.199440][ T29] audit: type=1326 audit(2000000016.720:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 616.223571][ T5888] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 616.310925][ T5888] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 616.369880][ T5888] usb 2-1: USB disconnect, device number 54 [ 616.385096][ T29] audit: type=1326 audit(2000000016.720:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 616.458322][ T29] audit: type=1326 audit(2000000016.720:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 616.544158][ T29] audit: type=1326 audit(2000000016.720:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13293 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 617.496019][T13339] xt_hashlimit: size too large, truncated to 1048576 [ 618.968115][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.979142][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.000305][ C1] caif:cffrml_receive(): Frame checksum error (0x0 != 0xb860) [ 619.035734][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 619.055587][ T6874] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 619.429818][T13357] hsr_slave_0: left promiscuous mode [ 619.468048][ T6874] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 619.508988][T13357] hsr_slave_1: left promiscuous mode [ 619.529181][ T6874] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 619.583285][ T6874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.648436][ T6874] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 620.061603][T13371] syzkaller0: entered promiscuous mode [ 620.067302][T13371] syzkaller0: entered allmulticast mode [ 620.152600][T13373] fuse: Unknown parameter 'group_i00000000000000000000' [ 620.246818][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 620.246841][ T29] audit: type=1326 audit(2000000022.280:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 620.280125][T13374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.293768][T13374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.347094][ T29] audit: type=1326 audit(2000000022.280:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 620.668719][ T29] audit: type=1326 audit(2000000022.280:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 620.790076][ T6874] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 620.790135][ T29] audit: type=1326 audit(2000000022.280:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 620.805895][ T6874] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 620.822069][ T5888] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 621.930079][ T29] audit: type=1326 audit(2000000022.280:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 621.956674][ T29] audit: type=1326 audit(2000000022.280:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 621.957909][ T6874] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 622.135612][ T29] audit: type=1326 audit(2000000022.280:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 622.160566][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 622.173450][ T29] audit: type=1326 audit(2000000022.290:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 622.201199][ T5888] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 622.212362][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.225026][ T6874] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 622.225614][ T5888] usb 5-1: Product: syz [ 622.234076][T13394] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 622.254599][ T5888] usb 5-1: Manufacturer: syz [ 622.274647][ T29] audit: type=1326 audit(2000000022.290:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 622.305539][ T5888] usb 5-1: SerialNumber: syz [ 622.329203][ T5888] usb 5-1: config 0 descriptor?? [ 622.335011][ T6874] usb 1-1: USB disconnect, device number 51 [ 622.368811][ T5888] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 622.378074][ T29] audit: type=1326 audit(2000000022.290:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 622.528980][ T5859] libceph: connect (1)[c::]:6789 error -22 [ 622.535058][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 622.569460][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.578544][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.598607][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.620181][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.638320][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1843'. [ 622.649692][T13413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13413 comm=syz.1.1843 [ 622.656663][ T5888] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 622.685269][ T5888] visor 5-1:0.0: probe with driver visor failed with error -5 [ 622.695307][T13413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13413 comm=syz.1.1843 [ 622.733857][T13412] bond2: entered promiscuous mode [ 622.745595][T13412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.870830][T13420] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 622.887255][ T5859] libceph: connect (1)[c::]:6789 error -22 [ 622.893206][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 622.911864][ T5859] usb 5-1: USB disconnect, device number 40 [ 622.917919][ T5888] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 623.086254][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 623.096611][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.125443][ T5880] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 623.136777][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 623.150514][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 623.161977][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 623.172536][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.182627][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.192738][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 623.214362][ T5888] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 623.229248][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.237583][ T5888] usb 4-1: Product: syz [ 623.241954][ T5888] usb 4-1: Manufacturer: syz [ 623.249176][ T5888] usb 4-1: SerialNumber: syz [ 623.271096][ T5888] usb 4-1: config 0 descriptor?? [ 623.295443][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 623.302723][T13415] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 623.314645][ T5880] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 623.334666][ T5888] iuu_phoenix 4-1:0.0: iuu_phoenix converter detected [ 623.347537][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 623.362892][ T5880] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 623.384199][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.398281][ T5888] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 623.406837][ T5859] libceph: connect (1)[c::]:6789 error -22 [ 623.413738][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 623.422779][ T5880] usb 2-1: Product: syz [ 623.461395][ T5880] usb 2-1: Manufacturer: syz [ 623.485677][ T5880] usb 2-1: SerialNumber: syz [ 623.561371][ T5880] usb 2-1: config 0 descriptor?? [ 623.909031][ T5880] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 624.206580][T13437] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 624.536985][ T5880] rc_core: IR keymap rc-imon-pad not found [ 624.542915][ T5880] Registered IR keymap rc-empty [ 624.548005][T13441] mkiss: ax0: crc mode is auto. [ 624.551683][ T5880] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 624.584936][ T5880] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 624.716126][ T5888] libceph: connect (1)[c::]:6789 error -22 [ 624.722709][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 624.886950][ T5880] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 624.899132][ T5880] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50 [ 625.041534][T13445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1851'. [ 625.043722][ T5880] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:55> initialized [ 625.097060][T13445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1851'. [ 625.208453][T13451] fuse: Unknown parameter 'group_id00000000000000000000' [ 625.387960][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 625.387975][ T29] audit: type=1326 audit(2000000027.450:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 625.514495][T13401] ceph: No mds server is up or the cluster is laggy [ 625.564552][ T29] audit: type=1326 audit(2000000027.490:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 625.598960][ T5880] libceph: connect (1)[c::]:6789 error -22 [ 625.621980][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 625.670973][ T5880] usb 4-1: USB disconnect, device number 80 [ 625.721335][ T5880] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 625.754977][ T5880] iuu_phoenix 4-1:0.0: device disconnected [ 625.805682][ T29] audit: type=1326 audit(2000000027.490:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 625.973628][ T29] audit: type=1326 audit(2000000027.490:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 626.005408][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 626.098309][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 626.116086][ T5880] usb 2-1: USB disconnect, device number 55 [ 626.258748][ T29] audit: type=1326 audit(2000000027.490:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 626.283366][ T29] audit: type=1326 audit(2000000027.490:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 626.425759][T13471] trusted_key: encrypted_key: insufficient parameters specified [ 626.435457][T13471] trusted_key: encrypted_key: insufficient parameters specified [ 626.742857][ T29] audit: type=1326 audit(2000000027.490:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 626.766479][ T29] audit: type=1326 audit(2000000027.490:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 626.888330][ T29] audit: type=1326 audit(2000000027.490:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 627.028223][ T29] audit: type=1326 audit(2000000027.490:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.2.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 627.835174][T13472] [U] ø [ 628.170742][T13483] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1861'. [ 628.318643][T13485] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 628.374922][ T794] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 628.572068][ T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.611410][T13495] netlink: 'syz.1.1864': attribute type 7 has an invalid length. [ 628.619380][ T794] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.675710][T13497] netlink: 'syz.3.1863': attribute type 4 has an invalid length. [ 628.716013][T13497] affs: No valid root block on device nullb0 [ 628.946363][T12991] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.030285][ T794] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 630.078883][T13500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1866'. [ 630.096093][T12991] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.100230][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.109375][T12991] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.126160][ T794] usb 1-1: Product: syz [ 630.132066][ T794] usb 1-1: Manufacturer: syz [ 630.136688][ T794] usb 1-1: SerialNumber: syz [ 630.152422][ T794] usb 1-1: config 0 descriptor?? [ 630.156224][T12991] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.366786][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 630.366803][ T29] audit: type=1400 audit(2000000800.637:1477): avc: denied { watch } for pid=13506 comm="syz.1.1870" path="/372/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 630.417299][ T794] usb 1-1: USB disconnect, device number 52 [ 631.079707][T13518] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 631.490875][T13518] affs: No valid root block on device nullb0 [ 634.754489][T13539] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1877'. [ 635.998024][T13551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1882'. [ 636.007732][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 636.394510][ T5866] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 636.533961][T13563] fuse: Unknown parameter 'group_id00000000000000000000' [ 636.699370][ T29] audit: type=1326 audit(2000000807.273:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 636.723886][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.737719][ T5866] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 636.757268][ T5866] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 636.767650][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.777546][ T29] audit: type=1326 audit(2000000807.273:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 636.801299][ T5866] usb 3-1: Product: syz [ 636.807463][ T5866] usb 3-1: Manufacturer: syz [ 636.815826][ T5866] usb 3-1: SerialNumber: syz [ 636.841359][ T5866] usb 3-1: config 0 descriptor?? [ 636.848688][ T29] audit: type=1326 audit(2000000807.273:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 636.918143][ T29] audit: type=1326 audit(2000000807.273:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 636.947947][ T29] audit: type=1326 audit(2000000807.273:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 636.997502][ T29] audit: type=1326 audit(2000000807.273:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 637.075622][ T5888] usb 3-1: USB disconnect, device number 45 [ 637.080795][ T29] audit: type=1326 audit(2000000807.273:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 637.107840][ T29] audit: type=1326 audit(2000000807.273:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 637.137662][ T29] audit: type=1326 audit(2000000807.273:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 637.176079][ T29] audit: type=1326 audit(2000000807.273:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13557 comm="syz.3.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb46df9c799 code=0x7ffc0000 [ 637.270446][T13569] bond3: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 637.279246][T13569] bond3: entered allmulticast mode [ 637.287398][T13569] bond3: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 640.219710][T13608] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1899'. [ 640.362155][T13612] fuse: Unknown parameter 'group_id00000000000000000000' [ 641.579252][ T5866] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 641.604138][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 641.604152][ T29] audit: type=1326 audit(2000000811.294:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.636829][ T29] audit: type=1326 audit(2000000811.294:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.660372][ T29] audit: type=1326 audit(2000000811.294:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.683910][ T29] audit: type=1326 audit(2000000811.294:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.707683][ T29] audit: type=1326 audit(2000000811.294:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.731174][ T29] audit: type=1326 audit(2000000811.294:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.754664][ T29] audit: type=1326 audit(2000000811.294:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.778152][ T29] audit: type=1326 audit(2000000811.294:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.801556][ T29] audit: type=1326 audit(2000000811.294:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 641.825037][ T29] audit: type=1326 audit(2000000811.294:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fe88db9c799 code=0x7ffc0000 [ 642.154370][T13622] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 642.183920][T13622] affs: No valid root block on device nullb0 [ 642.274060][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.499276][ T5866] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 642.580626][ T5866] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 642.593887][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.619364][ T5866] usb 4-1: Product: syz [ 642.639060][ T5866] usb 4-1: Manufacturer: syz [ 642.656720][ T5866] usb 4-1: SerialNumber: syz [ 642.694387][ T5866] usb 4-1: config 0 descriptor?? [ 642.912032][ T5888] usb 4-1: USB disconnect, device number 81 [ 644.506414][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 644.883624][T13648] overlayfs: workdir and upperdir must reside under the same mount [ 644.957928][T13649] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 645.404577][T13653] netlink: 'syz.3.1908': attribute type 40 has an invalid length. [ 645.454295][T13653] xt_hashlimit: size too large, truncated to 1048576 [ 646.802119][T13686] netlink: 'syz.4.1916': attribute type 4 has an invalid length. [ 646.827898][T13686] affs: No valid root block on device nullb0 [ 647.586314][T13697] xt_hashlimit: size too large, truncated to 1048576 [ 647.709221][ T5888] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 648.063075][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.086841][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.098597][ T5888] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 648.138385][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.156616][ T5888] usb 2-1: Product: syz [ 648.166839][ T5888] usb 2-1: Manufacturer: syz [ 648.171476][ T5888] usb 2-1: SerialNumber: syz [ 648.188546][T13708] overlayfs: workdir and upperdir must reside under the same mount [ 648.191013][ T5888] usb 2-1: config 0 descriptor?? [ 648.237446][T13709] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 648.315446][T13711] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1923'. [ 648.398515][ T5888] usb 2-1: USB disconnect, device number 56 [ 649.177026][ T6874] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 649.216319][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 649.216334][ T29] audit: type=1400 audit(2000000820.407:1513): avc: denied { read } for pid=13724 comm="syz.1.1928" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 649.462407][ T6874] usb 3-1: Using ep0 maxpacket: 32 [ 649.469052][ T6874] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 649.480749][ T6874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.917081][ T5866] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 649.943563][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 649.988269][ T6874] usb 3-1: config 0 descriptor?? [ 650.091645][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 650.105675][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.138034][ T5866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 650.224299][ T6874] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 650.226395][T13740] FAULT_INJECTION: forcing a failure. [ 650.226395][T13740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.303602][T13740] CPU: 1 UID: 0 PID: 13740 Comm: syz.4.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.303636][T13740] Tainted: [L]=SOFTLOCKUP [ 650.303642][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.303654][T13740] Call Trace: [ 650.303660][T13740] [ 650.303671][T13740] dump_stack_lvl+0x100/0x190 [ 650.303709][T13740] should_fail_ex.cold+0x5/0xa [ 650.303734][T13740] _copy_from_iter+0x1f4/0x1690 [ 650.303765][T13740] ? __asan_memset+0x23/0x50 [ 650.303790][T13740] ? __pfx__copy_from_iter+0x10/0x10 [ 650.303815][T13740] ? __pfx___alloc_skb+0x10/0x10 [ 650.303844][T13740] netlink_sendmsg+0x808/0xda0 [ 650.303871][T13740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.303887][T13740] ? __pfx___might_fault+0x10/0x10 [ 650.303916][T13740] ____sys_sendmsg+0x9e1/0xb70 [ 650.303935][T13740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.303956][T13740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.303985][T13740] ___sys_sendmsg+0x190/0x1e0 [ 650.304008][T13740] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.304057][T13740] __sys_sendmsg+0x170/0x220 [ 650.304077][T13740] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.304106][T13740] do_syscall_64+0x106/0xf80 [ 650.304125][T13740] ? clear_bhb_loop+0x40/0x90 [ 650.304145][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.304163][T13740] RIP: 0033:0x7fed0399c799 [ 650.304179][T13740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.304196][T13740] RSP: 002b:00007fed048ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.304216][T13740] RAX: ffffffffffffffda RBX: 00007fed03c15fa0 RCX: 00007fed0399c799 [ 650.304227][T13740] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 650.304237][T13740] RBP: 00007fed048ea090 R08: 0000000000000000 R09: 0000000000000000 [ 650.304248][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.304274][T13740] R13: 00007fed03c16038 R14: 00007fed03c15fa0 R15: 00007ffd867c7d48 [ 650.304298][T13740] [ 650.514508][ T6874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.586925][ T6874] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 650.594141][ T6874] usb 3-1: media controller created [ 650.610197][ T6874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.619166][ T5866] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 650.628249][ T5866] usb 2-1: New USB device strings: Mfr=245, Product=2, SerialNumber=3 [ 650.636501][ T5866] usb 2-1: Product: syz [ 650.640674][ T5866] usb 2-1: Manufacturer: syz [ 650.645409][ T5866] usb 2-1: SerialNumber: syz [ 650.659208][ T5866] r8152-cfgselector 2-1: Unknown version 0x0000 [ 650.665547][ T5866] r8152-cfgselector 2-1: config 0 descriptor?? [ 651.815184][T13752] xt_hashlimit: size too large, truncated to 1048576 [ 652.008442][ T5880] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 652.207237][ T5880] usb 4-1: not running at top speed; connect to a high speed hub [ 652.222894][ T5880] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 652.233650][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.241904][ T5880] usb 4-1: Product: syz [ 652.294669][ T5880] usb 4-1: Manufacturer: syz [ 652.310769][ T5880] usb 4-1: SerialNumber: syz [ 652.558491][ T29] audit: type=1400 audit(2000000823.946:1514): avc: denied { listen } for pid=13745 comm="syz.3.1932" lport=47254 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 652.595575][ T6874] az6027: usb out operation failed. (-110) [ 652.602503][ T6874] az6027: usb out operation failed. (-32) [ 652.625109][ T6874] stb0899_attach: Driver disabled by Kconfig [ 652.632766][ T6874] az6027: no front-end attached [ 652.632766][ T6874] [ 652.820934][T13756] macsec0: entered promiscuous mode [ 652.957689][ T6874] az6027: usb out operation failed. (-71) [ 652.974880][ T6874] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 652.982965][ T5866] r8152-cfgselector 2-1: USB disconnect, device number 57 [ 653.051943][ T6874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 653.501442][ T6874] dvb-usb: schedule remote query interval to 400 msecs. [ 653.514555][ T6874] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 653.527996][ T6874] usb 3-1: USB disconnect, device number 46 [ 653.596039][T13769] 9pnet_virtio: no channels available for device ./bus [ 654.176467][ T5866] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 654.228040][ T6874] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 654.330370][ T5866] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 654.343298][ T5866] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 654.475561][ T5866] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 654.510963][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.517941][ T5880] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22 [ 654.523493][ T5866] usb 2-1: Product: syz [ 654.648628][ T5880] usb 4-1: USB disconnect, device number 82 [ 654.927556][ T5866] usb 2-1: Manufacturer: syz [ 654.932287][ T5866] usb 2-1: SerialNumber: syz [ 654.946147][ T5866] rndis_host 2-1:7.0: skipping garbage [ 654.959548][ T5866] usb 2-1: bad CDC descriptors [ 654.975642][ T5866] option 2-1:7.0: GSM modem (1-port) converter detected [ 654.999779][ T29] audit: type=1400 audit(2000000826.497:1515): avc: denied { map } for pid=13772 comm="syz.0.1940" path="socket:[39321]" dev="sockfs" ino=39321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 655.057726][ T29] audit: type=1400 audit(2000000826.497:1516): avc: denied { read } for pid=13772 comm="syz.0.1940" path="socket:[39321]" dev="sockfs" ino=39321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 655.327017][T13796] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 655.566667][T13790] ipip1: entered promiscuous mode [ 655.571871][T13790] ipip1: entered allmulticast mode [ 655.580999][T13791] lo speed is unknown, defaulting to 1000 [ 655.586960][T13791] lo speed is unknown, defaulting to 1000 [ 655.593319][T13791] lo speed is unknown, defaulting to 1000 [ 655.607286][T13791] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 655.629912][T13791] lo speed is unknown, defaulting to 1000 [ 655.636539][T13791] lo speed is unknown, defaulting to 1000 [ 655.643066][T13791] lo speed is unknown, defaulting to 1000 [ 655.650201][T13791] lo speed is unknown, defaulting to 1000 [ 655.656839][T13791] lo speed is unknown, defaulting to 1000 [ 655.830596][ T29] audit: type=1800 audit(2000000827.368:1517): pid=13801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1944" name="file0" dev="tmpfs" ino=2138 res=0 errno=0 [ 656.140911][ T5880] usb 2-1: USB disconnect, device number 58 [ 656.147567][ T5880] option 2-1:7.0: device disconnected [ 656.194738][ T29] audit: type=1400 audit(2000000827.757:1518): avc: denied { write } for pid=13806 comm="syz.4.1945" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 656.260510][ T29] audit: type=1400 audit(2000000827.757:1519): avc: denied { open } for pid=13806 comm="syz.4.1945" path="/438/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 656.319972][ T29] audit: type=1400 audit(2000000827.778:1520): avc: denied { ioctl } for pid=13806 comm="syz.4.1945" path="/438/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 656.509264][T13812] xt_hashlimit: size too large, truncated to 1048576 [ 656.657186][ T29] audit: type=1400 audit(2000000828.240:1521): avc: denied { connect } for pid=13817 comm="syz.2.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 656.788575][ T5866] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 656.877729][ T29] audit: type=1400 audit(2000000828.471:1522): avc: denied { ioctl } for pid=13830 comm="syz.1.1952" path="socket:[38867]" dev="sockfs" ino=38867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 656.951987][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.964167][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.988453][ T5866] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 657.008608][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.038801][ T5866] usb 3-1: config 0 descriptor?? [ 657.408765][ T6874] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 657.592545][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 657.602479][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 657.627616][ T5866] usb 3-1: USB disconnect, device number 47 [ 657.729554][ T6874] usb 2-1: device descriptor read/64, error -71 [ 657.977125][ T6874] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 658.119957][ T6874] usb 2-1: device descriptor read/64, error -71 [ 658.224722][ T6874] usb usb2-port1: attempt power cycle [ 658.285227][T13865] netlink: 'syz.3.1957': attribute type 4 has an invalid length. [ 658.309712][T13865] affs: No valid root block on device nullb0 [ 658.807986][ T29] audit: type=1400 audit(2000000830.497:1523): avc: denied { connect } for pid=13872 comm="syz.0.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 659.034236][ T6874] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 659.197202][ T6874] usb 2-1: device descriptor read/8, error -71 [ 659.453813][ T6874] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 659.474394][ T6874] usb 2-1: device descriptor read/8, error -71 [ 659.577645][ T6874] usb usb2-port1: unable to enumerate USB device [ 661.680789][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 662.210955][ T6874] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 662.301659][T13939] sctp: [Deprecated]: syz.4.1973 (pid 13939) Use of int in max_burst socket option deprecated. [ 662.301659][T13939] Use struct sctp_assoc_value instead [ 662.365486][ T6874] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.376167][ T6874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.384438][ T6874] usb 4-1: Product: syz [ 662.389419][ T6874] usb 4-1: Manufacturer: syz [ 662.394605][ T6874] usb 4-1: SerialNumber: syz [ 662.508587][T13945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.575231][ T29] audit: type=1400 audit(2000000835.505:1524): avc: denied { watch } for pid=13954 comm="syz.2.1978" path="/" dev="hugetlbfs" ino=40132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 663.608415][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 663.694843][ T29] audit: type=1400 audit(2000000835.505:1525): avc: denied { watch_sb watch_reads } for pid=13954 comm="syz.2.1978" path="/" dev="hugetlbfs" ino=40132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 663.910569][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 663.980021][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 664.261049][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.281735][ T6874] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 664.288493][ T6874] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 664.295657][ T24] usb 2-1: config 0 has no interface number 0 [ 664.307280][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 664.337314][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.365301][ T24] usb 2-1: Product: syz [ 664.381961][ T24] usb 2-1: Manufacturer: syz [ 664.396660][ T24] usb 2-1: SerialNumber: syz [ 664.434643][ T24] usb 2-1: config 0 descriptor?? [ 664.457395][ T24] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 664.466520][ T24] uvcvideo 2-1:0.105: No valid video chain found. [ 664.529113][ T6874] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 664.650819][ T6874] usb 2-1: USB disconnect, device number 63 [ 664.920649][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 665.002145][T13953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13953 comm=syz.1.1977 [ 665.047805][ T6874] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 665.075347][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 665.090940][ T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 665.171253][ T24] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 665.183734][ T24] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.195196][ T24] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 665.213606][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 665.224289][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.232637][ T24] usb 3-1: Product: syz [ 665.238555][ T24] usb 3-1: Manufacturer: syz [ 665.257061][ T24] usb 3-1: SerialNumber: syz [ 665.281400][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 665.293891][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input52 [ 665.316635][ T6874] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 665.327180][ T6874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.336911][ T6874] usb 5-1: Product: syz [ 665.341532][ T6874] usb 5-1: Manufacturer: syz [ 665.346275][ T6874] usb 5-1: SerialNumber: syz [ 665.370930][ T6874] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 665.436146][ T29] audit: type=1400 audit(2000000837.458:1526): avc: denied { firmware_load } for pid=794 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 665.479686][ T794] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 665.488862][ T24] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 665.502703][ T24] (id 0x00) [ 665.577478][ T24] rc_core: IR keymap rc-imon-pad not found [ 665.595033][ T24] Registered IR keymap rc-empty [ 665.603704][ T24] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 665.634919][ T24] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 665.674724][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 665.705590][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input53 [ 665.735727][ T24] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:48> initialized [ 665.876031][ T5880] usb 3-1: USB disconnect, device number 48 [ 666.077702][ T5888] usb 5-1: USB disconnect, device number 41 [ 666.086194][ T24] usb 4-1: USB disconnect, device number 83 [ 666.092990][ T24] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 666.111097][ T3092] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 666.291925][ T3092] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 666.303958][ T3092] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.335761][ T3092] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 666.355359][ T3092] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.389804][ T3092] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 666.403939][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 666.422378][ T3092] usb 2-1: Product: syz [ 666.432326][ T3092] usb 2-1: Manufacturer: syz [ 666.463091][ T794] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 666.468306][ T3092] cdc_wdm 2-1:1.0: skipping garbage [ 666.482809][ T794] ath9k_htc: Failed to initialize the device [ 666.491901][ T5888] usb 5-1: ath9k_htc: USB layer deinitialized [ 666.508261][ T3092] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 666.568588][ T29] audit: type=1400 audit(2000000838.645:1527): avc: denied { write } for pid=14015 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 666.768221][ T3092] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 666.941654][ T3092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.955279][ T3092] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 666.965180][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.986852][ T3092] usb 1-1: config 0 descriptor?? [ 667.015601][ T5888] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 667.259602][ T5888] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 667.270266][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.315695][ T24] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 667.324500][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.333774][ T5888] usb 3-1: config 0 descriptor?? [ 667.355151][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.394088][ T3092] usbhid 1-1:0.0: can't add hid device: -71 [ 667.412084][ T3092] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 667.428872][ T3092] usb 1-1: USB disconnect, device number 53 [ 667.472697][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 667.479303][ T24] usb 4-1: config 7 has an invalid interface number: 223 but max is 1 [ 667.502221][ T24] usb 4-1: config 7 has an invalid interface number: 92 but max is 1 [ 667.516935][ T24] usb 4-1: config 7 has an invalid interface number: 91 but max is 1 [ 667.525900][ T24] usb 4-1: config 7 has 3 interfaces, different from the descriptor's value: 2 [ 667.537326][ T24] usb 4-1: config 7 has no interface number 0 [ 667.544801][ T24] usb 4-1: config 7 has no interface number 1 [ 667.686225][ T24] usb 4-1: config 7 has no interface number 2 [ 667.692562][ T24] usb 4-1: config 7 interface 223 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 667.716498][ T24] usb 4-1: config 7 interface 92 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 667.844207][ T3092] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 667.960442][ T5888] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 667.995324][ T24] usb 4-1: config 7 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 668.006549][ T24] usb 4-1: config 7 interface 92 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 668.035844][ T24] usb 4-1: config 7 interface 92 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 668.052310][ T3092] usb 1-1: Using ep0 maxpacket: 8 [ 668.073316][ T24] usb 4-1: config 7 interface 91 altsetting 113 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 668.113426][ T24] usb 4-1: config 7 interface 223 has no altsetting 0 [ 668.122457][T14058] wg1: entered promiscuous mode [ 668.127434][T14058] wg1: entered allmulticast mode [ 668.164801][ T24] usb 4-1: config 7 interface 91 has no altsetting 0 [ 668.237460][ T24] usb 4-1: New USB device found, idVendor=1608, idProduct=0240, bcdDevice=2c.ad [ 668.273457][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.335354][ T24] usb 4-1: Product: Ð [ 668.448133][ T24] usb 4-1: SerialNumber: 쫠㵶㟠綥빻àºî»‰ë¾ºí‡‘ʻ⽠[ 669.465147][ T5888] hackrf 3-1:0.0: Could not detect board [ 669.475239][ T3092] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.487157][ T5888] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 669.753974][ T3092] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 669.765789][ T5888] usb 3-1: USB disconnect, device number 49 [ 669.771825][ T3092] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 669.791597][ T3092] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.804962][ T3092] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 669.874054][ T24] io_ti 4-1:7.223: required endpoints missing [ 669.882630][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.883669][ T24] io_ti 4-1:7.92: required endpoints missing [ 669.910362][ T24] io_ti 4-1:7.91: required endpoints missing [ 669.943478][ T24] usb 4-1: USB disconnect, device number 84 [ 670.017066][T14066] ovl_get_inode: 3 callbacks suppressed [ 670.017076][T14066] overlayfs: failed to get inode (-116) [ 670.046887][ T794] usb 2-1: USB disconnect, device number 64 [ 670.075530][T14066] overlayfs: failed to get inode (-116) [ 670.216711][T14076] FAULT_INJECTION: forcing a failure. [ 670.216711][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 670.235307][ T3092] usb 1-1: GET_CAPABILITIES returned 0 [ 670.241297][ T3092] usbtmc 1-1:16.0: can't read capabilities [ 670.269285][T14066] overlayfs: failed to get inode (-116) [ 670.293412][T14066] overlayfs: failed to get inode (-116) [ 670.474379][T14085] overlayfs: failed to get inode (-116) [ 670.565067][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.575120][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.584934][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.596114][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.605207][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.620872][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.637584][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.647650][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.657671][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.667799][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.677547][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.687613][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.697418][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.707412][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.718682][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.745050][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 670.819632][T14076] CPU: 0 UID: 0 PID: 14076 Comm: syz.2.1995 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.819663][T14076] Tainted: [L]=SOFTLOCKUP [ 670.819669][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.819680][T14076] Call Trace: [ 670.819686][T14076] [ 670.819694][T14076] dump_stack_lvl+0x100/0x190 [ 670.819728][T14076] should_fail_ex.cold+0x5/0xa [ 670.819751][T14076] should_failslab+0xc2/0x120 [ 670.819769][T14076] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 670.819794][T14076] ? do_getname+0x35/0x390 [ 670.819816][T14076] ? fput+0x79/0x100 [ 670.819840][T14076] do_getname+0x35/0x390 [ 670.819864][T14076] __x64_sys_mkdirat+0x78/0xc0 [ 670.819885][T14076] do_syscall_64+0x106/0xf80 [ 670.819905][T14076] ? clear_bhb_loop+0x40/0x90 [ 670.819927][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.819945][T14076] RIP: 0033:0x7fcb81b9c799 [ 670.819962][T14076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.819980][T14076] RSP: 002b:00007fcb82b1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 670.819998][T14076] RAX: ffffffffffffffda RBX: 00007fcb81e16090 RCX: 00007fcb81b9c799 [ 670.820010][T14076] RDX: 00000000000000c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 670.820022][T14076] RBP: 00007fcb82b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 670.820033][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.820044][T14076] R13: 00007fcb81e16128 R14: 00007fcb81e16090 R15: 00007ffdda93e6c8 [ 670.820069][T14076] [ 671.218515][ T3092] usb 1-1: USB disconnect, device number 54 [ 671.268558][T14085] overlayfs: failed to get inode (-116) [ 671.456684][T14078] wg2 speed is unknown, defaulting to 1000 [ 671.465651][T14078] lo speed is unknown, defaulting to 1000 [ 671.714284][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 671.888354][T14113] xt_hashlimit: size too large, truncated to 1048576 [ 671.931194][T14115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2005'. [ 671.956331][T14115] veth3: entered allmulticast mode [ 672.008938][T14119] loop5: detected capacity change from 0 to 7 [ 672.221050][T14119] Dev loop5: unable to read RDB block 7 [ 672.252087][T14119] loop5: unable to read partition table [ 672.273284][T14119] loop5: partition table beyond EOD, truncated [ 672.303281][T14119] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 672.320913][T10421] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 672.470329][T10421] usb 4-1: config 0 has no interfaces? [ 672.538948][T10421] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 673.294273][T10421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.307403][T10421] usb 4-1: Product: syz [ 673.311639][T10421] usb 4-1: Manufacturer: syz [ 673.316223][T10421] usb 4-1: SerialNumber: syz [ 673.323220][T10421] usb 4-1: config 0 descriptor?? [ 674.154195][T14154] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 674.287944][T14152] blk_print_req_error: 26 callbacks suppressed [ 674.287961][T14152] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 674.313605][T14152] buffer_io_error: 25 callbacks suppressed [ 674.313617][T14152] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 674.362304][T14119] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 674.372289][T14119] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 674.578441][ T5880] usb 4-1: USB disconnect, device number 85 [ 675.055265][T14167] FAULT_INJECTION: forcing a failure. [ 675.055265][T14167] name failslab, interval 1, probability 0, space 0, times 0 [ 675.071529][T14167] CPU: 0 UID: 0 PID: 14167 Comm: syz.2.2018 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.071559][T14167] Tainted: [L]=SOFTLOCKUP [ 675.071565][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 675.071574][T14167] Call Trace: [ 675.071581][T14167] [ 675.071587][T14167] dump_stack_lvl+0x100/0x190 [ 675.071618][T14167] should_fail_ex.cold+0x5/0xa [ 675.071640][T14167] should_failslab+0xc2/0x120 [ 675.071664][T14167] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 675.071687][T14167] ? __d_alloc+0x34/0xa80 [ 675.071713][T14167] __d_alloc+0x34/0xa80 [ 675.071734][T14167] d_alloc+0x4a/0x1e0 [ 675.071754][T14167] lookup_one_qstr_excl+0x175/0x250 [ 675.071775][T14167] ? mnt_want_write+0x161/0x450 [ 675.071801][T14167] filename_create+0x1cf/0x400 [ 675.071826][T14167] ? __pfx_filename_create+0x10/0x10 [ 675.071853][T14167] ? find_held_lock+0x2b/0x80 [ 675.071877][T14167] filename_mkdirat+0xb9/0x5e0 [ 675.071898][T14167] ? __pfx_filename_mkdirat+0x10/0x10 [ 675.071916][T14167] ? strncpy_from_user+0x19d/0x2d0 [ 675.071940][T14167] ? do_getname+0x191/0x390 [ 675.071962][T14167] __x64_sys_mkdirat+0x89/0xc0 [ 675.071980][T14167] do_syscall_64+0x106/0xf80 [ 675.071997][T14167] ? clear_bhb_loop+0x40/0x90 [ 675.072017][T14167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.072033][T14167] RIP: 0033:0x7fcb81b9c799 [ 675.072047][T14167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.072063][T14167] RSP: 002b:00007fcb82b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 675.072078][T14167] RAX: ffffffffffffffda RBX: 00007fcb81e15fa0 RCX: 00007fcb81b9c799 [ 675.072089][T14167] RDX: 0000000000000164 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 675.072099][T14167] RBP: 00007fcb82b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 675.072108][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.072117][T14167] R13: 00007fcb81e16038 R14: 00007fcb81e15fa0 R15: 00007ffdda93e6c8 [ 675.072142][T14167] [ 675.277489][T14171] affs: No valid root block on device nullb0 [ 675.403832][T14170] netlink: 'syz.0.2017': attribute type 4 has an invalid length. [ 675.511765][ T3092] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 675.556430][T14178] xt_hashlimit: size too large, truncated to 1048576 [ 675.658019][ T3092] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 675.667579][ T3092] usb 5-1: config 0 has no interface number 0 [ 675.680675][ T3092] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 675.718301][ T3092] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 675.721090][T10421] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 675.739089][ T3092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.779568][ T3092] usb 5-1: config 0 descriptor?? [ 675.801325][ T3092] ttusbir 5-1:0.83: cannot find expected altsetting [ 675.914189][T10421] usb 1-1: unable to get BOS descriptor or descriptor too short [ 675.923081][T10421] usb 1-1: not running at top speed; connect to a high speed hub [ 675.926802][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2024'. [ 675.933368][T10421] usb 1-1: config 1 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 675.968934][T10421] usb 1-1: config 1 interface 0 has no altsetting 0 [ 675.978159][ T24] usb 5-1: USB disconnect, device number 42 [ 676.008214][T10421] usb 1-1: New USB device found, idVendor=056a, idProduct=0011, bcdDevice= 0.40 [ 676.026279][T10421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.035751][T10421] usb 1-1: Product: syz [ 676.039932][T10421] usb 1-1: Manufacturer: 姧骒î¾ç‰­ë€‚ëŽì‘ êŠ†ëŽ¶ã¼›î•¼ê…ŸÒ¶å­²ä•®æ€‘蒸냃๘ìˆæ‹Ÿë£Ÿá¦©é”¨éŸ€ì‡¶â¨Ì¥éƒ”䠅켊裼놬껶〹é¤è†µè‡¢è”¨çµï›¯ï›æ¾ƒê†§ [ 676.162555][T10421] usb 1-1: SerialNumber: syz [ 676.174683][T14176] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 677.718573][T12994] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.758318][T12994] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 677.904490][T12994] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.910044][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 677.913557][T12994] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 677.920453][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 677.928728][T12994] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.936305][T14206] FAULT_INJECTION: forcing a failure. [ 677.936305][T14206] name failslab, interval 1, probability 0, space 0, times 0 [ 677.943810][T12994] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 677.993190][ C1] caif:cffrml_receive(): Frame checksum error (0x0 != 0xb860) [ 678.426728][T12994] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.444630][T12994] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 678.483002][T14206] CPU: 1 UID: 0 PID: 14206 Comm: syz.1.2029 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.483031][T14206] Tainted: [L]=SOFTLOCKUP [ 678.483043][T14206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.483053][T14206] Call Trace: [ 678.483061][T14206] [ 678.483068][T14206] dump_stack_lvl+0x100/0x190 [ 678.483100][T14206] should_fail_ex.cold+0x5/0xa [ 678.483123][T14206] ? tomoyo_realpath_from_path+0xb6/0x690 [ 678.483145][T14206] should_failslab+0xc2/0x120 [ 678.483163][T14206] __kmalloc_noprof+0xe0/0x850 [ 678.483192][T14206] tomoyo_realpath_from_path+0xb6/0x690 [ 678.483221][T14206] tomoyo_path_number_perm+0x23c/0x580 [ 678.483239][T14206] ? tomoyo_path_number_perm+0x22e/0x580 [ 678.483259][T14206] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 678.483286][T14206] ? d_splice_alias_ops+0x5be/0x1320 [ 678.483311][T14206] ? d_splice_alias_ops+0x5be/0x1320 [ 678.483347][T14206] ? kernfs_iop_lookup+0x234/0x2d0 [ 678.483363][T14206] ? kernfs_iop_lookup+0x234/0x2d0 [ 678.483380][T14206] ? current_check_access_path+0x281/0x460 [ 678.483410][T14206] ? __pfx_current_check_access_path+0x10/0x10 [ 678.483438][T14206] ? kernfs_iop_lookup+0x247/0x2d0 [ 678.483457][T14206] ? lookup_one_qstr_excl+0xb3/0x250 [ 678.483484][T14206] tomoyo_path_mkdir+0x9b/0xe0 [ 678.483509][T14206] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 678.483540][T14206] security_path_mkdir+0x154/0x2e0 [ 678.483567][T14206] filename_mkdirat+0x168/0x5e0 [ 678.483591][T14206] ? __pfx_filename_mkdirat+0x10/0x10 [ 678.483611][T14206] ? strncpy_from_user+0x19d/0x2d0 [ 678.483638][T14206] ? do_getname+0x191/0x390 [ 678.483663][T14206] __x64_sys_mkdirat+0x89/0xc0 [ 678.483682][T14206] do_syscall_64+0x106/0xf80 [ 678.483701][T14206] ? clear_bhb_loop+0x40/0x90 [ 678.483724][T14206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.483742][T14206] RIP: 0033:0x7fdfec19c799 [ 678.483758][T14206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.483775][T14206] RSP: 002b:00007fdfecffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 678.483792][T14206] RAX: ffffffffffffffda RBX: 00007fdfec415fa0 RCX: 00007fdfec19c799 [ 678.483803][T14206] RDX: 0000000000000164 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 678.483814][T14206] RBP: 00007fdfecffb090 R08: 0000000000000000 R09: 0000000000000000 [ 678.483824][T14206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.483835][T14206] R13: 00007fdfec416038 R14: 00007fdfec415fa0 R15: 00007ffd57912628 [ 678.483861][T14206] [ 678.483886][T14206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 678.769262][ T29] audit: type=1804 audit(2000000851.328:1528): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2030" name="bus" dev="ramfs" ino=40622 res=1 errno=0 [ 678.816467][T10421] usbhid 1-1:1.0: can't add hid device: -71 [ 678.822536][T10421] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 678.847698][T10421] usb 1-1: USB disconnect, device number 55 [ 679.307095][T14230] xt_hashlimit: size too large, truncated to 1048576 [ 679.778385][T10421] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 679.933426][T10421] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.953286][T14249] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2038'. [ 680.012301][T10421] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 680.166817][T10421] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 680.176676][T10421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.288797][T10421] usb 1-1: Product: syz [ 681.328349][T10421] usb 1-1: Manufacturer: syz [ 681.450478][T10421] usb 1-1: SerialNumber: syz [ 681.479935][T10421] usb 1-1: config 0 descriptor?? [ 681.773248][T10421] usb 1-1: USB disconnect, device number 56 [ 681.814083][T14283] tc_dump_action: action bad kind [ 682.063805][ T5880] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 682.101514][T14282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2041'. [ 682.455870][ T5880] usb 2-1: device descriptor read/64, error -71 [ 682.719491][T14294] qnx4: unable to read the superblock [ 682.993213][ T5880] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 683.644203][T14303] netlink: 'syz.2.2046': attribute type 4 has an invalid length. [ 683.999899][T14301] affs: No valid root block on device nullb0 [ 684.045404][ T5880] usb 2-1: device descriptor read/64, error -71 [ 684.370411][ T5880] usb usb2-port1: attempt power cycle [ 684.467049][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 684.810709][ T5880] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 684.879306][T14316] wg2 speed is unknown, defaulting to 1000 [ 684.892025][T14316] lo speed is unknown, defaulting to 1000 [ 684.921661][ T3092] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 685.017249][ T5880] usb 2-1: device not accepting address 67, error -71 [ 685.076507][ T3092] usb 4-1: unable to get BOS descriptor or descriptor too short [ 685.101861][ T3092] usb 4-1: config 255 has an invalid interface number: 202 but max is 0 [ 685.131609][ T3092] usb 4-1: config 255 has no interface number 0 [ 685.137929][ T3092] usb 4-1: config 255 interface 202 has no altsetting 0 [ 685.155800][ T3092] usb 4-1: string descriptor 0 read error: -22 [ 685.175129][ T3092] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=33.c7 [ 685.209372][ T3092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.250573][T14326] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2053'. [ 685.305291][ T3092] lan78xx 4-1:255.202 (unnamed net_device) (uninitialized): USB bus speed not supported [ 685.370264][ T3092] lan78xx 4-1:255.202: probe with driver lan78xx failed with error -5 [ 685.540633][T14309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.794408][T14338] tmpfs: Unknown parameter 'mpolbind:0' [ 686.408332][T14309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.464358][ T5880] usb 4-1: USB disconnect, device number 86 [ 687.007057][T14356] netlink: 'syz.0.2060': attribute type 4 has an invalid length. [ 687.569811][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 687.894797][T14360] syzkaller0: entered promiscuous mode [ 687.900330][T14360] syzkaller0: entered allmulticast mode [ 687.920917][T14360] tipc: Enabled bearer , priority 0 [ 688.031917][T14359] tipc: Resetting bearer [ 688.277658][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2066'. [ 688.612094][T14359] tipc: Disabling bearer [ 689.286658][T14392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2071'. [ 689.579229][T14395] Bluetooth: MGMT ver 1.23 [ 689.588790][T14396] netlink: 444 bytes leftover after parsing attributes in process `syz.3.2072'. [ 689.618615][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 689.920873][T14409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.985262][T14409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.018311][ T29] audit: type=1400 audit(2000000862.264:1529): avc: denied { shutdown } for pid=14410 comm="syz.3.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 690.056910][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 690.133013][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 690.428550][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 690.437029][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.437075][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 690.437097][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.444062][ T24] usb 3-1: config 0 descriptor?? [ 690.452863][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 690.664070][ T24] gspca_vc032x: reg_r err -71 [ 690.664136][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 690.665942][ T24] usb 3-1: USB disconnect, device number 51 [ 690.941866][T14429] netlink: 'syz.0.2080': attribute type 13 has an invalid length. [ 691.570239][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 691.799109][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 691.802584][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 691.802635][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 691.804804][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 691.804901][ T24] usb 1-1: can't read configurations, error -61 [ 691.941766][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 692.258431][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 692.260219][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 692.260258][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 692.264322][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 692.264355][ T24] usb 1-1: can't read configurations, error -61 [ 692.266033][ T24] usb usb1-port1: attempt power cycle [ 692.751694][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 692.771540][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 692.773186][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 692.773239][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 692.774458][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 692.774492][ T24] usb 1-1: can't read configurations, error -61 [ 692.913428][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 692.946991][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 692.966779][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 692.967051][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 692.972136][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 692.972230][ T24] usb 1-1: can't read configurations, error -61 [ 692.973479][ T24] usb usb1-port1: unable to enumerate USB device [ 694.511113][T14462] syzkaller0: entered promiscuous mode [ 694.511134][T14462] syzkaller0: entered allmulticast mode [ 694.878144][ T794] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 695.065610][T10421] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 695.677108][ T794] usb 2-1: Using ep0 maxpacket: 16 [ 695.745334][ T794] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 695.775324][ T794] usb 2-1: config 0 has no interface number 0 [ 695.805152][ T794] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 695.862939][ T794] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 695.986610][T10421] usb 5-1: config 7 has an invalid interface number: 41 but max is 1 [ 696.036116][T10421] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 696.122249][T10421] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 696.159406][ T794] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 696.209863][T10421] usb 5-1: config 7 has no interface number 0 [ 696.320074][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.330652][T10421] usb 5-1: config 7 interface 41 has no altsetting 0 [ 696.348062][ T794] usb 2-1: Product: syz [ 696.353594][ T794] usb 2-1: Manufacturer: syz [ 697.515560][ T794] usb 2-1: SerialNumber: syz [ 697.532698][ T794] usb 2-1: config 0 descriptor?? [ 697.548322][ T794] usb 2-1: can't set config #0, error -71 [ 697.560369][T10421] usb 5-1: string descriptor 0 read error: -71 [ 697.567253][T10421] usb 5-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=e7.f5 [ 697.577700][ T794] usb 2-1: USB disconnect, device number 69 [ 697.584797][T10421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.611517][T10421] usb 5-1: can't set config #7, error -71 [ 697.625930][T10421] usb 5-1: USB disconnect, device number 43 [ 698.629989][T14490] overlayfs: failed lookup in lower (newroot/404, name='file0', err=-40): overlapping layers [ 698.710424][T14490] overlayfs: failed lookup in lower (newroot/404, name='file0', err=-40): overlapping layers [ 698.721701][T14490] overlayfs: failed lookup in lower (newroot/404, name='file0', err=-40): overlapping layers [ 698.873383][T14501] overlayfs: failed lookup in lower (newroot/404, name='file0', err=-40): overlapping layers [ 698.904474][T14490] overlayfs: failed lookup in lower (newroot/404, name='file0', err=-40): overlapping layers [ 698.915855][T14494] overlayfs: failed lookup in lower (newroot/404, name='file0', err=-40): overlapping layers [ 699.191567][ T794] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 699.481508][T14531] binder: 14529:14531 ioctl 4018620d 0 returned -22 [ 699.856937][ T794] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 699.868671][ T794] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.878802][ T794] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 699.887948][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.091748][ T794] hub 4-1:4.0: USB hub found [ 700.167055][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 700.284014][ T794] hub 4-1:4.0: 2 ports detected [ 700.293843][ T794] usb 4-1: selecting invalid altsetting 1 [ 700.340313][ T794] hub 4-1:4.0: Using single TT (err -22) [ 701.369124][ T794] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 701.376081][ T794] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 701.701213][T14549] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 702.350603][T14554] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 702.776122][T14558] overlayfs: failed to get inode (-116) [ 702.782762][T14558] overlayfs: failed to get inode (-116) [ 702.926130][ T5859] usb 4-1: USB disconnect, device number 87 [ 703.074619][T14568] overlayfs: failed to get inode (-116) [ 703.083702][T14568] overlayfs: failed to get inode (-116) [ 703.091113][T14568] overlayfs: failed to get inode (-116) [ 703.101933][T14568] overlayfs: failed to get inode (-116) [ 703.108217][T14568] overlayfs: failed to get inode (-116) [ 704.465435][T14590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.416633][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 706.582242][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 706.945184][T14618] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2125'. [ 707.390883][T14579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.449931][ T5859] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 707.602791][ T5859] usb 3-1: device descriptor read/64, error -71 [ 707.782573][T14626] cgroup: name respecified [ 707.859024][ T5859] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 708.095908][ T5859] usb 3-1: device descriptor read/64, error -71 [ 708.171345][T14636] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 709.102885][ T5859] usb usb3-port1: attempt power cycle [ 709.384734][T14645] blktrace: Concurrent blktraces are not allowed on sg0 [ 709.526590][ T5859] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 709.576736][ T5859] usb 3-1: device descriptor read/8, error -71 [ 709.908226][ T5859] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 710.126781][ T5859] usb 3-1: device not accepting address 55, error -71 [ 710.145984][ T5859] usb usb3-port1: unable to enumerate USB device [ 711.490167][ T5859] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 711.583655][ T29] audit: type=1400 audit(2000000884.908:1530): avc: denied { setopt } for pid=14666 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 711.652141][T14670] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2140'. [ 711.739141][ T5859] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 711.808047][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.841068][ T5859] usb 3-1: Product: syz [ 711.845319][ T5859] usb 3-1: Manufacturer: syz [ 711.874066][ T5859] usb 3-1: SerialNumber: syz [ 711.919914][ T5859] usb 3-1: config 0 descriptor?? [ 712.669546][ T5859] usb 3-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 712.891089][ T5859] usb 3-1: no permanent extended address found, random address set [ 712.900497][ T5859] usb 3-1: atusb_probe: initialization failed, error = -524 [ 713.463140][T14686] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 713.730675][ T5859] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 713.767284][T14687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.776323][T14687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.792228][ T5859] usb 3-1: USB disconnect, device number 56 [ 713.834936][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 713.896060][T14691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2145'. [ 714.251171][ T5859] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 716.021995][ T29] audit: type=1400 audit(2000000889.569:1531): avc: denied { setopt } for pid=14704 comm="syz.1.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 716.347957][T14719] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2154'. [ 717.199433][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 718.204328][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 718.213219][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 718.222336][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.242388][ T24] usb 5-1: Product: syz [ 718.246601][ T24] usb 5-1: Manufacturer: syz [ 718.256681][T14735] syz.1.2157 (14735) used greatest stack depth: 19088 bytes left [ 718.274787][ T24] usb 5-1: SerialNumber: syz [ 718.303781][T14741] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2159'. [ 718.515755][T14719] netlink: 'syz.4.2154': attribute type 9 has an invalid length. [ 718.552040][T14719] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2154'. [ 718.586263][T14748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.640188][T14748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.741813][ T24] usb 5-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 718.777954][ T24] usb 5-1: 1:1 : sample bitwidth 54 in over sample bytes 1 [ 718.802829][ T24] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 718.832865][ T24] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 718.988813][ T24] usb 5-1: USB disconnect, device number 44 [ 719.075496][ T6469] udevd[6469]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.224034][T14763] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20257 [ 719.611357][ T24] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 719.656911][T14772] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 719.785141][ T24] usb 5-1: device descriptor read/64, error -71 [ 720.424056][T14774] netlink: 'syz.2.2166': attribute type 11 has an invalid length. [ 720.443788][ T29] audit: type=1400 audit(2000000894.220:1532): avc: denied { write } for pid=14768 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 720.500178][ T29] audit: type=1400 audit(2000000894.272:1533): avc: denied { listen } for pid=14768 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 720.536813][ T29] audit: type=1400 audit(2000000894.293:1534): avc: denied { connect } for pid=14768 comm="syz.3.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 720.708601][ T24] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 720.747578][ T5859] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 720.980192][ T24] usb 5-1: device descriptor read/64, error -71 [ 721.148887][ T24] usb usb5-port1: attempt power cycle [ 721.176061][ T6874] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 721.347574][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 721.354552][ T5859] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 721.363419][ T5859] usb 4-1: config 0 has no interface number 0 [ 721.369780][ T5859] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 721.380204][ T5859] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.490854][ T6874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.491818][ T5859] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 721.503275][ T6874] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 721.528711][ T24] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 721.532330][ T5859] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 721.967853][ T6874] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 721.977361][ T6874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.985624][ T6874] usb 3-1: Product: syz [ 721.990722][ T6874] usb 3-1: Manufacturer: syz [ 721.995498][ T6874] usb 3-1: SerialNumber: syz [ 722.010947][ T6874] usb 3-1: config 0 descriptor?? [ 722.011926][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.058263][ T24] usb 5-1: device descriptor read/8, error -71 [ 722.061976][ T5859] usb 4-1: Product: syz [ 722.072390][ T5859] usb 4-1: Manufacturer: syz [ 722.088606][ T5859] usb 4-1: SerialNumber: syz [ 722.103782][ T5859] usb 4-1: config 0 descriptor?? [ 722.109457][T14772] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 722.216302][ T6874] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 722.236833][ T3092] usb 3-1: USB disconnect, device number 58 [ 722.279846][ T5859] usb 4-1: USB disconnect, device number 88 [ 722.331899][ T29] audit: type=1400 audit(2000000896.193:1535): avc: denied { read } for pid=14800 comm="syz.3.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 722.383792][ T6874] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 722.412244][ T29] audit: type=1400 audit(2000000896.267:1536): avc: denied { read } for pid=14800 comm="syz.3.2174" path="socket:[42924]" dev="sockfs" ino=42924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 722.430348][ T6874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.453961][ T6874] usb 2-1: Product: syz [ 722.458206][ T6874] usb 2-1: Manufacturer: syz [ 722.472265][ T6874] usb 2-1: SerialNumber: syz [ 722.486837][ T6874] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 722.524049][ T5866] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 722.683972][ T29] audit: type=1400 audit(2000000896.561:1537): avc: denied { accept } for pid=14810 comm="syz.0.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 722.909517][ T5859] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 723.053050][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 723.070037][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 723.274113][ T5859] usb 1-1: config 8 has an invalid interface number: 254 but max is 0 [ 723.293801][ T5859] usb 1-1: config 8 has no interface number 0 [ 723.300045][ T5859] usb 1-1: config 8 interface 254 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 723.580490][ T5866] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 724.291820][ T5859] usb 1-1: config 8 interface 254 has no altsetting 0 [ 724.382734][ T5859] usb 1-1: New USB device found, idVendor=0c7a, idProduct=0013, bcdDevice=4e.f5 [ 724.453134][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.501079][ T24] usb 2-1: USB disconnect, device number 70 [ 724.502849][ T5859] usb 1-1: Product: syz [ 724.515371][ T5866] ath9k_htc: Failed to initialize the device [ 724.529204][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 724.539965][ T5859] usb 1-1: Manufacturer: syz [ 724.544641][ T5859] usb 1-1: SerialNumber: syz [ 724.605201][ T29] audit: type=1400 audit(2000000898.576:1538): avc: denied { ioctl } for pid=14821 comm="syz.1.2179" path="socket:[41896]" dev="sockfs" ino=41896 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 724.833687][ T5859] usb 1-1: USB disconnect, device number 61 [ 725.599345][T14848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.231049][T14866] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 727.238763][T14866] bond4: entered promiscuous mode [ 727.266195][T14866] bond4: entered allmulticast mode [ 727.400150][T14866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 727.706174][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020795000: rx timeout, send abort [ 727.727576][ T29] audit: type=1400 audit(2000000901.852:1539): avc: denied { read } for pid=5160 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 727.768343][T14883] bridge2: entered allmulticast mode [ 727.844912][ T29] audit: type=1400 audit(2000000901.852:1540): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.866723][T14860] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 727.920888][T14872] x_tables: duplicate underflow at hook 1 [ 727.939468][ T29] audit: type=1400 audit(2000000901.852:1541): avc: denied { append } for pid=5160 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 728.008371][ T29] audit: type=1400 audit(2000000901.852:1542): avc: denied { open } for pid=5160 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 728.072805][ T29] audit: type=1400 audit(2000000901.852:1543): avc: denied { getattr } for pid=5160 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 728.139070][ T3092] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 728.182722][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026cc4800: rx timeout, send abort [ 728.191249][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020795000: abort rx timeout. Force session deactivation [ 728.283092][ T3092] usb 2-1: device descriptor read/64, error -71 [ 728.335971][T14897] team0: No ports can be present during mode change [ 728.345953][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 728.564076][T14895] team0 (unregistering): Port device team_slave_0 removed [ 728.667473][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026cc4800: abort rx timeout. Force session deactivation [ 728.669344][T14895] team0 (unregistering): Port device team_slave_1 removed [ 728.930161][ T3092] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 729.072767][ T3092] usb 2-1: device descriptor read/64, error -71 [ 729.178427][ T3092] usb usb2-port1: attempt power cycle [ 729.267893][ T29] audit: type=1400 audit(2000000903.479:1544): avc: denied { write } for pid=14907 comm="syz.0.2201" path="socket:[43140]" dev="sockfs" ino=43140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 729.530321][ T3092] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 729.836680][ T3092] usb 2-1: device descriptor read/8, error -71 [ 730.558950][ T3092] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 731.387636][ T3092] usb 2-1: device descriptor read/8, error -71 [ 731.480129][ T29] audit: type=1400 audit(2000000905.799:1545): avc: denied { wake_alarm } for pid=14928 comm="syz.3.2208" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 731.631261][T14934] xt_hashlimit: size too large, truncated to 1048576 [ 731.729686][ T3092] usb usb2-port1: unable to enumerate USB device [ 732.089329][T14941] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2211'. [ 734.110685][ T29] audit: type=1400 audit(2000000908.560:1546): avc: denied { map } for pid=14954 comm="syz.3.2215" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 734.521581][ T24] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 734.666261][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 734.826377][ T5866] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 734.834502][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 734.849062][ T24] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 734.857520][ T24] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 734.865884][ T24] usb 2-1: config 2 has no interface number 0 [ 734.872259][ T24] usb 2-1: config 2 has no interface number 1 [ 734.878744][ T24] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 734.889993][ T24] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 734.901048][ T24] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 734.913047][ T24] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid maxpacket 30768, setting to 64 [ 734.924488][ T24] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 734.924523][ T24] usb 2-1: config 2 interface 212 has no altsetting 0 [ 734.926992][ T24] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 734.955334][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.963650][ T24] usb 2-1: Product: syz [ 734.967932][ T24] usb 2-1: Manufacturer: syz [ 734.977380][ T24] usb 2-1: SerialNumber: syz [ 734.987954][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 734.994738][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.025379][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.050348][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 735.064231][ T5866] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 735.073355][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.087379][ T5866] usb 3-1: config 0 descriptor?? [ 735.158680][ T29] audit: type=1400 audit(2000000909.652:1547): avc: denied { mount } for pid=14972 comm="syz.0.2219" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 735.181368][ T29] audit: type=1400 audit(2000000909.652:1548): avc: denied { mounton } for pid=14972 comm="syz.0.2219" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 735.204582][T14963] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2210'. [ 735.213684][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2210'. [ 735.243754][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2210'. [ 735.342451][ T29] audit: type=1400 audit(2000000909.851:1549): avc: denied { setopt } for pid=14962 comm="syz.1.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 735.949876][ T5866] input: HID 0955:7214 Haptics as /devices/virtual/input/input56 [ 735.994244][ T24] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input57 [ 736.027117][ T24] usb 2-1: USB disconnect, device number 75 [ 736.035845][ T5866] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 736.058230][ T5866] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 736.161461][ T794] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 736.176176][ T5866] usb 3-1: USB disconnect, device number 59 [ 736.195126][ T794] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 736.211099][ T29] audit: type=1400 audit(2000000910.764:1550): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 736.212696][ T794] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 736.388734][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 736.405362][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 736.412144][ T794] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 736.425459][ C0] caif:cffrml_receive(): Frame checksum error (0x0 != 0xb860) [ 737.338197][T15008] xt_hashlimit: size too large, truncated to 1048576 [ 737.586032][T15019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15019 comm=syz.1.2230 [ 740.061158][T15044] wg2 speed is unknown, defaulting to 1000 [ 740.077191][T15044] lo speed is unknown, defaulting to 1000 [ 740.343041][ T29] audit: type=1326 audit(2000000914.691:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 740.603804][ T29] audit: type=1326 audit(2000000914.691:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 740.736355][ T29] audit: type=1326 audit(2000000914.691:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 740.761500][ T29] audit: type=1326 audit(2000000914.691:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 740.843567][ T29] audit: type=1326 audit(2000000914.691:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 740.940047][ T29] audit: type=1326 audit(2000000914.691:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 740.998774][ T29] audit: type=1326 audit(2000000914.691:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 741.052726][ T29] audit: type=1326 audit(2000000914.691:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 741.113056][ T5880] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 741.133852][ T29] audit: type=1326 audit(2000000914.691:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 742.307948][ T29] audit: type=1326 audit(2000000914.701:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 742.355635][ T5880] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 742.367377][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.375773][ T5880] usb 2-1: Product: syz [ 742.380152][ T5880] usb 2-1: Manufacturer: syz [ 742.384869][ T5880] usb 2-1: SerialNumber: syz [ 742.393161][ T5880] r8152-cfgselector 2-1: Unknown version 0x0000 [ 742.403992][ T5880] r8152-cfgselector 2-1: config 0 descriptor?? [ 742.800515][T15091] affs: No valid root block on device nullb0 [ 742.860414][T15090] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2250'. [ 743.162082][ T5880] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 743.332395][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 743.346032][ T5866] r8152-cfgselector 2-1: USB disconnect, device number 76 [ 743.399547][ T24] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 743.400007][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.494232][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.519725][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 743.630456][ T24] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 743.643530][ T5880] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 743.647095][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.668190][ T24] usb 5-1: config 0 has no interfaces? [ 743.673872][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 743.683954][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.718530][ T24] usb 5-1: config 0 descriptor?? [ 743.776815][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.835712][ T5880] usb 4-1: config 0 descriptor?? [ 744.249566][ T5880] input: HID 0955:7214 Haptics as /devices/virtual/input/input58 [ 744.385077][ T5880] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 744.469076][ T5880] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 744.582224][ T5859] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 744.606006][ T5859] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 744.617810][ T5880] usb 4-1: USB disconnect, device number 89 [ 744.659020][ T5888] thermal thermal_zone0: Temperature check failed (-19) [ 744.669744][ T5859] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 744.716642][ T5859] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 746.981254][T15147] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 747.016378][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 747.016402][ T29] audit: type=1400 audit(2000000922.102:1582): avc: denied { connect } for pid=15148 comm="syz.2.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 747.074282][T15152] PKCS8: Unsupported PKCS#8 version [ 747.096018][T15147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.126108][ T5859] usb 5-1: USB disconnect, device number 49 [ 747.127887][T15147] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 747.744521][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.752980][ T29] audit: type=1400 audit(2000000922.869:1583): avc: denied { setopt } for pid=15164 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 747.786917][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.797873][T15147] bond0: (slave batadv0): Releasing backup interface [ 748.028980][ T5859] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 748.088431][T15183] input: syz1 as /devices/virtual/input/input59 [ 748.195351][ T5859] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 748.217529][ T5859] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 748.241918][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 748.270748][ T5859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 748.289616][ T794] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 748.315192][ T5859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 748.335320][ T5859] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 748.354330][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 748.373749][ T5859] usb 5-1: Product: syz [ 748.377948][ T5859] usb 5-1: Manufacturer: syz [ 748.407117][ T5859] cdc_wdm 5-1:1.0: skipping garbage [ 748.419454][ T5859] cdc_wdm 5-1:1.0: skipping garbage [ 748.436119][ T5859] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 748.518884][ T5859] cdc_wdm 5-1:1.0: Unknown control protocol [ 748.722213][ T5859] usb 5-1: USB disconnect, device number 50 [ 748.861340][T15196] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 748.943409][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 748.959152][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.973511][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.986015][ T794] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 748.998968][ T794] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 749.020375][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.050383][ T794] usb 1-1: config 0 descriptor?? [ 749.097290][T15208] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2266'. [ 749.114975][ T5880] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 749.133531][T15208] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2266'. [ 749.159186][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 749.178384][T15208] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 749.279376][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.324770][ T5880] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 749.339696][ T5880] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 749.350138][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.754720][ T5880] usb 3-1: Product: syz [ 749.758923][ T5880] usb 3-1: Manufacturer: syz [ 749.763872][ T5880] usb 3-1: SerialNumber: syz [ 749.774464][ T5880] usb 3-1: config 0 descriptor?? [ 749.789243][ T794] input: HID 0955:7214 Haptics as /devices/virtual/input/input60 [ 749.855237][ T794] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 749.873223][ T794] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 749.962540][ T24] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 749.986715][ T794] usb 1-1: USB disconnect, device number 62 [ 749.994207][ T5880] usb 3-1: USB disconnect, device number 60 [ 749.994938][ T24] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 750.081499][ T24] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 750.113552][ T24] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 750.210538][ T5859] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 750.358152][ T5859] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 750.372297][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.879096][ T5859] usb 4-1: Product: syz [ 750.883378][ T5859] usb 4-1: Manufacturer: syz [ 750.944034][T15224] ALSA: mixer_oss: invalid OSS volume '' [ 750.960761][ T5859] usb 4-1: SerialNumber: syz [ 750.976604][ T5859] usb 4-1: config 0 descriptor?? [ 751.015455][T15232] No source specified [ 751.088775][T15232] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2281'. [ 751.119083][T15232] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2281'. [ 751.181345][ T5859] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 751.320134][T15242] vcan0: entered allmulticast mode [ 751.824270][T15250] can0: slcan on ptm0. [ 752.373187][T15245] can0 (unregistered): slcan off ptm0. [ 752.432180][ T5859] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 752.544589][ T5859] usb 4-1: USB disconnect, device number 90 [ 753.199056][T15269] xt_hashlimit: size too large, truncated to 1048576 [ 753.459575][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2291'. [ 753.613229][T15278] overlay: Unknown parameter 'uid<00000000000000000000' [ 754.259840][T15289] fuse: Bad value for 'fd' [ 754.371102][ T29] audit: type=1326 audit(2000000929.787:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 754.404566][ T29] audit: type=1326 audit(2000000929.787:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 754.534522][ T29] audit: type=1326 audit(2000000929.787:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 754.611418][ T29] audit: type=1326 audit(2000000929.797:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 754.713326][ T29] audit: type=1326 audit(2000000929.797:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 754.769973][ T29] audit: type=1326 audit(2000000929.797:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 755.006620][T15306] affs: No valid root block on device nullb0 [ 755.365396][ T29] audit: type=1326 audit(2000000929.797:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 755.389158][ T29] audit: type=1326 audit(2000000929.797:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 755.482042][ T29] audit: type=1326 audit(2000000929.797:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 756.270004][ T29] audit: type=1326 audit(2000000929.797:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fcb81b9c799 code=0x7ffc0000 [ 756.611617][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 756.689207][T15332] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2302'. [ 756.701536][T15334] SELinux: unknown common  [ 756.706291][T15334] SELinux: failed to load policy [ 756.712551][T15336] SELinux: unknown common  [ 756.744939][ T24] usb 4-1: device descriptor read/64, error -71 [ 756.756944][T15336] SELinux: failed to load policy [ 756.927560][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 756.944913][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 756.952564][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 756.962307][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 756.973353][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 756.984014][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 756.994492][ T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 757.018418][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 757.036267][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 757.055012][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 757.074105][ T5866] hid-generic 0005:00B6:0009.0026: unknown main item tag 0x0 [ 757.172174][ T24] usb 4-1: device descriptor read/64, error -71 [ 757.211493][ T5866] hid-generic 0005:00B6:0009.0026: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 757.281143][ T24] usb usb4-port1: attempt power cycle [ 757.327765][T15349] fido_id[15349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 757.494045][ T5888] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 757.697499][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 757.708256][ T5888] usb 5-1: device descriptor read/64, error -71 [ 757.797478][T15357] fuse: Unknown parameter '™žpý½ž¹Å‚Ï—™¦·ËÇ”CâÉQIÜEù*[3ÑÈ»Ë9¾Pò±$FÆ\~;{†mÈ6-7¢Y^-Âbe5ûŸÛ7íÊ­§N–ÑèF;£`Ž¶' [ 757.813739][ T24] usb 4-1: device descriptor read/8, error -71 [ 758.040342][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 758.119712][ T5888] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 758.144331][ T24] usb 4-1: device descriptor read/8, error -71 [ 758.250841][ T24] usb usb4-port1: unable to enumerate USB device [ 758.258985][ T5888] usb 5-1: device descriptor read/64, error -71 [ 758.366547][ T5888] usb usb5-port1: attempt power cycle [ 758.687906][ T5888] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 758.726300][ T5888] usb 5-1: device descriptor read/8, error -71 [ 758.975503][ T5888] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 759.015291][ T5888] usb 5-1: device descriptor read/8, error -71 [ 759.137930][ T5888] usb usb5-port1: unable to enumerate USB device [ 759.609281][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 759.609298][ T29] audit: type=1400 audit(2000000935.330:1605): avc: denied { setattr } for pid=15375 comm="syz.0.2314" name="NETLINK" dev="sockfs" ino=44818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 759.651449][T15377] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2315'. [ 759.691947][T15381] fuse: Bad value for 'fd' [ 759.756830][ T29] audit: type=1326 audit(2000000935.487:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 759.876892][ T29] audit: type=1326 audit(2000000935.487:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 759.904597][ T29] audit: type=1326 audit(2000000935.571:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 759.934215][ T29] audit: type=1326 audit(2000000935.571:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 760.042665][ T29] audit: type=1326 audit(2000000935.571:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 760.066745][ T29] audit: type=1326 audit(2000000935.634:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 760.091377][ T29] audit: type=1326 audit(2000000935.634:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 760.115120][ T29] audit: type=1326 audit(2000000935.634:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 760.139490][T15391] netlink: 'syz.3.2317': attribute type 4 has an invalid length. [ 760.149338][T15391] affs: No valid root block on device nullb0 [ 760.158966][ T29] audit: type=1326 audit(2000000935.634:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15373 comm="syz.1.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fdfec19c799 code=0x7ffc0000 [ 761.037298][T15401] binder: 15396:15401 ioctl c0306201 0 returned -14 [ 761.349468][T15404] netlink: 'syz.1.2319': attribute type 16 has an invalid length. [ 761.451093][T15404] netlink: 'syz.1.2319': attribute type 17 has an invalid length. [ 761.559521][T15404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 761.575369][ T794] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 761.630999][T15416] bond0: entered promiscuous mode [ 761.641776][T15416] bond_slave_0: entered promiscuous mode [ 761.674304][T15416] bond_slave_1: entered promiscuous mode [ 761.726704][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 761.756368][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.917543][T15416] batadv0: entered promiscuous mode [ 761.938799][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.941333][T15416] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 761.968198][T15416] bond0: left promiscuous mode [ 761.973618][T15416] bond_slave_0: left promiscuous mode [ 761.979567][T15416] bond_slave_1: left promiscuous mode [ 761.988526][ T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 762.016309][T15416] batadv0: left promiscuous mode [ 762.061779][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.094943][ T794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.124451][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.166190][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.191936][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 762.215770][ T6874] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 762.256421][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.276018][ T794] usb 4-1: config 0 descriptor?? [ 762.364629][ T6874] usb 5-1: device descriptor read/64, error -71 [ 762.384278][ T24] usb 3-1: Product: syz [ 762.417987][ T24] usb 3-1: Manufacturer: syz [ 762.458640][ T24] usb 3-1: SerialNumber: syz [ 762.519885][ T24] usb 3-1: config 0 descriptor?? [ 762.649552][T15428] ipt_REJECT: ECHOREPLY no longer supported. [ 762.665857][ T6874] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 762.740271][ T24] usb 3-1: USB disconnect, device number 61 [ 762.807328][ T794] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 762.821981][ T6874] usb 5-1: device descriptor read/64, error -71 [ 762.926904][ T6874] usb usb5-port1: attempt power cycle [ 762.991001][T15435] fuse: Bad value for 'fd' [ 763.262471][T15430] comedi comedi0: pcl726: I/O port conflict (0x3,16) [ 763.279626][ T6874] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 763.305839][ T5888] usb 4-1: USB disconnect, device number 95 [ 763.319661][ T6874] usb 5-1: device descriptor read/8, error -71 [ 763.332075][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2330'. [ 763.421165][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2330'. [ 763.450108][T15440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2330'. [ 763.641403][ T5880] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 763.650617][ T6874] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 763.728731][ T6874] usb 5-1: device descriptor read/8, error -71 [ 763.823069][ T5880] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 763.839020][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.842607][ T6874] usb usb5-port1: unable to enumerate USB device [ 763.850568][ T5880] usb 3-1: Product: syz [ 763.869743][ T5880] usb 3-1: Manufacturer: syz [ 763.874484][ T5880] usb 3-1: SerialNumber: syz [ 763.890286][ T5880] usb 3-1: config 0 descriptor?? [ 763.899602][ T5880] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 764.490827][ T5888] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 764.529289][ T5880] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 764.554410][ T5880] sq905c 3-1:0.0: Reading version command failed [ 764.582003][ T5880] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 764.602925][ T5880] usb 3-1: USB disconnect, device number 62 [ 764.718401][ T5888] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 764.746654][ T5888] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 765.265906][ T5888] usb 2-1: Product: syz [ 765.270437][ T5888] usb 2-1: Manufacturer: syz [ 765.276505][ T5888] usb 2-1: SerialNumber: syz [ 765.284798][ T5888] usb 2-1: config 0 descriptor?? [ 765.483241][T15476] wg2 speed is unknown, defaulting to 1000 [ 765.571760][ T5888] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 765.618381][T15476] lo speed is unknown, defaulting to 1000 [ 765.640855][T15477] netlink: 'syz.3.2338': attribute type 9 has an invalid length. [ 765.648683][T15477] netlink: 'syz.3.2338': attribute type 7 has an invalid length. [ 765.658051][T15477] netlink: 'syz.3.2338': attribute type 8 has an invalid length. [ 765.762427][ T5888] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 765.808170][ T5888] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 765.841228][ T5888] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 766.129686][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 766.129704][ T29] audit: type=1400 audit(2000000942.174:1645): avc: denied { getopt } for pid=15490 comm="syz.4.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 766.204372][ T5888] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 766.255926][ T5888] usb 2-1: USB disconnect, device number 77 [ 766.402148][T15497] netem: incorrect ge model size [ 767.435754][T15508] nfs: Unknown parameter '' [ 767.653738][T15509] fuse: Unknown parameter '0x0000000000000008' [ 767.820872][ T29] audit: type=1326 audit(2000000943.949:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 767.928892][T15525] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 768.316200][T15522] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.2347'. [ 768.342590][ T29] audit: type=1326 audit(2000000943.970:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 768.366937][ T29] audit: type=1326 audit(2000000943.970:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 768.430723][ T29] audit: type=1326 audit(2000000943.991:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 768.630931][ T29] audit: type=1326 audit(2000000944.001:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 768.731245][ T29] audit: type=1326 audit(2000000944.001:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 768.839214][ T29] audit: type=1326 audit(2000000944.001:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 768.920964][ T29] audit: type=1326 audit(2000000944.001:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 768.967392][T15539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2354'. [ 769.030858][ T29] audit: type=1326 audit(2000000944.001:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15503 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0399c799 code=0x7ffc0000 [ 769.146705][T15544] random: crng reseeded on system resumption [ 769.388616][T15551] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 769.400140][T15551] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 769.524269][T15557] netlink: 'syz.0.2359': attribute type 2 has an invalid length. [ 769.538701][ T794] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 770.144896][T15570] ------------[ cut here ]------------ [ 770.150511][T15570] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 770.175278][T15570] WARNING: kernel/bpf/verifier.c:2793 at reg_bounds_sanity_check+0x36a/0x1280, CPU#1: syz.0.2361/15570 [ 770.186431][T15570] Modules linked in: [ 770.190367][T15570] CPU: 1 UID: 0 PID: 15570 Comm: syz.0.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.201436][T15570] Tainted: [L]=SOFTLOCKUP [ 770.206046][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.216207][T15570] RIP: 0010:reg_bounds_sanity_check+0x3aa/0x1280 [ 770.222600][T15570] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 78 ff ff ff 50 8b 85 7c ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 770.242435][T15570] RSP: 0018:ffffc90004a0f280 EFLAGS: 00010246 [ 770.248558][T15570] RAX: 00000000ffffdfcd RBX: ffff88802bbb327c RCX: 00000000ffffdfcd [ 770.257141][T15570] RDX: ffffffff8bb8cc60 RSI: ffffffff8bb91c20 RDI: ffffffff90dd9620 [ 770.265475][T15570] RBP: ffffc90004a0f370 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 770.270967][T15569] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 770.273695][T15570] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 770.288715][T15570] R13: ffffffffffffdfcc R14: ffff88802bbb3230 R15: ffff88802bbb3284 [ 770.296780][T15570] FS: 00007fe88e97d6c0(0000) GS:ffff888124446000(0000) knlGS:0000000000000000 [ 770.305799][T15570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.312445][T15570] CR2: 0000000000000000 CR3: 0000000078145000 CR4: 00000000003526f0 [ 770.320491][T15570] Call Trace: [ 770.323804][T15570] [ 770.326778][T15570] reg_set_min_max+0x199/0x2d0 [ 770.331697][T15570] check_cond_jmp_op+0x2b94/0x6860 [ 770.336873][T15570] ? bpf_mark_stack_read+0x340/0x3d0 [ 770.342240][T15570] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 770.347757][T15570] ? __pfx___might_resched+0x10/0x10 [ 770.353096][T15570] ? compute_scc_callchain+0x257/0x370 [ 770.358634][T15570] do_check_common+0x99b7/0xcb00 [ 770.363623][T15570] ? __pfx_do_check_common+0x10/0x10 [ 770.368980][T15570] ? get_call_summary+0x7d1/0x800 [ 770.374060][T15570] bpf_check+0xbd53/0xcd50 [ 770.378552][T15570] ? __pfx_bpf_check+0x10/0x10 [ 770.383351][T15570] ? avc_has_perm+0x135/0x1e0 [ 770.388084][T15570] ? __pfx_avc_has_perm+0x10/0x10 [ 770.393152][T15570] ? bpf_prog_load+0x1c86/0x2c20 [ 770.398156][T15570] bpf_prog_load+0x1c86/0x2c20 [ 770.402962][T15570] ? __pfx_bpf_prog_load+0x10/0x10 [ 770.408256][T15570] ? avc_has_perm_noaudit+0x145/0x3b0 [ 770.413733][T15570] ? avc_has_perm+0x135/0x1e0 [ 770.418477][T15570] ? selinux_bpf+0xfb/0x150 [ 770.423019][T15570] __sys_bpf+0x223a/0x4b90 [ 770.427517][T15570] ? __pfx___sys_bpf+0x10/0x10 [ 770.432326][T15570] ? __pfx_futex_wait+0x10/0x10 [ 770.437235][T15570] ? __sched_setaffinity+0x17c/0x280 [ 770.442574][T15570] ? __pfx___sched_setaffinity+0x10/0x10 [ 770.448254][T15570] ? do_futex+0x192/0x350 [ 770.452644][T15570] ? xfd_validate_state+0x129/0x190 [ 770.457890][T15570] __x64_sys_bpf+0x7b/0xc0 [ 770.462367][T15570] ? lockdep_hardirqs_on+0x78/0x100 [ 770.467598][T15570] do_syscall_64+0x106/0xf80 [ 770.472268][T15570] ? clear_bhb_loop+0x40/0x90 [ 770.476982][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.482969][T15570] RIP: 0033:0x7fe88db9c799 [ 770.487433][T15570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.507201][T15570] RSP: 002b:00007fe88e97d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 770.515681][T15570] RAX: ffffffffffffffda RBX: 00007fe88de16180 RCX: 00007fe88db9c799 [ 770.523717][T15570] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 770.531782][T15570] RBP: 00007fe88dc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 770.539826][T15570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.547853][T15570] R13: 00007fe88de16218 R14: 00007fe88de16180 R15: 00007ffef705eee8 [ 770.555918][T15570] [ 770.559021][T15570] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 770.566284][T15570] CPU: 1 UID: 0 PID: 15570 Comm: syz.0.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.577198][T15570] Tainted: [L]=SOFTLOCKUP [ 770.581514][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.591548][T15570] Call Trace: [ 770.594817][T15570] [ 770.597727][T15570] dump_stack_lvl+0x100/0x190 [ 770.602408][T15570] vpanic+0x552/0x970 [ 770.606410][T15570] ? __pfx_vpanic+0x10/0x10 [ 770.610959][T15570] panic+0xd1/0xe0 [ 770.614681][T15570] ? __pfx_panic+0x10/0x10 [ 770.619078][T15570] check_panic_on_warn.cold+0x19/0x34 [ 770.624422][T15570] ? reg_bounds_sanity_check+0x36a/0x1280 [ 770.630129][T15570] __warn.cold+0x191/0x348 [ 770.634522][T15570] __report_bug+0x296/0x3d0 [ 770.639010][T15570] ? reg_bounds_sanity_check+0x36a/0x1280 [ 770.644716][T15570] ? __pfx___report_bug+0x10/0x10 [ 770.649709][T15570] ? irqentry_exit+0x180/0x670 [ 770.654444][T15570] ? lockdep_hardirqs_on+0x78/0x100 [ 770.659618][T15570] ? reg_bounds_sanity_check+0x3aa/0x1280 [ 770.665326][T15570] report_bug_entry+0xe1/0x290 [ 770.670074][T15570] ? reg_bounds_sanity_check+0x3aa/0x1280 [ 770.675773][T15570] handle_bug+0x1cd/0x2a0 [ 770.680096][T15570] exc_invalid_op+0x17/0x50 [ 770.684583][T15570] asm_exc_invalid_op+0x1a/0x20 [ 770.689417][T15570] RIP: 0010:reg_bounds_sanity_check+0x3aa/0x1280 [ 770.695731][T15570] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 78 ff ff ff 50 8b 85 7c ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 770.715321][T15570] RSP: 0018:ffffc90004a0f280 EFLAGS: 00010246 [ 770.721362][T15570] RAX: 00000000ffffdfcd RBX: ffff88802bbb327c RCX: 00000000ffffdfcd [ 770.729305][T15570] RDX: ffffffff8bb8cc60 RSI: ffffffff8bb91c20 RDI: ffffffff90dd9620 [ 770.737249][T15570] RBP: ffffc90004a0f370 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 770.745203][T15570] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 770.753152][T15570] R13: ffffffffffffdfcc R14: ffff88802bbb3230 R15: ffff88802bbb3284 [ 770.761115][T15570] reg_set_min_max+0x199/0x2d0 [ 770.765861][T15570] check_cond_jmp_op+0x2b94/0x6860 [ 770.770959][T15570] ? bpf_mark_stack_read+0x340/0x3d0 [ 770.776233][T15570] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 770.781669][T15570] ? __pfx___might_resched+0x10/0x10 [ 770.786927][T15570] ? compute_scc_callchain+0x257/0x370 [ 770.792364][T15570] do_check_common+0x99b7/0xcb00 [ 770.797293][T15570] ? __pfx_do_check_common+0x10/0x10 [ 770.802558][T15570] ? get_call_summary+0x7d1/0x800 [ 770.807564][T15570] bpf_check+0xbd53/0xcd50 [ 770.811968][T15570] ? __pfx_bpf_check+0x10/0x10 [ 770.816711][T15570] ? avc_has_perm+0x135/0x1e0 [ 770.821367][T15570] ? __pfx_avc_has_perm+0x10/0x10 [ 770.826386][T15570] ? bpf_prog_load+0x1c86/0x2c20 [ 770.831304][T15570] bpf_prog_load+0x1c86/0x2c20 [ 770.836053][T15570] ? __pfx_bpf_prog_load+0x10/0x10 [ 770.841146][T15570] ? avc_has_perm_noaudit+0x145/0x3b0 [ 770.846496][T15570] ? avc_has_perm+0x135/0x1e0 [ 770.851157][T15570] ? selinux_bpf+0xfb/0x150 [ 770.855643][T15570] __sys_bpf+0x223a/0x4b90 [ 770.860036][T15570] ? __pfx___sys_bpf+0x10/0x10 [ 770.864858][T15570] ? __pfx_futex_wait+0x10/0x10 [ 770.869697][T15570] ? __sched_setaffinity+0x17c/0x280 [ 770.874959][T15570] ? __pfx___sched_setaffinity+0x10/0x10 [ 770.880577][T15570] ? do_futex+0x192/0x350 [ 770.884887][T15570] ? xfd_validate_state+0x129/0x190 [ 770.890079][T15570] __x64_sys_bpf+0x7b/0xc0 [ 770.894480][T15570] ? lockdep_hardirqs_on+0x78/0x100 [ 770.899650][T15570] do_syscall_64+0x106/0xf80 [ 770.904220][T15570] ? clear_bhb_loop+0x40/0x90 [ 770.908870][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.914735][T15570] RIP: 0033:0x7fe88db9c799 [ 770.919136][T15570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.938725][T15570] RSP: 002b:00007fe88e97d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 770.947115][T15570] RAX: ffffffffffffffda RBX: 00007fe88de16180 RCX: 00007fe88db9c799 [ 770.955069][T15570] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 770.963025][T15570] RBP: 00007fe88dc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 770.970980][T15570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.978925][T15570] R13: 00007fe88de16218 R14: 00007fe88de16180 R15: 00007ffef705eee8 [ 770.986887][T15570] [ 770.990108][T15570] Kernel Offset: disabled [ 770.994407][T15570] Rebooting in 86400 seconds..