last executing test programs: 2m21.222580111s ago: executing program 1 (id=312): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0xffffffb2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000ac0)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "f4ac0d", 0x4c, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @remote, {[@dstopts], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0xa, 0x1, 0x2, 0x3, 0x0, 0x3, 0x2, 0x2}, 0x1, {0x5f5}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x81, 0x3, 0x0, 0x0, 0x0, 0x31}, 0x2, {0x200, 0x7f, 0x3, 0x11, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}}, 0x86) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) shmget(0x2, 0x3000, 0x400, &(0x7f0000005000/0x3000)=nil) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') (async) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0xffffffb2) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) dup2(r0, r0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) (async) socket$netlink(0x10, 0x3, 0x0) (async) dup(r4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000ac0)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "f4ac0d", 0x4c, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @remote, {[@dstopts], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0xa, 0x1, 0x2, 0x3, 0x0, 0x3, 0x2, 0x2}, 0x1, {0x5f5}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x81, 0x3, 0x0, 0x0, 0x0, 0x31}, 0x2, {0x200, 0x7f, 0x3, 0x11, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}}, 0x86) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) (async) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) (async) shmget(0x2, 0x3000, 0x400, &(0x7f0000005000/0x3000)=nil) (async) 2m20.98506459s ago: executing program 1 (id=314): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) kexec_load(0x2, 0x7, &(0x7f00000002c0), 0x0) 2m20.073716518s ago: executing program 1 (id=315): syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x26e240, 0x23) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r4, 0x3) accept4(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x6, r2, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000002300)={0x0}) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x3, 0x0) close(r0) 2m18.421002817s ago: executing program 1 (id=323): syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x41, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) syz_open_dev$usbmon(&(0x7f0000000300), 0xffffffff, 0x2102c6) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x81, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x100000000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) socket(0x23, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 2m16.905625954s ago: executing program 1 (id=325): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x13, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0xfffd, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0xd6, @multicast1, 0x5, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}}}}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0xa8) getdents64(r1, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x5) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0x5, [0x4, 0x5, 0x3, 0x1, 0x6, 0x4, 0x8, 0x200, 0x0, 0xffff, 0x8, 0x9, 0x9, 0x800, 0x7, 0x101, 0xf79c, 0x1, 0x1, 0x7, 0x416b, 0xbf5f, 0x7, 0xe1e8, 0x7, 0x2, 0x7, 0x400, 0xfff9, 0x5, 0x7ff, 0x7f, 0x86c, 0x3ff, 0x8, 0x8, 0x9, 0x9, 0xd, 0x8001, 0x1, 0x4, 0x8, 0x40, 0x8, 0x4, 0x6, 0x9], 0x8}}) 2m16.41237851s ago: executing program 1 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000080) clock_gettime(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xc1943) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) fsopen(0x0, 0x1) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x802, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x800, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0xc, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x400000}, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) syz_usb_connect(0x2, 0x428, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x52, 0x35, 0x3f, 0x10, 0x534d, 0x2109, 0xb75d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x416, 0x1, 0x6, 0x8, 0x80, 0x7, "", [{{0x9, 0x4, 0x47, 0x2, 0x7, 0x1, 0x1, 0x92, 0xc0, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x3, 0xa, 0x7}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x47, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x8, 0x2, [@generic={0xc4, 0x31, "25861626a98c3a72ee4598ef05bad37f1266721a87374fede8fb6a07fb616e8f4360cc048019dc8fe4f2f87175d551eddd4c177558d19279ea363ce27c50c952edca39caa76a119d39515b9e6f34a3b6dfa09635d485a04f797c64fa3fd4381c43761f5d0209065bba51aed0fb43ca5f0c8bbd5263460c6659e8c0c0b96e5aa4557abf739940fbd6c1a9dd42feac4c293c2fb1d23f8c1109c721c0400ba683e56805f6a87f5cff176f4a7f14fe151693f30ba155f15e234ec34b86fed129def334ee"}, @generic={0xf, 0x31, "3d8497ea28f80748b4cee76a6e"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x10, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}, @generic={0xea, 0xa8674bfd7bf19aad, "400ba7dc2c9193cbbe0cbefad23d2939fc6d45283b11a1d20f71c97683c18a0e7fe0c6b5701350a154d024da3a98d2518424366b5f40982fe304ccbf80be0fbd7756fb359ff613cef0cc39bf81493d0093678d26d4d603749c75723271b226ed30dc8b012d0a7a6f4b15215ddfcce2b1dd9da85d8ed56964fc6dc58db32e9d57930b6bc97f2a1d1f80abfe71b426f689d26dae6469009c685d0a28de7c75729fd1538fc3a1dc823ba4303496dae5ae6367380b8e2bf166de0f4d5a305b414f89ee0c953119b12c125f595d6ee4efe10c00c8e2ff9449f8493e469053c9e3b7c09682fc6e6d483e28"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x3, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4874}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xcf, 0x7, 0x8, [@generic={0xec, 0x11, "b97ee08fcdd838e2fd6c21df2c3185bd356429c53b1dbc12f9d9a7ad0c25f15c98df792dd321b53190a88f8247e60a533d0e93d3b51dd08f2ab51db65f68e34e32aaa80a04f8ef445e453670ea3cbb58d1079ce0e9caad687303e438efa0ece2da6e221d50ae8fe34772ecc6aae3def6f6de04921db00e6ff3f65df271fecc37f70e1aeac99cf3de69cc08ca5aad02d30837a06c903c0b483079b53f205b02106007d15f6f679c289b78a5edca4855975f3bd27ad708ef9e459f43d7af5126e99cc36d290d34ac52736fa68107add676ebc300273ff924e5cc06b987a6bff3192938c5bafe5fb6b0dbbf"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x0, 0x71, 0xe5, [@generic={0xf9, 0x31, "5f18438ada99b372f7ef927b2f3766ef75192a582115b94fdf3562260e633bb7e2a095f84619a3d2e83ada7817482ba507a2f4c595145e4f8f4ce71bf22a6719c16f464093e52c83b82c87929188e61de95e14f599d8ba3b633d61550ce0d5443dde6c6e49a0f741192ff31853bed174cf8eab185084335cd5fa3afd85c24987212fff4a324b32e8792daed179ecc763190e79f794e2b5dc89b90c393f8346d20f38f0b75f1a816f06ed85ccf615b8283a7027aad3ca343d8e607343cc1eaf789723b8e8a48858ae1a0c2fd45aa8f0084cfaedc8cb9b0280effe39aa7c01a971bef538ad492c2340621124355a3220804380eeeee59898"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x9, 0xd, 0xc0, 0x8, 0xf9}, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="055f793e3e"], 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2009}}, {0xf2, &(0x7f0000000680)=@string={0xf2, 0x3, "12b9db6ae226b5e1c7a3241e24d963591252de619a7c986c28a1070665fb81f83f52a36db36172115d097562ecbb57c303dafc58ee9d47e5e02dc0d541cf3ab3f6f96f6f15fecbe7de4c6d6c01ab2774ef455eb8603607e39c3f232de4a68fc64177668e4480a2356fa3d2feb56e59d5911182827ddbccd256c86c937b5c5cd3f561f28063a426c5654dfce364d089326937aa631d08c63c320ac658815db6e84b6c768c85f06fe305b1ee156775c7382c13952a667d0bbc5e82ff5e417bdb71100ee691b15236f66b95fa705f08d40a286fe2c58d31bc47e97f3bd20300716b7920b04917cbb1b3f27882c18febca4c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x400a}}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 2m0.518879731s ago: executing program 32 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000080) clock_gettime(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xc1943) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) fsopen(0x0, 0x1) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x802, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x800, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0xc, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x400000}, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) syz_usb_connect(0x2, 0x428, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x52, 0x35, 0x3f, 0x10, 0x534d, 0x2109, 0xb75d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x416, 0x1, 0x6, 0x8, 0x80, 0x7, "", [{{0x9, 0x4, 0x47, 0x2, 0x7, 0x1, 0x1, 0x92, 0xc0, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x3, 0xa, 0x7}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x47, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x8, 0x2, [@generic={0xc4, 0x31, "25861626a98c3a72ee4598ef05bad37f1266721a87374fede8fb6a07fb616e8f4360cc048019dc8fe4f2f87175d551eddd4c177558d19279ea363ce27c50c952edca39caa76a119d39515b9e6f34a3b6dfa09635d485a04f797c64fa3fd4381c43761f5d0209065bba51aed0fb43ca5f0c8bbd5263460c6659e8c0c0b96e5aa4557abf739940fbd6c1a9dd42feac4c293c2fb1d23f8c1109c721c0400ba683e56805f6a87f5cff176f4a7f14fe151693f30ba155f15e234ec34b86fed129def334ee"}, @generic={0xf, 0x31, "3d8497ea28f80748b4cee76a6e"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x10, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}, @generic={0xea, 0xa8674bfd7bf19aad, "400ba7dc2c9193cbbe0cbefad23d2939fc6d45283b11a1d20f71c97683c18a0e7fe0c6b5701350a154d024da3a98d2518424366b5f40982fe304ccbf80be0fbd7756fb359ff613cef0cc39bf81493d0093678d26d4d603749c75723271b226ed30dc8b012d0a7a6f4b15215ddfcce2b1dd9da85d8ed56964fc6dc58db32e9d57930b6bc97f2a1d1f80abfe71b426f689d26dae6469009c685d0a28de7c75729fd1538fc3a1dc823ba4303496dae5ae6367380b8e2bf166de0f4d5a305b414f89ee0c953119b12c125f595d6ee4efe10c00c8e2ff9449f8493e469053c9e3b7c09682fc6e6d483e28"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x3, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4874}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xcf, 0x7, 0x8, [@generic={0xec, 0x11, "b97ee08fcdd838e2fd6c21df2c3185bd356429c53b1dbc12f9d9a7ad0c25f15c98df792dd321b53190a88f8247e60a533d0e93d3b51dd08f2ab51db65f68e34e32aaa80a04f8ef445e453670ea3cbb58d1079ce0e9caad687303e438efa0ece2da6e221d50ae8fe34772ecc6aae3def6f6de04921db00e6ff3f65df271fecc37f70e1aeac99cf3de69cc08ca5aad02d30837a06c903c0b483079b53f205b02106007d15f6f679c289b78a5edca4855975f3bd27ad708ef9e459f43d7af5126e99cc36d290d34ac52736fa68107add676ebc300273ff924e5cc06b987a6bff3192938c5bafe5fb6b0dbbf"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x0, 0x71, 0xe5, [@generic={0xf9, 0x31, "5f18438ada99b372f7ef927b2f3766ef75192a582115b94fdf3562260e633bb7e2a095f84619a3d2e83ada7817482ba507a2f4c595145e4f8f4ce71bf22a6719c16f464093e52c83b82c87929188e61de95e14f599d8ba3b633d61550ce0d5443dde6c6e49a0f741192ff31853bed174cf8eab185084335cd5fa3afd85c24987212fff4a324b32e8792daed179ecc763190e79f794e2b5dc89b90c393f8346d20f38f0b75f1a816f06ed85ccf615b8283a7027aad3ca343d8e607343cc1eaf789723b8e8a48858ae1a0c2fd45aa8f0084cfaedc8cb9b0280effe39aa7c01a971bef538ad492c2340621124355a3220804380eeeee59898"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x9, 0xd, 0xc0, 0x8, 0xf9}, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="055f793e3e"], 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2009}}, {0xf2, &(0x7f0000000680)=@string={0xf2, 0x3, "12b9db6ae226b5e1c7a3241e24d963591252de619a7c986c28a1070665fb81f83f52a36db36172115d097562ecbb57c303dafc58ee9d47e5e02dc0d541cf3ab3f6f96f6f15fecbe7de4c6d6c01ab2774ef455eb8603607e39c3f232de4a68fc64177668e4480a2356fa3d2feb56e59d5911182827ddbccd256c86c937b5c5cd3f561f28063a426c5654dfce364d089326937aa631d08c63c320ac658815db6e84b6c768c85f06fe305b1ee156775c7382c13952a667d0bbc5e82ff5e417bdb71100ee691b15236f66b95fa705f08d40a286fe2c58d31bc47e97f3bd20300716b7920b04917cbb1b3f27882c18febca4c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x400a}}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 10.929144826s ago: executing program 2 (id=816): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0x200440c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback}, &(0x7f0000000280)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="8300040000000000400012800800010073697400340002"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bind$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x7f, 0x3, 0x4, @rand_addr=' \x01\x00', @private2, 0x8000, 0x40, 0xfffffffb, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0xffffffffffffff02, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000c00000000000007000000", @ANYRES32=r13, @ANYBLOB="400096040a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r14 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff07090502"], 0x0) syz_usb_control_io$cdc_ecm(r14, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000800)={0x584, 0x0, 0x457bd06b7c9c35ea, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x8, 0x3, 0x7}, {0x8, 0x5, 0xfe, 0x2503}, {0x1, 0x4, 0xa0, 0xa0}, {0x3ff, 0x2, 0x2, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x67}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x19a}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x4004}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000090000000000000000010000850000002a000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 7.596667498s ago: executing program 2 (id=834): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x200000, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x40a000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) modify_ldt$write2(0x11, &(0x7f0000002880)={0x3, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000011c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002"]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e6062, &(0x7f0000000000)={[{}]}) r3 = socket$kcm(0x10, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket(0x1d, 0x2, 0x6) epoll_create(0x80f04) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r6, 0x3, {0x0, 0x1}}, 0x18) sendmmsg$inet(r4, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)}}], 0x1, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/42, 0x2a}], 0x3, 0x7ff, 0x3) syz_usb_connect(0x4, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) 4.848934319s ago: executing program 5 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xe503, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) r3 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r2, 0x20, &(0x7f0000000600)={&(0x7f0000000480)=""/105, 0x69, 0x0, &(0x7f0000000500)=""/234, 0xea}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0xd, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5ddf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xe1, &(0x7f0000000240)=""/225, 0x41000, 0x20, '\x00', r4, @tracing=0x18, r5, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x10, 0xfffffff7, 0x8803}, 0x10, r6, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000680)=[{0x5, 0x2, 0xf, 0xc}, {0x1, 0x3, 0x2, 0x5}, {0x0, 0x2, 0xb, 0xb}], 0x10, 0x2}, 0x94) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 4.254111881s ago: executing program 3 (id=836): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x7, 0x2, 0x25a, 0x7, 0x40, 0x81, 0x9}, &(0x7f0000000140)=0x9c) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000180)) fsetxattr$security_ima(r1, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "95e60c7f345aec5d12194bdb281da2f0f08e510d"}, 0x15, 0x2) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) r3 = accept$phonet_pipe(r2, &(0x7f0000000280), &(0x7f00000002c0)=0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000340)='net/ip_mr_cache\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000380)={0x4, 0x0, 0x201c, 0x43c53a6, 0x200, 0x76, 0xb1c6}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000400)="15401c0d03bb481419ced392ccffc1229451762623ec0c41c9ffd2e6146bce05cd329248eee6ae539b83849838b93c6bbf82d007cd6bc574087602f4316b507ef03a4ea620d9cd638b938a4b892118f08b8c036f535bb5b56ecbb792578a04363a3e63a7614196b3c196e6ca9f4682e7e032a7f2ef325091c2787f606071d8367e3f71bfa1f78f5e1867a4bb405864bce67436c5977d934dfe607c82cf2f40c00075403164321f4117b5df8e1b96bce1081bc53930fe1f8ca3c7a6822707624da9479fbaa32855b7681641237e600b1589460833e811091ae25e3466cf70", 0xde}], 0x1, 0xfffffff7, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000540)={0x0, 0x7fffffff, 0xd}) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000580)={'pim6reg1\x00', 0x40}) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000005c0)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x720, 0x0, 0x0, 0x0, 0x348, 0x438, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, &(0x7f0000000600), {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x4}, [0xffffffff, 0xffffff00, 0xff], [0x0, 0xff, 0x0, 0xff000000], 'gretap0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x6, 0x5, 0x6}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@mh={{0x28}, {"e0fd"}}, @common=@rt={{0x138}, {0x10, [0x0, 0x9], 0x2, 0x8, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @private0, @mcast1, @mcast1, @empty, @empty, @private2, @local, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1d, 0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'veth1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x3c, 0x2, 0x4, 0x26}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@loopback, 0x2a, 0x13}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x1d, 0xef, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'lo\x00', {0x3}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@mh={{0x28}, {"12d8"}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'dvmrp0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000001140)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x5248dceee3872d24}, 0xc, &(0x7f0000001100)={&(0x7f0000000ec0)=@updpolicy={0x23c, 0x19, 0x4, 0x70bd25, 0x25dfdbfe, {{@in=@remote, @in=@private=0xa010101, 0x4e22, 0xfff3, 0x4e22, 0xffff, 0x2, 0x0, 0x80, 0x33, r8, r9}, {0xc07e, 0xfffffffffffffffe, 0x0, 0x200, 0xfffffffffffffff9, 0x4ab3, 0x9, 0x7fffffffffffffff}, {0xf425, 0x10001, 0xe8, 0xd425}, 0x8, 0x6e6bb3, 0x0, 0x1, 0x2, 0x3}, [@address_filter={0x28, 0x1a, {@in=@multicast2, @in=@loopback, 0xa, 0x7, 0x98}}, @sec_ctx={0xbf, 0x8, {0xbb, 0x8, 0x639576d1440bb2c4, 0x3, 0xb3, "9689ac564cb33dd44f7b74e2359180f5e1f9ce42b9dc4b0ffc2934ed7b2863dfe9e31a8d8c4cea19e55e0d02de751660a8d8f4dc15874e01821ce8f8470074905839b13a179e809704f8ed6015cbb6fa0545dec03bbd206f1a57e7dac9fcbae1c60e37e2656d110a505bf07dd2576ef22c46e9a57f1211a5fd9f8ba629b4288c5cf238dac1f8d4527ca27970a44c65560744606046648c0cef63142fc5f7dbe9bd32f350b856bf529e1ca9daa0dd7c6eb20dcc"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x98}, @etimer_thresh={0x8, 0xc, 0x2}, @sec_ctx={0x67, 0x8, {0x63, 0x8, 0x1, 0x5, 0x5b, "359fc9dd6449ec0b86144c4e1c3a55eaab83c77835ebf33b958fc98f708fcc3889fc41162732c38c1a442e3706ad4808414b858b98e0deccc75fa180f5688e126c35ba185a6fc5cf363c0fb580e025b060ef46b5b43dd23a43c29f"}}, @proto={0x5, 0x19, 0xeb}, @extra_flags={0x8, 0x18, 0x13c}, @srcaddr={0x14, 0xd, @in6=@private0}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x40000) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) fchdir(r10) r11 = syz_open_dev$vim2m(&(0x7f00000011c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000001200)={0x1, @vbi={0x3, 0x2, 0x7f, 0xec636e7a, [0xa, 0x7], [0x400, 0x3da], 0x13a}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r6) sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, r13, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001440)=0x6a6, 0x4) syz_open_dev$MSR(&(0x7f0000001480), 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f00000014c0), &(0x7f0000001500)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f00000015c0)) 4.102530729s ago: executing program 2 (id=838): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x2bd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 3.941114497s ago: executing program 4 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}}, 0x0) 3.940157254s ago: executing program 3 (id=840): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0x200440c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback}, &(0x7f0000000280)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="8300040000000000400012800800010073697400340002"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bind$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x7f, 0x3, 0x4, @rand_addr=' \x01\x00', @private2, 0x8000, 0x40, 0xfffffffb, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0xffffffffffffff02, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000c00000000000007000000", @ANYRES32=r13, @ANYBLOB="400096040a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r14 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff07090502"], 0x0) syz_usb_control_io$cdc_ecm(r14, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000800)={0x584, 0x0, 0x457bd06b7c9c35ea, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x8, 0x3, 0x7}, {0x8, 0x5, 0xfe, 0x2503}, {0x1, 0x4, 0xa0, 0xa0}, {0x3ff, 0x2, 0x2, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x67}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x19a}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x4004}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000090000000000000000010000850000002a000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.890819152s ago: executing program 2 (id=841): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04355ee7fa00990809c91099adf014240cbaab12"], 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000040), 0x5, 0x0) eventfd(0x1) fstat(0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0xd2, &(0x7f0000000640)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x9c, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@routing={0x2f}], "3239da3d7d25e706b91bde3600df1f6840cd1ea22609ffb8de69d5fc37b33830c7cb5a3a7a7908e9fc4b51ff39ee7712d68bf5e01b1db8c57236f633200c4cf5fa7845c83eaabf44ef0ee8f34d5da5e40ce557cf72b7a4eab66879297ce90e6f11b28cdb20d496929a7f977bafe171696ced4f24b5da1b8bdfc90e72e5fa98b64d0dfa6101c678ccaeecfa37a7b8a504ca4cec99"}}}}}, 0x0) 3.8826546s ago: executing program 4 (id=842): r0 = syz_io_uring_setup(0x1588, &(0x7f0000000200)={0x0, 0x90f9, 0x1000, 0x2, 0x48}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x1b0, 0x280, 0x0, 0x1b0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b0}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000340)={r1, 0x3, 0x1, 0x200, 0x3ff}, 0x1) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x32, @multicast2, 0x4e25, 0x3, 'lblcr\x00', 0x2, 0x4, 0x7b}, {@loopback, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r2) pipe2$watch_queue(&(0x7f0000000180), 0x80) 3.099148184s ago: executing program 4 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xd1, 0x3, 0x200, 0x504, 0x9, 0x2}, {0x6, 0x3, 0x1000, 0x9, 0x9, 0xfef3}, 0x800, 0x9, 0x1d0e}}, @TCA_TBF_RATE64={0xc, 0x4, 0xc4cb7e6aae935325}, @TCA_TBF_PRATE64={0xc, 0x5, 0x7cee80925c890674}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES32=r3], 0x98}}, 0x4000) close(r2) 3.09853471s ago: executing program 5 (id=844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0xd3, 0x7, 0x2, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='sourre\xf0\xc7\x00\xcd[\xdf\xca\xc6y^sU!\xd4;\xaa\rR\xc9\xa9\x91\xca\xdb\xc6\x10\xfa:\xc9\x12\x17\x16\xaek\x8e\xb6\xa3W\xc04\x01\x94l\xb2*\xd0\xa92+h\x03\xb0U\xfc\x19&?8P\x06\x8fB\xf5\xc3', &(0x7f0000000140)='\xea\xbdj\x9fzA\x13\xec,>\xd5,\x1c\xff\xf4{\x13\x00n]\xf7\x1a\xf1\x99B\xd0', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r6, @ANYBLOB="b48c6fecfdd13fff0021db5e41e8fb11d37829d7ef42d61db53eaadcb55a6c12da7233330c4d2c9d3bc33692b572e9adedce2c10f4bbdd7352b9e6dc86a3549cba76d890e9bf0d0c78eccb71afd2a3f2224648c1b69bf9d389689f9a1d291100e89246940dad", @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="d78a5f0cccf7943d91181c94ab28e3", @ANYRESDEC, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) socket$can_raw(0x1d, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @loopback, 0xc58a}, 0x1c) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 2.88951495s ago: executing program 4 (id=846): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x0, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x0, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x482, &(0x7f0000000600)) (async) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) (async) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) 2.849779004s ago: executing program 2 (id=847): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffff9, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x7, 0x1, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x5, 0x0, 0x40, 0x0, 0x42}, {0x3, 0xa, 0x20, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) syz_usb_disconnect(r0) 2.600828078s ago: executing program 4 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc) 2.457393204s ago: executing program 4 (id=851): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0xffff) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r2, &(0x7f0000000080), 0x51) r3 = accept$packet(r0, &(0x7f00000002c0), &(0x7f0000000300)=0x14) getsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f0000000400), &(0x7f0000000440)=0x4) lseek(r1, 0x100000001, 0x4) write$cgroup_pid(r0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000180)=0x1) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0xfffffffffffffcdd) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r10, @ANYRES16=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40060c0}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r6}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.453526201s ago: executing program 0 (id=852): socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400c759fa65e84d99e6d52502000000", @ANYRES32, @ANYBLOB="080001000000000008000100ac1e0001080002"], 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x1c, 0x21, 0x11, 0x0, 0x3, {0xa, 0x0, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYRESOCT=r2], 0x38}, 0x1, 0x300}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40200) (async) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x40200) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f00000002c0)={&(0x7f00000001c0)=""/104, 0x68}) (async) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f00000002c0)={&(0x7f00000001c0)=""/104, 0x68}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRES8=r0, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES8=r2, @ANYBLOB="3a03bb421a6fe85b0970efffc1eb780b4ef0f703548f06e3c5d33fde9e10f41644a8426ab770cba46c99d25f19170dde1a53035990ce01812a1f38312d439f8297a917d3cb4885e6664bd0e8dc872fa7e2f014d0f680be", @ANYRESDEC=r2, @ANYRES16], 0x38}, 0x1, 0x300}, 0x4c054) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000e0e2c7a78e153fdd180100002020692500000000002020207b1a080000000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200080000000000000000000000000000007000008429364c1259165fe2cb82733b1a944c4517f8412de9f178e2271ecddeec9aabbf1e4b48d33139366b08bf"], 0x50) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0xe2) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0xe2) execveat$binfmt(r9, 0x0, &(0x7f0000000840)={[&(0x7f00000005c0)='}\x00', &(0x7f0000000600)='$@\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='.-+.)\x00', &(0x7f0000000780)='#&[\x00', &(0x7f00000007c0)='\x00']}, &(0x7f00000009c0)={[&(0x7f0000000880)='rose0\x00', &(0x7f00000008c0)='rose0\x00', &(0x7f0000000900)='/dev/nbd#\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='\'([++\\\x00']}, 0x1000) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000380), &(0x7f0000000440)=r10}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000380), &(0x7f0000000440)=r10}, 0x20) tkill(r7, 0x28) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) wait4(r7, 0x0, 0x0, 0x0) tkill(r7, 0x3) ptrace$ARCH_MAP_VDSO_32(0x1e, r7, 0x8000000000000000, 0x2002) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x270600, 0x0) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f00000000c0)=ANY=[]) (async) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f00000000c0)=ANY=[]) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.977337325s ago: executing program 0 (id=853): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008974) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x1c, 0x1e, 0x601, 0x0, 0x0, "", [@nested={0x9, 0xe, 0x0, 0x1, [@generic="1769b6328a"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000805}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.757877133s ago: executing program 0 (id=854): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff1000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="0f794f7dc481816b318f099896da400f01c30f2a16f40f20d835200000000f22d8c402259fc30f55b7c331000067470f01c4", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = memfd_create(&(0x7f0000000100)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe3\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r6, 0x80079a0) splice(r6, 0x0, r5, 0x0, 0x100002, 0x9) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x18) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) close_range(r0, 0xffffffffffffffff, 0x0) 1.575342789s ago: executing program 5 (id=855): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) epoll_create(0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.510925259s ago: executing program 2 (id=856): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) 1.492691618s ago: executing program 5 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, r0, 0xec776000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x80800) socket$rxrpc(0x21, 0x2, 0xa) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f", 0x33, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff95}], 0x1}, 0x10010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b703000000000000250000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.385592129s ago: executing program 0 (id=858): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04355ee7fa00990809c91099adf014240cbaab12"], 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000040), 0x5, 0x0) eventfd(0x1) fstat(0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0xd2, &(0x7f0000000640)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x9c, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@routing={0x2f}], "3239da3d7d25e706b91bde3600df1f6840cd1ea22609ffb8de69d5fc37b33830c7cb5a3a7a7908e9fc4b51ff39ee7712d68bf5e01b1db8c57236f633200c4cf5fa7845c83eaabf44ef0ee8f34d5da5e40ce557cf72b7a4eab66879297ce90e6f11b28cdb20d496929a7f977bafe171696ced4f24b5da1b8bdfc90e72e5fa98b64d0dfa6101c678ccaeecfa37a7b8a504ca4cec99"}}}}}, 0x0) 1.349494226s ago: executing program 3 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) 1.140242166s ago: executing program 3 (id=860): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x80440, 0x56) (async) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) r1 = syz_ublk_setup_io_uring(0x23d4, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) syz_emit_ethernet(0x52, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) (rerun: 32) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r8, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r8, &(0x7f0000000400)={0x50, 0x0, r9, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r10, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r10, r11, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$AUTOFS_IOC_ASKUMOUNT(r12, 0x80049370, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) 797.509975ms ago: executing program 3 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 745.671522ms ago: executing program 5 (id=862): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2feffffffd085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 712.29478ms ago: executing program 0 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, r0, 0xec776000) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x20008000) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x80800) socket$rxrpc(0x21, 0x2, 0xa) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x10010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x1400, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000080000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 674.734371ms ago: executing program 3 (id=864): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0) r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) syz_emit_ethernet(0x75, &(0x7f0000000200)={@local, @link_local, @void, {@llc_tr={0x11, {@snap={0x1, 0x0, "b9", "13b7a0", 0xa00, "48b7073ebae989a32f42f6c2b47772e990e49ff6c1a72f085ab8579a0bb7ad8cc3e27fbf5ca6223321050502bf16295b4f008992452e62ab4added8f4b048740763b664feb6a9694856e62858e2bd0353f03c88e2a0fa28cef25c3da379e41"}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) rename(&(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00') r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x10d442, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r3, 0x0}]) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x80000000, 0x3}) read$FUSE(r1, &(0x7f00000045c0)={0x2020}, 0x2020) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/175, 0xaf, 0x1, &(0x7f00000003c0)=""/84, 0x54}, &(0x7f0000000480)=0x40) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) 565.489µs ago: executing program 5 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = open_tree(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x100) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x20640, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, 0x0, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x20300, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB="7569643d27c21a0ea79890ffd08b5bb1ad38f31a38da01c1bc8c49bf05cd9e2d8ea1fc08c22326ae888a4d965db0b420fe19b133884433d8dd577bdd85cbddd7412bbb013ef2d616e6", @ANYRESHEX=r14, @ANYBLOB=',\x00']) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r15, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffefffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r16, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r16, r17, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000000800)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="f5db8f78451b3d4c15e256aa68884229a4d6a8dfe19c946fea8df994606bb32be66af1b16a091bb0399a291bc74000abac3b5b7ce7f8163ecad74961f65723a5e2b25d98dee693ba45", 0x49}, {&(0x7f0000000280)="2ccbe1e83e0d81f98c66d4671b08cb0b4768bde7c8f4982773ed3e2ef6a4e98395d2e6ab66c0deeb2e672ed87470276d0b0a5d66fd5f014c1afa863367e63cc802b7ba1b006ec596bb71f9b16bc210b30c839ab7382ef1a67bdd497cc32a17083b214e078936876e4a0f61e8ba55480a92dcfe8485455861064c7eae715b6c0b4027a9d1c5fe32ab9c2eef2a41a28ef9ad59d1af02d7b99d044c1ea32625c83e5aefa2e34e9f5a2038b1b35366f2ad0fb89f50a6b0101e94c52561b4f7f9935ff511fcac6b1902fb86795086027e2468cf453982243e4421b2538f2f25a2115297c0164a0644dcb26f3f7039f5ed16", 0xef}, {&(0x7f00000003c0)="70b7dee534bef31f35f8c42d7c377e1fb6b3c6bdb51a98854d65d38af8e8e93e5a0000f71700"/57, 0x39}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r1, r6}}}, @rights={{0x18, 0x1, 0x1, [r2, r8]}}, @rights={{0x24, 0x1, 0x1, [r3, r9, r0, r12, r11]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r2, r12, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, r14, r17}}}], 0x118, 0x5}, 0x8040) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 0 (id=866): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffff9, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x7, 0x1, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x5, 0x0, 0x40, 0x0, 0x42}, {0x3, 0xa, 0x20, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): unknown main item tag 0x0 [ 186.998826][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input18 [ 187.814934][ T9] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 187.846269][ T7512] netlink: 'syz.4.445': attribute type 21 has an invalid length. [ 187.866892][ T7512] netlink: 128 bytes leftover after parsing attributes in process `syz.4.445'. [ 187.883786][ T7512] netlink: 'syz.4.445': attribute type 4 has an invalid length. [ 187.892176][ T7512] netlink: 3 bytes leftover after parsing attributes in process `syz.4.445'. [ 188.309852][ T29] audit: type=1400 audit(1783159630.083:601): avc: denied { mounton } for pid=7517 comm="syz.4.447" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 188.394590][ T5798] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 188.709242][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.715866][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.803252][ T5784] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 188.976059][ T5784] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.990843][ T5784] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 189.004618][ T5784] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 189.064335][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.147209][ T5784] usb 5-1: Product: syz [ 189.201793][ T5784] usb 5-1: Manufacturer: syz [ 189.209627][ T7530] Bluetooth: hci6: command 0x1003 tx timeout [ 189.233399][ T4925] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 189.498372][ T5784] usb 5-1: SerialNumber: syz [ 189.717546][ T5784] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 189.821592][ T7551] trusted_key: encrypted_key: insufficient parameters specified [ 189.903220][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 189.905811][ T5798] usb 4-1: device descriptor read/64, error -71 [ 190.063294][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 190.070037][ T9] usb 3-1: config 155 has an invalid interface number: 1 but max is 0 [ 190.078777][ T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 190.092194][ T9] usb 3-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 190.107251][ T9] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 190.119894][ T9] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 190.135468][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 190.145521][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.151052][ T7555] __vm_enough_memory: pid: 7555, comm: syz.0.459, bytes: 21199776673792 not enough memory for the allocation [ 190.154266][ T9] usb 3-1: Product: syz [ 190.169878][ T9] usb 3-1: Manufacturer: syz [ 190.175439][ T5798] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 190.175562][ T9] usb 3-1: SerialNumber: syz [ 190.183988][ T5798] usb 4-1: device reset changed ep0 maxpacket size! [ 190.198802][ T1220] usb 4-1: USB disconnect, device number 21 [ 190.199204][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 190.226807][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input19 [ 190.273272][ T5727] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 190.373504][ T1220] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 190.449419][ T5727] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 190.462734][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.471506][ T5727] usb 6-1: Product: syz [ 190.480668][ T9] imon:send_packet: packet tx failed (-71) [ 190.490367][ T5727] usb 6-1: Manufacturer: syz [ 190.495056][ T5727] usb 6-1: SerialNumber: syz [ 190.503246][ T9] imon 3-1:155.0: panel buttons/knobs setup failed [ 190.511105][ T9] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 190.522600][ T9] (id 0x00) [ 190.535029][ T1220] usb 4-1: Using ep0 maxpacket: 8 [ 190.551564][ T1220] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 190.578525][ T1220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.601110][ T1220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.612948][ T1220] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.626974][ T1220] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.636163][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.730522][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.741192][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.749159][ T9] rc_core: IR keymap rc-imon-pad not found [ 190.755427][ T9] Registered IR keymap rc-empty [ 190.760488][ T9] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 190.772026][ T5784] usb 5-1: failed to enable PITCH for EP 0x82 [ 190.772232][ T9] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 190.778705][ T4925] Bluetooth: hci1: command 0x0406 tx timeout [ 190.794218][ T7530] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.800803][ T7530] Bluetooth: hci4: command 0x0406 tx timeout [ 190.807328][ T7530] Bluetooth: hci2: command 0x0406 tx timeout [ 190.860706][ T7530] Bluetooth: hci3: command 0x0406 tx timeout [ 190.976031][ T5784] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 190.986044][ T5784] usb 5-1: clock source 0 is not valid, cannot use [ 190.995627][ T5784] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 191.054934][ T5784] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 191.130396][ T9] imon:send_packet: packet tx failed (-71) [ 191.142469][ T1220] usb 4-1: GET_CAPABILITIES returned 3a [ 191.154670][ T9] imon 3-1:155.0: remote input dev register failed [ 191.161988][ T1220] usbtmc 4-1:16.0: can't read capabilities [ 191.162435][ T9] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 191.225403][ T5727] rtl8150 6-1:1.0: couldn't reset the device [ 191.235798][ T9] imon 3-1:155.0: unable to initialize intf0, err 0 [ 191.252257][ T5727] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 191.273362][ T9] imon:imon_probe: failed to initialize context! [ 191.281174][ T9] imon 3-1:155.0: unable to register, err -19 [ 191.292525][ T5784] usb 5-1: USB disconnect, device number 25 [ 191.294583][ T5727] usb 6-1: USB disconnect, device number 2 [ 191.314498][ T9] imon 3-1:155.1: inconsistent driver matching [ 191.336345][ T9] imon 3-1:155.1: unable to register, err -22 [ 191.360544][ T9] imon 3-1:155.1: probe with driver imon failed with error -22 [ 191.405593][ T9] usb 3-1: USB disconnect, device number 20 [ 191.414109][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 192.547972][ T7588] netlink: 'syz.2.468': attribute type 12 has an invalid length. [ 192.556187][ T7588] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 192.564561][ T7588] netlink: 148 bytes leftover after parsing attributes in process `syz.2.468'. [ 192.625665][ T7588] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 192.639141][ T7588] netlink: 'syz.2.468': attribute type 2 has an invalid length. [ 192.646942][ T7588] netlink: 11 bytes leftover after parsing attributes in process `syz.2.468'. [ 192.690501][ T7589] netlink: 'syz.2.468': attribute type 12 has an invalid length. [ 192.711199][ T5784] usb 4-1: USB disconnect, device number 22 [ 192.718036][ T7589] netlink: 'syz.2.468': attribute type 29 has an invalid length. [ 192.751240][ T7589] netlink: 148 bytes leftover after parsing attributes in process `syz.2.468'. [ 192.846498][ T7589] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 192.854873][ T7589] netlink: 'syz.2.468': attribute type 2 has an invalid length. [ 192.862706][ T7589] netlink: 11 bytes leftover after parsing attributes in process `syz.2.468'. [ 192.981546][ T29] audit: type=1400 audit(1783159634.753:602): avc: denied { ioctl } for pid=7591 comm="syz.4.469" path="socket:[17067]" dev="sockfs" ino=17067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.434210][ T7600] netlink: 'syz.5.471': attribute type 21 has an invalid length. [ 193.457807][ T7600] netlink: 128 bytes leftover after parsing attributes in process `syz.5.471'. [ 193.508128][ T7600] netlink: 'syz.5.471': attribute type 4 has an invalid length. [ 193.527102][ T7600] netlink: 3 bytes leftover after parsing attributes in process `syz.5.471'. [ 193.763205][ T5784] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 193.764286][ T29] audit: type=1400 audit(1783159635.533:603): avc: denied { read } for pid=7604 comm="syz.4.473" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 194.025024][ T29] audit: type=1400 audit(1783159635.533:604): avc: denied { open } for pid=7604 comm="syz.4.473" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 194.049520][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 194.064209][ T7615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.108411][ T5784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.130191][ T5784] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 194.146637][ T29] audit: type=1400 audit(1783159635.543:605): avc: denied { ioctl } for pid=7604 comm="syz.4.473" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 194.190299][ T5784] usb 3-1: config 4 has an invalid descriptor of length 128, skipping remainder of the config [ 194.228757][ T5784] usb 3-1: config 4 has no interface number 0 [ 194.345941][ T29] audit: type=1400 audit(1783159635.793:606): avc: denied { remount } for pid=7611 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.492008][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 194.921659][ T7625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.478'. [ 195.035387][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 195.052337][ T5784] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 195.539078][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.564086][ T5784] usb 3-1: Product: syz [ 195.574704][ T5784] usb 3-1: Manufacturer: syz [ 195.668710][ T5784] usb 3-1: SerialNumber: syz [ 195.723221][ T1220] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 195.880491][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'. [ 195.953252][ T1220] usb 5-1: Using ep0 maxpacket: 8 [ 195.972654][ T1220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 195.987838][ T1220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.028162][ T1220] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 196.037867][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.046062][ T1220] usb 5-1: Product: syz [ 196.061675][ T1220] usb 5-1: Manufacturer: syz [ 196.067486][ T1220] usb 5-1: SerialNumber: syz [ 196.106897][ T1220] usb 5-1: config 0 descriptor?? [ 196.132691][ T1220] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 196.163698][ T5798] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.323205][ T5798] usb 6-1: Using ep0 maxpacket: 8 [ 196.335051][ T1220] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 196.350761][ T5798] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 196.374954][ T5798] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.383277][ T1220] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 196.395693][ T5798] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 196.405425][ T5798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.486776][ T5798] usb 6-1: Product: syz [ 196.493599][ T5798] usb 6-1: Manufacturer: syz [ 196.499357][ T5798] usb 6-1: SerialNumber: syz [ 196.540364][ T5798] usb 6-1: config 0 descriptor?? [ 196.550870][ T1220] usb 5-1: USB disconnect, device number 26 [ 196.564423][ T5798] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 196.790456][ T5798] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 196.819782][ T5798] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 197.166217][ T9] usb 6-1: USB disconnect, device number 3 [ 197.280369][ T7642] netlink: 'syz.4.484': attribute type 21 has an invalid length. [ 197.327551][ T7642] netlink: 'syz.4.484': attribute type 4 has an invalid length. [ 197.622514][ T5784] usb 3-1: can't set config #4, error -71 [ 197.645311][ T5784] usb 3-1: USB disconnect, device number 21 [ 198.575059][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 198.832029][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 198.924528][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 199.059797][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.145546][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.234452][ T9] usb 6-1: Product: syz [ 199.282255][ T9] usb 6-1: Manufacturer: syz [ 199.348125][ T9] usb 6-1: SerialNumber: syz [ 199.566721][ T9] usb 6-1: config 0 descriptor?? [ 199.630888][ T9] usb 6-1: selecting invalid altsetting 0 [ 199.686714][ T7687] __nla_validate_parse: 2 callbacks suppressed [ 199.686738][ T7687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.497'. [ 199.934787][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 200.363228][ T5618] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 200.880568][ T29] audit: type=1400 audit(1783159642.313:607): avc: denied { name_bind } for pid=7692 comm="syz.0.498" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 200.914715][ T5784] usb 6-1: USB disconnect, device number 4 [ 200.963579][ T5618] usb 3-1: Using ep0 maxpacket: 8 [ 200.978719][ T5618] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 201.002472][ T5618] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.037714][ T5618] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 201.053515][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.144546][ T5618] usb 3-1: Product: syz [ 201.261602][ T5618] usb 3-1: Manufacturer: syz [ 201.266933][ T5618] usb 3-1: SerialNumber: syz [ 201.277165][ T5618] usb 3-1: config 0 descriptor?? [ 201.287865][ T5618] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 201.493396][ T5784] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 201.881369][ T5618] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 201.892627][ T5618] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 201.986579][ T7708] ipip0: entered promiscuous mode [ 201.992738][ T7708] ipip0: entered allmulticast mode [ 202.048788][ T7708] team0: Port device ipip0 added [ 202.064260][ T5784] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 202.090282][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 202.111597][ T5784] usb 1-1: can't read configurations, error -61 [ 202.119215][ T5798] usb 3-1: USB disconnect, device number 22 [ 202.283770][ T5784] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 202.524187][ T5784] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 202.541719][ T7717] netlink: 'syz.4.505': attribute type 21 has an invalid length. [ 202.551276][ T7717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.505'. [ 202.554001][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 202.565221][ T7717] netlink: 'syz.4.505': attribute type 4 has an invalid length. [ 202.590373][ T7717] netlink: 3 bytes leftover after parsing attributes in process `syz.4.505'. [ 202.605536][ T29] audit: type=1400 audit(1783159644.383:608): avc: denied { getopt } for pid=7712 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.631415][ T5784] usb 1-1: can't read configurations, error -61 [ 202.639659][ T5784] usb usb1-port1: attempt power cycle [ 202.759731][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 202.993476][ T5784] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 203.024144][ T5784] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 203.054532][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 203.083628][ T5784] usb 1-1: can't read configurations, error -61 [ 203.374855][ T5784] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 203.429517][ T5784] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 203.453772][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 203.486171][ T5784] usb 1-1: can't read configurations, error -61 [ 203.524947][ T5784] usb usb1-port1: unable to enumerate USB device [ 204.498905][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'. [ 204.650200][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'. [ 205.299382][ T29] audit: type=1400 audit(1783159647.073:609): avc: denied { create } for pid=7751 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 205.380909][ T29] audit: type=1400 audit(1783159647.123:610): avc: denied { ioctl } for pid=7751 comm="syz.4.514" path="socket:[17939]" dev="sockfs" ino=17939 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 205.561817][ T29] audit: type=1400 audit(1783159647.133:611): avc: denied { getopt } for pid=7751 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 206.045459][ T29] audit: type=1400 audit(1783159647.133:612): avc: denied { write } for pid=7751 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 206.131234][ T7765] netlink: 'syz.2.518': attribute type 21 has an invalid length. [ 206.198285][ T7765] netlink: 128 bytes leftover after parsing attributes in process `syz.2.518'. [ 206.227694][ T29] audit: type=1400 audit(1783159648.003:613): avc: denied { mount } for pid=7766 comm="syz.3.519" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 206.260177][ T7765] netlink: 'syz.2.518': attribute type 4 has an invalid length. [ 206.343310][ T29] audit: type=1400 audit(1783159648.033:614): avc: denied { mounton } for pid=7766 comm="syz.3.519" path="/122/file0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 206.371180][ T7765] netlink: 3 bytes leftover after parsing attributes in process `syz.2.518'. [ 206.549434][ T7775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.520'. [ 206.575794][ T29] audit: type=1400 audit(1783159648.303:615): avc: denied { ioctl } for pid=7766 comm="syz.3.519" path="socket:[17964]" dev="sockfs" ino=17964 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.805997][ T29] audit: type=1400 audit(1783159648.433:616): avc: denied { nlmsg_write } for pid=7768 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 206.909193][ T29] audit: type=1400 audit(1783159648.603:617): avc: denied { setopt } for pid=7766 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.947496][ T7773] batadv_slave_0: entered promiscuous mode [ 206.962279][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 206.971369][ T7776] batadv_slave_0: left promiscuous mode [ 207.823299][ T5618] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 207.889460][ T29] audit: type=1400 audit(1783159649.663:618): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 208.003521][ T5618] usb 6-1: Using ep0 maxpacket: 32 [ 208.109184][ T5618] usb 6-1: config 155 has an invalid interface number: 1 but max is 0 [ 208.264848][ T5618] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 208.280480][ T5618] usb 6-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 208.290857][ T5618] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 208.327680][ T5618] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 208.343054][ T5618] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 208.369152][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.388278][ T5618] usb 6-1: Product: syz [ 208.397741][ T5618] usb 6-1: Manufacturer: syz [ 208.408710][ T5618] usb 6-1: SerialNumber: syz [ 208.437136][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 208.448587][ T5618] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input21 [ 208.672866][ T5798] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 208.863389][ T5798] usb 4-1: Using ep0 maxpacket: 32 [ 208.900037][ T5798] usb 4-1: config 155 has an invalid interface number: 1 but max is 0 [ 208.918091][ T5798] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 208.940411][ T5798] usb 4-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 208.958991][ T5798] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 208.987284][ T5798] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 209.021640][ T5798] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 209.038378][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.061645][ T5798] usb 4-1: Product: syz [ 209.072090][ T5798] usb 4-1: Manufacturer: syz [ 209.082756][ T5798] usb 4-1: SerialNumber: syz [ 209.107634][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 209.140212][ T5798] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input23 [ 210.165643][ T29] audit: type=1400 audit(1783159651.943:619): avc: denied { bind } for pid=7831 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.207776][ T7832] loop5: detected capacity change from 0 to 7 [ 210.242511][ T29] audit: type=1400 audit(1783159651.973:620): avc: denied { read } for pid=7831 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.306516][ T7832] loop5: p1 < > p3 p4 [ 210.318008][ T7833] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 210.328797][ T7832] loop5: partition table partially beyond EOD, truncated [ 210.348077][ T29] audit: type=1400 audit(1783159652.053:621): avc: denied { relabelfrom } for pid=7831 comm="syz.0.535" name="" dev="pipefs" ino=18564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 210.464717][ T5626] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 210.489728][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 210.515959][ T5618] imon:send_packet: packet tx failed (-71) [ 210.561830][ T7832] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 210.573654][ T5618] imon 6-1:155.0: panel buttons/knobs setup failed [ 210.589999][ T5618] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 210.629617][ T5618] (id 0x00) [ 210.643441][ T7832] loop5: p4 start 33554432 is beyond EOD, truncated [ 210.843179][ T5618] rc_core: IR keymap rc-imon-pad not found [ 210.872925][ T5618] Registered IR keymap rc-empty [ 210.910611][ T5618] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 210.912399][ T6422] udevd[6422]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 210.923397][ T5609] udevd[5609]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 210.983153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.003146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.049542][ T5618] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 211.060707][ T5618] imon:send_packet: packet tx failed (-71) [ 211.083249][ T5618] imon 6-1:155.0: remote input dev register failed [ 211.090450][ T5618] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 211.443278][ T5720] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 211.637704][ T5618] imon 6-1:155.0: unable to initialize intf0, err 0 [ 211.645750][ T5618] imon:imon_probe: failed to initialize context! [ 211.648845][ T5798] imon:send_packet: packet tx failed (-71) [ 211.652235][ T5618] imon 6-1:155.0: unable to register, err -19 [ 211.704379][ T5798] imon 4-1:155.0: panel buttons/knobs setup failed [ 211.728199][ T5798] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 211.745560][ T5618] imon 6-1:155.1: inconsistent driver matching [ 211.749566][ T5798] (id 0x00) [ 211.755167][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 211.780175][ T5618] imon 6-1:155.1: unable to register, err -22 [ 212.027828][ T5720] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 212.029411][ T5618] imon 6-1:155.1: probe with driver imon failed with error -22 [ 212.054069][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 212.054083][ T29] audit: type=1400 audit(1783159653.823:623): avc: denied { open } for pid=7838 comm="syz.5.536" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 212.089597][ T5720] usb 1-1: config 0 has no interface number 0 [ 212.097070][ T5720] usb 1-1: config 0 interface 12 has no altsetting 0 [ 212.108508][ T29] audit: type=1400 audit(1783159653.863:624): avc: denied { connect } for pid=7847 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 212.113570][ T5618] usb 6-1: USB disconnect, device number 5 [ 212.139540][ T5720] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 212.189379][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.198387][ T5720] usb 1-1: Product: syz [ 212.206562][ T5720] usb 1-1: Manufacturer: syz [ 212.222746][ T29] audit: type=1400 audit(1783159653.863:625): avc: denied { getopt } for pid=7847 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 212.264816][ T5720] usb 1-1: SerialNumber: syz [ 212.273258][ T5720] usb 1-1: config 0 descriptor?? [ 212.293462][ T5798] rc_core: IR keymap rc-imon-pad not found [ 212.302360][ T5798] Registered IR keymap rc-empty [ 212.327878][ T5798] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 212.349486][ T29] audit: type=1400 audit(1783159653.963:626): avc: denied { bind } for pid=7847 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.372041][ T5798] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 212.384218][ T5798] imon:send_packet: packet tx failed (-71) [ 212.409221][ T5798] imon 4-1:155.0: remote input dev register failed [ 212.420285][ T5798] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 212.429806][ T29] audit: type=1400 audit(1783159653.963:627): avc: denied { node_bind } for pid=7847 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 212.533742][ T5798] imon 4-1:155.0: unable to initialize intf0, err 0 [ 212.555690][ T5798] imon:imon_probe: failed to initialize context! [ 212.581971][ T5798] imon 4-1:155.0: unable to register, err -19 [ 212.629510][ T5798] imon 4-1:155.1: inconsistent driver matching [ 212.642403][ T5798] imon 4-1:155.1: unable to register, err -22 [ 212.658095][ T5798] imon 4-1:155.1: probe with driver imon failed with error -22 [ 212.674809][ T5798] usb 4-1: USB disconnect, device number 23 [ 213.428928][ T7866] ip6t_srh: unknown srh invflags 4000 [ 213.436586][ T29] audit: type=1400 audit(1783159655.203:628): avc: denied { bind } for pid=7864 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.484349][ T29] audit: type=1400 audit(1783159655.233:629): avc: denied { listen } for pid=7864 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.743213][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 213.893305][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 213.899760][ T24] usb 6-1: config 155 has an invalid interface number: 1 but max is 0 [ 213.908130][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 213.918470][ T24] usb 6-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 213.927928][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 213.939633][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 213.953217][ T5727] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 213.955470][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 213.969962][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.978032][ T24] usb 6-1: Product: syz [ 213.982224][ T24] usb 6-1: Manufacturer: syz [ 213.986870][ T24] usb 6-1: SerialNumber: syz [ 213.996719][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 214.005159][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input25 [ 214.105421][ T5727] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 214.114065][ T5727] usb 5-1: config 0 has no interface number 0 [ 214.120476][ T5727] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 214.139213][ T5727] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 214.167505][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.211176][ T5727] usb 5-1: Product: syz [ 214.221536][ T5727] usb 5-1: Manufacturer: syz [ 214.231907][ T5727] usb 5-1: SerialNumber: syz [ 214.250798][ T5727] usb 5-1: config 0 descriptor?? [ 214.271701][ T7876] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 214.481208][ T5727] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:db:f2:ff:c1:64 [ 214.602944][ T5626] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 214.624985][ T5626] Bluetooth: hci0: Injecting HCI hardware error event [ 214.641299][ T5624] Bluetooth: hci0: hardware error 0x00 [ 214.647064][ T7883] overlayfs: overlapping lowerdir path [ 214.741674][ T5727] usb 5-1: USB disconnect, device number 27 [ 214.782403][ T5720] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 214.792743][ T5720] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 214.820431][ T5727] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 214.856555][ T5720] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 214.897838][ T5720] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 215.044230][ T5720] usb 1-1: USB disconnect, device number 35 [ 215.573631][ T1749] block nbd1: Possible stuck request ffff888027de7000: control (read@0,1024B). Runtime 120 seconds [ 215.584523][ T1749] block nbd1: Possible stuck request ffff888027de71c0: control (read@1024,1024B). Runtime 120 seconds [ 215.597203][ T1749] block nbd1: Possible stuck request ffff888027de7380: control (read@2048,1024B). Runtime 120 seconds [ 215.609284][ T1749] block nbd1: Possible stuck request ffff888027de7540: control (read@3072,1024B). Runtime 120 seconds [ 216.621424][ T7903] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7903 comm=syz.2.555 [ 217.093236][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 217.286922][ T24] imon:send_packet: packet tx failed (-71) [ 217.313663][ T24] imon 6-1:155.0: panel buttons/knobs setup failed [ 217.329278][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 217.355232][ T24] (id 0x00) [ 217.484557][ T24] rc_core: IR keymap rc-imon-pad not found [ 217.505246][ T24] Registered IR keymap rc-empty [ 217.519579][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 217.554298][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 217.585897][ T24] imon:send_packet: packet tx failed (-71) [ 217.613323][ T24] imon 6-1:155.0: remote input dev register failed [ 217.639231][ T24] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 217.780302][ T24] imon 6-1:155.0: unable to initialize intf0, err 0 [ 217.792413][ T24] imon:imon_probe: failed to initialize context! [ 217.806731][ T24] imon 6-1:155.0: unable to register, err -19 [ 217.817036][ T24] imon 6-1:155.1: inconsistent driver matching [ 217.824062][ T24] imon 6-1:155.1: unable to register, err -22 [ 217.830276][ T24] imon 6-1:155.1: probe with driver imon failed with error -22 [ 217.846535][ T24] usb 6-1: USB disconnect, device number 6 [ 218.333069][ T29] audit: type=1400 audit(1783159660.103:630): avc: denied { create } for pid=7919 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.378033][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.557'. [ 218.470341][ T29] audit: type=1400 audit(1783159660.243:632): avc: denied { ioctl } for pid=7919 comm="syz.2.557" path="socket:[18208]" dev="sockfs" ino=18208 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.545420][ T29] audit: type=1400 audit(1783159660.243:631): avc: denied { ioctl } for pid=7919 comm="syz.2.557" path="socket:[18208]" dev="sockfs" ino=18208 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.626050][ T29] audit: type=1400 audit(1783159660.403:633): avc: denied { setopt } for pid=7919 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.541122][ T7956] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 220.611171][ T7956] bond1: entered promiscuous mode [ 220.616562][ T7956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.705880][ T190] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 221.053209][ T190] usb 4-1: Using ep0 maxpacket: 32 [ 221.079739][ T190] usb 4-1: config 155 has an invalid interface number: 1 but max is 0 [ 221.118927][ T190] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 221.159561][ T190] usb 4-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 221.226158][ T190] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 221.262626][ T190] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 221.289534][ T190] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 221.302266][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.318691][ T190] usb 4-1: Product: syz [ 221.324937][ T190] usb 4-1: Manufacturer: syz [ 221.344829][ T190] usb 4-1: SerialNumber: syz [ 221.365009][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 221.385622][ T190] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input27 [ 221.395937][ T7968] netlink: 'syz.4.575': attribute type 21 has an invalid length. [ 221.465288][ T7968] netlink: 128 bytes leftover after parsing attributes in process `syz.4.575'. [ 221.559452][ T7968] netlink: 'syz.4.575': attribute type 4 has an invalid length. [ 221.753181][ T7968] netlink: 3 bytes leftover after parsing attributes in process `syz.4.575'. [ 222.279558][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'. [ 222.291123][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'. [ 222.683361][ T5727] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 222.839589][ T5727] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.860386][ T5727] usb 6-1: not running at top speed; connect to a high speed hub [ 222.874467][ T5727] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 149, changing to 4 [ 222.896042][ T5727] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 222.951259][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.975606][ T5727] usb 6-1: Product: Ñ— [ 222.988982][ T5727] usb 6-1: Manufacturer: 痲ﱒ酛àªíš¯é‚³î½‹ã™’ᮂ刖쿱鸮ḩ [ 223.006167][ T5727] usb 6-1: SerialNumber: 㔓ဈ頽è‚㎅㙟ꗨǷﾼặⲮ뢨î¢ã†¯ì…‘擩섺럄餭䥗䘆ਫ嵆螠땼쨄黿ëºè•·ïŒŠàº¢äŽ‚榘ኼꌿî†é•©æ¸»ê®šë–ºã·¡ç¸ºë”…먾쎆夑⃄ธ콽è¤Ô¼îžžè¼±å¿°æŒ°é«ãŸ¸é˜…ê²’å–®æ­ [ 223.195799][ T190] imon:send_packet: packet tx failed (-71) [ 223.202767][ T8003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.585'. [ 223.233230][ T190] imon 4-1:155.0: panel buttons/knobs setup failed [ 223.246324][ T190] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 223.259872][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 223.274065][ T5727] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 223.282228][ T190] (id 0x00) [ 223.292236][ T5727] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 223.454408][ T190] rc_core: IR keymap rc-imon-pad not found [ 223.466981][ T190] Registered IR keymap rc-empty [ 223.486874][ T5727] usb 6-1: USB disconnect, device number 7 [ 223.492891][ T190] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 223.525017][ T190] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 223.543932][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 223.560377][ T190] imon:send_packet: packet tx failed (-71) [ 223.580348][ T6183] udevd[6183]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 223.583858][ T190] imon 4-1:155.0: remote input dev register failed [ 223.642528][ T190] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 223.713532][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 223.725861][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 223.739778][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.752120][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 223.763845][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.772131][ T9] usb 3-1: Product: syz [ 223.815931][ T9] usb 3-1: Manufacturer: syz [ 223.821149][ T190] imon 4-1:155.0: unable to initialize intf0, err 0 [ 223.835367][ T9] usb 3-1: SerialNumber: syz [ 223.845891][ T190] imon:imon_probe: failed to initialize context! [ 223.862655][ T9] usb 3-1: config 0 descriptor?? [ 223.872051][ T190] imon 4-1:155.0: unable to register, err -19 [ 223.938393][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 223.947715][ T190] imon 4-1:155.1: inconsistent driver matching [ 223.974778][ T190] imon 4-1:155.1: unable to register, err -22 [ 224.027592][ T190] imon 4-1:155.1: probe with driver imon failed with error -22 [ 224.070588][ T29] audit: type=1400 audit(1783159665.843:634): avc: denied { ioctl } for pid=8012 comm="syz.5.588" path="socket:[19482]" dev="sockfs" ino=19482 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.185291][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 224.198060][ T190] usb 4-1: USB disconnect, device number 24 [ 224.519737][ T9] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 224.571948][ T9] usb 3-1: USB disconnect, device number 23 [ 224.750076][ T8020] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 224.786875][ T8020] CIFS mount error: No usable UNC path provided in device string! [ 224.786875][ T8020] [ 224.808891][ T8020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 225.385626][ T8030] netlink: 'syz.0.592': attribute type 21 has an invalid length. [ 225.411528][ T8030] netlink: 128 bytes leftover after parsing attributes in process `syz.0.592'. [ 225.529122][ T8032] input: syz0 as /devices/virtual/input/input29 [ 225.625062][ T8030] netlink: 'syz.0.592': attribute type 4 has an invalid length. [ 225.692350][ T8035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.703850][ T8035] block device autoloading is deprecated and will be removed. [ 225.719225][ T190] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 225.763967][ T8030] netlink: 3 bytes leftover after parsing attributes in process `syz.0.592'. [ 225.939233][ T29] audit: type=1400 audit(1783159667.713:635): avc: denied { mount } for pid=8039 comm="syz.0.597" name="/" dev="autofs" ino=18989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 226.013281][ T190] usb 5-1: Using ep0 maxpacket: 16 [ 226.065492][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.079490][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18176, setting to 1024 [ 226.098743][ T190] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.123409][ T190] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.156309][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.166415][ T29] audit: type=1400 audit(1783159667.943:636): avc: denied { mounton } for pid=8039 comm="syz.0.597" path="/bus" dev="autofs" ino=18992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 226.188648][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 226.196313][ T8044] overlay: filesystem on ./file1 not supported [ 226.220375][ T190] usb 5-1: config 0 descriptor?? [ 226.256310][ T8027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.493292][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 226.794961][ T24] usb 6-1: config 155 has an invalid interface number: 1 but max is 0 [ 226.800684][ T190] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 226.813172][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 226.866160][ T24] usb 6-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 226.884547][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 226.909085][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 226.927950][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 226.938282][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.947576][ T24] usb 6-1: Product: syz [ 226.952246][ T24] usb 6-1: Manufacturer: syz [ 226.957392][ T24] usb 6-1: SerialNumber: syz [ 226.961291][ T190] microsoft 0003:045E:07DA.000E: no inputs found [ 226.986497][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 226.990573][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.996462][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input31 [ 227.012048][ T190] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 227.020836][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.048168][ T29] audit: type=1400 audit(1783159668.813:637): avc: denied { remount } for pid=8048 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 227.275227][ T190] usb 5-1: USB disconnect, device number 28 [ 229.120031][ T24] imon:send_packet: packet tx failed (-71) [ 229.163182][ T24] imon 6-1:155.0: panel buttons/knobs setup failed [ 229.181898][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.610'. [ 229.194135][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 229.225010][ T24] (id 0x00) [ 229.228684][ T8084] xt_connbytes: Forcing CT accounting to be enabled [ 229.251787][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 229.393404][ T24] rc_core: IR keymap rc-imon-pad not found [ 229.399296][ T24] Registered IR keymap rc-empty [ 229.407253][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 229.951413][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 229.995502][ T24] imon:send_packet: packet tx failed (-71) [ 230.033309][ T5727] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 230.144581][ T24] imon 6-1:155.0: remote input dev register failed [ 230.153334][ T24] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 230.180098][ T8101] FAULT_INJECTION: forcing a failure. [ 230.180098][ T8101] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 230.183329][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 230.194242][ T8101] CPU: 1 UID: 0 PID: 8101 Comm: syz.3.614 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.194268][ T8101] Tainted: [L]=SOFTLOCKUP [ 230.194273][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.194282][ T8101] Call Trace: [ 230.194288][ T8101] [ 230.194294][ T8101] dump_stack_lvl+0x100/0x190 [ 230.194319][ T8101] should_fail_ex.cold+0x5/0xa [ 230.194339][ T8101] _copy_from_user+0x2e/0xd0 [ 230.194357][ T8101] __sys_bpf+0x2f5/0x4e80 [ 230.194386][ T8101] ? __pfx___sys_bpf+0x10/0x10 [ 230.194407][ T8101] ? find_held_lock+0x2b/0x80 [ 230.194427][ T8101] ? get_pid_task+0xfc/0x250 [ 230.194448][ T8101] ? get_pid_task+0xfc/0x250 [ 230.194475][ T8101] ? find_held_lock+0x2b/0x80 [ 230.194500][ T8101] ? rcu_read_lock_any_held+0x6a/0xa0 [ 230.194522][ T8101] ? find_held_lock+0x2b/0x80 [ 230.194542][ T8101] ? ksys_write+0x190/0x250 [ 230.194562][ T8101] ? ksys_write+0x190/0x250 [ 230.194597][ T8101] ? fput+0x79/0x100 [ 230.194615][ T8101] ? __x64_sys_bpf+0xce/0x140 [ 230.194636][ T8101] __x64_sys_bpf+0xce/0x140 [ 230.194659][ T8101] ? do_syscall_64+0x90/0x870 [ 230.194681][ T8101] do_syscall_64+0x115/0x870 [ 230.194700][ T8101] ? clear_bhb_loop+0x40/0x90 [ 230.194719][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.194734][ T8101] RIP: 0033:0x7f9550d9de59 [ 230.194748][ T8101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.194762][ T8101] RSP: 002b:00007f9551ca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.194778][ T8101] RAX: ffffffffffffffda RBX: 00007f9551026090 RCX: 00007f9550d9de59 [ 230.194788][ T8101] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 230.194797][ T8101] RBP: 00007f9551ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 230.194806][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.194814][ T8101] R13: 00007f9551026128 R14: 00007f9551026090 R15: 00007fff32d03618 [ 230.194835][ T8101] [ 230.411126][ T5727] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 230.412756][ T24] imon 6-1:155.0: unable to initialize intf0, err 0 [ 230.422427][ T5727] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.438450][ T24] imon:imon_probe: failed to initialize context! [ 230.440088][ T5727] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 230.454883][ T24] imon 6-1:155.0: unable to register, err -19 [ 230.456818][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.491428][ T24] imon 6-1:155.1: inconsistent driver matching [ 230.492273][ T5727] usb 3-1: Product: syz [ 230.504319][ T5727] usb 3-1: Manufacturer: syz [ 230.509087][ T5727] usb 3-1: SerialNumber: syz [ 230.529248][ T5727] usb 3-1: config 0 descriptor?? [ 230.544324][ T5727] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 230.631275][ T24] imon 6-1:155.1: unable to register, err -22 [ 230.637594][ T24] imon 6-1:155.1: probe with driver imon failed with error -22 [ 230.656809][ T24] usb 6-1: USB disconnect, device number 8 [ 231.396365][ T5727] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 231.454850][ T5727] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 231.523098][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.619'. [ 231.526464][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.619'. [ 231.549345][ T5727] usb 3-1: USB disconnect, device number 24 [ 231.758768][ T8119] netlink: 'syz.3.617': attribute type 10 has an invalid length. [ 231.843377][ T5798] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 232.118597][ T8116] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.268707][ T8132] loop6: detected capacity change from 0 to 2640 [ 232.310902][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.343632][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.406137][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.587423][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.744862][ T8119] team0 (unregistering): Port device ipip0 removed [ 232.764430][ T5798] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.772258][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.776459][ T5798] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 232.804506][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.818285][ T5798] usb 5-1: can't read configurations, error -71 [ 232.825474][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.843453][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.876662][ T8132] ldm_validate_partition_table(): Disk read failed. [ 232.953971][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.976052][ T8145] /dev/nullb0: Can't open blockdev [ 233.108931][ T8132] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.117656][ T8146] FAULT_INJECTION: forcing a failure. [ 233.117656][ T8146] name failslab, interval 1, probability 0, space 0, times 1 [ 233.130286][ T8146] CPU: 1 UID: 0 PID: 8146 Comm: syz.5.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.130303][ T8146] Tainted: [L]=SOFTLOCKUP [ 233.130306][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.130313][ T8146] Call Trace: [ 233.130317][ T8146] [ 233.130321][ T8146] dump_stack_lvl+0x100/0x190 [ 233.130339][ T8146] should_fail_ex.cold+0x5/0xa [ 233.130353][ T8146] should_failslab+0xc2/0x120 [ 233.130366][ T8146] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 233.130379][ T8146] ? __get_vm_area_node+0x101/0x330 [ 233.130394][ T8146] __get_vm_area_node+0x101/0x330 [ 233.130410][ T8146] __vmalloc_node_range_noprof+0x228/0x1630 [ 233.130425][ T8146] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 233.130437][ T8146] ? find_held_lock+0x2b/0x80 [ 233.130453][ T8146] ? __lock_acquire+0x49f/0x1a40 [ 233.130466][ T8146] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 233.130482][ T8146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.130496][ T8146] ? find_held_lock+0x2b/0x80 [ 233.130510][ T8146] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.130521][ T8146] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.130533][ T8146] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.130544][ T8146] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 233.130555][ T8146] __vmalloc_node_noprof+0xad/0xf0 [ 233.130568][ T8146] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 233.130582][ T8146] __vmalloc_noprof+0xa3/0x120 [ 233.130595][ T8146] ? __pfx___vmalloc_noprof+0x10/0x10 [ 233.130610][ T8146] ? rcu_is_watching+0x12/0xc0 [ 233.130624][ T8146] ? cap_capable+0x107/0x430 [ 233.130637][ T8146] bpf_prog_alloc_no_stats+0x59/0x630 [ 233.130649][ T8146] ? security_capable+0x80/0x260 [ 233.130661][ T8146] bpf_prog_alloc+0x3b/0x200 [ 233.130672][ T8146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.130684][ T8146] bpf_prog_load+0x4a9/0x2fa0 [ 233.130703][ T8146] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.130719][ T8146] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.130740][ T8146] __sys_bpf+0x18dc/0x4e80 [ 233.130760][ T8146] ? __pfx___sys_bpf+0x10/0x10 [ 233.130776][ T8146] ? find_held_lock+0x2b/0x80 [ 233.130790][ T8146] ? get_pid_task+0xfc/0x250 [ 233.130805][ T8146] ? get_pid_task+0xfc/0x250 [ 233.130824][ T8146] ? find_held_lock+0x2b/0x80 [ 233.130841][ T8146] ? rcu_read_lock_any_held+0x6a/0xa0 [ 233.130857][ T8146] ? find_held_lock+0x2b/0x80 [ 233.130871][ T8146] ? ksys_write+0x190/0x250 [ 233.130885][ T8146] ? ksys_write+0x190/0x250 [ 233.130916][ T8146] ? fput+0x79/0x100 [ 233.130928][ T8146] ? __x64_sys_bpf+0xce/0x140 [ 233.130944][ T8146] __x64_sys_bpf+0xce/0x140 [ 233.130966][ T8146] ? do_syscall_64+0x90/0x870 [ 233.130988][ T8146] do_syscall_64+0x115/0x870 [ 233.131003][ T8146] ? clear_bhb_loop+0x40/0x90 [ 233.131015][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.131026][ T8146] RIP: 0033:0x7f290eb9de59 [ 233.131036][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.131046][ T8146] RSP: 002b:00007f290fa07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.131057][ T8146] RAX: ffffffffffffffda RBX: 00007f290ee26090 RCX: 00007f290eb9de59 [ 233.131063][ T8146] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 233.131070][ T8146] RBP: 00007f290fa07090 R08: 0000000000000000 R09: 0000000000000000 [ 233.131076][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.131081][ T8146] R13: 00007f290ee26128 R14: 00007f290ee26090 R15: 00007ffe29d8dc18 [ 233.131094][ T8146] [ 233.131223][ T8146] syz.5.627: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.489736][ T8146] CPU: 1 UID: 0 PID: 8146 Comm: syz.5.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.489755][ T8146] Tainted: [L]=SOFTLOCKUP [ 233.489759][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.489766][ T8146] Call Trace: [ 233.489770][ T8146] [ 233.489774][ T8146] dump_stack_lvl+0x100/0x190 [ 233.489791][ T8146] warn_alloc.cold+0x94/0xa8 [ 233.489803][ T8146] ? __pfx_warn_alloc+0x10/0x10 [ 233.489819][ T8146] ? __kasan_kmalloc+0x8a/0xb0 [ 233.489835][ T8146] ? __get_vm_area_node+0x208/0x330 [ 233.489850][ T8146] __vmalloc_node_range_noprof+0xccd/0x1630 [ 233.489864][ T8146] ? find_held_lock+0x2b/0x80 [ 233.489881][ T8146] ? __lock_acquire+0x49f/0x1a40 [ 233.489894][ T8146] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 233.489910][ T8146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.489924][ T8146] ? find_held_lock+0x2b/0x80 [ 233.489938][ T8146] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.489953][ T8146] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.489973][ T8146] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.489992][ T8146] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 233.490014][ T8146] __vmalloc_node_noprof+0xad/0xf0 [ 233.490028][ T8146] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 233.490041][ T8146] __vmalloc_noprof+0xa3/0x120 [ 233.490054][ T8146] ? __pfx___vmalloc_noprof+0x10/0x10 [ 233.490069][ T8146] ? rcu_is_watching+0x12/0xc0 [ 233.490084][ T8146] ? cap_capable+0x107/0x430 [ 233.490097][ T8146] bpf_prog_alloc_no_stats+0x59/0x630 [ 233.490108][ T8146] ? security_capable+0x80/0x260 [ 233.490121][ T8146] bpf_prog_alloc+0x3b/0x200 [ 233.490132][ T8146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.490144][ T8146] bpf_prog_load+0x4a9/0x2fa0 [ 233.490163][ T8146] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.490178][ T8146] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.490200][ T8146] __sys_bpf+0x18dc/0x4e80 [ 233.490219][ T8146] ? __pfx___sys_bpf+0x10/0x10 [ 233.490235][ T8146] ? find_held_lock+0x2b/0x80 [ 233.490250][ T8146] ? get_pid_task+0xfc/0x250 [ 233.490264][ T8146] ? get_pid_task+0xfc/0x250 [ 233.490283][ T8146] ? find_held_lock+0x2b/0x80 [ 233.490301][ T8146] ? rcu_read_lock_any_held+0x6a/0xa0 [ 233.490317][ T8146] ? find_held_lock+0x2b/0x80 [ 233.490331][ T8146] ? ksys_write+0x190/0x250 [ 233.490346][ T8146] ? ksys_write+0x190/0x250 [ 233.490369][ T8146] ? fput+0x79/0x100 [ 233.490382][ T8146] ? __x64_sys_bpf+0xce/0x140 [ 233.490398][ T8146] __x64_sys_bpf+0xce/0x140 [ 233.490414][ T8146] ? do_syscall_64+0x90/0x870 [ 233.490431][ T8146] do_syscall_64+0x115/0x870 [ 233.490445][ T8146] ? clear_bhb_loop+0x40/0x90 [ 233.490458][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.490469][ T8146] RIP: 0033:0x7f290eb9de59 [ 233.490480][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.490490][ T8146] RSP: 002b:00007f290fa07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.490500][ T8146] RAX: ffffffffffffffda RBX: 00007f290ee26090 RCX: 00007f290eb9de59 [ 233.490509][ T8146] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 233.490515][ T8146] RBP: 00007f290fa07090 R08: 0000000000000000 R09: 0000000000000000 [ 233.490521][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.490526][ T8146] R13: 00007f290ee26128 R14: 00007f290ee26090 R15: 00007ffe29d8dc18 [ 233.490540][ T8146] [ 233.490543][ T8146] Mem-Info: [ 233.813256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 233.832161][ T8146] active_anon:37888 inactive_anon:0 isolated_anon:0 [ 233.832161][ T8146] active_file:0 inactive_file:57541 isolated_file:0 [ 233.832161][ T8146] unevictable:768 dirty:232 writeback:0 [ 233.832161][ T8146] slab_reclaimable:7576 slab_unreclaimable:104900 [ 233.832161][ T8146] mapped:41916 shmem:28022 pagetables:1491 [ 233.832161][ T8146] sec_pagetables:0 bounce:0 [ 233.832161][ T8146] kernel_misc_reclaimable:0 [ 233.832161][ T8146] free:1255831 free_pcp:11953 free_cma:0 [ 233.877509][ T8146] Node 0 active_anon:149504kB inactive_anon:0kB active_file:0kB inactive_file:229904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167612kB dirty:908kB writeback:0kB shmem:108504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13176kB pagetables:5816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 233.911995][ T8146] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:20kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 233.945998][ T8146] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.975945][ T8146] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 233.981691][ T8146] Node 0 DMA32 free:1072560kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:149504kB inactive_anon:0kB active_file:0kB inactive_file:229904kB unevictable:1536kB writepending:908kB zspages:0kB present:3129332kB managed:2532384kB mlocked:0kB bounce:0kB free_pcp:47636kB local_pcp:17536kB free_cma:0kB [ 234.014803][ T8146] lowmem_reserve[]: 0 0 0 0 0 [ 234.020393][ T8146] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.049685][ T8146] lowmem_reserve[]: 0 0 0 0 0 [ 234.054415][ T8146] Node 1 Normal free:3935404kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:160kB free_cma:0kB [ 234.086842][ T8146] lowmem_reserve[]: 0 0 0 0 0 [ 234.091538][ T8146] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.104159][ T8146] Node 0 DMA32: 650*4kB (UM) 299*8kB (UME) 505*16kB (UME) 349*32kB (UME) 200*64kB (UME) 216*128kB (UME) 39*256kB (UME) 15*512kB (ME) 11*1024kB (UME) 8*2048kB (UM) 235*4096kB (UM) = 1072560kB [ 234.123578][ T8146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 234.135440][ T8146] Node 1 Normal: 11*4kB (UM) 8*8kB (UM) 16*16kB (UM) 8*32kB (UM) 13*64kB (UM) 10*128kB (UM) 6*256kB (M) 6*512kB (UM) 6*1024kB (UM) 1*2048kB (M) 957*4096kB (M) = 3935404kB [ 234.152549][ T8146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.162126][ T8146] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.171424][ T8146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.180976][ T8146] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.190278][ T8146] 85559 total pagecache pages [ 234.194943][ T8146] 0 pages in swap cache [ 234.199090][ T8146] Free swap = 124996kB [ 234.203235][ T8146] Total swap = 124996kB [ 234.207375][ T8146] 2097051 pages RAM [ 234.211176][ T8146] 0 pages HighMem/MovableOnly [ 234.215843][ T8146] 432243 pages reserved [ 234.219988][ T8146] 0 pages cma reserved [ 234.462016][ T8132] Dev loop6: unable to read RDB block 0 [ 234.602391][ T8132] loop6: unable to read partition table [ 235.366798][ T8132] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 235.823405][ T5727] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 236.488933][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 236.496883][ T5727] usb 3-1: config 155 has an invalid interface number: 1 but max is 0 [ 236.517060][ T5727] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 236.553632][ T5727] usb 3-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 236.582336][ T29] audit: type=1400 audit(1783159678.353:638): avc: denied { write } for pid=8134 comm="syz.0.625" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 236.606622][ T5727] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 236.646641][ T5727] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 236.756012][ T5727] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 236.765784][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.785878][ T5727] usb 3-1: Product: syz [ 236.790231][ T5727] usb 3-1: Manufacturer: syz [ 236.805865][ T5727] usb 3-1: SerialNumber: syz [ 236.832977][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 236.874396][ T5727] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input33 [ 237.085227][ T8182] netlink: 'syz.3.635': attribute type 21 has an invalid length. [ 237.105358][ T8182] netlink: 128 bytes leftover after parsing attributes in process `syz.3.635'. [ 237.122335][ T8182] netlink: 'syz.3.635': attribute type 4 has an invalid length. [ 237.147883][ T8182] netlink: 3 bytes leftover after parsing attributes in process `syz.3.635'. [ 237.436069][ T29] audit: type=1400 audit(1783159679.213:639): avc: denied { ioctl } for pid=8187 comm="syz.5.637" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6f3d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 238.371077][ T8202] xt_hashlimit: size too large, truncated to 1048576 [ 239.256801][ T5727] imon:send_packet: packet tx failed (-71) [ 239.293190][ T5727] imon 3-1:155.0: panel buttons/knobs setup failed [ 239.322623][ T8210] netlink: 48 bytes leftover after parsing attributes in process `syz.3.645'. [ 239.338754][ T5727] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 239.375164][ T5727] (id 0x00) [ 239.404917][ T29] audit: type=1400 audit(1783159681.183:640): avc: denied { create } for pid=8212 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.476675][ T29] audit: type=1400 audit(1783159681.243:641): avc: denied { ioctl } for pid=8212 comm="syz.2.647" path="socket:[19979]" dev="sockfs" ino=19979 ioctlcmd=0x6e84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.519633][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 239.560691][ T8220] bridge_slave_0: default FDB implementation only supports local addresses [ 239.604091][ T5727] rc_core: IR keymap rc-imon-pad not found [ 239.633017][ T5727] Registered IR keymap rc-empty [ 239.644347][ T5727] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 239.676295][ T5727] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 239.694732][ T5727] imon:send_packet: packet tx failed (-71) [ 239.715232][ T5727] imon 3-1:155.0: remote input dev register failed [ 239.726939][ T5727] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 239.763367][ T5727] imon 3-1:155.0: unable to initialize intf0, err 0 [ 239.770359][ T5727] imon:imon_probe: failed to initialize context! [ 239.790192][ T5727] imon 3-1:155.0: unable to register, err -19 [ 239.809498][ T5727] imon 3-1:155.1: inconsistent driver matching [ 239.817889][ T5727] imon 3-1:155.1: unable to register, err -22 [ 239.824783][ T5727] imon 3-1:155.1: probe with driver imon failed with error -22 [ 239.839231][ T5727] usb 3-1: USB disconnect, device number 25 [ 239.883207][ T5784] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 240.236513][ T5784] usb 4-1: Using ep0 maxpacket: 8 [ 241.090325][ T5784] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 241.101471][ T5784] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.111641][ T5784] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 241.120781][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.120848][ T5784] usb 4-1: Product: syz [ 241.120925][ T5784] usb 4-1: Manufacturer: syz [ 241.124363][ T5784] usb 4-1: SerialNumber: syz [ 241.426586][ T5784] usb 4-1: config 0 descriptor?? [ 241.451602][ T5784] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 241.550409][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 241.651975][ T5784] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 241.687043][ T5798] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 241.701130][ T5784] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 241.900951][ T9] usb 4-1: USB disconnect, device number 25 [ 241.965871][ T5798] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.979812][ T5798] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.990874][ T5798] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.005890][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.059725][ T5798] usb 6-1: SerialNumber: syz [ 242.507002][ T5720] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 242.676173][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 242.697665][ T5720] usb 1-1: config 0 interface 0 has no altsetting 0 [ 242.725945][ T5720] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 242.737449][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.810555][ T5720] usb 1-1: config 0 descriptor?? [ 243.474368][ T8276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56313 sclass=netlink_route_socket pid=8276 comm=syz.2.660 [ 243.496996][ T5720] wacom 0003:056A:00BB.000F: unknown main item tag 0x6 [ 243.504029][ T5720] wacom 0003:056A:00BB.000F: ignoring exceeding usage max [ 243.512638][ T5720] wacom 0003:056A:00BB.000F: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 243.555532][ T5720] wacom 0003:056A:00BB.000F: hidraw0: USB HID v0.81 Device [HID 056a:00bb] on usb-dummy_hcd.0-1/input0 [ 243.645238][ T5720] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BB.000F/input/input35 [ 243.663982][ T5798] usb 6-1: 0:2 : does not exist [ 243.785596][ T5798] usb 6-1: unit 5: unexpected type 0x0b [ 243.858991][ T29] audit: type=1400 audit(1783159685.623:642): avc: denied { write } for pid=8255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.910838][ T5720] usb 1-1: USB disconnect, device number 36 [ 243.938548][ T8293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.663'. [ 243.942818][ T8283] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 243.991560][ T8283] UDF-fs: Scanning with blocksize 512 failed [ 244.003684][ T8289] fido_id[8289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 244.021453][ T5798] usb 6-1: USB disconnect, device number 9 [ 244.041642][ T8299] random: crng reseeded on system resumption [ 244.141368][ T29] audit: type=1400 audit(1783159685.913:643): avc: denied { write } for pid=8300 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.202111][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 244.293208][ T1220] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 244.338687][ T8283] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 244.357901][ T8283] UDF-fs: Scanning with blocksize 1024 failed [ 244.380496][ T8283] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 244.401326][ T8283] UDF-fs: Scanning with blocksize 2048 failed [ 244.426378][ T8283] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 244.440702][ T8283] UDF-fs: Scanning with blocksize 4096 failed [ 244.463989][ T1220] usb 5-1: Using ep0 maxpacket: 32 [ 244.470669][ T1220] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 244.480934][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.569195][ T1220] usb 5-1: config 0 descriptor?? [ 244.808735][ T29] audit: type=1400 audit(1783159686.583:644): avc: denied { setopt } for pid=8292 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.042548][ T29] audit: type=1400 audit(1783159686.583:645): avc: denied { write } for pid=8292 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.733133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 245.753137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.870537][ T1749] block nbd1: Possible stuck request ffff888027de7000: control (read@0,1024B). Runtime 150 seconds [ 245.881299][ T1749] block nbd1: Possible stuck request ffff888027de71c0: control (read@1024,1024B). Runtime 150 seconds [ 245.892285][ T1749] block nbd1: Possible stuck request ffff888027de7380: control (read@2048,1024B). Runtime 150 seconds [ 245.903983][ T1749] block nbd1: Possible stuck request ffff888027de7540: control (read@3072,1024B). Runtime 150 seconds [ 246.000120][ T8323] kexec: Could not allocate control_code_buffer [ 246.113227][ T5618] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 246.183784][ T29] audit: type=1400 audit(1783159686.833:646): avc: denied { write } for pid=8302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.287709][ T5618] usb 1-1: device descriptor read/64, error -71 [ 246.405812][ T29] audit: type=1400 audit(1783159687.933:647): avc: denied { write } for pid=8330 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.913198][ T5618] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 247.071826][ T1220] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 247.073330][ T5618] usb 1-1: device descriptor read/64, error -71 [ 247.165169][ T1220] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.202471][ T1220] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 247.213863][ T5618] usb usb1-port1: attempt power cycle [ 247.232146][ T1220] usb 5-1: media controller created [ 247.259211][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.584401][ T5618] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 247.627223][ T5618] usb 1-1: device descriptor read/8, error -71 [ 247.888685][ T8352] vlan2: entered promiscuous mode [ 247.909990][ T8352] bridge0: entered promiscuous mode [ 247.923246][ T5618] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 247.979989][ T8357] netlink: 'syz.5.675': attribute type 21 has an invalid length. [ 247.993306][ T8357] netlink: 128 bytes leftover after parsing attributes in process `syz.5.675'. [ 248.017237][ T8357] netlink: 'syz.5.675': attribute type 4 has an invalid length. [ 248.026311][ T8357] netlink: 3 bytes leftover after parsing attributes in process `syz.5.675'. [ 248.075091][ T1220] az6027: usb out operation failed. (-71) [ 248.083857][ T1220] az6027: usb out operation failed. (-71) [ 248.091306][ T1220] stb0899_attach: Driver disabled by Kconfig [ 248.099235][ T1220] az6027: no front-end attached [ 248.099235][ T1220] [ 248.107651][ T1220] az6027: usb out operation failed. (-71) [ 248.123407][ T1220] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 248.154486][ T1220] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 248.173868][ T5618] usb 1-1: device not accepting address 40, error -71 [ 248.176569][ T1220] dvb-usb: schedule remote query interval to 400 msecs. [ 248.189574][ T1220] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 248.207378][ T5618] usb usb1-port1: unable to enumerate USB device [ 248.235704][ T8363] random: crng reseeded on system resumption [ 248.260256][ T1220] usb 5-1: USB disconnect, device number 31 [ 248.348657][ T8366] pimreg: entered allmulticast mode [ 248.360895][ T8366] pimreg: left allmulticast mode [ 248.428444][ T1220] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 248.521060][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.679'. [ 248.544343][ T5618] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 249.330618][ T5618] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 249.714725][ T5618] usb 1-1: config 0 has no interface number 0 [ 249.739832][ T5618] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 249.757820][ T5618] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 249.767941][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.778632][ T5618] usb 1-1: Product: syz [ 249.782830][ T5618] usb 1-1: Manufacturer: syz [ 249.790525][ T5618] usb 1-1: SerialNumber: syz [ 249.887689][ T5618] usb 1-1: config 0 descriptor?? [ 249.905123][ T8359] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 250.136531][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.142951][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.389275][ T5618] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 92:ea:73:97:7c:a2 [ 250.439236][ T5618] usb 1-1: USB disconnect, device number 41 [ 250.461850][ T5618] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 250.981911][ T8405] netlink: 48 bytes leftover after parsing attributes in process `syz.0.689'. [ 251.447972][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 252.198696][ T5727] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 252.209149][ T8437] random: crng reseeded on system resumption [ 252.445989][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 252.452147][ T29] audit: type=1400 audit(1783159694.113:648): avc: denied { write } for pid=8408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.475941][ T5727] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 252.523188][ T5727] usb 1-1: config 0 interface 0 has no altsetting 0 [ 252.540560][ T5727] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 252.569646][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.073038][ T5727] usb 1-1: Product: syz [ 253.086904][ T5727] usb 1-1: Manufacturer: syz [ 253.100299][ T5727] usb 1-1: SerialNumber: syz [ 253.235790][ T29] audit: type=1400 audit(1783159694.893:649): avc: denied { write } for pid=8453 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.258703][ T5727] usb 1-1: config 0 descriptor?? [ 253.267252][ T5727] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 253.801930][ T5727] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 253.823253][ T8463] netlink: 'syz.2.699': attribute type 21 has an invalid length. [ 253.840323][ T5727] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 253.853785][ T8463] netlink: 128 bytes leftover after parsing attributes in process `syz.2.699'. [ 253.872071][ T8463] netlink: 'syz.2.699': attribute type 4 has an invalid length. [ 253.881343][ T8463] netlink: 3 bytes leftover after parsing attributes in process `syz.2.699'. [ 254.658463][ T5727] usb 1-1: USB disconnect, device number 42 [ 255.195720][ T5798] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 255.264077][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8488 comm=syz.5.705 [ 255.280660][ T8488] IPv6: Can't replace route, no match found [ 255.292076][ T8488] IPv6: Can't replace route, no match found [ 255.444662][ T5798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.455904][ T5798] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.467678][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.511933][ T29] audit: type=1400 audit(1783159697.283:650): avc: denied { write } for pid=8464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.074273][ T1220] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 256.088963][ T5798] usb 5-1: config 0 descriptor?? [ 256.350556][ T29] audit: type=1400 audit(1783159698.123:651): avc: denied { read } for pid=8503 comm="syz.5.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.353336][ T5798] usbhid 5-1:0.0: can't add hid device: -71 [ 256.373251][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.709'. [ 256.393002][ T1220] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.472344][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.603490][ T5798] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 256.640429][ T1220] usb 3-1: Product: syz [ 256.643563][ T8515] netlink: 20 bytes leftover after parsing attributes in process `syz.5.709'. [ 256.653525][ T1220] usb 3-1: Manufacturer: syz [ 256.653547][ T1220] usb 3-1: SerialNumber: syz [ 256.679639][ T5798] usb 5-1: USB disconnect, device number 32 [ 256.682437][ T29] audit: type=1400 audit(1783159698.153:652): avc: denied { getopt } for pid=8503 comm="syz.5.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.777480][ T1220] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.819306][ T8516] xt_hashlimit: size too large, truncated to 1048576 [ 256.841763][ T29] audit: type=1400 audit(1783159698.193:653): avc: denied { write } for pid=8510 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.871039][ T5706] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.920545][ T29] audit: type=1400 audit(1783159698.203:654): avc: denied { lock } for pid=8507 comm="syz.3.710" path="socket:[21595]" dev="sockfs" ino=21595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.963537][ T29] audit: type=1400 audit(1783159698.733:655): avc: denied { bind } for pid=8503 comm="syz.5.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 257.116826][ T5798] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 257.173710][ T8526] random: crng reseeded on system resumption [ 257.237291][ T29] audit: type=1400 audit(1783159699.013:656): avc: denied { wake_alarm } for pid=8527 comm="syz.5.712" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.295270][ T5798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.308764][ T5798] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 257.413157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 257.441292][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.452826][ T5798] usb 5-1: config 0 descriptor?? [ 258.007902][ T5798] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 258.030897][ T5798] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39 [ 258.064267][ T5706] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 258.133145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.163162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 258.301878][ T5706] ath9k_htc: Failed to initialize the device [ 258.809716][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 258.844101][ T5798] usb 5-1: USB disconnect, device number 33 [ 258.908843][ T5706] usb 3-1: ath9k_htc: USB layer deinitialized [ 259.007513][ T29] audit: type=1400 audit(1783159700.743:657): avc: denied { name_bind } for pid=8541 comm="syz.3.716" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 259.039561][ T5727] usb 3-1: USB disconnect, device number 26 [ 259.173465][ T1220] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 259.406394][ T1220] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 259.422319][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 259.445973][ T1220] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 259.456167][ T5798] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 259.463887][ T1220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.473427][ T5727] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 259.474573][ T1220] usb 6-1: Product: syz [ 259.489444][ T1220] usb 6-1: Manufacturer: syz [ 259.497608][ T1220] usb 6-1: SerialNumber: syz [ 259.565259][ T1220] usb 6-1: config 0 descriptor?? [ 259.606116][ T1220] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 259.627833][ T5798] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 259.644752][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.664023][ T5798] usb 5-1: Product: syz [ 259.674820][ T5798] usb 5-1: Manufacturer: syz [ 259.679640][ T5798] usb 5-1: SerialNumber: syz [ 259.689354][ T5798] usb 5-1: config 0 descriptor?? [ 259.697947][ T8558] serio: Serial port ptm0 [ 259.733529][ T5713] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 259.818980][ T5618] usb 6-1: USB disconnect, device number 10 [ 259.852476][ T8562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.876997][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.893970][ T5727] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 259.898246][ T5798] usb 5-1: ignoring: probably an ADSL modem [ 259.901553][ T5727] usb 3-1: can't read configurations, error -71 [ 259.930365][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.940780][ T5713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.963778][ T5713] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.979039][ T5713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 259.988876][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 259.997011][ T5713] usb 4-1: Product: syz [ 260.001265][ T5713] usb 4-1: Manufacturer: syz [ 260.005920][ T5713] usb 4-1: SerialNumber: syz [ 260.020181][ T29] audit: type=1400 audit(1783159701.793:658): avc: denied { write } for pid=8560 comm="syz.0.722" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 260.045221][ T8562] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 260.331758][ T5798] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 260.339000][ T29] audit: type=1804 audit(1783159702.093:659): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.725" name="bus" dev="ramfs" ino=21748 res=1 errno=0 [ 260.420769][ T29] audit: type=1804 audit(1783159702.103:660): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.725" name="bus" dev="ramfs" ino=21748 res=1 errno=0 [ 260.657102][ T5713] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 262.954984][ T5713] usb 4-1: USB disconnect, device number 26 [ 262.995872][ T8588] loop9: detected capacity change from 0 to 524287999 [ 263.004574][ T5713] usblp0: removed [ 263.165462][ T5727] usb 5-1: USB disconnect, device number 34 [ 263.307900][ T8599] netlink: 'syz.0.732': attribute type 4 has an invalid length. [ 263.325206][ T8599] netlink: 17 bytes leftover after parsing attributes in process `syz.0.732'. [ 264.123211][ T1220] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 264.126427][ T8618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.739'. [ 264.170278][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 264.423193][ T5727] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 264.450449][ T8623] fuse: Bad value for 'rootmode' [ 264.500036][ T1220] usb 1-1: unable to get BOS descriptor or descriptor too short [ 264.509766][ T1220] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 264.522882][ T1220] usb 1-1: can't read configurations, error -71 [ 264.693238][ T5798] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 264.843748][ T5798] usb 4-1: Using ep0 maxpacket: 16 [ 264.851056][ T5798] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.871429][ T5798] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.892021][ T5798] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.907302][ T5798] usb 4-1: config 1 interface 1 has no altsetting 0 [ 264.916898][ T5798] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 264.926513][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.939113][ T5798] usb 4-1: Product: syz [ 264.944942][ T5798] usb 4-1: Manufacturer: syz [ 264.949815][ T5798] usb 4-1: SerialNumber: syz [ 265.170213][ T8623] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 265.243593][ T8630] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 265.304168][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 265.309597][ T8623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.324073][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.743'. [ 265.349152][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.3.741'. [ 265.359992][ T5727] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 265.388167][ T5727] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.420074][ T5727] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 265.444201][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.468566][ T5727] usb 3-1: Product: syz [ 265.477809][ T5727] usb 3-1: Manufacturer: syz [ 265.484454][ T8630] bond2: entered promiscuous mode [ 265.491080][ T5727] usb 3-1: SerialNumber: syz [ 265.497052][ T8630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.506190][ T5727] usb 3-1: config 0 descriptor?? [ 265.528118][ T5727] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 265.538380][ T8632] bond1: (slave geneve2): making interface the new active one [ 265.550632][ T8632] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 265.615402][ T5798] usb 4-1: selecting invalid altsetting 0 [ 266.957759][ T5727] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 266.970806][ T5727] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 266.988133][ T5727] usb 3-1: USB disconnect, device number 29 [ 267.245999][ T5798] usb 4-1: USB disconnect, device number 27 [ 267.434670][ T7565] udevd[7565]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 267.523301][ T5720] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 267.707336][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.719319][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 267.743337][ T5720] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.783487][ T5720] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 267.807217][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.824173][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.842268][ T5720] usb 1-1: Product: syz [ 267.854437][ T5720] usb 1-1: Manufacturer: syz [ 267.864184][ T5720] usb 1-1: SerialNumber: syz [ 267.877688][ T8651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.098646][ T8651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.475816][ T5727] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 268.515746][ T29] audit: type=1400 audit(2000000004.820:661): avc: denied { setattr } for pid=8650 comm="syz.0.748" name="" dev="pipefs" ino=4546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 268.853426][ T5727] usb 6-1: unable to get BOS descriptor or descriptor too short [ 268.875213][ T5727] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 268.888338][ T29] audit: type=1400 audit(2000000005.190:662): avc: denied { relabelfrom } for pid=8668 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 268.909956][ T5727] usb 6-1: can't read configurations, error -71 [ 268.956749][ T29] audit: type=1400 audit(2000000005.220:663): avc: denied { relabelto } for pid=8668 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 269.013610][ T8682] netlink: 100 bytes leftover after parsing attributes in process `syz.2.758'. [ 269.310502][ T5720] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 269.320535][ T5720] cdc_ncm 1-1:1.0: bind() failure [ 269.327864][ T5798] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 269.355686][ T5720] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 269.369263][ T5720] cdc_ncm 1-1:1.1: bind() failure [ 269.503550][ T5798] usb 3-1: device descriptor read/64, error -71 [ 269.763230][ T5798] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 269.933482][ T5798] usb 3-1: device descriptor read/64, error -71 [ 269.973347][ T5727] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 270.065032][ T5798] usb usb3-port1: attempt power cycle [ 270.103058][ T6025] Bluetooth: hci6: Frame reassembly failed (-84) [ 270.123748][ T6025] Bluetooth: hci6: Frame reassembly failed (-84) [ 270.144972][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.172103][ T5727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.194868][ T5727] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 270.222133][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.251195][ T5727] usb 6-1: config 0 descriptor?? [ 270.392453][ T5618] usb 1-1: USB disconnect, device number 45 [ 270.444907][ T5798] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 270.503924][ T5798] usb 3-1: device descriptor read/8, error -71 [ 270.596375][ T5727] usbhid 6-1:0.0: can't add hid device: -71 [ 270.619809][ T5727] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 270.656475][ T5727] usb 6-1: USB disconnect, device number 12 [ 270.763824][ T8706] netlink: 48 bytes leftover after parsing attributes in process `syz.5.763'. [ 270.786026][ T5798] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 270.796778][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.763'. [ 270.819515][ T5798] usb 3-1: device descriptor read/8, error -71 [ 270.943486][ T5798] usb usb3-port1: unable to enumerate USB device [ 271.494943][ T5727] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 271.601906][ T8712] random: crng reseeded on system resumption [ 271.653476][ T5727] usb 6-1: Using ep0 maxpacket: 8 [ 271.665392][ T5727] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 271.676760][ T5727] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.685166][ T5727] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 271.694652][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.704516][ T5727] usb 6-1: Product: syz [ 271.708751][ T5727] usb 6-1: Manufacturer: syz [ 271.713398][ T5727] usb 6-1: SerialNumber: syz [ 271.720560][ T5727] usb 6-1: config 0 descriptor?? [ 271.729189][ T5727] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 271.931654][ T5727] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 271.945099][ T5727] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 272.133228][ T5624] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 272.133225][ T5626] Bluetooth: hci6: command 0x1003 tx timeout [ 272.167519][ T5727] usb 6-1: USB disconnect, device number 13 [ 272.649333][ T8733] capability: warning: `syz.4.772' uses deprecated v2 capabilities in a way that may be insecure [ 272.764424][ T5618] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 272.783362][ T5727] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 272.836649][ T29] audit: type=1400 audit(2000000009.140:664): avc: denied { ioctl } for pid=8734 comm="syz.5.773" path="socket:[21290]" dev="sockfs" ino=21290 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 272.946023][ T5618] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 272.957760][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.973947][ T8737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.990358][ T5618] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 273.022505][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.773'. [ 273.341287][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.351340][ T5727] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 273.359238][ T5727] usb 4-1: can't read configurations, error -71 [ 273.384669][ T8744] loop5: detected capacity change from 0 to 1 [ 273.392538][ T8744] Dev loop5: unable to read RDB block 1 [ 273.398597][ T8744] loop5: unable to read partition table [ 273.405001][ T8744] loop5: partition table beyond EOD, truncated [ 273.416871][ T8744] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.563118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 273.579599][ T5618] gspca_sunplus: reg_w_riv err -110 [ 273.603629][ T5618] sunplus 1-1:8.0: probe with driver sunplus failed with error -110 [ 274.245939][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 274.287846][ T4975] Dev loop5: unable to read RDB block 1 [ 274.291057][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 274.306290][ T4975] loop5: unable to read partition table [ 274.321822][ T4975] loop5: partition table beyond EOD, truncated [ 274.428594][ T8755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=8755 comm=syz.2.776 [ 274.449945][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.473171][ T4975] Dev loop5: unable to read RDB block 1 [ 274.478962][ T4975] loop5: unable to read partition table [ 274.479385][ T8761] xt_hashlimit: size too large, truncated to 1048576 [ 274.485395][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.499911][ T4975] loop5: partition table beyond EOD, truncated [ 274.524115][ T29] audit: type=1400 audit(2000000010.820:665): avc: denied { create } for pid=8754 comm="syz.3.779" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.561823][ T8758] fuse: Unknown parameter 'gnoup_id' [ 274.622285][ T29] audit: type=1400 audit(2000000010.860:666): avc: denied { mounton } for pid=8754 comm="syz.3.779" path="/176/file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.689304][ T29] audit: type=1400 audit(2000000010.990:667): avc: denied { unlink } for pid=5606 comm="syz-executor" name="file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 274.723259][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 274.743298][ T5798] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 274.853239][ T1220] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 274.903326][ T5798] usb 5-1: Using ep0 maxpacket: 16 [ 274.914972][ T5798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.947711][ T5798] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.960825][ T5798] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 274.971058][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.980332][ T5798] usb 5-1: Product: syz [ 274.985396][ T5798] usb 5-1: Manufacturer: syz [ 274.990422][ T5798] usb 5-1: SerialNumber: syz [ 274.999990][ T5798] usb 5-1: config 0 descriptor?? [ 275.025613][ T1220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.036874][ T1220] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91 [ 275.047529][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.071148][ T1220] ttusb_dec_send_command: command bulk message failed: error -22 [ 275.082754][ T1220] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -22 [ 275.209536][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.222823][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.238041][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.248143][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.259126][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.394719][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.431623][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.477195][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.517625][ T8770] pimreg: entered allmulticast mode [ 275.522092][ T4975] Dev loop5: unable to read RDB block 1 [ 275.542669][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.542977][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.558972][ T4975] loop5: unable to read partition table [ 275.571418][ T5727] usb 5-1: USB disconnect, device number 35 [ 275.585250][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 275.614275][ T4975] loop5: partition table beyond EOD, truncated [ 275.706916][ T1220] usb 1-1: USB disconnect, device number 46 [ 275.771857][ T8773] netlink: 48 bytes leftover after parsing attributes in process `syz.5.783'. [ 275.824125][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'. [ 276.093389][ T5798] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 276.255221][ T5798] usb 6-1: Using ep0 maxpacket: 8 [ 276.272258][ T5798] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 276.301737][ T5798] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.318039][ T29] audit: type=1400 audit(2000000012.610:668): avc: denied { setopt } for pid=8776 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.358939][ T5798] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 276.374603][ T5798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.375062][ T1749] block nbd1: Possible stuck request ffff888027de7000: control (read@0,1024B). Runtime 180 seconds [ 276.395661][ T1749] block nbd1: Possible stuck request ffff888027de71c0: control (read@1024,1024B). Runtime 180 seconds [ 276.406738][ T1749] block nbd1: Possible stuck request ffff888027de7380: control (read@2048,1024B). Runtime 180 seconds [ 276.419468][ T1749] block nbd1: Possible stuck request ffff888027de7540: control (read@3072,1024B). Runtime 180 seconds [ 276.444965][ T5798] usb 6-1: Product: syz [ 276.481237][ T5798] usb 6-1: Manufacturer: syz [ 276.510358][ T5798] usb 6-1: SerialNumber: syz [ 276.553493][ T5798] usb 6-1: config 0 descriptor?? [ 276.577783][ T5798] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 276.603660][ T5727] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 276.786708][ T5798] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 276.798837][ T5798] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 276.928832][ T5727] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 276.956415][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.988608][ T5727] usb 4-1: config 0 has no interface number 0 [ 277.010668][ T5727] usb 4-1: config 0 interface 205 has no altsetting 0 [ 277.054930][ T5798] usb 6-1: USB disconnect, device number 14 [ 277.126007][ T5727] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 277.151950][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.179165][ T5727] usb 4-1: Product: syz [ 277.189870][ T5727] usb 4-1: Manufacturer: syz [ 277.205362][ T5727] usb 4-1: SerialNumber: syz [ 277.238512][ T5727] usb 4-1: config 0 descriptor?? [ 277.268224][ T5727] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 277.294220][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 277.294234][ T29] audit: type=1400 audit(2000000013.590:669): avc: denied { getopt } for pid=8788 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.336353][ T29] audit: type=1400 audit(2000000013.640:670): avc: denied { map } for pid=8788 comm="syz.4.788" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.358344][ T5727] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 277.372890][ T5727] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 277.391844][ T5727] usb 4-1: media controller created [ 277.473659][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.542573][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 277.584219][ T5727] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 277.633116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 277.692642][ T5727] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 277.725398][ T5727] dvb-usb: schedule remote query interval to 150 msecs. [ 277.741828][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 277.752977][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.783162][ T5727] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 277.830239][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.933824][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 277.967195][ T5727] dvb-usb: error while querying for an remote control event. [ 278.225827][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 278.231890][ T5727] dvb-usb: error while querying for an remote control event. [ 278.274886][ T5727] usb 3-1: USB disconnect, device number 34 [ 278.481109][ T5618] dvb-usb: bulk message failed: -22 (1/0) [ 278.487094][ T5618] dvb-usb: error while querying for an remote control event. [ 279.368755][ T8799] xt_hashlimit: size too large, truncated to 1048576 [ 279.784234][ T5618] dvb-usb: bulk message failed: -22 (1/0) [ 279.792605][ T5618] dvb-usb: error while querying for an remote control event. [ 279.953206][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 279.959281][ T5727] dvb-usb: error while querying for an remote control event. [ 280.143180][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 280.162816][ T5727] dvb-usb: error while querying for an remote control event. [ 280.179077][ T5618] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 280.323332][ T5618] usb 1-1: device descriptor read/64, error -71 [ 280.348746][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 280.364976][ T5727] dvb-usb: error while querying for an remote control event. [ 280.448476][ T5727] usb 4-1: USB disconnect, device number 31 [ 280.461885][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.798'. [ 280.525550][ T5727] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 280.593168][ T5618] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 280.734382][ T5618] usb 1-1: device descriptor read/64, error -71 [ 280.753523][ T5713] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 280.923914][ T5618] usb usb1-port1: attempt power cycle [ 281.353189][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 281.360601][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 281.372405][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.382627][ T5713] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 281.392208][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.411340][ T5713] usb 5-1: Product: syz [ 281.422167][ T5713] usb 5-1: Manufacturer: syz [ 281.441211][ T5713] usb 5-1: SerialNumber: syz [ 281.452796][ T5713] usb 5-1: config 0 descriptor?? [ 281.467365][ T5713] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 281.533274][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 281.545297][ T5618] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 281.586202][ T5618] usb 1-1: device descriptor read/8, error -71 [ 282.000280][ T5713] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 282.016339][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.031268][ T5713] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 282.042190][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 282.064498][ T9] usb 3-1: config 7 has an invalid interface number: 230 but max is 0 [ 282.092596][ T9] usb 3-1: config 7 has no interface number 0 [ 282.108000][ T9] usb 3-1: config 7 interface 230 has no altsetting 0 [ 282.114922][ T5618] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 282.128433][ T9] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff63, bcdDevice=c9.c6 [ 282.141842][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.152751][ T5618] usb 1-1: device descriptor read/8, error -71 [ 282.159084][ T9] usb 3-1: Product: syz [ 282.166347][ T9] usb 3-1: Manufacturer: syz [ 282.171133][ T9] usb 3-1: SerialNumber: syz [ 282.203367][ T5720] usb 5-1: USB disconnect, device number 36 [ 282.273405][ T5618] usb usb1-port1: unable to enumerate USB device [ 282.402440][ T9] option 3-1:7.230: GSM modem (1-port) converter detected [ 282.424652][ T9] usb 3-1: USB disconnect, device number 35 [ 282.457514][ T9] option 3-1:7.230: device disconnected [ 282.623186][ T5618] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 282.785773][ T5618] usb 6-1: Using ep0 maxpacket: 8 [ 282.804702][ T5618] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 282.820791][ T5618] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.831644][ T5618] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.840760][ T5618] usb 6-1: config 1 has no interface number 0 [ 282.848048][ T5618] usb 6-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.850306][ T8849] xt_hashlimit: size too large, truncated to 1048576 [ 282.859952][ T5618] usb 6-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.884012][ T5618] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.893224][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.901497][ T5618] usb 6-1: Product: syz [ 282.931028][ T5618] usb 6-1: Manufacturer: syz [ 282.946395][ T5618] usb 6-1: SerialNumber: syz [ 282.975583][ T5618] cdc_wdm 6-1:1.128: skipping garbage [ 283.006986][ T5618] cdc_wdm 6-1:1.128: cdc-wdm0: USB WDM device [ 283.027829][ T5618] cdc_wdm 6-1:1.128: Unknown control protocol [ 283.064466][ T29] audit: type=1400 audit(2000000019.370:671): avc: denied { append } for pid=8851 comm="syz.0.810" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 283.239290][ T9] usb 6-1: USB disconnect, device number 15 [ 283.317820][ T5618] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 283.449368][ T8862] nft_compat: unsupported protocol 5 [ 283.483172][ T5618] usb 1-1: Using ep0 maxpacket: 8 [ 283.500123][ T5618] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.529125][ T5618] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.548504][ T5618] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 283.570229][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.602972][ T5618] usb 1-1: config 0 descriptor?? [ 283.765874][ T8876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.816'. [ 283.822287][ T5618] usb 1-1: USB disconnect, device number 51 [ 283.825951][ T8878] bond0: entered promiscuous mode [ 283.834373][ T8878] bond_slave_0: entered promiscuous mode [ 283.840915][ T8878] bond_slave_1: entered promiscuous mode [ 283.868836][ T8878] bond0: left promiscuous mode [ 283.878439][ T8878] bond_slave_0: left promiscuous mode [ 283.887489][ T8878] bond_slave_1: left promiscuous mode [ 283.925246][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 284.264193][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 284.623192][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 284.634116][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 284.660285][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 284.678563][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 284.716886][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.750025][ T9] usb 3-1: Product: syz [ 284.765443][ T9] usb 3-1: Manufacturer: syz [ 284.770963][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 284.799851][ T9] usb 3-1: SerialNumber: syz [ 284.813316][ T1220] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 284.826819][ T9] usb 3-1: config 0 descriptor?? [ 284.847908][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 284.860978][ T8900] overlayfs: missing 'lowerdir' [ 284.998315][ T1220] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 285.018381][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.047848][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 285.052162][ T1220] usb 5-1: Product: syz [ 285.074828][ T9] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 285.089521][ T1220] usb 5-1: Manufacturer: syz [ 285.104078][ T1220] usb 5-1: SerialNumber: syz [ 285.138411][ T1220] usb 5-1: config 0 descriptor?? [ 285.156566][ T1220] ch341 5-1:0.0: ch341-uart converter detected [ 285.231956][ T29] audit: type=1400 audit(2000000021.530:672): avc: denied { map } for pid=8912 comm="syz.0.829" path="socket:[22935]" dev="sockfs" ino=22935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 285.262769][ T29] audit: type=1400 audit(2000000021.530:673): avc: denied { accept } for pid=8912 comm="syz.0.829" path="socket:[22935]" dev="sockfs" ino=22935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 285.293741][ T5727] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 285.335628][ T9] usb 3-1: USB disconnect, device number 36 [ 285.458523][ T29] audit: type=1400 audit(2000000021.700:674): avc: denied { write } for pid=8917 comm="syz.0.830" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 285.545734][ T5727] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 285.567978][ T8917] mmap: syz.0.830 (8917): VmData 37724160 exceed data ulimit 32767. Update limits or use boot option ignore_rlimit_data. [ 285.592740][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.674842][ T5727] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 285.738571][ T5727] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 285.806857][ T5727] usb 4-1: Manufacturer: syz [ 285.843361][ T1220] usb 5-1: failed to send control message: -71 [ 285.892681][ T5727] usb 4-1: config 0 descriptor?? [ 287.335930][ T5727] rc_core: IR keymap rc-hauppauge not found [ 287.390769][ T5727] Registered IR keymap rc-empty [ 287.503123][ T29] audit: type=1400 audit(2000000023.800:675): avc: denied { mount } for pid=8939 comm="syz.2.834" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 288.195113][ T1220] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 289.648246][ T1220] usb 5-1: USB disconnect, device number 37 [ 289.865708][ T5727] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 290.243080][ T29] audit: type=1400 audit(2000000023.830:676): avc: denied { remount } for pid=8939 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 290.313419][ T1220] ch341 5-1:0.0: device disconnected [ 290.314146][ T5727] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 290.462508][ T5727] usb 4-1: USB disconnect, device number 32 [ 290.504343][ T29] audit: type=1400 audit(2000000026.800:677): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 290.617965][ T29] audit: type=1400 audit(2000000026.810:678): avc: denied { ioctl } for pid=8953 comm="syz.5.835" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 290.827990][ T8967] xt_hashlimit: size too large, truncated to 1048576 [ 290.922340][ T8969] netlink: 48 bytes leftover after parsing attributes in process `syz.3.840'. [ 290.973278][ T8971] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005 [ 291.447753][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 291.483239][ T8969] bridge_slave_0: default FDB implementation only supports local addresses [ 291.605481][ T8975] sch_tbf: peakrate 9002274071266264692 is lower than or equals to rate 14180566848366662437 ! [ 291.783440][ T5720] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 291.809899][ T8981] program syz.5.844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.033672][ T5720] usb 4-1: Using ep0 maxpacket: 8 [ 292.062685][ T5720] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 292.084262][ T5720] usb 4-1: config 0 interface 0 has no altsetting 0 [ 292.099467][ T5720] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 292.110462][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.119385][ T5720] usb 4-1: Product: syz [ 292.128556][ T29] audit: type=1400 audit(2000000028.430:679): avc: denied { name_bind } for pid=8997 comm="syz.0.849" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 292.184396][ T1220] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 292.195972][ T5720] usb 4-1: Manufacturer: syz [ 292.201511][ T5720] usb 4-1: SerialNumber: syz [ 292.216312][ T5720] usb 4-1: config 0 descriptor?? [ 292.230607][ T5720] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 292.275762][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 292.308331][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 292.322571][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 292.437690][ T5720] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 292.454575][ T5720] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 292.593816][ T1220] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.605961][ T5706] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 292.628780][ T1220] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 292.659647][ T1220] usb 3-1: can't read configurations, error -71 [ 292.714834][ T5727] usb 4-1: USB disconnect, device number 33 [ 292.787224][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.812218][ T5706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.839439][ T5706] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 292.864548][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.883195][ T5706] usb 5-1: SerialNumber: syz [ 292.935821][ T5706] usb 5-1: 0:2 : does not exist [ 293.145980][ T29] audit: type=1326 audit(2000000029.450:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.4.851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f594179de59 code=0x0 [ 293.210222][ T9018] netlink: 'syz.4.851': attribute type 1 has an invalid length. [ 293.375915][ T9026] xt_hashlimit: size too large, truncated to 1048576 [ 293.392914][ T9018] bond1: entered promiscuous mode [ 293.436859][ T9018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.557397][ T9030] bond1: (slave bridge1): making interface the new active one [ 293.627299][ T9030] bridge1: entered promiscuous mode [ 293.751438][ T9030] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 294.570285][ T9043] overlay: ./file0 is not a directory [ 309.655034][ T4975] udevd[4975]: worker [5611] /devices/virtual/block/nbd1 timeout; kill it [ 309.665120][ T4975] udevd[4975]: seq 10953 '/devices/virtual/block/nbd1' killed [ 309.685062][ T31] INFO: task syz.1.330:7030 blocked for more than 147 seconds. [ 309.689941][ T1749] block nbd1: Possible stuck request ffff888027de7000: control (read@0,1024B). Runtime 210 seconds [ 309.692628][ T31] Tainted: G L syzkaller #0 [ 309.692640][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.692648][ T31] task:syz.1.330 state:D stack:28552 pid:7030 tgid:7029 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 309.692705][ T31] Call Trace: [ 309.692712][ T31] [ 309.692723][ T31] __schedule+0x125c/0x6730 [ 309.692757][ T31] ? do_raw_spin_lock+0x128/0x260 [ 309.692789][ T31] ? __pfx___schedule+0x10/0x10 [ 309.692810][ T31] ? find_held_lock+0x2b/0x80 [ 309.692837][ T31] ? schedule+0x225/0x2c0 [ 309.692863][ T31] schedule+0xdd/0x2c0 [ 309.692884][ T31] schedule_preempt_disabled+0x13/0x30 [ 309.692908][ T31] __mutex_lock+0xccc/0x1bd0 [ 309.692940][ T31] ? bdev_open+0x41a/0xe40 [ 309.692962][ T31] ? find_held_lock+0x2b/0x80 [ 309.692989][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 309.693031][ T31] ? bdev_open+0x41a/0xe40 [ 309.693051][ T31] bdev_open+0x41a/0xe40 [ 309.693072][ T31] ? iput+0x3a/0x40 [ 309.693094][ T31] blkdev_open+0x34e/0x4f0 [ 309.693119][ T31] do_dentry_open+0x6ab/0x14d0 [ 309.693145][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 309.693174][ T31] vfs_open+0x82/0x3f0 [ 309.693197][ T31] path_openat+0x2873/0x4280 [ 309.693236][ T31] ? __pfx_path_openat+0x10/0x10 [ 309.693271][ T31] do_file_open+0x20e/0x430 [ 309.693290][ T31] ? __pfx_do_file_open+0x10/0x10 [ 309.693337][ T31] ? alloc_fd+0x471/0x7a0 [ 309.693356][ T31] ? do_getname+0x191/0x390 [ 309.693379][ T31] do_sys_openat2+0x10f/0x1e0 [ 309.693399][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 309.693428][ T31] __x64_sys_openat+0x12d/0x210 [ 309.693449][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 309.693479][ T31] do_syscall_64+0x115/0x870 [ 309.693504][ T31] ? clear_bhb_loop+0x40/0x90 [ 309.693527][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.693545][ T31] RIP: 0033:0x7fd81e55e68e [ 309.693561][ T31] RSP: 002b:00007fd81f3e8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.693579][ T31] RAX: ffffffffffffffda RBX: 00007fd81f3e96c0 RCX: 00007fd81e55e68e [ 309.693592][ T31] RDX: 00000000000c1903 RSI: 00007fd81f3e8c00 RDI: ffffffffffffff9c [ 309.693604][ T31] RBP: 00007fd81f3e8c00 R08: 0000000000000000 R09: 0000000000000000 [ 309.693627][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 309.693640][ T31] R13: 00007fd81e826038 R14: 00007fd81e825fa0 R15: 00007fffa7399a28 [ 309.693665][ T31] [ 309.694024][ T31] [ 309.694024][ T31] Showing all locks held in the system: [ 309.705108][ T1749] block nbd1: Possible stuck request ffff888027de71c0: control (read@1024,1024B). Runtime 210 seconds [ 309.711666][ T31] 2 locks held by kworker/u8:1/14: [ 309.719799][ T1749] block nbd1: Possible stuck request ffff888027de7380: control (read@2048,1024B). Runtime 210 seconds [ 309.731679][ T31] #0: [ 309.735056][ T1749] block nbd1: Possible stuck request ffff888027de7540: control (read@3072,1024B). Runtime 210 seconds [ 309.737888][ T31] ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 310.027914][ T31] #1: ffffc90000137d08 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 310.038172][ T31] 1 lock held by khungtaskd/31: [ 310.043026][ T31] #0: ffffffff8ebe6100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 310.052883][ T31] 2 locks held by kworker/u8:4/67: [ 310.057996][ T31] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 310.069144][ T31] #1: ffffc9000203fd08 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 310.079551][ T31] 2 locks held by getty/5364: [ 310.084237][ T31] #0: ffff8880376790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 310.094067][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 310.104196][ T31] 1 lock held by udevd/5611: [ 310.108783][ T31] #0: ffff888027cbe350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 310.126198][ T31] 6 locks held by kworker/1:3/5706: [ 310.131499][ T31] 4 locks held by kworker/0:5/5713: [ 310.136701][ T31] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 310.147162][ T31] #1: ffffc900045f7d08 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 310.158231][ T31] #2: ffffffff8ecaf120 (pack_mutex){+.+.}-{4:4}, at: bpf_prog_pack_free+0x27/0x430 [ 310.187230][ T31] #3: ffffffff8ea97840 (text_mutex){+.+.}-{4:4}, at: text_poke_set+0xa0/0x170 [ 310.196240][ T31] 4 locks held by udevd/5799: SYZFAIL: failed to send rpc fd=3 want=344 sent=0 n=-1 (errno 32: Broken pipe) [ 310.200916][ T31] #0: ffff888036d97878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 310.209814][ T31] #1: ffff8880562df480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 310.219233][ T31] #2: ffff88804954d788 (kn->active#34){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 310.237493][ T31] #3: ffff888037b131d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 310.246319][ T31] 2 locks held by syz.4.5/5831: [ 310.251163][ T31] 1 lock held by syz.1.330/7030: [ 310.256089][ T31] #0: ffff888027cbe350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 310.265417][ T31] 5 locks held by kworker/u8:10/7821: [ 310.270914][ T31] 1 lock held by syz.3.864/9048: [ 310.275842][ T31] #0: ffffffff8ebf1ba8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 310.285864][ T31] 1 lock held by syz-executor/9050: [ 310.291063][ T31] #0: ffffffff8ebf1ba8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 310.301080][ T31] 1 lock held by dhcpcd/9053: [ 310.305748][ T31] #0: ffff88802a7fe260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 310.315429][ T31] 1 lock held by dhcpcd/9054: [ 310.320092][ T31] #0: ffff888079bea260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 310.329767][ T31] 1 lock held by dhcpcd/9055: [ 310.333497][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.334429][ T31] #0: ffff88802b5da260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 310.334482][ T31] 1 lock held by dhcpcd/9056: [ 310.334490][ T31] #0: ffff88802a7fa260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 310.334532][ T31] 1 lock held by dhcpcd/9057: [ 310.334540][ T31] #0: ffff88802a7f8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 310.334615][ T31] [ 310.334619][ T31] ============================================= [ 310.334619][ T31] [ 310.334626][ T31] NMI backtrace for cpu 1 [ 310.334637][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 310.334656][ T31] Tainted: [L]=SOFTLOCKUP [ 310.334660][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.334668][ T31] Call Trace: [ 310.334673][ T31] [ 310.334678][ T31] dump_stack_lvl+0x100/0x190 [ 310.334697][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 310.334715][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 310.334733][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 310.334752][ T31] sys_info+0x141/0x190 [ 310.334765][ T31] watchdog+0xcb1/0x1030 [ 310.334783][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 310.334801][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.334815][ T31] ? __kthread_parkme+0x18c/0x230 [ 310.334835][ T31] ? kthread+0x13a/0x450 [ 310.334854][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.334867][ T31] kthread+0x370/0x450 [ 310.334886][ T31] ? __pfx_kthread+0x10/0x10 [ 310.334913][ T31] ret_from_fork+0x72b/0xd50 [ 310.334931][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 310.334949][ T31] ? __switch_to+0x800/0x10f0 [ 310.334970][ T31] ? __pfx_kthread+0x10/0x10 [ 310.334990][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.335018][ T31] [ 310.335024][ T31] Sending NMI from CPU 1 to CPUs 0: [ 310.335044][ C0] NMI backtrace for cpu 0 [ 310.335055][ C0] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.335075][ C0] Tainted: [L]=SOFTLOCKUP [ 310.335079][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.335088][ C0] Workqueue: hci6 hci_rx_work [ 310.335107][ C0] RIP: 0010:__bfs+0x1c7/0x2a0 [ 310.335127][ C0] Code: 81 e3 ff 0f 00 00 39 1d 67 e5 84 14 48 89 04 f5 80 ee 24 97 73 11 89 1d 57 e5 84 14 eb 09 0f 1f 44 00 00 4c 89 78 30 48 8b 00 <4c> 39 c0 75 f4 e9 22 ff ff ff b8 01 00 00 00 48 83 c4 30 5b 5d 41 [ 310.335140][ C0] RSP: 0018:ffffc900042ff238 EFLAGS: 00000002 [ 310.335150][ C0] RAX: ffffffff97fae408 RBX: 00000000000003db RCX: 00000000000003e0 [ 310.335159][ C0] RDX: 0000000000000000 RSI: 00000000000003e0 RDI: ffffffff9801d4b8 [ 310.335167][ C0] RBP: 0000000000000030 R08: ffffffff966ca7b8 R09: 0000000000000006 [ 310.335176][ C0] R10: ffffc900042ff3c8 R11: 0000000000000000 R12: ffffffff81e4eba0 [ 310.335184][ C0] R13: ffffc900042ff2e0 R14: ffffffff81e4f9b0 R15: ffffffff9801d4b8 [ 310.335193][ C0] FS: 0000000000000000(0000) GS:ffff888123dee000(0000) knlGS:0000000000000000 [ 310.335207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.335216][ C0] CR2: 00007f1266b57e20 CR3: 000000000e992000 CR4: 00000000003526f0 [ 310.335224][ C0] Call Trace: [ 310.335229][ C0] [ 310.335236][ C0] check_irq_usage+0xe5/0x810 [ 310.335249][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 310.335266][ C0] ? __bfs+0x150/0x2a0 [ 310.335285][ C0] ? check_noncircular+0x97/0x160 [ 310.335300][ C0] ? check_prev_add+0xfe/0xe60 [ 310.335312][ C0] check_prev_add+0xfe/0xe60 [ 310.335326][ C0] __lock_acquire+0x136c/0x1a40 [ 310.335342][ C0] lock_acquire+0x1b9/0x370 [ 310.335355][ C0] ? clockevents_program_event+0x1bf/0x820 [ 310.335376][ C0] ktime_expiry_to_cycles+0x9b/0x2c0 [ 310.335391][ C0] ? clockevents_program_event+0x1bf/0x820 [ 310.335414][ C0] ? lockdep_unlock+0x5a/0xc0 [ 310.335431][ C0] ? __lock_acquire+0xd5b/0x1a40 [ 310.335445][ C0] clockevents_program_event+0x1bf/0x820 [ 310.335464][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 310.335483][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.335500][ C0] tick_program_event+0xa9/0x140 [ 310.335514][ C0] __hrtimer_rearm_deferred+0x234/0x720 [ 310.335532][ C0] ? irqentry_enter+0x2f/0x130 [ 310.335550][ C0] irqentry_exit+0x5f3/0xa00 [ 310.335568][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.335583][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 310.335602][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 d8 b0 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 66 ab 21 00 48 85 ed 0f 85 27 01 00 00 b8 b0 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 310.335614][ C0] RSP: 0018:ffffc900042ff7f8 EFLAGS: 00000293 [ 310.335624][ C0] RAX: 0000000000000000 RBX: 0000000000000035 RCX: ffffffff81e820fa [ 310.335632][ C0] RDX: ffff88807b138000 RSI: ffffffff81e82104 RDI: ffff88807b138000 [ 310.335641][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 310.335649][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200085ff01 [ 310.335657][ C0] R13: 0000000000000200 R14: ffff88801f2d8000 R15: ffffc900042ff8c0 [ 310.335668][ C0] ? vprintk_emit+0x66a/0x6b0 [ 310.335685][ C0] ? vprintk_emit+0x674/0x6b0 [ 310.335703][ C0] ? vprintk_emit+0x674/0x6b0 [ 310.335720][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 310.335737][ C0] ? worker_thread+0x5ef/0xe50 [ 310.335749][ C0] ? ret_from_fork+0x72b/0xd50 [ 310.335763][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 310.335782][ C0] _printk+0xcf/0x110 [ 310.335795][ C0] ? __pfx__printk+0x10/0x10 [ 310.335811][ C0] bt_warn+0xec/0x130 [ 310.335824][ C0] ? __pfx_bt_warn+0x10/0x10 [ 310.335838][ C0] ? rcu_is_watching+0x12/0xc0 [ 310.335855][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 310.335870][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 310.335885][ C0] hci_cmd_complete_evt+0x2d9/0xa20 [ 310.335907][ C0] hci_event_packet+0x51c/0xcd0 [ 310.335924][ C0] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 310.335943][ C0] ? __pfx_hci_event_packet+0x10/0x10 [ 310.335960][ C0] ? kcov_remote_start+0x384/0x670 [ 310.335973][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 310.335992][ C0] hci_rx_work+0x451/0xfc0 [ 310.336009][ C0] process_one_work+0xa23/0x1940 [ 310.336025][ C0] ? __pfx_process_one_work+0x10/0x10 [ 310.336040][ C0] ? __pfx_hci_rx_work+0x10/0x10 [ 310.336057][ C0] worker_thread+0x5ef/0xe50 [ 310.336071][ C0] ? __pfx_worker_thread+0x10/0x10 [ 310.336084][ C0] ? kthread+0x13a/0x450 [ 310.336101][ C0] ? __pfx_worker_thread+0x10/0x10 [ 310.336112][ C0] kthread+0x370/0x450 [ 310.336129][ C0] ? __pfx_kthread+0x10/0x10 [ 310.336148][ C0] ret_from_fork+0x72b/0xd50 [ 310.336163][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 310.336179][ C0] ? __switch_to+0x800/0x10f0 [ 310.336197][ C0] ? __pfx_kthread+0x10/0x10 [ 310.336216][ C0] ret_from_fork_asm+0x1a/0x30 [ 310.336237][ C0] [ 310.337043][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 310.337056][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 310.337076][ T31] Tainted: [L]=SOFTLOCKUP [ 310.337082][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.337091][ T31] Call Trace: [ 310.337097][ T31] [ 310.337103][ T31] dump_stack_lvl+0x100/0x190 [ 310.337125][ T31] vpanic+0x552/0x970 [ 310.337140][ T31] ? __pfx_vpanic+0x10/0x10 [ 310.337155][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 310.337173][ T31] ? rcu_is_watching+0x12/0xc0 [ 310.337197][ T31] panic+0xd1/0xe0 [ 310.337215][ T31] ? __pfx_panic+0x10/0x10 [ 310.337231][ T31] ? wq_watchdog_touch+0xec/0x1a0 [ 310.337253][ T31] ? nmi_trigger_cpumask_backtrace+0x203/0x2a0 [ 310.337270][ T31] ? watchdog.cold+0x1ec/0x234 [ 310.337286][ T31] ? watchdog+0xcc1/0x1030 [ 310.337303][ T31] watchdog.cold+0x1fd/0x234 [ 310.337324][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 310.337343][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.337360][ T31] ? __kthread_parkme+0x18c/0x230 [ 310.337382][ T31] ? kthread+0x13a/0x450 [ 310.337402][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.337417][ T31] kthread+0x370/0x450 [ 310.337437][ T31] ? __pfx_kthread+0x10/0x10 [ 310.337460][ T31] ret_from_fork+0x72b/0xd50 [ 310.337480][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 310.337500][ T31] ? __switch_to+0x800/0x10f0 [ 310.337522][ T31] ? __pfx_kthread+0x10/0x10 [ 310.337545][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.337576][ T31] [ 310.343878][ T31] Kernel Offset: disabled