last executing test programs: 16m20.8730669s ago: executing program 4 (id=1516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000201000010000000000000000000000000a3c000000120a05"], 0x8c}}, 0x0) 16m20.720125214s ago: executing program 4 (id=1518): setuid(0xee01) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r5 = syz_usb_connect$midi(0x1, 0x93, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0xa3, 0x0, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x6, [@midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x4, 0x6, [{0x40, 0x1}, {0xfe, 0x3}, {0x40, 0x7f}, {0x8, 0x20}, {0x2, 0xb9}, {0x8, 0x9}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7, 0x15}, @ms_header={0x7, 0x24, 0x1, 0x400, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xeaa9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0xbc}], [{{0x9, 0x5, 0x4, 0x0, 0x820, 0x4, 0x4, 0x1, {0x9, 0x25, 0x1, 0x5, "76b3b5894d"}}}, {{0x9, 0x5, 0x80, 0x12, 0x200, 0x2e, 0x3, 0x10, {0x14, 0x25, 0x1, 0x10, "5da90c131f76b1e8a27546e83f45c5ed"}}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x5, 0x9, 0x9, {0xa, 0x25, 0x1, 0x6, "21a8db5c7ffa"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x5, 0xb, 0x90, 0xff, 0xb0}, 0x8, &(0x7f0000000340)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x6e, &(0x7f0000000380)=@string={0x6e, 0x3, "a747681cfa13f4b8a1b2c5206c9f2640d38b103c3614af0188234327283bba559d8e9797e21b6db3fcf95ba1f36e98f72b1f754b72c97ce56e11be18738e1dcaf385dc15b0aabaa6d62be521894ae3674ad78dc57c2a57e90a8068a39c3585d770043c533275f7a41ad608e2"}}, {0xba, &(0x7f0000000400)=@string={0xba, 0x3, "8b8b02c139ca0f5a630cb9c55c9ff0dc1ebe50d542ddc68ee97ac0ed83bea34fd5142f1c75b35aa4ebc14260652e5dd692be6e6eb025258d20dfb4b8b987edff59e521e672462a018b5156796a45f08096ba993e7c57017162b46dac0dc63c631a1aa60b41fda50fd363640aa1451a5bf4df9428a0e1f487a3a9531e267c3653949345c6ac49515fff9bc20481c4a4fdd2db3773fdd37d75b231cb2443d259869705376550f8cea187cc6b8800ac756df4dd84a5622d9eb9"}}, {0x43, &(0x7f00000004c0)=@string={0x43, 0x3, "a71a860768c5b0ae9bb7dab59847f9ddb254ea07b08ba6095c3a1f6a619101b6d6d4b9d78e5681d3bb52e6e4f60466a6a280c54263aedbfadf02c404b00845d3e9"}}, {0x100, &(0x7f0000000540)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xb4f4}}, {0x7a, &(0x7f0000000780)=@string={0x7a, 0x3, "bfb1379c0d1b933ca369bc95b4efe3645ba59ea6149942c6b9e7d9d584366f0c31baf1d911fc6af1cdf982f1809627fe141c4c77c4721f0b8d7f5f932fda11df7b321fe3a5d6dff51e4b5d397f1cf2115604077b2d7ba4d97e1746663c71862e81f531bb9d1c23ee04cbf0195029af9d6966fa8e129b7924"}}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYRES16=r8, @ANYRESHEX=r7, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m15.574293797s ago: executing program 4 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001900), 0x2, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) recvmmsg(r1, &(0x7f0000007080)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000400)=""/241, 0xf1}], 0x2, &(0x7f0000000540)=""/61, 0x3d}, 0x7f}, {{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/1, 0x1}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/113, 0x71}, {&(0x7f0000001880)=""/76, 0x4c}, {&(0x7f0000005d80)=""/4112, 0x1010}], 0x7, &(0x7f0000003ac0)=""/101, 0x65}, 0x8}, {{&(0x7f0000003b40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000003bc0)=""/108, 0x6c}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/109, 0x6d}], 0x4}, 0x800}, {{&(0x7f0000005d00)=@alg, 0x80, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/50, 0x32}, 0x7}], 0x4, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff8000}]}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) eventfd(0xa) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000001d", @ANYRES16=r8, @ANYBLOB="01012cbd7000fedbdf25140000000c0007800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x3762585070a84bdc}, 0x24040080) openat$dir(0xffffffffffffff9c, &(0x7f0000001980)='./file0/file0\x00', 0x200081, 0x44) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 16m14.698047442s ago: executing program 4 (id=1536): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x88040, 0x151) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$loop(0x0, 0xffff, 0x14f600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x400, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa6df, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0xd02) sync() socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) 16m13.212258197s ago: executing program 4 (id=1540): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) listen(0xffffffffffffffff, 0x28) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003b00060324bd8822ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 16m13.072021458s ago: executing program 4 (id=1541): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) setresuid(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', r6, 0x1, 0x80, 0x8, 0x389, {{0x9, 0x4, 0x1, 0x35, 0x24, 0x65, 0x0, 0x50, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, {[@lsrr={0x83, 0xf, 0xb3, [@empty, @local, @private=0xa010100]}]}}}}}) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000180)) (rerun: 64) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) (async) r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x229}) io_uring_register$IORING_REGISTER_CLOCK(r7, 0x1d, &(0x7f0000000000)={0x9}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) (async) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="aaf50000", @ANYRES16=r11, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x60}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15m57.764323786s ago: executing program 32 (id=1541): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) setresuid(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', r6, 0x1, 0x80, 0x8, 0x389, {{0x9, 0x4, 0x1, 0x35, 0x24, 0x65, 0x0, 0x50, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, {[@lsrr={0x83, 0xf, 0xb3, [@empty, @local, @private=0xa010100]}]}}}}}) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000180)) (rerun: 64) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) (async) r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x229}) io_uring_register$IORING_REGISTER_CLOCK(r7, 0x1d, &(0x7f0000000000)={0x9}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) (async) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="aaf50000", @ANYRES16=r11, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x60}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 14m59.641826452s ago: executing program 0 (id=1728): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xfffffffd, "fffe08fff100111485d0ae00de4759d43d00000000fe0000000000000800"}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x183201, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') (async) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x10000, 0xfffffffc, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) (async) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 14m58.615797676s ago: executing program 0 (id=1729): socket(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x7, 0x80800) timerfd_gettime(r0, &(0x7f000000a840)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000400), 0x20002, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x63, 0x2) io_uring_setup(0x340a, &(0x7f0000000000)={0x0, 0xb606, 0x10000, 0x2, 0x93, 0x0, r3}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600000000ff8000314a000840", @ANYBLOB="62f509bad291d3390ded7a1f1fbd0527458fb66c60fd9e0180366e62da210ea724abcf9e593c8dfeac4641d0f7c4f5240052234d1f64a89584101eb95a0cd7eb7c3080a7030000000000000090c181515ad80a9b", @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="040000001400010028bd7000fcdbdf25022001c8", @ANYRES32=0x0, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000638000018001280080001007369740c000280ff0100000000000008000a0000", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) writev(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)='c', 0x1}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 14m56.231747559s ago: executing program 0 (id=1732): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xb2, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x20, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x66, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50800"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x1, 0xd, "01ed733a3d63f08339aeaa"}]}, @cipso={0x86, 0x6, 0x20}]}}, "ef58c836"}}}}}, 0x0) 14m56.210578408s ago: executing program 0 (id=1734): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = epoll_create1(0x80000) (async, rerun: 64) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000280)=0x90000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x200, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r4, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000002f40)=ANY=[@ANYBLOB="aaaaaaaaaa140180c200000186dd686f52c30d4b2ffffc000000000000000000000000000001fc0100000000000000000000000000fe2c6b00000000000001579662b67e90c443d6113e7eeffe235e2187fedd697dfe5ec9d31481c00590cecf97f82acb2fb97fd03b72da507cc67ed9e742e59a5ce82d18ee2f3b258fb2c1bd57e8b3ee69f3b4671ec0c0c7198df9c12c40669a5d4ade9015505cf4b261e3834799c97300096910c6b48f4b769c841c6cfe5daed7b53017089f989aeb9959dfc4547cdc4c48948043b51b962ee9687f141de2d34c395d87c6cf0000000014e65d034245d80d0472b5e303acbd4f066242cca81af5284329b07634e41dfecfe728ca8758351cf16d5bd8e8c91fa671f0fc1ca2885a4b00379f2924882f5d57ccff1aa2d84430ee54bf27769c308c6e56ffa39094fdf5b157b36f72fd5edc14e600995b43edd48c711d510a660c36d3fba00c2d2c825aad27f2bf2d3c73d0b2adff4d6ca841eeba58245dfcf56fc7eb4f498c4d165dbd01e8ebc1559c34f3d1bacb8b9e2f5a262a3072c4974462cec283cca51d9c359ddeaa61facbc9dd3f9c26b7d08771cac458a13570aa727c8e2d699b94f30c695e04436fb60d230b8e5dfed40b2273ea472f92cff44f04e920b77e0ce81e26cd8c287800ff6a9681ab8d94d5e1e226865301a1243719ec592ea30f25ee9c2b718839cedf3bd913482c31fde891a2687ea45b01aaf722473c07d0b5d290667dddf26206a6f1ec666093ebc49536a4882eb9de3091c05b1e3d915472db395d4f7c0dc595d8544f346cae525d54dacd91d61dc1ae65c5d012a982f8186b1f1fea1f27f0582c0af56d8bc06226048ab7b77e1dab7a36ad58f9ab6f8c4f2a107594cef27c636f5aad5c02a87cfc1ec623afcddb4dc52bc2d3931b24f2f418ec129c0cc3a3288e3b97abc623d353529b3d16c700cd982a31363da32ebc62a56ee4aee9c678fd3ab4f131dfa36814ab812f50f59776f373abdb9dd6cd4c9ee688f98b669eae4e5290bb6991e3e2e4be72837b71ac1d3dc85df41cf7642fd52d9f55e22ff064c755b3838f89dd4a0f0d839d74e0a2a0416e77d6c4ada10bf652656eefb113249eb7c68d5031a587e5d2b563b2b63a7a29d5f22a7cc8757948c7d77c7d96332c9314946d196e43f3973f83535277c036760c0d396d323c957a28db3303aec88b1c864e8fefb81b73f4350ea87a361f5f9082519225cbe28c6241a663fce86d726aa2ac4a89861ac68cf2baa5728a7f4aff4a21af641e4640bc5b4d89cb8f68a501359dbf31702f0bf28e742f00719935c17999a2a4e1991e745f7fc7c0707428bf57576ea90d55dcbbb01116259ca31f9d5a36aa60f9cbf3b1a1f9978c0df67f62b5c8481091a788172985b753b291ce2013e9d41e375466ae89dc0fb81950567e389326d25c938be7a6b51020a688919a38ff26ff1eb647e5a4019006d2e5e50ff87b9be153f49fe00174d85836e1a5f39306ca7671e82493cdf0dc313edfb37a293f88ab2855094f2aa9fe02d197d450cb2d80c74711531986dbaec5dab18f15b1e520819964397e0cca43b2a809c93514a995cbf788d046859b8b866d992505816eb7f3b8b7a72198e62f92b6c69e042bfdcb881ada8ca1c54f0a227f4f15235499561c1270a4949729df60e951160bc605af69b468487612ae5e4e2862f261cb6f072d6444bf23ff173746dd1cee5e6db0501a189aa506cc25a6e41818068ef70893ac0976c71178c5a865685bbcaa24885c6335839ba0043c22c41755b95d5cab949a410aa7b84ac6f2d6b9e6e881af6ed1c90018f631558b63f9e61f85cc4e293105a287cbf366d351859e49d859bad41871af9f928668fb003ff7e52ff7844e6f5c5953cde205506b4ddd5b1c7bd81e5c7f10582b37ee808c2df3365e29044ebd0aa59221619c234f8f677af2fd8d87aacd22a55b8be37ab9f5c5cca881fca1fac7717e6ea2fbe84d42c1e8c3fbf8aceb7f6832006ff91464c6c5e25ab39898173acc0d72cc2418a282e2b5c621308e068958a7ebcc6fcb2d8d28746e9d5956f56884275d7d85bb28956d87f274b25d94d310f1a601c9621320b45087910bb839d734df2697c172983064631851b0a66cb1f34933225f029038cd0e5cf148e4b9cc9340762915333c945e4c1633f7fe4f7633607e06381186634ae1a540d91d18df1fddd4a7426cb0009d05bce003f9892bd096396decfe605e7c1dab8d2202e5a91837b7bc0b204eb2d0c60643e1586da6b0c00256bf1509849e34da550ffef0b8139c3fd1edfea033b585d096282a4ddcc0ec78c5622d2a21754d8aeb782968fdc2c2865c00bcd3efd66bc03b87c7176baf95113b92d71a8c227462ec3b805713d572812b18f817355d993325e0195f5f4c1f27f8a7d3dd7c3371cb77075110a0ee9225f796b37dd597f2aa8247ef21ecf1546de2191142962e938d74e36a514c8ab8133ee7f9f4c9e75254b28ed74053b1c180ebe7cc94188079866dea06c27e2198deca4c3e63798ae41923f6f84d6d35dbb689d8748264f650aee1a2fe2cb4baf3837e1d70586480394013f02a37317ac4e4a1cde951c919a493b3e896a693a198a7b1329564c9ba38c8d0167e651a2db4d8bbf82de566088a2462ee75f3afb158794c1db2ebc26a87b68ac4e0c8f1d10acd945c51f887533b511fc05a30f0648cdfdf99b3b3c86b4da644bf919a189d5548ee5700fbcad40663448af72371bf7c77178bfe25f8e83ff03b0a9800686b00aa6faba5250a6cbcc237739e2304f16d80c31bf76245f7266e59feb11f3246491e09714fa943a23f74a62441b6936b5ff769cb6653047ef18f8520ceeab97e8a270d5299fe4bbfb9ab4105ed4aa6110c61238da504894f76ce469bb7fbf18f1b260c644e957acc8ceef9827379eb60d29593593c450009f0ece9c4613f36d13da660f44de031910db507ca4ccb29016c10a05ca5146519b52d32f5435a55479adcd4bb07b4c2ce32d8172910b5cf4af85aa3deedef35c143b31ebd1b613dec270f305eb25ea41536a410c790a8dcc0e8cea6b110010d51958c101c5418498501879df9cbddfa122fe516dbc847a43ab34f5411540fa6b3cc91db49449df79ed432c1d3372d9482c42dc294ff39fb501404aad2976e4cd9db8f3c53eb62c17be4f16933e3f14518d7928111e78267afe1f5cca51ec5443f7fae627bfb6d3bac66287c9a8a41e6f37678e1decb0578e2c02b00b5400569811d52de66e607aa055d2c881c3478e20682e899bda3090b917dad4c03fa02134f637f987cc9629bd852270375724d87973884795da7cc90835cf5b99edc46d5fb785f0ab959230b7db32d908c4472a87d9a2fb4a0e04a1dd36832bb9e0746173c5816f13a2008023d80d4112db662729ab8936100601a8ef2a61b93ae7c22b609966fe523b7bae00d3aacb2477ff952d76b3920c404ebbedd26992f4f2b6142c4cc67ade7f147adbf676727100a81f50dbb56b63d37b991a74f2dab0df1e91857ed4be34d58e002ec211ed23f2ee866d32c17e15b134592b2df71d148cd96a40e842539c6d1781d7f4c363dbbfd1fc10f148511a605f391ad6be2a094268867dedbb5691ce86305e14dc1d66f61e52a74edda1516da852baff6cbac4c372bda27fea956f3bc54283ed7c6cb56754aab56f2a2f33ea00a182e43b11e6d41d9a18b152913ff7e76b64a02e71dc6f127068ea6ba65f704ff3518dfd7ba3691cdc11f4ce1cb6b9cd1da38fa759609348212a32a529964b40c69d4d2132d4d72b76b6286a158c24097eccb980710e18eadb3c3be9d3a31efe1bc4c1ddb09585be51308049e2f641e593259bafa543603ee2f749ce491be9cc191a61a0b4614003f4338c0da14d29f75a6b9b67f8b5d6b95fe4ffbfe1373f534a1eabac8d0e2403c3afc603c3336745dca94397c6a9d26c8a9d3f39a01020e76b2d0cea14791caa4d28da1efcf5544fd9166df2cb6d7c1bb0b2b0c9e496956e4b319e6f8936ddeadbf06042a2e00789c0010a060ff8f3e7d44b2b97fba3e7623030933a46cea1cba8a2a04541deeacdcb77e56c04ca8ae27cc1704f707de04f7587676029d5dcc5ba923e185204cffae04934467f3efae73d44407e59e6e74a863000000000000000c20880b000a000499406f90ada7a656e66404000800000086dd0009bb1a11d85e4499e7d9a206bdf7442ed5469a2cc6d0032707d869bef89ae158713853abaaa74c17a9f6c630b874f77dc5507a9129ec26fff1ac0c9c11e8ba9f2c767bff3c6d9dc0faf1925f7d8ed8d9b9d94f8f5983021429a09a58466e18622ddbdc6c4729d785965cb722947d209d22c5573a0ee29cf24c73b3e6d7a4a72bccc90f5b9c4177c9b5c77c465946c0af15da5ed1606ee609a91926078939da307a95ec72a8c89b3b73dc7bbb550a4afb2c6a8d742468bb96932b6affbb8f9e638c7faceca9129165dd19073383be698d7e14d85fb9ec7daed151f3bcdd02080088be0000000119cf8a060100000000000400080022eb000000012d09220602000000000000410800081608006558000000002cf73ce98141466e4d75e2ea4c2de27a8c0515964873c7d94b68e03a9ad7cf3ca2e5affacf0467234248f10d3861c621c9315c8d3a8148a2b0f9a06ed14625bb6abb7ee8266e75ee116c734c37e1330a165905a5bdd15c530987c18a55f720ebf52ee96986f5ba6b1d7e2391cdad987e208a06e033f454b00b059afd62753db1968f2f0c6fbcc3bb9be36c160fe2b47f1fd7502987ac448fe7ca5230f1c35b1f2cdd4399b9f60e989d579de151d779bda339e524b5b400"/3446], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x2}) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x0, 0x0, 0x74}) close(r6) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_open_dev$dvb_dvr(&(0x7f00000002c0), 0x4, 0x100000) ioctl$DVB_DVR_DMX_EXPBUF(r7, 0xc00c6f3e, &(0x7f0000000340)={0x10001, 0x80000, r6}) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1000) (rerun: 32) r8 = epoll_create1(0x0) dup2(r2, r1) (async) epoll_wait(r8, &(0x7f0000000200)=[{}], 0x1, 0x254) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000000)={0xa0000001}) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 14m54.71605443s ago: executing program 0 (id=1738): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)=ANY=[@ANYBLOB="58000000020601020000000000000000000000001300070268612c696661636500000900020073797a31000000000c000780080012400ffffffc05000500ed00000005000400000000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000003940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003900)={&(0x7f0000003980)=ANY=[@ANYBLOB="001200000202030026bd7000fcdbdf2505000009e126ee7bb7fa7875795f65bb5016fa9aa0fa84ba41b770300d36369958b984d68045df73be1aaffd772e79ed399279b25f6fae907502ac6e226c009642ca1e77173c4eaa6ebd4ee7fd09bf9306496660efcec1340c7455e7021a94c1c1a0bf8cac00b3062488818c039fa4a5f620936f2e1d20e9193918210624e8a25c6856ffecb70a6561969735930e39e35e95b8c79be363a1daaf6e46c90b344313e1aa2309b657c72d377a54d0587dfce429fe8b1b785775eac867bd18206d0b1f5af9aa6da49c450cf30e47f334ce10eb0819411832e5d9a01f7c91e6728629a013280e63dd3b0f26dd7dca5a27ead4ddf3100d800400c8804cf9e342ac956cacddd61dc6a969a3694adfb079e94a20d7c385dd65d9d8c23f2dcfa6d0889d50762e6eec2dc9e6b90c2f80ac624f3cf095dd0d31dc612927a7a7f24cd5ead70f2b512d2e67fe03280264db035f69cb020fcd32adfaa15e504d09ab5c0cac594374af6832223b054e8f5fc339ba3502ca19b218047def58321f32099e73089f2ff9bde9901d29ec11c996eff369af0c684085cbed89c4f951c5903ed571ebfbd40473b73f0318dd1a7f52df418086193756e272fb2c5e292a29756cc0fd58efbb90a2dc66f36a15e3931fcfd293ac57a01b10a8a13fd7084fa99c58a4dbe5dbb53c1f0400e48008006e005df0bacb", @ANYRES32=r1, @ANYBLOB="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"], 0x1200}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208800, 0x0) 14m54.173339093s ago: executing program 0 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0xffffffff, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14m53.897617093s ago: executing program 33 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0xffffffff, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 37.14131184s ago: executing program 6 (id=5920): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000280)='1\x00', 0x1) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local}}}}}}, 0x0) 37.076937718s ago: executing program 6 (id=5921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ffffff000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 36.967410751s ago: executing program 6 (id=5922): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 36.818719382s ago: executing program 6 (id=5923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x10000000, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200002414000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 33.432778634s ago: executing program 6 (id=5931): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000300), 0x0) 33.184416098s ago: executing program 6 (id=5934): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 23.679434101s ago: executing program 5 (id=5952): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 23.679150178s ago: executing program 5 (id=5953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0x11) write$P9_RGETATTR(r3, &(0x7f0000002880)={0xa0, 0x19, 0x1, {0x20, {0x20, 0x0, 0x3}, 0x34, 0x0, 0xee01, 0xfffffffffffffffa, 0x3, 0x1, 0x3, 0x8, 0xe6e, 0xd44, 0x7, 0x9, 0x1, 0xe4, 0x200, 0x7, 0x6, 0x2}}, 0xa0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002940)="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", 0x2000, &(0x7f0000007f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 22.787067641s ago: executing program 5 (id=5956): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d9833", 0xda}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900), 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.467258587s ago: executing program 5 (id=5961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c0007800800"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0018"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 22.293175632s ago: executing program 5 (id=5963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x10000000, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200002414000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 18.946053034s ago: executing program 5 (id=5967): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) 18.207009731s ago: executing program 34 (id=5934): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 6.510533529s ago: executing program 3 (id=6012): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x803, 0x221a) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000002480)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e", @ANYBLOB="1ec1ffdcdcae"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 4.853355019s ago: executing program 3 (id=6027): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.764774312s ago: executing program 35 (id=5967): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) 1.886843852s ago: executing program 3 (id=6033): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 1.783941536s ago: executing program 1 (id=6035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.718404031s ago: executing program 1 (id=6036): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x8000) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x3, {{0x2, 0x4e22, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) close(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0xb0, 0x2c, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0xffe4, 0xffe0}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8f}}, @filter_kind_options=@f_fw={{0x7}, {0x7c, 0x2, [@TCA_FW_ACT={0x78, 0x4, [@m_simple={0x74, 0x5, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x8, 0x4, 0xffff, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x3, 0xfffffff5, 0x52a}}]}, {0x16, 0x6, "c403b5edbc161b0c3dd0f1a8e50563f111a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) io_uring_enter(r3, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14}}, 0x3c}}, 0x0) 1.580604236s ago: executing program 3 (id=6037): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1.493435576s ago: executing program 2 (id=6038): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x820c, 0x2, 0x1, 0xffffffff}, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') socket$inet6(0xa, 0x3, 0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.492100628s ago: executing program 1 (id=6039): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2e", 0x82}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45", 0x80}], 0x1}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c8442", 0x18}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a", 0x49}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="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", 0x115}], 0x1}}], 0x2, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.265052775s ago: executing program 2 (id=6040): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.163655102s ago: executing program 1 (id=6041): syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.142996586s ago: executing program 7 (id=6042): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 1.026183661s ago: executing program 7 (id=6043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a942, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffffffffffdae, 0x2, {0x87ff3c693e397323, 0x6}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 911.444236ms ago: executing program 1 (id=6044): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000140)=0xc) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) symlink(&(0x7f00000002c0)='streaming/header/h\x00', &(0x7f0000000480)='streaming/header/h/u\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff00010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000070577375850000007b000000950008"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) bind$inet(r5, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000001c0)) 773.287245ms ago: executing program 2 (id=6045): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 674.539775ms ago: executing program 2 (id=6046): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 618.582002ms ago: executing program 2 (id=6047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0xfffffffa, 0xfffffffd, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 542.331615ms ago: executing program 7 (id=6048): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r2 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) 365.180579ms ago: executing program 7 (id=6049): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x820c, 0x2, 0x1, 0xffffffff}, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') socket$inet6(0xa, 0x3, 0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 302.059564ms ago: executing program 3 (id=6050): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="9dfa77c10c80fb0fa3e8f33029d6fffdd44f0ea8ec8c1f45e2b38232f26fbfa9a48a695db5aba5", 0x27, 0x2004c010, &(0x7f0000000380)={0x11, 0x8, r1, 0x1, 0x6, 0x6, @local}, 0x14) 244.051781ms ago: executing program 7 (id=6051): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x562e351245413955, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 196.884314ms ago: executing program 3 (id=6052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x105100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0900340014020202250200000a00060008b71100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7e}, @device_a, @device_a, @from_mac, {0x1, 0xe}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x17, @val={0x8c, 0x10, {0x909, "36831dc8ca4b", @short="76d50701faca5d99"}}}, 0x30) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000080211000000100000000200"/30], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_a, @device_b, @random="a495f621e873", {0xc, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x6, [{0x9, 0x1}, {0xc}, {0x36}, {0x2, 0x1}, {0x60}, {0xc}]}, @val={0x3, 0x1, 0xb7}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x1519, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x10, 0x8c}}, @void, [{0xdd, 0xd, "52f1439b629ee1a116905333ad"}, {0xdd, 0x36, "7c2d38918017a87d6b21c07bd83b06db74c231bd8e524c06f1682bef47d7cb0193c320feada255d767aa2f601c581b7deed44c3d9618"}, {0xdd, 0xcb, "00f5c31d40ea9d6c3a237343578081def69f2aa1257536663fe2c725aba21daa4661ac37a2f48e32f74ebb374ec091c293bc99e4b1b058ff7f41eff40a2b37bd4b298425da2f2d4fba324f2a7723c7493b85fc6086884f1073902dd51e18c577ab22fa594a5dc78c4bcb2b8115d573b8197022d4c921dfc5a1308e8c453785fde3d921ac8707f6742f746d6d27e79099a0428098dcb69a1e3a70c26fd106bf9159e08efe4713460db4ef73d271a98e3fbb337ae1c41bddb1df9354a5cd38eaf4e9f5312a717103952d5e90"}, {0xdd, 0xdf, "1dbec2e72b22b1ffbc7048b49556047c8598e2c292251bbe0fbd08b10599f107837df0ce868f7dff3cb6c64eeb26f90abdf3472966e33a20e5c88b070a930deded05f8cb525dfe364dfb05d5edc7db21f78f380104d7a60e750e3d32d8d44a5355eee21b095c8839cc8327febe6f36173c1746aeed2a24e0ddeb01d68313c2aad8b029a4e8fbf3a7698bc97f65a8e9cc24f693fbf299dee2310131ca4bbc7ad12aea92f12259021bae01eba070c07736bee79c04acedef04a11a22b34b78a539de02c901dd014d2823ab42f7255d387e96f36fb455e84c4e00150ccf1a4da5"}]}, 0x238) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x101041, 0x92) write(r5, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) r7 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x100) pwrite64(r8, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x4}) syz_io_uring_setup(0x34, &(0x7f00000002c0)={0x0, 0x4000880e, 0x13100, 0x0, 0x4, 0x0, r9}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) 155.815835ms ago: executing program 7 (id=6053): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000060, 0x0) 105.0232ms ago: executing program 2 (id=6054): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 0s ago: executing program 1 (id=6055): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): 498.279178][T11788] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1498.297922][T20747] usb 3-1: USB disconnect, device number 119 [ 1498.332710][T11788] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1498.344185][T11788] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1498.955144][T11788] usb 4-1: USB disconnect, device number 67 [ 1499.141569][T25062] fuse: Bad value for 'fd' [ 1499.151173][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1499.174389][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1499.194526][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1499.199361][T25066] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 1499.332990][T25072] syzkaller0: entered promiscuous mode [ 1499.338480][T25072] syzkaller0: entered allmulticast mode [ 1499.418808][T18221] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1499.569632][T18221] usb 6-1: Using ep0 maxpacket: 16 [ 1499.584924][T18221] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1499.600911][T18221] usb 6-1: config 1 has an invalid interface number: 30 but max is 2 [ 1499.614862][T18221] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1499.629402][T18221] usb 6-1: config 1 has no interface number 3 [ 1499.638581][T18221] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 137, changing to 7 [ 1499.656828][T18221] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1499.670248][T18221] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1499.684094][T18221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.697350][T18221] usb 6-1: Product: syz [ 1499.703941][T18221] usb 6-1: Manufacturer: syz [ 1499.714216][T18221] usb 6-1: SerialNumber: syz [ 1499.818988][T17452] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 1499.901677][T11788] usb 2-1: USB disconnect, device number 124 [ 1499.946119][T25064] binder: BINDER_SET_CONTEXT_MGR already set [ 1499.954280][T25064] binder: 25063:25064 ioctl 4018620d 200000000180 returned -16 [ 1499.984293][T17452] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1499.999696][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1500.000540][T25064] syz.5.5646 (25064): drop_caches: 2 [ 1500.027190][T17452] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1500.040988][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1500.052641][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1500.065678][T17452] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1500.075568][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1500.086936][T17452] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1500.114735][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1500.128543][T18221] usb 6-1: 1:1 : unsupported sample bitwidth 1 in 8 bytes [ 1500.137724][T18221] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1500.147490][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1500.170899][T18221] usb 6-1: failed to enable PITCH for EP 0x1 [ 1500.189388][T18221] usb 6-1: unit 3 not found! [ 1500.194533][T17452] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1500.211789][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1500.229839][T17452] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1500.242633][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1500.254547][T17452] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1500.303577][T17452] usb 3-1: string descriptor 0 read error: -22 [ 1500.310937][T17452] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1500.320676][T17452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.330448][T18221] usb 6-1: USB disconnect, device number 32 [ 1500.354187][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1500.390851][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1500.428632][T17452] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1500.436808][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1500.451123][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1500.489453][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1500.582008][T25084] input: syz0 as /devices/virtual/input/input132 [ 1501.249628][T18221] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1501.349542][T17452] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1501.419750][T10325] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 1501.430564][T18221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.441803][T18221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.451760][T18221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1501.463266][T18221] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1501.473305][T18221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.486455][T18221] usb 4-1: config 0 descriptor?? [ 1501.499570][T17452] usb 6-1: Using ep0 maxpacket: 8 [ 1501.506752][T17452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1501.518497][T17452] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1501.527622][T17452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.539199][T17452] usb 6-1: config 0 descriptor?? [ 1501.592803][T10325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1501.602839][T10325] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 1501.611014][T10325] usb 2-1: config 2 has no interface number 0 [ 1501.617143][T10325] usb 2-1: config 2 interface 8 has no altsetting 0 [ 1501.627211][T10325] usb 2-1: string descriptor 0 read error: -22 [ 1501.633619][T10325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 1501.642890][T10325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.665525][T10325] usbtest 2-1:2.8: Linux user mode ISO test driver [ 1501.672131][T10325] usbtest 2-1:2.8: low-speed {control} tests [ 1501.755595][T17452] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 1501.963500][T10325] usb 6-1: USB disconnect, device number 33 [ 1502.102738][T18221] usbhid 4-1:0.0: can't add hid device: -71 [ 1502.115287][T18221] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1502.139213][T18221] usb 4-1: USB disconnect, device number 68 [ 1502.161372][T25110] fuse: Bad value for 'fd' [ 1503.150208][T11786] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1503.313110][T11786] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1503.324644][T11786] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1503.334804][T11786] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1503.344080][T11786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.354970][T25124] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1503.365586][T11786] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1503.390836][T17818] EXT4-fs error: 26 callbacks suppressed [ 1503.390852][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1503.407856][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1503.418971][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1503.582366][T11786] usb 6-1: USB disconnect, device number 34 [ 1504.020653][T17452] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1504.155396][T18221] usb 2-1: USB disconnect, device number 125 [ 1504.174497][T17452] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.186825][T17452] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1504.196003][T17452] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1504.208944][T17452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.227938][T17452] usb 4-1: config 0 descriptor?? [ 1504.237084][T25134] fuse: Invalid rootmode [ 1504.560660][T11786] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1504.662406][T11788] usb 3-1: USB disconnect, device number 120 [ 1504.682240][T17452] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1504.711827][T11786] usb 6-1: Using ep0 maxpacket: 8 [ 1504.725750][T11786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.738044][T11786] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1504.754062][T11786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.766137][T11786] usb 6-1: config 0 descriptor?? [ 1504.786302][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1504.809502][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1504.820442][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1504.871538][T17452] usb 2-1: too many configurations: 191, using maximum allowed: 8 [ 1504.883275][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1504.891876][T17452] usb 2-1: config 34 has no interface number 0 [ 1504.898074][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1504.907690][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1504.918005][T17452] usb 2-1: config 34 has no interface number 0 [ 1504.924249][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1504.932996][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1504.942354][T17452] usb 2-1: config 34 has no interface number 0 [ 1504.948554][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1504.958845][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1504.967769][T17452] usb 2-1: config 34 has no interface number 0 [ 1504.974146][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1504.985823][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1504.992004][T11786] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1505.004392][T17452] usb 2-1: config 34 has no interface number 0 [ 1505.017660][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1505.026882][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1505.036177][T17452] usb 2-1: config 34 has no interface number 0 [ 1505.042852][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1505.050596][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1505.059160][T17452] usb 2-1: config 34 has no interface number 0 [ 1505.065468][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1505.073431][T17452] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1505.081857][T17452] usb 2-1: config 34 has no interface number 0 [ 1505.088012][T17452] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1505.096874][T17452] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54 [ 1505.106063][T17452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.114173][T17452] usb 2-1: Product: syz [ 1505.118934][T17452] usb 2-1: Manufacturer: syz [ 1505.124297][T17452] usb 2-1: SerialNumber: syz [ 1505.188789][T10325] usb 6-1: USB disconnect, device number 35 [ 1505.194799][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1505.244378][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1505.258063][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1505.272769][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1505.369414][T17452] usb 2-1: USB disconnect, device number 126 [ 1505.383290][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1505.960712][T25165] fuse: Invalid rootmode [ 1506.177967][T25174] syzkaller0: entered promiscuous mode [ 1506.186048][T25174] syzkaller0: entered allmulticast mode [ 1506.195915][ T5615] Bluetooth: hci4: ISO packet for unknown connection handle 83 [ 1506.353439][T25184] kvm: user requested TSC rate below hardware speed [ 1506.453314][T10325] usb 2-1: new low-speed USB device number 127 using dummy_hcd [ 1506.514502][T25192] fuse: Invalid rootmode [ 1506.613479][T10325] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1506.626878][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1506.647755][T10325] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1506.669769][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1506.685185][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1506.704391][T10325] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1506.712127][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1506.712755][T25200] VFS: file-max limit 9 reached [ 1506.723495][T10325] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1506.739728][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1506.751474][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1506.764160][T10325] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1506.771858][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1506.782906][T10325] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1506.795125][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1506.808079][T10325] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1506.834102][T10325] usb 2-1: string descriptor 0 read error: -22 [ 1506.841215][T10325] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1506.850873][T10325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.861709][T11788] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1506.889900][T10325] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1507.023304][T11788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.033659][T11788] usb 6-1: config 0 has no interfaces? [ 1507.040657][T11788] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1507.049863][T11788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.057923][T11788] usb 6-1: Product: syz [ 1507.062891][T11788] usb 6-1: Manufacturer: syz [ 1507.067483][T11788] usb 6-1: SerialNumber: syz [ 1507.076982][T11788] usb 6-1: config 0 descriptor?? [ 1507.191569][T11786] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1507.254152][T10325] usb 4-1: USB disconnect, device number 69 [ 1507.298346][T25210] fuse: Unknown parameter 'grou00000000000000000000' [ 1507.344203][T11786] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1507.356466][T11786] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1507.367733][T11786] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1507.380094][T11786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.398045][T17452] usb 6-1: USB disconnect, device number 36 [ 1507.399615][T25206] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1507.431151][T11786] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1507.643628][T25215] binder: 25213:25215 ioctl c0306201 0 returned -14 [ 1507.812134][T11788] usb 3-1: USB disconnect, device number 121 [ 1507.927838][T25218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1508.372114][T17452] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1508.545614][T17452] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1508.580556][T17452] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1508.617349][T17452] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.676302][T17452] usb 4-1: config 220 has no interface number 2 [ 1508.695036][T17452] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1508.743881][T17452] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1508.765343][T17452] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1508.780267][T17452] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1508.835620][T17452] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1508.865240][T17452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.887409][T17452] usb 4-1: Product: syz [ 1508.916384][T17452] usb 4-1: Manufacturer: syz [ 1508.932861][T17452] usb 4-1: SerialNumber: syz [ 1509.086549][T25232] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1509.177301][T17452] usb 4-1: selecting invalid altsetting 0 [ 1509.188297][T17452] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1509.196354][T17452] uvcvideo 4-1:220.0: No valid video chain found. [ 1509.210571][T17452] usb 4-1: selecting invalid altsetting 0 [ 1509.235011][T17452] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1509.276178][T25239] siw: device registration error -23 [ 1509.276445][T17452] usb 4-1: USB disconnect, device number 70 [ 1509.294889][T17815] EXT4-fs error: 11 callbacks suppressed [ 1509.294904][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.316590][T25239] lo speed is unknown, defaulting to 1000 [ 1509.332388][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.343050][T11782] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1509.363617][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.375060][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.386726][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.397984][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.409281][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.421052][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.432372][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.512310][T11782] usb 3-1: Using ep0 maxpacket: 8 [ 1509.517935][T25243] fuse: Unknown parameter 'grou00000000000000000000' [ 1509.518865][T11782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1509.538907][T11782] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1509.548417][T11782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.584711][T11782] usb 3-1: config 0 descriptor?? [ 1509.604185][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1509.721052][T25247] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1509.742791][T25247] evm: overlay not supported [ 1509.796548][T11782] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 1510.082512][T10325] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 1510.244407][T10325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1510.253257][T10325] usb 4-1: config 2 has an invalid interface number: 8 but max is 0 [ 1510.261357][T10325] usb 4-1: config 2 has no interface number 0 [ 1510.267658][T10325] usb 4-1: config 2 interface 8 has no altsetting 0 [ 1510.280815][T10325] usb 4-1: string descriptor 0 read error: -22 [ 1510.287251][T10325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 1510.297420][T10325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.327480][T10325] usbtest 4-1:2.8: Linux user mode ISO test driver [ 1510.337873][T10325] usbtest 4-1:2.8: low-speed {control} tests [ 1510.525283][T10325] usb 4-1: USB disconnect, device number 71 [ 1510.592694][T11782] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1510.754106][T11782] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1510.765246][T11782] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1510.775211][T11782] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1510.784295][T11782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.795701][T25254] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1510.808289][T11782] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1511.114289][T25257] kvm: user requested TSC rate below hardware speed [ 1511.126228][T11782] usb 6-1: USB disconnect, device number 37 [ 1511.316091][T18221] usb 2-1: USB disconnect, device number 127 [ 1511.318304][T11788] usb 3-1: USB disconnect, device number 122 [ 1511.754289][T25270] fuse: Unknown parameter 'grou00000000000000000000' [ 1511.783416][T11782] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1511.922923][ T5615] Bluetooth: hci4: ISO packet for unknown connection handle 83 [ 1511.945435][T11782] usb 4-1: too many configurations: 191, using maximum allowed: 8 [ 1511.978726][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1511.990334][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.000486][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.031073][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1512.034186][T10325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1512.060514][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.084962][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.095870][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1512.113861][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.120192][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.139294][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1512.148481][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.155057][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.162847][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1512.190017][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.199316][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.207489][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1512.210295][T25278] syzkaller0: entered promiscuous mode [ 1512.216101][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.226116][T25278] syzkaller0: entered allmulticast mode [ 1512.228449][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.242518][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1512.253285][T10325] usb 2-1: Using ep0 maxpacket: 32 [ 1512.255764][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.260049][T10325] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1512.273333][T10325] usb 2-1: config 0 has no interface number 0 [ 1512.280509][T10325] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1512.289644][T10325] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1512.306120][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.313597][T10325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.320744][T11782] usb 4-1: config 34 has an invalid interface number: 167 but max is 0 [ 1512.343012][T10325] usb 2-1: Product: syz [ 1512.353478][T11782] usb 4-1: config 34 has no interface number 0 [ 1512.361067][T10325] usb 2-1: Manufacturer: syz [ 1512.368998][T11782] usb 4-1: config 34 interface 167 has no altsetting 0 [ 1512.374396][T10325] usb 2-1: SerialNumber: syz [ 1512.384167][T11782] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54 [ 1512.403214][T11782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.406654][T10325] usb 2-1: config 0 descriptor?? [ 1512.421539][T11782] usb 4-1: Product: syz [ 1512.433436][T11782] usb 4-1: Manufacturer: syz [ 1512.441845][T11782] usb 4-1: SerialNumber: syz [ 1512.515188][ T30] audit: type=1400 audit(2000525648.021:8021): avc: denied { read } for pid=25285 comm="syz.2.5736" name="g1" dev="configfs" ino=23896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1512.560091][ T30] audit: type=1400 audit(2000525648.021:8022): avc: denied { read open } for pid=25285 comm="syz.2.5736" path="/502/my_configfs/usb_gadget/g1" dev="configfs" ino=23896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1512.602866][T25288] Config c1/1 of g1 needs at least one function. [ 1512.612318][ T30] audit: type=1400 audit(2000525648.021:8023): avc: denied { write } for pid=25285 comm="syz.2.5736" name="functions" dev="configfs" ino=23897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1512.621360][T25288] udc usbip-vudc.0: failed to start g1: -22 [ 1512.664188][T25288] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1512.664360][ T30] audit: type=1400 audit(2000525648.051:8024): avc: denied { write } for pid=25285 comm="syz.2.5736" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1512.689970][T25288] UDC core: g1: couldn't find an available UDC or it's busy [ 1512.783335][ T30] audit: type=1400 audit(2000525648.061:8025): avc: denied { write } for pid=25285 comm="syz.2.5736" name="header" dev="configfs" ino=110338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1512.840440][T11782] usb 4-1: USB disconnect, device number 72 [ 1512.849553][ T30] audit: type=1400 audit(2000525648.061:8026): avc: denied { write } for pid=25285 comm="syz.2.5736" name="fs" dev="configfs" ino=110345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1512.945618][ T30] audit: type=1400 audit(2000525648.061:8027): avc: denied { create } for pid=25285 comm="syz.2.5736" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1512.996249][ T30] audit: type=1400 audit(2000525648.061:8028): avc: denied { write } for pid=25285 comm="syz.2.5736" name="fs" dev="configfs" ino=110345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1513.043764][ T30] audit: type=1400 audit(2000525648.061:8029): avc: denied { write } for pid=25285 comm="syz.2.5736" name="hs" dev="configfs" ino=110346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1513.069175][ T30] audit: type=1400 audit(2000525648.061:8030): avc: denied { write } for pid=25285 comm="syz.2.5736" name="hs" dev="configfs" ino=110346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1513.788499][T25304] socket: no more sockets [ 1513.814051][T25304] socket: no more sockets [ 1514.143836][T11782] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1514.296218][T11782] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1514.307470][T11782] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1514.317873][T11782] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1514.327010][T11782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.340392][T25306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1514.348383][ T4979] EXT4-fs error: 18 callbacks suppressed [ 1514.348417][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1514.368982][T11782] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1514.376461][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1514.391764][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1514.413569][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1514.477390][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1514.492755][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1514.723174][T11782] usb 3-1: USB disconnect, device number 123 [ 1515.792929][T25317] netlink: 'syz.2.5744': attribute type 10 has an invalid length. [ 1515.976818][T10325] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -32 [ 1515.998267][T10325] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 1516.007009][T10325] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1516.014890][T10325] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 1516.046758][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1516.074606][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1516.085711][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1516.640751][T25317] syz_tun: entered promiscuous mode [ 1516.663765][T25317] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1516.847231][T10325] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 1516.861973][T17816] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1516.876066][T10325] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1516.970280][T25328] udevd[25328]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1517.050319][T10325] usb 2-1: USB disconnect, device number 2 [ 1517.397444][T25346] netlink: 'syz.6.5757': attribute type 4 has an invalid length. [ 1517.434996][T20747] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1517.585173][T10325] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 1517.596127][T20747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.607137][T20747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.616905][T20747] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1517.626269][T20747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.636450][T20747] usb 4-1: config 0 descriptor?? [ 1517.644821][T17452] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1517.736011][T10325] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1517.746537][T10325] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1517.761464][T10325] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1517.772325][T10325] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1517.787811][T10325] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1517.798633][T10325] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1517.811820][T17452] usb 6-1: Using ep0 maxpacket: 8 [ 1517.819053][T17452] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1517.829060][T17452] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1517.839238][T17452] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1517.850908][T17452] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1517.862260][T10325] usb 3-1: string descriptor 0 read error: -22 [ 1517.868609][T17452] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1517.878884][T10325] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1517.888056][T10325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.896142][T17452] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1517.910173][T17452] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1517.920336][T17452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.930802][T10325] adutux 3-1:168.0: interrupt endpoints not found [ 1518.064282][T20747] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 1518.071318][T20747] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 1518.078313][T20747] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 1518.086154][T20747] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 1518.093125][T20747] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 1518.100861][T20747] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 1518.109673][T20747] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 1518.118720][T20747] cp2112 0003:10C4:EA90.005E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1518.134291][T25351] udevd[25351]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1518.140799][T11782] usb 3-1: USB disconnect, device number 124 [ 1518.147186][T17452] usb 6-1: GET_CAPABILITIES returned 0 [ 1518.163318][T17452] usbtmc 6-1:16.0: can't read capabilities [ 1518.264065][T20747] cp2112 0003:10C4:EA90.005E: Part Number: 0x00 Device Version: 0x00 [ 1518.360655][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.369744][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.378816][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.387861][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.396924][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.405977][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.415421][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.424506][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.433561][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.442618][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.451671][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.460719][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.476517][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.478424][T20747] cp2112 0003:10C4:EA90.005E: error requesting SMBus config [ 1518.485592][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.485634][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1518.511240][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1518.520378][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1518.523693][T20747] cp2112 0003:10C4:EA90.005E: probe with driver cp2112 failed with error -32 [ 1518.540285][T11782] usb 6-1: USB disconnect, device number 38 [ 1519.079421][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1519.079438][ T30] audit: type=1400 audit(2000525654.589:8075): avc: denied { write } for pid=25359 comm="syz.5.5761" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.113228][T25360] Config c1/1 of g1 needs at least one function. [ 1519.120154][T25360] udc dummy_udc.0: failed to start g1: -22 [ 1519.126133][T25360] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1519.137961][T25360] UDC core: g1: couldn't find an available UDC or it's busy [ 1519.298667][T25362] bridge0: port 3(syz_tun) entered blocking state [ 1519.305343][T25362] bridge0: port 3(syz_tun) entered disabled state [ 1519.312071][T25362] syz_tun: entered allmulticast mode [ 1519.319417][T25362] syz_tun: entered promiscuous mode [ 1519.325024][T25362] bridge0: port 3(syz_tun) entered blocking state [ 1519.332577][T25362] bridge0: port 3(syz_tun) entered forwarding state [ 1519.499778][ T30] audit: type=1400 audit(2000525654.999:8076): avc: denied { write } for pid=25366 comm="syz.5.5764" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.610907][T25369] syzkaller0: entered promiscuous mode [ 1519.616471][T25369] syzkaller0: entered allmulticast mode [ 1520.235873][T11786] usb 4-1: USB disconnect, device number 73 [ 1520.487778][ T4979] EXT4-fs error: 21 callbacks suppressed [ 1520.487795][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1520.561554][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1520.573947][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1523.149391][ T30] audit: type=1400 audit(2000525658.658:8077): avc: denied { write } for pid=25420 comm="syz.3.5775" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1523.275329][T25427] Bluetooth: Invalid esc byte 0x03 [ 1523.287146][T25417] Bluetooth: (null): Invalid header checksum [ 1523.294090][T25431] fuse: Unknown parameter 'group_id00000000000000000000' [ 1523.345612][T25423] socket: no more sockets [ 1523.365924][T25423] socket: no more sockets [ 1523.465549][T25435] fuse: Unknown parameter 'user_i00000000000000000000' [ 1523.496390][ T5737] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1523.506448][T20747] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 1523.593567][T25439] syzkaller0: entered promiscuous mode [ 1523.599185][T25439] syzkaller0: entered allmulticast mode [ 1523.624265][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1523.642681][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1523.654574][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1523.659537][T20747] usb 4-1: device descriptor read/64, error -71 [ 1523.679069][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.692966][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.710806][T11782] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1523.713822][ T5737] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1523.745919][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.781999][ T5737] usb 2-1: config 0 descriptor?? [ 1523.804937][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1523.816802][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1523.829048][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1523.869449][T11782] usb 6-1: device descriptor read/64, error -71 [ 1523.916564][T20747] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 1523.925433][T25447] netlink: 'syz.2.5788': attribute type 4 has an invalid length. [ 1524.046672][T20747] usb 4-1: device descriptor read/64, error -71 [ 1524.092374][ T30] audit: type=1400 audit(2000525659.598:8078): avc: denied { write } for pid=25450 comm="syz.2.5790" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1524.126532][T11782] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1524.166786][T20747] usb usb4-port1: attempt power cycle [ 1524.201310][ T5737] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1524.208441][ T5737] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1524.215460][ T5737] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1524.218448][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1524.224883][ T5737] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1524.244737][ T5737] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1524.252214][ T5737] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1524.253617][T25455] fuse: Unknown parameter 'group_id00000000000000000000' [ 1524.259366][ T5737] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1524.262977][ T5737] cp2112 0003:10C4:EA90.005F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1524.268297][T11782] usb 6-1: device descriptor read/64, error -71 [ 1524.300612][T25456] udevd[25456]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1524.399545][ T5737] cp2112 0003:10C4:EA90.005F: Part Number: 0x00 Device Version: 0x00 [ 1524.407269][T11782] usb usb6-port1: attempt power cycle [ 1524.506835][T20747] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 1524.537303][T20747] usb 4-1: device descriptor read/8, error -71 [ 1524.600161][ T5737] cp2112 0003:10C4:EA90.005F: error requesting SMBus config [ 1524.610143][ T5737] cp2112 0003:10C4:EA90.005F: probe with driver cp2112 failed with error -5 [ 1524.656691][T11786] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1524.680480][T25462] socket: no more sockets [ 1524.692019][T25462] socket: no more sockets [ 1524.746799][T11782] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1524.776813][T20747] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1524.788238][T11782] usb 6-1: device descriptor read/8, error -71 [ 1524.817510][T11786] usb 3-1: Using ep0 maxpacket: 16 [ 1524.823185][T20747] usb 4-1: device descriptor read/8, error -71 [ 1524.832412][T11786] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1524.844303][T11786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1524.858473][T11786] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1524.868343][T11786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.876362][T11786] usb 3-1: Product: syz [ 1524.880802][T11786] usb 3-1: Manufacturer: syz [ 1524.885512][T11786] usb 3-1: SerialNumber: syz [ 1524.899018][T11786] usb 3-1: config 0 descriptor?? [ 1524.908581][T11786] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1524.918100][T11786] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1524.937031][T20747] usb usb4-port1: unable to enumerate USB device [ 1525.036821][T11782] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1525.057172][T11782] usb 6-1: device descriptor read/8, error -71 [ 1525.167112][T11782] usb usb6-port1: unable to enumerate USB device [ 1525.510485][T11786] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1525.517998][T11786] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1525.525422][T11786] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1525.533326][T11786] em28xx 3-1:0.0: No AC97 audio processor [ 1525.549744][T17818] EXT4-fs error: 4 callbacks suppressed [ 1525.549759][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1525.569697][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1525.580849][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1526.252640][ T5737] usb 2-1: USB disconnect, device number 3 [ 1526.326170][ T30] audit: type=1400 audit(2000525661.827:8079): avc: denied { mount } for pid=25470 comm="syz.3.5799" name="/" dev="autofs" ino=112055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1526.415202][ T30] audit: type=1400 audit(2000525661.917:8080): avc: denied { write } for pid=25474 comm="syz.1.5801" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1526.533426][T25480] netlink: 'syz.5.5804': attribute type 4 has an invalid length. [ 1526.549745][T25482] fuse: Bad value for 'user_id' [ 1526.554698][T25482] fuse: Bad value for 'user_id' [ 1526.634110][T25484] siw: device registration error -23 [ 1526.681525][T25484] lo speed is unknown, defaulting to 1000 [ 1526.753007][T25486] socket: no more sockets [ 1526.805988][T25486] socket: no more sockets [ 1526.835183][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1526.846288][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1526.858275][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1526.913476][T25493] tipc: Enabled bearer , priority 0 [ 1526.922635][T25493] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1526.937776][T25493] tipc: Resetting bearer [ 1526.979609][T25491] tipc: Disabling bearer [ 1527.163324][ T30] audit: type=1400 audit(2000525662.667:8081): avc: denied { write } for pid=25502 comm="syz.1.5812" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1527.312274][ T30] audit: type=1400 audit(2000525662.817:8082): avc: denied { write } for pid=25509 comm="syz.5.5815" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1527.349596][T25510] Config c1/1 of g1 needs at least one function. [ 1527.386670][T25510] udc usbip-vudc.0: failed to start g1: -22 [ 1527.402021][T25510] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1527.414430][T25512] netlink: 'syz.3.5816': attribute type 1 has an invalid length. [ 1527.437209][T25510] UDC core: g1: couldn't find an available UDC or it's busy [ 1527.438068][T17452] usb 3-1: USB disconnect, device number 125 [ 1527.478996][T17452] em28xx 3-1:0.0: Disconnecting em28xx [ 1527.562678][T25517] fuse: Bad value for 'user_id' [ 1527.575003][T17452] em28xx 3-1:0.0: Freeing device [ 1527.580012][T25517] fuse: Bad value for 'user_id' [ 1527.591909][T25508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.638187][T25512] bond3: entered promiscuous mode [ 1527.643510][T25512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1527.707584][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 1527.819089][T25524] siw: device registration error -23 [ 1527.841381][T25508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.875438][T25526] tipc: Enabled bearer , priority 0 [ 1527.895800][T25526] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1527.910232][T25528] socket: no more sockets [ 1527.918872][T25524] lo speed is unknown, defaulting to 1000 [ 1527.929479][T25526] tipc: Resetting bearer [ 1527.945859][T25528] socket: no more sockets [ 1528.064985][T25508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.122529][T25525] tipc: Disabling bearer [ 1528.197890][T25535] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1528.276012][T25508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.296245][T25538] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1528.584496][ T30] audit: type=1400 audit(2000525664.086:8083): avc: denied { write } for pid=25548 comm="syz.6.5828" name="configs" dev="configfs" ino=23898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1528.615191][T25549] Config c1/1 of g1 needs at least one function. [ 1528.622991][T25549] udc usbip-vudc.0: failed to start g1: -22 [ 1528.629280][T25549] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1528.648033][T25549] UDC core: g1: couldn't find an available UDC or it's busy [ 1528.788022][T11695] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1528.800620][T18764] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.827892][T11782] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1528.998062][T25415] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.998132][T11782] usb 3-1: Using ep0 maxpacket: 16 [ 1529.021147][T11782] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1529.035147][T25415] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.035526][T11782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1529.065314][T25415] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.082419][T11782] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1529.103708][T11782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.122273][T11782] usb 3-1: Product: syz [ 1529.126919][T11782] usb 3-1: Manufacturer: syz [ 1529.131666][T11782] usb 3-1: SerialNumber: syz [ 1529.173941][T11782] usb 3-1: config 0 descriptor?? [ 1529.195305][T11782] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1529.213215][T11782] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1529.217957][T25566] tipc: Enabled bearer , priority 0 [ 1529.236864][T25566] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1529.248311][T25566] tipc: Resetting bearer [ 1529.253188][T25564] socket: no more sockets [ 1529.275297][T25564] socket: no more sockets [ 1529.280278][T25565] tipc: Disabling bearer [ 1529.461600][T25570] siw: device registration error -23 [ 1529.493616][T25570] lo speed is unknown, defaulting to 1000 [ 1529.505331][T25540] NFSD: Unable to initialize client recovery tracking! (-110) [ 1529.513928][T25540] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1529.525478][T25540] NFSD: starting 90-second grace period (net f00005ff) [ 1529.702323][T25581] fuse: Bad value for 'fd' [ 1529.752359][T25577] syzkaller0: entered promiscuous mode [ 1529.788537][T25577] syzkaller0: entered allmulticast mode [ 1529.800618][T11782] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1529.807314][T11782] em28xx 3-1:0.0: Config register raw data: 0x00 [ 1529.861105][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1529.864957][T25588] ieee802154 phy0 wpan0: encryption failed: -22 [ 1529.871903][ T30] audit: type=1400 audit(2000525665.366:8084): avc: denied { write } for pid=25587 comm="syz.3.5843" path="socket:[112881]" dev="sockfs" ino=112881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1529.909441][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1530.189231][ T30] audit: type=1400 audit(2000525665.696:8085): avc: denied { setopt } for pid=25597 comm="syz.5.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1530.223109][ T30] audit: type=1400 audit(2000525665.716:8086): avc: denied { read } for pid=25597 comm="syz.5.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1530.350505][T25596] socket: no more sockets [ 1530.373782][T25596] socket: no more sockets [ 1530.673272][T25612] fuse: root generation should be zero [ 1530.801976][T25616] fuse: Unknown parameter '0x0000000000000003' [ 1531.115390][T20747] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1531.224313][T25622] ieee802154 phy0 wpan0: encryption failed: -22 [ 1531.294922][T20747] usb 2-1: Using ep0 maxpacket: 16 [ 1531.303347][T20747] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1531.317396][T20747] usb 2-1: config 1 has an invalid interface number: 30 but max is 2 [ 1531.330534][T20747] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1531.343583][T20747] usb 2-1: config 1 has no interface number 3 [ 1531.349849][T20747] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 137, changing to 7 [ 1531.362694][T20747] usb 2-1: config 1 interface 2 has no altsetting 0 [ 1531.371445][T20747] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1531.381227][T20747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.392565][T20747] usb 2-1: Product: syz [ 1531.396777][T20747] usb 2-1: Manufacturer: syz [ 1531.403032][T20747] usb 2-1: SerialNumber: syz [ 1531.596925][T11782] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1531.617775][T11788] usb 3-1: USB disconnect, device number 126 [ 1531.659620][T11788] em28xx 3-1:0.0: Disconnecting em28xx [ 1531.689318][T11788] em28xx 3-1:0.0: Freeing device [ 1531.781428][T11782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.789322][T25618] syz.1.5853 (25618): drop_caches: 2 [ 1531.807843][T11782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.836188][T11782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1531.848198][T11782] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1531.877192][T20747] usb 2-1: 1:1 : unsupported sample bitwidth 1 in 8 bytes [ 1531.883164][T25628] netlink: 'syz.2.5858': attribute type 4 has an invalid length. [ 1531.884888][T11782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.900532][T20747] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1531.913392][T20747] usb 2-1: failed to enable PITCH for EP 0x1 [ 1531.921140][T11782] usb 4-1: config 0 descriptor?? [ 1531.929610][T20747] usb 2-1: unit 3 not found! [ 1531.960613][T17938] EXT4-fs error: 6 callbacks suppressed [ 1531.960629][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1531.991525][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.003577][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.058762][T20747] usb 2-1: USB disconnect, device number 4 [ 1532.068611][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.104193][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.128205][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.139669][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.151146][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.163953][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.179286][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1532.203876][T17815] udevd[17815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1532.550657][T11782] usbhid 4-1:0.0: can't add hid device: -71 [ 1532.577363][T11782] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1532.616511][T11782] usb 4-1: USB disconnect, device number 78 [ 1533.798308][T17452] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1533.950808][T17452] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.983995][T17452] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 1534.005329][T17452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.020017][T17452] usb 4-1: config 0 descriptor?? [ 1534.052485][T17452] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1534.321044][T17452] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1534.347484][T11788] usb 4-1: USB disconnect, device number 79 [ 1534.419407][T10325] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1534.499438][T17452] usb 6-1: Using ep0 maxpacket: 16 [ 1534.505805][T17452] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1534.518036][T17452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1534.531404][T17452] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1534.540879][T17452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.549043][T17452] usb 6-1: Product: syz [ 1534.553371][T17452] usb 6-1: Manufacturer: syz [ 1534.557982][T17452] usb 6-1: SerialNumber: syz [ 1534.564627][T17452] usb 6-1: config 0 descriptor?? [ 1534.571908][T17452] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1534.581263][T10325] usb 3-1: Using ep0 maxpacket: 16 [ 1534.587033][T17452] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1534.599126][T10325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1534.607829][T10325] usb 3-1: config 1 has an invalid interface number: 30 but max is 2 [ 1534.616172][T10325] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1534.625226][T10325] usb 3-1: config 1 has no interface number 3 [ 1534.631450][T10325] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 137, changing to 7 [ 1534.643149][T10325] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1534.651959][T10325] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1534.661205][T10325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.669246][T10325] usb 3-1: Product: syz [ 1534.673490][T10325] usb 3-1: Manufacturer: syz [ 1534.678081][T10325] usb 3-1: SerialNumber: syz [ 1534.832934][T11695] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1534.932065][ T30] audit: type=1400 audit(2000525670.435:8087): avc: denied { write } for pid=25665 comm="syz.1.5873" name="uncompressed" dev="configfs" ino=110339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1534.945817][T25657] syz.2.5869 (25657): drop_caches: 2 [ 1534.992910][ T30] audit: type=1400 audit(2000525670.465:8088): avc: denied { write } for pid=25665 comm="syz.1.5873" name="u" dev="configfs" ino=113684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1535.031153][T10325] usb 3-1: 1:1 : unsupported sample bitwidth 1 in 8 bytes [ 1535.048474][T10325] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1535.059938][ T30] audit: type=1800 audit(2000525670.485:8089): pid=25666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5873" name="dwFrameInterval" dev="configfs" ino=113686 res=0 errno=0 [ 1535.107494][T10325] usb 3-1: failed to enable PITCH for EP 0x1 [ 1535.117595][T10325] usb 3-1: unit 3 not found! [ 1535.130522][T25670] syzkaller0: entered promiscuous mode [ 1535.141177][T25670] syzkaller0: entered allmulticast mode [ 1535.188256][T17452] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1535.200479][T17452] em28xx 6-1:0.0: Config register raw data: 0x00 [ 1535.212936][T10325] usb 3-1: USB disconnect, device number 127 [ 1535.308246][ T30] audit: type=1400 audit(2000525670.805:8090): avc: denied { write } for pid=25675 comm="syz.1.5877" name="functions" dev="configfs" ino=23897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1535.396429][T25679] fuse: Unknown parameter '0x0000000000000003' [ 1535.875147][ T5615] Bluetooth: hci2: sending frame failed (-49) [ 1535.881750][T11695] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 1535.992034][T18221] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1536.168859][T18221] usb 2-1: too many configurations: 191, using maximum allowed: 8 [ 1536.180683][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.189102][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.197779][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.205759][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.214305][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.220546][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.228489][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.236929][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.243325][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.256111][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.265195][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.271759][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.292654][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.301353][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.319347][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.344930][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.356247][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.364245][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.381685][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.399411][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.410366][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.432631][T18221] usb 2-1: config 34 has an invalid interface number: 167 but max is 0 [ 1536.459371][T18221] usb 2-1: config 34 has no interface number 0 [ 1536.465600][T18221] usb 2-1: config 34 interface 167 has no altsetting 0 [ 1536.479108][T18221] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54 [ 1536.498872][T18221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.511916][T18221] usb 2-1: Product: syz [ 1536.516144][T18221] usb 2-1: Manufacturer: syz [ 1536.525002][T18221] usb 2-1: SerialNumber: syz [ 1536.786643][T18221] usb 2-1: USB disconnect, device number 5 [ 1537.102094][T18221] usb 6-1: USB disconnect, device number 43 [ 1537.125559][T18221] em28xx 6-1:0.0: Disconnecting em28xx [ 1537.171157][T18221] em28xx 6-1:0.0: Freeing device [ 1538.394868][T25722] EXT4-fs error: 40 callbacks suppressed [ 1538.394887][T25722] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1538.464246][T25723] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1539.191735][T25694] tipc: Enabling of bearer rejected, failed to enable media [ 1539.393012][T25385] Bluetooth: hci2: Frame reassembly failed (-84) [ 1539.501874][T25746] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1539.532261][T25747] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1539.573539][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1539.584408][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1539.595399][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1539.640180][T11786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1539.648269][T11782] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1539.810098][T11786] usb 3-1: Using ep0 maxpacket: 32 [ 1539.815268][T11788] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1539.822915][T11782] usb 6-1: Using ep0 maxpacket: 32 [ 1539.829980][T11786] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.841165][T11782] usb 6-1: config 0 has no interfaces? [ 1539.848449][T11786] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1539.857772][T11786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.865863][T11786] usb 3-1: Product: syz [ 1539.870546][T11786] usb 3-1: Manufacturer: syz [ 1539.875192][T11786] usb 3-1: SerialNumber: syz [ 1539.879896][T11782] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1539.889988][T11782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.901162][T11786] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1539.908739][T11786] imon 3-1:155.0: unable to initialize intf0, err -19 [ 1539.915559][T11782] usb 6-1: Product: syz [ 1539.919722][T11782] usb 6-1: Manufacturer: syz [ 1539.924419][T11782] usb 6-1: SerialNumber: syz [ 1539.929025][T11786] imon:imon_probe: failed to initialize context! [ 1539.936247][T11786] imon 3-1:155.0: unable to register, err -19 [ 1539.943258][T11782] usb 6-1: config 0 descriptor?? [ 1539.966210][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1539.971787][T11788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1539.979686][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1539.985271][T11788] usb 2-1: not running at top speed; connect to a high speed hub [ 1539.996738][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1540.004875][T11788] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1540.021975][T11788] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.032604][T11788] usb 2-1: config 14 has 1 interface, different from the descriptor's value: 2 [ 1540.041645][T11788] usb 2-1: config 14 has no interface number 0 [ 1540.047860][T11788] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1540.056217][T11788] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1540.065545][T11788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.073588][T11788] usb 2-1: Product: syz [ 1540.077775][T11788] usb 2-1: Manufacturer: syz [ 1540.082672][T11788] usb 2-1: SerialNumber: syz [ 1540.162838][ T5615] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1540.191508][T18221] usb 6-1: USB disconnect, device number 44 [ 1540.497001][T11788] legousbtower 2-1:14.57: interrupt endpoints not found [ 1540.827024][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5903'. [ 1540.992661][T11288] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 1541.002888][T11288] Registered device Abilis Systems DVB-Titan [ 1541.008443][T11288] usb 7-1: USB disconnect, device number 127 [ 1541.020839][ T30] audit: type=1326 audit(2000525676.524:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25740 comm="syz.2.5898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6202b9e019 code=0x0 [ 1541.067321][T11288] Unregistered device Abilis Systems DVB-Titan [ 1541.068440][T11288] as10x_usb: device has been disconnected [ 1541.141474][T11782] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1541.300820][T11782] usb 6-1: too many configurations: 191, using maximum allowed: 8 [ 1541.309552][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.318078][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.326013][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.333698][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.342130][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.348317][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.356016][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.364324][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.370422][T11288] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1541.370506][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.385781][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.390467][T11695] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1541.397580][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.410052][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.453668][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.462039][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.471871][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.481048][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.500518][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.508062][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.516522][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.521905][T11288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.524924][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.539672][T25764] syzkaller0: entered promiscuous mode [ 1541.545689][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.548009][T11288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.557068][T11782] usb 6-1: config 34 has an invalid interface number: 167 but max is 0 [ 1541.564741][T25764] syzkaller0: entered allmulticast mode [ 1541.578159][T11288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1541.589292][T11782] usb 6-1: config 34 has no interface number 0 [ 1541.590645][T11288] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1541.595821][T11782] usb 6-1: config 34 interface 167 has no altsetting 0 [ 1541.604875][T11288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.614143][T11782] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54 [ 1541.628992][T11782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.630238][T11288] usb 7-1: config 0 descriptor?? [ 1541.646108][T11782] usb 6-1: Product: syz [ 1541.650341][T11782] usb 6-1: Manufacturer: syz [ 1541.655280][T11782] usb 6-1: SerialNumber: syz [ 1541.988620][T11782] usb 6-1: USB disconnect, device number 45 [ 1542.299772][T11288] usbhid 7-1:0.0: can't add hid device: -71 [ 1542.305858][T11288] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1542.328306][T11288] usb 7-1: USB disconnect, device number 2 [ 1542.375790][T11782] usb 3-1: USB disconnect, device number 2 [ 1542.826233][T11288] usb 2-1: USB disconnect, device number 6 [ 1543.546398][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1543.584239][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1543.593620][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1543.640112][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1543.671763][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1543.739704][T25807] EXT4-fs error: 26 callbacks suppressed [ 1543.739729][T25807] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1543.844954][T25808] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1545.426322][T25782] tipc: Enabling of bearer rejected, failed to enable media [ 1545.616552][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1545.635216][T25813] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1545.650798][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1545.671718][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1545.693542][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1545.704364][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1545.719759][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1545.728694][T25815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5914'. [ 1545.734079][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1545.780117][T25415] Bluetooth: hci3: Frame reassembly failed (-84) [ 1545.791309][ T5615] Bluetooth: hci2: command tx timeout [ 1545.843659][ T5615] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1546.050728][T25805] lo speed is unknown, defaulting to 1000 [ 1546.113291][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.120620][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.131951][T11788] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1546.151457][T18221] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 1546.281305][T25846] syzkaller0: entered promiscuous mode [ 1546.286879][T25846] syzkaller0: entered allmulticast mode [ 1546.294496][T11788] usb 6-1: Using ep0 maxpacket: 16 [ 1546.301882][T11788] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1546.318318][T11788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.329816][T18221] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1546.340153][T11788] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1546.350435][T18221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1546.364381][T18221] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.369285][T11788] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1546.378454][T18221] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1546.394322][T18221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1546.404391][T11788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.405285][T18221] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.422143][T11788] usb 6-1: Product: syz [ 1546.431612][T11788] usb 6-1: Manufacturer: syz [ 1546.436254][T11788] usb 6-1: SerialNumber: syz [ 1546.456524][T18221] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1546.464162][T18221] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1546.475185][T18221] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.490961][T18221] usb 4-1: string descriptor 0 read error: -22 [ 1546.497526][T18221] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1546.506763][T18221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.521378][T18221] adutux 4-1:168.0: interrupt endpoints not found [ 1546.654371][T11788] usb 6-1: unit 2 not found! [ 1546.659010][T11788] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1546.674576][T11788] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1546.735900][T11788] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1546.753166][T11788] usb 6-1: USB disconnect, device number 46 [ 1546.764336][T18221] usb 4-1: USB disconnect, device number 80 [ 1546.789542][T17818] udevd[17818]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1547.806929][T11695] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1547.811686][ T5615] Bluetooth: hci3: command 0x1003 tx timeout [ 1547.879894][T11695] Bluetooth: hci2: command tx timeout [ 1548.077933][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5928'. [ 1548.373986][T11781] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1548.542808][T11781] usb 3-1: Using ep0 maxpacket: 32 [ 1548.550003][T11781] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.561572][T11781] usb 3-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1548.576988][T11781] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1548.586312][T11781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.594358][T11781] usb 3-1: Product: syz [ 1548.598518][T11781] usb 3-1: Manufacturer: syz [ 1548.603188][T11781] usb 3-1: SerialNumber: syz [ 1548.631738][T11781] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1548.641943][T11781] imon 3-1:155.0: unable to initialize intf0, err -19 [ 1548.648725][T11781] imon:imon_probe: failed to initialize context! [ 1548.657401][T11781] imon 3-1:155.0: unable to register, err -19 [ 1549.541336][T25853] tipc: Enabling of bearer rejected, failed to enable media [ 1549.617777][ T4979] EXT4-fs error: 28 callbacks suppressed [ 1549.617795][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1549.619241][T25880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1549.632203][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1549.664691][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1549.708842][T25805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.739108][T25805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.750221][T25805] bridge_slave_0: entered allmulticast mode [ 1549.759886][ T30] audit: type=1326 audit(2000525685.262:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25872 comm="syz.2.5929" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6202b9e019 code=0x0 [ 1549.789701][T25805] bridge_slave_0: entered promiscuous mode [ 1549.798490][T25805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.805764][T25805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.815964][T25805] bridge_slave_1: entered allmulticast mode [ 1549.828824][T25805] bridge_slave_1: entered promiscuous mode [ 1549.920748][T25889] syzkaller0: entered promiscuous mode [ 1549.926268][T25889] syzkaller0: entered allmulticast mode [ 1549.952050][T11695] Bluetooth: hci2: command tx timeout [ 1551.145620][T11781] usb 3-1: USB disconnect, device number 3 [ 1552.039739][ T5615] Bluetooth: hci2: command tx timeout [ 1552.674371][T25805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.735006][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1552.744831][T25887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.754372][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1552.770052][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1552.789806][T25805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.801543][T25899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5938'. [ 1552.886188][T25887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.911610][T25805] team0: Port device team_slave_0 added [ 1552.921118][T25805] team0: Port device team_slave_1 added [ 1553.000449][T25887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.018484][T25805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.025481][T25805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.052027][T25805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.065033][T25805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.071972][T25805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.098453][T25805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.131296][T25903] syzkaller0: entered promiscuous mode [ 1553.137747][T25903] syzkaller0: entered allmulticast mode [ 1553.180725][T25887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.478205][T11695] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1553.896365][T18221] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 1554.044237][T18221] usb 3-1: device descriptor read/64, error -71 [ 1554.282767][T18221] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1554.427534][T18221] usb 3-1: device descriptor read/64, error -71 [ 1554.543696][T18221] usb usb3-port1: attempt power cycle [ 1554.902790][T18221] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1554.935455][T18221] usb 3-1: device descriptor read/8, error -71 [ 1555.174166][T18221] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 1555.204145][T18221] usb 3-1: device descriptor read/8, error -71 [ 1555.314939][T18221] usb usb3-port1: unable to enumerate USB device [ 1555.895680][T25805] hsr_slave_0: entered promiscuous mode [ 1555.902120][T25805] hsr_slave_1: entered promiscuous mode [ 1555.908385][T25805] debugfs: 'hsr0' already exists in 'hsr' [ 1555.916934][T25805] Cannot create hsr debugfs directory [ 1555.938017][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1555.963210][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1555.977400][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1555.997418][T25907] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5942'. [ 1556.214378][T25417] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.224339][T25417] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.224597][T25913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5945'. [ 1556.239184][T25417] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.267861][T25805] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.303444][T25417] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.326297][T25805] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.362680][T25915] tipc: Enabling of bearer rejected, failed to enable media [ 1556.372324][T25915] syzkaller0: entered promiscuous mode [ 1556.379783][T25915] syzkaller0: entered allmulticast mode [ 1556.417352][T18221] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1556.449152][T25805] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.527852][T25805] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.573021][T18221] usb 6-1: Using ep0 maxpacket: 32 [ 1556.588492][T18221] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.604995][T18221] usb 6-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1556.636455][T18221] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1556.645940][T18221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.654431][T18221] usb 6-1: Product: syz [ 1556.667130][T18221] usb 6-1: Manufacturer: syz [ 1556.677709][T18221] usb 6-1: SerialNumber: syz [ 1556.712587][T18221] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1556.731922][T18221] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1556.744461][T25805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1556.748484][T18221] imon:imon_probe: failed to initialize context! [ 1556.759314][T18221] imon 6-1:155.0: unable to register, err -19 [ 1556.768322][T25805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1556.780760][T25805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1556.780789][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1556.799211][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1556.811602][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1556.824799][T25805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1556.837388][T25805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1556.849043][T25805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1556.859166][T25805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1556.869301][T25805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1556.875293][T25919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1556.975206][T25805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.000927][T25805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.015563][T25415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.022723][T25415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.044107][T25415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.051268][T25415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.148131][T25931] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1557.192312][T25934] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1557.200394][T25933] syzkaller0: entered promiscuous mode [ 1557.209008][T25933] syzkaller0: entered allmulticast mode [ 1557.239078][T25936] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1557.280711][T25937] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1557.861787][ T30] audit: type=1326 audit(2000525693.361:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25910 comm="syz.5.5944" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a339e019 code=0x0 [ 1559.181778][T18221] usb 6-1: USB disconnect, device number 47 [ 1560.201316][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5955'. [ 1560.233350][T25805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.336685][T25805] veth0_vlan: entered promiscuous mode [ 1560.369916][T25805] veth1_vlan: entered promiscuous mode [ 1560.422951][T25805] veth0_macvtap: entered promiscuous mode [ 1560.455477][T25805] veth1_macvtap: entered promiscuous mode [ 1560.455829][T25963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5958'. [ 1560.520100][T25805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1560.540143][T25805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1560.644429][T25389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.660388][T25969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5961'. [ 1560.683982][T25389] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.727828][T25413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.748445][T25413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.773690][T11782] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 1560.806407][T25413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.817187][T25413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.840877][T25973] syzkaller0: entered promiscuous mode [ 1560.846759][T25973] syzkaller0: entered allmulticast mode [ 1560.956493][T11782] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1560.964132][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1560.975273][T11782] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1560.987211][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1560.998728][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1561.003906][T11288] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1561.012756][T11782] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1561.025796][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1561.037651][T11782] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1561.050492][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1561.061698][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1561.074412][T11782] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1561.081961][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1561.093165][T11782] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1561.105741][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1561.116889][T11782] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1561.203401][T11288] usb 4-1: Using ep0 maxpacket: 32 [ 1561.210194][T11288] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.221704][T11288] usb 4-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1561.237786][T11288] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1561.247751][T11288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.255942][T11288] usb 4-1: Product: syz [ 1561.260885][T11288] usb 4-1: Manufacturer: syz [ 1561.293268][T11288] usb 4-1: SerialNumber: syz [ 1561.306677][T11288] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1561.314544][T11288] imon 4-1:155.0: unable to initialize intf0, err -19 [ 1561.321334][T11288] imon:imon_probe: failed to initialize context! [ 1561.328896][T11288] imon 4-1:155.0: unable to register, err -19 [ 1561.345877][T17818] EXT4-fs error: 9 callbacks suppressed [ 1561.345891][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1561.363358][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1561.375066][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1562.461386][ T30] audit: type=1326 audit(2000525697.960:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25970 comm="syz.3.5962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b4139e019 code=0x0 [ 1563.549413][T11782] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1563.559274][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1563.570765][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1563.576157][T11782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.582447][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1563.627452][T11782] usb 3-1: can't set config #168, error -71 [ 1563.651148][T11782] usb 3-1: USB disconnect, device number 8 [ 1563.775401][T11781] usb 4-1: USB disconnect, device number 81 [ 1564.030480][T25389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.045156][T25389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.155064][T25987] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5911'. [ 1564.164576][T11781] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1564.210900][T25990] tipc: Enabling of bearer rejected, failed to enable media [ 1564.220979][T25990] syzkaller0: entered promiscuous mode [ 1564.226575][T25990] syzkaller0: entered allmulticast mode [ 1564.314169][T11781] usb 4-1: Using ep0 maxpacket: 16 [ 1564.320667][T11781] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1564.332354][T11781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1564.346839][T11781] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1564.356494][T11781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.364724][T11781] usb 4-1: Product: syz [ 1564.369152][T11781] usb 4-1: Manufacturer: syz [ 1564.373755][T11781] usb 4-1: SerialNumber: syz [ 1564.381194][T11781] usb 4-1: config 0 descriptor?? [ 1564.388502][T11781] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1564.398010][T11781] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1564.668553][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5969'. [ 1564.897148][T25999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1564.967888][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1564.983901][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1564.992607][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1564.993027][T11781] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1565.008684][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1565.023085][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1565.024836][T11781] em28xx 4-1:0.0: Config register raw data: 0x00 [ 1565.096848][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1565.108632][T26004] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1565.120557][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1565.132043][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1565.245054][T18221] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1565.361242][T26000] lo speed is unknown, defaulting to 1000 [ 1565.394377][T18221] usb 3-1: Using ep0 maxpacket: 32 [ 1565.401036][T18221] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1565.409496][T18221] usb 3-1: config 0 has no interface number 0 [ 1565.416754][T18221] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1565.425726][T18221] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1565.434987][T18221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.443000][T18221] usb 3-1: Product: syz [ 1565.447411][T18221] usb 3-1: Manufacturer: syz [ 1565.452030][T18221] usb 3-1: SerialNumber: syz [ 1565.461276][T18221] usb 3-1: config 0 descriptor?? [ 1565.504799][T11782] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1565.578907][T26000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.586187][T26000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.593533][T26000] bridge_slave_0: entered allmulticast mode [ 1565.601027][T26000] bridge_slave_0: entered promiscuous mode [ 1565.612195][T26000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.619393][T26000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.626659][T26000] bridge_slave_1: entered allmulticast mode [ 1565.633555][T26000] bridge_slave_1: entered promiscuous mode [ 1565.659992][T26000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.672760][T26000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.675070][T11782] usb 2-1: Using ep0 maxpacket: 32 [ 1565.690090][T11782] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.702799][T11782] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1565.709979][T26000] team0: Port device team_slave_0 added [ 1565.715515][T11782] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1565.723694][T26000] team0: Port device team_slave_1 added [ 1565.730444][T11782] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1565.752101][T11782] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1565.763318][T26000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.763722][T11782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.770638][T26000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.779314][T11782] usb 2-1: Product: syz [ 1565.805486][T26000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.819989][T11782] usb 2-1: Manufacturer: syz [ 1565.824875][T26000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.825199][T11782] usb 2-1: SerialNumber: syz [ 1565.831838][T26000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.831866][T26000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.842766][T11782] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1565.883368][T11782] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1565.891707][T11782] imon:imon_probe: failed to initialize context! [ 1565.898300][T11782] imon 2-1:155.0: unable to register, err -19 [ 1565.929727][T26000] hsr_slave_0: entered promiscuous mode [ 1565.936191][T26000] hsr_slave_1: entered promiscuous mode [ 1565.942178][T26000] debugfs: 'hsr0' already exists in 'hsr' [ 1565.948133][T26000] Cannot create hsr debugfs directory [ 1566.099096][T26000] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1566.109720][T26000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1566.118350][T26000] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1566.127554][T26000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1566.138536][T26000] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1566.148569][T26000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1566.156720][T26000] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1566.165939][T26000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1566.243152][T26000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.264215][T26000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.276935][T18764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.284051][T18764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.301802][T25413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.308924][T25413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.429968][T26032] EXT4-fs error: 12 callbacks suppressed [ 1566.429979][T26032] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.468487][T26033] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.503748][T26034] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.540820][T26035] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.593762][T26036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.635498][T26037] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.674734][T26038] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.713543][T26039] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.750319][T26040] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.794556][T26042] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1566.815906][T26000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.868246][T20747] usb 4-1: USB disconnect, device number 82 [ 1566.875628][T20747] em28xx 4-1:0.0: Disconnecting em28xx [ 1566.898410][T20747] em28xx 4-1:0.0: Freeing device [ 1566.970513][ T30] audit: type=1326 audit(2000525702.470:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26009 comm="syz.1.5975" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82539e019 code=0x0 [ 1567.037901][T26047] syzkaller0: entered promiscuous mode [ 1567.038187][T18221] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1567.052207][T18221] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1567.061241][T18221] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1567.061927][T26047] syzkaller0: entered allmulticast mode [ 1567.072505][T18221] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1567.092219][T18221] usb 3-1: USB disconnect, device number 9 [ 1567.155920][T11695] Bluetooth: hci3: command tx timeout [ 1567.707511][T26055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1568.043052][T26057] socket: no more sockets [ 1568.063591][T26057] socket: no more sockets [ 1568.246727][T11788] usb 2-1: USB disconnect, device number 7 [ 1568.348832][T26061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5980'. [ 1569.235226][T11695] Bluetooth: hci3: command tx timeout [ 1570.278999][T26067] lo speed is unknown, defaulting to 1000 [ 1570.395127][T26085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1570.414537][T26000] veth0_vlan: entered promiscuous mode [ 1570.454288][T26000] veth1_vlan: entered promiscuous mode [ 1570.499315][T26000] veth0_macvtap: entered promiscuous mode [ 1570.509505][T26000] veth1_macvtap: entered promiscuous mode [ 1570.524293][T26089] tipc: Enabled bearer , priority 0 [ 1570.537908][T26089] syzkaller0: entered promiscuous mode [ 1570.544702][T26089] syzkaller0: entered allmulticast mode [ 1570.560359][T26000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.578885][T26089] tipc: Resetting bearer [ 1570.598232][T26088] tipc: Resetting bearer [ 1570.631087][T26088] tipc: Disabling bearer [ 1570.644809][T26000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.685128][T20747] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1570.696027][T25413] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.736184][T25412] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.789202][T25412] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.841447][T26095] ieee802154 phy0 wpan0: encryption failed: -22 [ 1570.845909][T26093] socket: no more sockets [ 1570.872869][T26093] socket: no more sockets [ 1570.877369][T20747] usb 3-1: Using ep0 maxpacket: 16 [ 1570.891349][T20747] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1570.900849][T25412] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.906020][T20747] usb 3-1: config 1 has an invalid interface number: 30 but max is 2 [ 1570.912902][T25409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.928060][T20747] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1570.949188][T25409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.952479][T20747] usb 3-1: config 1 has no interface number 3 [ 1570.963119][T26097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5990'. [ 1570.978707][T20747] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 137, changing to 7 [ 1570.990046][T20747] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1571.005899][T20747] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1571.015103][T20747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.023153][T20747] usb 3-1: Product: syz [ 1571.024460][T25409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.029304][T20747] usb 3-1: Manufacturer: syz [ 1571.038720][T25409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.062429][T20747] usb 3-1: SerialNumber: syz [ 1571.315514][T11695] Bluetooth: hci3: command tx timeout [ 1571.361301][T26107] syzkaller0: entered promiscuous mode [ 1571.366822][T26107] syzkaller0: entered allmulticast mode [ 1571.480069][T26087] syz.2.5985 (26087): drop_caches: 2 [ 1571.485763][T26112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1571.517436][T20747] usb 3-1: 1:1 : unsupported sample bitwidth 1 in 8 bytes [ 1571.535771][T20747] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1571.589302][T20747] usb 3-1: failed to enable PITCH for EP 0x1 [ 1571.601598][T26114] EXT4-fs error: 23 callbacks suppressed [ 1571.601614][T26114] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1571.620073][T20747] usb 3-1: unit 3 not found! [ 1571.711687][T26118] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1571.712403][T20747] usb 3-1: USB disconnect, device number 10 [ 1571.757245][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1571.784083][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1571.797833][T21135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1571.823342][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1571.854590][T17938] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1571.902970][T26123] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1571.921726][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1571.933533][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.947754][T17815] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1572.482454][T18221] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1572.666263][T18221] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1572.677125][T18221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.701125][T18221] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 1572.729013][T18221] usb 3-1: loading /lib/firmware/updates/syzkaller/emi26/loader.fw failed with error -74 [ 1572.742127][T18221] usb 3-1: loading /lib/firmware/updates/emi26/loader.fw failed with error -74 [ 1572.751858][T18221] usb 3-1: loading /lib/firmware/syzkaller/emi26/loader.fw failed with error -74 [ 1572.774169][T18221] usb 3-1: loading /lib/firmware/emi26/loader.fw failed with error -74 [ 1572.782791][T18221] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -74 [ 1572.791583][T18221] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1572.967776][T26133] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1573.020605][T18221] usb 3-1: emi26_load_firmware - request_firmware() failed [ 1573.027923][T18221] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 1573.042351][T18221] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 1573.064552][T18221] usb 3-1: USB disconnect, device number 11 [ 1573.401632][T11695] Bluetooth: hci3: command tx timeout [ 1573.708580][T26137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6000'. [ 1573.887406][T26139] socket: no more sockets [ 1573.905363][T26139] socket: no more sockets [ 1574.145971][T26141] kvm: user requested TSC rate below hardware speed [ 1574.863086][T26151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1575.416182][ T30] audit: type=1400 audit(2000525710.899:8096): avc: denied { read write } for pid=26156 comm="syz.2.6009" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1575.468250][ T30] audit: type=1400 audit(2000525710.909:8097): avc: denied { open } for pid=26156 comm="syz.2.6009" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1576.170240][T26117] lo speed is unknown, defaulting to 1000 [ 1576.491595][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1576.622500][ T4979] EXT4-fs error: 20 callbacks suppressed [ 1576.622517][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1576.641057][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1576.652304][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1576.795763][T11781] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1576.951648][T11781] usb 4-1: not running at top speed; connect to a high speed hub [ 1576.968305][T11781] usb 4-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 1576.988536][T11781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 65473, setting to 64 [ 1577.023479][T11781] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1577.047481][T11781] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1577.064840][T11781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1577.092084][T11781] usb 4-1: Product: syz [ 1577.097150][T26189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6022'. [ 1577.099099][T26185] tipc: Started in network mode [ 1577.110949][T11781] usb 4-1: Manufacturer: syz [ 1577.119394][T26185] tipc: Node identity d269643b92ef, cluster identity 4711 [ 1577.127010][T26167] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1577.135414][T26185] tipc: Enabled bearer , priority 0 [ 1577.145344][T11781] sisusb 4-1:1.0: Invalid USB2VGA device [ 1577.160456][T11781] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 1577.190819][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1577.197420][T26188] syzkaller0: entered promiscuous mode [ 1577.201887][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1577.206954][T26188] syzkaller0: entered allmulticast mode [ 1577.216361][T26185] syzkaller0: entered promiscuous mode [ 1577.229632][T26185] syzkaller0: entered allmulticast mode [ 1577.242379][T17818] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1577.446676][ T5737] usb 4-1: USB disconnect, device number 83 [ 1578.340444][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1579.465655][ T5615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1579.482853][ T5615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1579.497333][ T5615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1579.519241][ T5615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1579.533982][ T5615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1579.687188][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1579.698820][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1579.726148][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1579.730081][T26209] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1580.923551][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6021'. [ 1580.934544][T26185] tipc: Resetting bearer [ 1580.949470][T26202] dvmrp0: entered allmulticast mode [ 1580.955561][T26184] tipc: Resetting bearer [ 1581.038840][T26184] tipc: Disabling bearer [ 1581.057892][T18221] tipc: Node number set to 1082549307 [ 1581.118613][T18764] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.151474][T18764] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.191030][T18764] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.219751][T18764] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.264828][T26225] syz.1.6035 (26225): drop_caches: 2 [ 1581.297760][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1581.326989][ T30] audit: type=1400 audit(2000525716.808:8098): avc: denied { append } for pid=26223 comm="syz.7.6034" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1581.433416][ T30] audit: type=1400 audit(2000525716.808:8099): avc: denied { read } for pid=26223 comm="syz.7.6034" dev="sockfs" ino=117435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1581.562580][T26227] CIFS: Attempting to mount //127.0.0.1/share [ 1581.658133][T26241] EXT4-fs error: 5 callbacks suppressed [ 1581.658149][T26241] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1581.712108][T26237] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.718848][T26245] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1581.732795][ T5615] Bluetooth: hci7: command tx timeout [ 1581.745808][T26227] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1581.753824][T26237] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.778966][T26227] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1581.835678][T26237] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.846528][T26237] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.875669][T26207] lo speed is unknown, defaulting to 1000 [ 1581.937440][T26237] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.941053][T26249] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1581.958233][T26237] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.087838][T26256] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1582.105256][T26237] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1582.138060][T26237] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.161052][T26255] tipc: Enabled bearer , priority 0 [ 1582.172944][T26257] syzkaller0: entered promiscuous mode [ 1582.178643][T26257] syzkaller0: entered allmulticast mode [ 1582.190114][T26255] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6043'. [ 1582.215065][T26255] tipc: Resetting bearer [ 1582.235753][ T30] audit: type=1400 audit(2000525717.728:8100): avc: denied { write } for pid=26258 comm="syz.1.6044" name="h" dev="configfs" ino=110348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1582.276165][ T30] audit: type=1400 audit(2000525717.738:8101): avc: denied { write } for pid=26258 comm="syz.1.6044" name="h" dev="configfs" ino=110348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1582.293405][T26263] syz.2.6045 (26263): drop_caches: 2 [ 1582.299785][ T30] audit: type=1400 audit(2000525717.748:8102): avc: denied { bind } for pid=26258 comm="syz.1.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1582.306461][T26254] tipc: Resetting bearer [ 1582.364104][T26254] tipc: Disabling bearer [ 1582.390352][T26265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1582.549970][T26270] netlink: 'syz.7.6048': attribute type 10 has an invalid length. [ 1582.572434][T26271] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1582.575198][T26267] syzkaller0: entered promiscuous mode [ 1582.589195][T26267] syzkaller0: entered allmulticast mode [ 1582.600859][T26270] syz_tun: entered promiscuous mode [ 1582.618842][T26270] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1582.658185][T26273] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1582.676777][T18764] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.695803][T18764] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.725523][T18764] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.734676][T18764] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.794392][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1582.807486][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1582.818798][ T4979] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1582.919099][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6052'. [ 1582.998592][T26288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.008928][T25412] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.034717][T25412] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.083746][T26207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.091144][T26207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.098834][T26207] bridge_slave_0: entered allmulticast mode [ 1583.107335][T26207] bridge_slave_0: entered promiscuous mode [ 1583.110029][T26292] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm modprobe: iget: checksum invalid [ 1583.116307][T26207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.125536][T26288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.131357][T26207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.148491][T26207] bridge_slave_1: entered allmulticast mode [ 1583.150579][T26294] syz.1.6055 (26294): drop_caches: 2 [ 1583.155852][T26207] bridge_slave_1: entered promiscuous mode [ 1583.209556][T26207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.220216][ T30] audit: type=1400 audit(2000525718.718:8103): avc: denied { create } for pid=26281 comm="syz.3.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1583.236553][T26207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.282431][ T30] audit: type=1400 audit(2000525718.718:8104): avc: denied { write } for pid=26281 comm="syz.3.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1583.308662][T26207] team0: Port device team_slave_0 added [ 1583.333673][T26207] team0: Port device team_slave_1 added [ 1583.344725][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6056'. [ 1583.565433][T26207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.579716][T26207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.618628][T26207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.646954][T25409] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.663676][T25409] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.682710][T26207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.696686][T26207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.743792][T26207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.797728][T11695] Bluetooth: hci7: command tx timeout [ 1583.814365][T26207] hsr_slave_0: entered promiscuous mode [ 1583.821353][T26207] hsr_slave_1: entered promiscuous mode [ 1583.828259][T26207] debugfs: 'hsr0' already exists in 'hsr' [ 1583.839925][T26207] Cannot create hsr debugfs directory [ 1584.066498][ T5745] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1584.099720][T26207] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1584.109768][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1584.125056][T26207] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1584.138292][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1584.147241][T26207] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1584.157811][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1584.165996][T26207] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1584.180719][T26207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1584.240875][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 1584.252479][ T5745] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 1584.261955][T26282] ------------[ cut here ]------------ [ 1584.267781][T26282] dev->config->get_status(dev) [ 1584.267803][T26282] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x131/0x170, CPU#1: syz.3.6052/26282 [ 1584.284413][T26282] Modules linked in: [ 1584.287787][T26207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.288756][T26282] CPU: 1 UID: 0 PID: 26282 Comm: syz.3.6052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.306121][T26282] Tainted: [L]=SOFTLOCKUP [ 1584.310512][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1584.320661][T26282] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 1584.326603][T26282] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 1584.346720][T26282] RSP: 0018:ffffc90004687868 EFLAGS: 00010246 [ 1584.353111][T26282] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc90010589000 [ 1584.361260][T26282] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff888035ea0000 [ 1584.365581][T26207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.369291][T26282] RBP: ffff8880207f0000 R08: 0000000000000001 R09: 0000000000000000 [ 1584.369310][T26282] R10: 00000000000000ff R11: ffffffff827aeaeb R12: ffffffff8fe277c0 [ 1584.369327][T26282] R13: ffff8880207f0008 R14: ffff8880207f00f0 R15: ffffffff8fe277c0 [ 1584.369344][T26282] FS: 00007f9b4233c6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 1584.369367][T26282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1584.369385][T26282] CR2: 00007fd825627dac CR3: 000000007bb21000 CR4: 00000000003526f0 [ 1584.423550][T26282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1584.431696][T26282] DR3: 0000000000000400 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1584.440171][T26282] Call Trace: [ 1584.443461][T26282] [ 1584.447632][T26282] ? __pfx_virtio_dev_remove+0x10/0x10 [ 1584.453206][T26282] device_remove+0xcb/0x180 [ 1584.456628][T25387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.457768][T26282] device_release_driver_internal+0x44e/0x620 [ 1584.464822][T25387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.470804][T26282] bus_remove_device+0x2bc/0x560 [ 1584.482895][T26282] ? __pfx_bus_remove_device+0x10/0x10 [ 1584.488404][T26282] ? __pfx_device_remove_attrs+0x10/0x10 [ 1584.492243][ T5745] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1584.494056][T26282] device_del+0x376/0x9b0 [ 1584.507518][T26282] ? __pfx_device_del+0x10/0x10 [ 1584.508859][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.512383][T26282] ? __pfx___might_resched+0x10/0x10 [ 1584.524487][T25387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.526245][T26282] ? __pfx_pci_device_is_present+0x10/0x10 [ 1584.533287][T25387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.539098][T26282] device_unregister+0x1d/0xe0 [ 1584.549951][ T5745] usb 2-1: Product: syz [ 1584.551346][T26282] unregister_virtio_device+0x39/0x60 [ 1584.555497][ T5745] usb 2-1: Manufacturer: syz [ 1584.561137][T26282] virtio_pci_remove+0x7c/0x110 [ 1584.570374][T26282] pci_device_remove+0xb2/0x1d0 [ 1584.575260][T26282] ? __pfx_pci_device_remove+0x10/0x10 [ 1584.577921][ T5745] usb 2-1: SerialNumber: syz [ 1584.580776][T26282] device_remove+0xcb/0x180 [ 1584.589846][T26282] device_release_driver_internal+0x44e/0x620 [ 1584.595936][T26282] pci_stop_bus_device+0x120/0x160 [ 1584.601417][T26282] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1584.607365][T26282] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1584.613876][T26282] remove_store+0x123/0x140 [ 1584.618453][T26282] ? __pfx_remove_store+0x10/0x10 [ 1584.623505][T26282] ? find_held_lock+0x2b/0x80 [ 1584.628321][T26282] ? sysfs_file_kobj+0xe4/0x290 [ 1584.633192][T26282] ? sysfs_file_kobj+0xe4/0x290 [ 1584.638105][T26282] ? __pfx_remove_store+0x10/0x10 [ 1584.643144][T26282] dev_attr_store+0x58/0x80 [ 1584.648136][T26282] ? __pfx_dev_attr_store+0x10/0x10 [ 1584.650097][ T5745] usb 2-1: config 0 descriptor?? [ 1584.653348][T26282] sysfs_kf_write+0xf2/0x150 [ 1584.663177][T26282] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1584.668521][T26282] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1584.673751][T26282] vfs_write+0x6ac/0x1050 [ 1584.678361][T26282] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1584.684188][T26282] ? __pfx_vfs_write+0x10/0x10 [ 1584.689085][T26282] ksys_write+0x12a/0x250 [ 1584.693448][T26282] ? __pfx_ksys_write+0x10/0x10 [ 1584.699933][T26282] do_syscall_64+0x115/0x870 [ 1584.700817][ T5745] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1584.704536][T26282] ? clear_bhb_loop+0x40/0x90 [ 1584.716854][T26282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.722754][T26282] RIP: 0033:0x7f9b4139e019 [ 1584.727238][T26282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.730354][ T5745] dvb-usb: bulk message failed: -22 (2/0) [ 1584.747310][T26282] RSP: 002b:00007f9b4233c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1584.761394][T26282] RAX: ffffffffffffffda RBX: 00007f9b41625fa0 RCX: 00007f9b4139e019 [ 1584.769549][T26282] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 1584.777581][T26282] RBP: 00007f9b4143500c R08: 0000000000000000 R09: 0000000000000000 [ 1584.785560][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.793593][T26282] R13: 00007f9b41626038 R14: 00007f9b41625fa0 R15: 00007fff777ebdc8 [ 1584.801635][T26282] [ 1584.804676][T26282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1584.811959][T26282] CPU: 1 UID: 0 PID: 26282 Comm: syz.3.6052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.822906][T26282] Tainted: [L]=SOFTLOCKUP [ 1584.827223][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1584.837273][T26282] Call Trace: [ 1584.840550][T26282] [ 1584.843484][T26282] dump_stack_lvl+0x100/0x190 [ 1584.848179][T26282] vpanic+0x552/0x970 [ 1584.852174][T26282] ? __pfx_vpanic+0x10/0x10 [ 1584.856696][T26282] panic+0xd1/0xe0 [ 1584.860421][T26282] ? __pfx_panic+0x10/0x10 [ 1584.864859][T26282] check_panic_on_warn.cold+0x19/0x34 [ 1584.870237][T26282] ? virtio_dev_remove+0x131/0x170 [ 1584.875350][T26282] __warn.cold+0x191/0x318 [ 1584.879775][T26282] __report_bug+0x30f/0x440 [ 1584.884285][T26282] ? virtio_dev_remove+0x131/0x170 [ 1584.889405][T26282] ? __pfx___report_bug+0x10/0x10 [ 1584.894451][T26282] ? kasan_quarantine_put+0x104/0x240 [ 1584.899827][T26282] ? virtio_dev_remove+0x131/0x170 [ 1584.904944][T26282] report_bug+0xb2/0x220 [ 1584.909187][T26282] ? virtio_dev_remove+0x131/0x170 [ 1584.914298][T26282] handle_bug+0x16a/0x2a0 [ 1584.918627][T26282] exc_invalid_op+0x17/0x50 [ 1584.923130][T26282] asm_exc_invalid_op+0x1a/0x20 [ 1584.927969][T26282] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 1584.933691][T26282] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 1584.953292][T26282] RSP: 0018:ffffc90004687868 EFLAGS: 00010246 [ 1584.959351][T26282] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc90010589000 [ 1584.967309][T26282] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff888035ea0000 [ 1584.975267][T26282] RBP: ffff8880207f0000 R08: 0000000000000001 R09: 0000000000000000 [ 1584.983222][T26282] R10: 00000000000000ff R11: ffffffff827aeaeb R12: ffffffff8fe277c0 [ 1584.991180][T26282] R13: ffff8880207f0008 R14: ffff8880207f00f0 R15: ffffffff8fe277c0 [ 1584.999141][T26282] ? kasan_save_free_info+0x3b/0x70 [ 1585.004344][T26282] ? virtio_dev_remove+0x130/0x170 [ 1585.009543][T26282] ? virtio_dev_remove+0x130/0x170 [ 1585.014652][T26282] ? __pfx_virtio_dev_remove+0x10/0x10 [ 1585.020103][T26282] device_remove+0xcb/0x180 [ 1585.024600][T26282] device_release_driver_internal+0x44e/0x620 [ 1585.030668][T26282] bus_remove_device+0x2bc/0x560 [ 1585.035618][T26282] ? __pfx_bus_remove_device+0x10/0x10 [ 1585.041084][T26282] ? __pfx_device_remove_attrs+0x10/0x10 [ 1585.046727][T26282] device_del+0x376/0x9b0 [ 1585.051064][T26282] ? __pfx_device_del+0x10/0x10 [ 1585.055908][T26282] ? __pfx___might_resched+0x10/0x10 [ 1585.061188][T26282] ? __pfx_pci_device_is_present+0x10/0x10 [ 1585.067001][T26282] device_unregister+0x1d/0xe0 [ 1585.071761][T26282] unregister_virtio_device+0x39/0x60 [ 1585.077128][T26282] virtio_pci_remove+0x7c/0x110 [ 1585.081974][T26282] pci_device_remove+0xb2/0x1d0 [ 1585.086817][T26282] ? __pfx_pci_device_remove+0x10/0x10 [ 1585.092265][T26282] device_remove+0xcb/0x180 [ 1585.096760][T26282] device_release_driver_internal+0x44e/0x620 [ 1585.102825][T26282] pci_stop_bus_device+0x120/0x160 [ 1585.107932][T26282] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1585.113823][T26282] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1585.120318][T26282] remove_store+0x123/0x140 [ 1585.124817][T26282] ? __pfx_remove_store+0x10/0x10 [ 1585.129835][T26282] ? find_held_lock+0x2b/0x80 [ 1585.134498][T26282] ? sysfs_file_kobj+0xe4/0x290 [ 1585.139349][T26282] ? sysfs_file_kobj+0xe4/0x290 [ 1585.144203][T26282] ? __pfx_remove_store+0x10/0x10 [ 1585.149220][T26282] dev_attr_store+0x58/0x80 [ 1585.153720][T26282] ? __pfx_dev_attr_store+0x10/0x10 [ 1585.158915][T26282] sysfs_kf_write+0xf2/0x150 [ 1585.163511][T26282] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1585.168790][T26282] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1585.173993][T26282] vfs_write+0x6ac/0x1050 [ 1585.178324][T26282] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1585.184128][T26282] ? __pfx_vfs_write+0x10/0x10 [ 1585.188908][T26282] ksys_write+0x12a/0x250 [ 1585.193234][T26282] ? __pfx_ksys_write+0x10/0x10 [ 1585.198090][T26282] do_syscall_64+0x115/0x870 [ 1585.202673][T26282] ? clear_bhb_loop+0x40/0x90 [ 1585.207346][T26282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.213231][T26282] RIP: 0033:0x7f9b4139e019 [ 1585.217634][T26282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.237228][T26282] RSP: 002b:00007f9b4233c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.245629][T26282] RAX: ffffffffffffffda RBX: 00007f9b41625fa0 RCX: 00007f9b4139e019 [ 1585.253587][T26282] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 1585.261545][T26282] RBP: 00007f9b4143500c R08: 0000000000000000 R09: 0000000000000000 [ 1585.269505][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1585.277461][T26282] R13: 00007f9b41626038 R14: 00007f9b41625fa0 R15: 00007fff777ebdc8 [ 1585.285432][T26282] [ 1585.288662][T26282] Kernel Offset: disabled [ 1585.293007][T26282] Rebooting in 86400 seconds..