last executing test programs: 13m11.283465221s ago: executing program 4 (id=2812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x203, 0x70bd28, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x100, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 13m10.278728385s ago: executing program 4 (id=2814): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x9, 0x80000001, 0xa8, 0x8}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0x5878, 0x9}, &(0x7f0000000300)=0x8) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x17, 0x1a, "9d3c7c3358564524ac7c5b06e9f1e71fea02863d6803894d4a09"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x402004, 0x19, "3eccd8000000000002000000000000000100"}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)=""/63, 0x3f}], 0x1, &(0x7f0000001000)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x10282, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x40, 0x50e04e2fd894fce, 0x1, "ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m6.645231503s ago: executing program 4 (id=2826): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x18) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x4c040) accept4(r3, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000400)) io_setup(0x2004, &(0x7f0000000680)) 13m4.518233577s ago: executing program 4 (id=2830): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x16c, &(0x7f00000002c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, &(0x7f00000001c0)={0x20, 0x4, 0x8, {0x8, 0x8, "6de7ef7ae87a"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002700)={0x44, &(0x7f00000004c0)={0x0, 0x15, 0x13, "fefc294510f2e01923d5502fde0cc1abe76fbe"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002580)={0x0, 0x8, 0x1, 0xfa}, &(0x7f00000025c0)={0x20, 0x80, 0x1c, {0x4d, 0x0, 0x80, 0x0, 0x37a7, 0xff, 0x8, 0x80000000, 0x7, 0x8, 0x39, 0xbc6b}}, &(0x7f0000002600)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000002640)={0x20, 0x83, 0x2, 0xfff8}, &(0x7f0000002680)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000026c0)={0x20, 0x89, 0x2}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x20008800) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r4, &(0x7f0000000180)='nullb1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000200)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='128\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000380)='1\x00', 0x2) fanotify_mark(r2, 0x1, 0x8000026, r1, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000580)="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", 0x2000, &(0x7f0000005440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 12m59.869619473s ago: executing program 4 (id=2842): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='c 1:1\t\n.'], 0xa) (fail_nth: 2) 12m58.866478966s ago: executing program 4 (id=2848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x7fffffffffffffff, 0x1, 0x0, 0xcfb34ad}) 12m58.132081524s ago: executing program 32 (id=2848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x7fffffffffffffff, 0x1, 0x0, 0xcfb34ad}) 12m10.942605841s ago: executing program 1 (id=3000): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2c, 0x800, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000400)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@ethernet={0x6, @random="0aa7ee48fc40"}, {0x0}, 0x0, 0x2}, 0xa0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x101042, 0xfb) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000200)={&(0x7f0000000180)=""/114, 0x72}) acct(&(0x7f00000000c0)='./bus\x00') acct(0x0) r3 = syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x4207, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast1}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r4, &(0x7f0000000340)="12fd1cf533b9bc3800000034a17dea59acf51cc91ed446073b03b7c2613fbf57c8ba6ae9dae783520f8a9a4d8758006a01b01b15bdedb0a5a02f8cfec10a15125eb2930b000000000000008fc85e64c087ef7168600a9b68a60075c7d3e20aed34581605a672eedf5fa2fda02a572644401c21db00"/129, 0x81, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 12m9.934369761s ago: executing program 1 (id=3007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0x0, 0xf3ff000011fb}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() capset(&(0x7f00000001c0)={0x19980330, r5}, 0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r9 = socket(0x1e, 0x4, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) sendmmsg(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x69f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x41c5) 12m6.726462917s ago: executing program 1 (id=3022): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) (async) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) (async, rerun: 64) ustat(0xad8, 0x0) (rerun: 64) 12m6.652496422s ago: executing program 1 (id=3023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0xffffffffffffff02, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f00000004c0)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000400)) 12m6.408128249s ago: executing program 1 (id=3025): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='oxu210hp-hcd\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='pcspkr\x00', 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}) pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xfe) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) (async) setpgid(0x0, r6) truncate(&(0x7f0000000000)='./file0/file0\x00', 0x0) file_setattr(0xffffffffffffff9c, &(0x7f0000000380)='mysys/bus/platform/drivers/oxu210hp-hcd/bind\x00', &(0x7f0000000140)={0x138a9, 0xfffffffa, 0xe80, 0x2, 0xa1}, 0x18, 0x1000) bind$llc(r1, &(0x7f00000003c0)={0x1a, 0x1, 0xfd, 0x0, 0x4, 0xe}, 0x10) (async) bind$llc(r1, &(0x7f00000003c0)={0x1a, 0x1, 0xfd, 0x0, 0x4, 0xe}, 0x10) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x802b}) (async) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x802b}) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f00000001c0), &(0x7f0000000340)=0x4) (async) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f00000001c0), &(0x7f0000000340)=0x4) shutdown(r0, 0x2) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) (async) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0000000000000006"], 0x0) (async) syz_emit_ethernet(0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0000000000000006"], 0x0) 12m5.039755869s ago: executing program 1 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x0, 0x4000010, r0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) gettid() r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000140)='vegas\x00', 0x6) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000540)="22ab8eee60233141c1916be6610ff9ba5e7eb6673fe0f6c0d4e6634c6a919ced92b391b739a9709d7435b1539dc3d42035c0ae4aef95c9a7dbafc24025de2c42c0c623fe0d42abbeb424805fcb", &(0x7f0000000b40)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000b00)={&(0x7f0000000000), 0xc, &(0x7f0000000ac0)={&(0x7f0000000640)={0x450, 0x3f4, 0x2, 0x70bd26, 0x25dfdbfd, {0x2c934bc015c06fce, 0x0, 0x23, [0x401, 0xf, 0x5, 0x9, 0x2, 0x81, 0x0, 0x9, 0x6, 0x7fffffff, 0xa, 0x10001, 0x7, 0x6, 0x63, 0xc, 0x8, 0x6, 0x1000, 0x9d1e, 0x401, 0x60, 0x1, 0xffff, 0x8, 0x0, 0x2, 0x6, 0x7, 0x0, 0x1, 0x800, 0x6, 0x9, 0x80, 0x4, 0x8, 0x7c1, 0xa14, 0x10000, 0x3ffb, 0x800, 0x800, 0x6, 0x100, 0x26, 0x6, 0xb, 0xffff0000, 0xefb84fde, 0x7, 0xca3, 0x6, 0x0, 0x101, 0x4, 0xc, 0x2, 0x1000, 0xfffffffc, 0x4, 0x5, 0x3ff, 0x1], [0x5, 0x6, 0x8, 0xed6, 0xfffffffa, 0x0, 0x1, 0x4, 0x8, 0x8, 0xfffffffa, 0x3ff, 0x3, 0xfff, 0x8, 0xfffffff8, 0x3, 0x1, 0x200, 0x900, 0x2, 0x8, 0x2, 0x3, 0x1ff, 0x1ff, 0x2, 0x41, 0x5, 0xc04, 0x7, 0x2, 0x80000000, 0x5, 0x2, 0x7ff, 0x6, 0xa3f, 0x4, 0x537, 0x7, 0x8001, 0x2, 0xffffff3e, 0x7, 0x7fffffff, 0x40, 0x4, 0x6d09, 0x4, 0x9, 0xd, 0x5, 0x8, 0x81, 0x80000001, 0x7, 0x1, 0x3ff, 0x80, 0xc, 0xd, 0xe8, 0x377a], [0x1, 0xd, 0xbf, 0x1, 0x0, 0x8, 0x1, 0x80, 0x1000, 0x7, 0x80000001, 0xe, 0x8, 0x100, 0x2fc, 0x10001, 0x0, 0x9, 0x1, 0x1, 0x5, 0x5, 0x8, 0x7, 0xffa, 0xf1e, 0x1, 0x2512, 0x9, 0x6, 0xfffffff2, 0x7f, 0x2, 0x831a, 0xf, 0x1, 0x1000, 0xbe1, 0x8, 0x6, 0x3, 0x80000001, 0x9, 0x100, 0x81, 0x4, 0x0, 0x2, 0x1, 0x5, 0xd5, 0x1, 0x4, 0x5dbb031f, 0xefb, 0x7fff, 0x8, 0x200000, 0x101, 0x4, 0xe, 0x2, 0x9, 0x401], [0x5, 0x3, 0xfffffffd, 0x0, 0x0, 0x3, 0x1cfc, 0xffff7b98, 0xb, 0x0, 0xffffffff, 0xe20, 0x6, 0xc, 0x6, 0x800, 0x6, 0x7, 0xea4, 0x5, 0x33000000, 0x400, 0x6, 0x5, 0x64, 0x3, 0x2, 0x6, 0xd, 0x9, 0x9, 0x10001, 0x6, 0x8, 0xfff, 0x6, 0x6, 0x0, 0x0, 0x2, 0xfff, 0x10001, 0x3, 0x6, 0x0, 0x1000, 0x10, 0xfc8, 0x10, 0x9, 0x1, 0x4, 0x8dc, 0x6, 0x4, 0x1, 0x100, 0x9, 0x8, 0x2, 0x9, 0x8001, 0x17, 0xe04c], 0x30, ['\x84]\x00', '\\[\x00', '/proc/sys/net/ipv4/tcp_congestion_control\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000005c0)="b99f0000400f3266baf80cb8498e3583ef66bafc0cec66baf80cb865f9f189ef66bafc0cec0f35b9c50200000f32660f38819791950000f20f1060ff0f01330f01c40f21d2", 0x45}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r10, 0xe) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 11m49.331550862s ago: executing program 33 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x0, 0x4000010, r0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) gettid() r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000140)='vegas\x00', 0x6) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000540)="22ab8eee60233141c1916be6610ff9ba5e7eb6673fe0f6c0d4e6634c6a919ced92b391b739a9709d7435b1539dc3d42035c0ae4aef95c9a7dbafc24025de2c42c0c623fe0d42abbeb424805fcb", &(0x7f0000000b40)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000b00)={&(0x7f0000000000), 0xc, &(0x7f0000000ac0)={&(0x7f0000000640)={0x450, 0x3f4, 0x2, 0x70bd26, 0x25dfdbfd, {0x2c934bc015c06fce, 0x0, 0x23, [0x401, 0xf, 0x5, 0x9, 0x2, 0x81, 0x0, 0x9, 0x6, 0x7fffffff, 0xa, 0x10001, 0x7, 0x6, 0x63, 0xc, 0x8, 0x6, 0x1000, 0x9d1e, 0x401, 0x60, 0x1, 0xffff, 0x8, 0x0, 0x2, 0x6, 0x7, 0x0, 0x1, 0x800, 0x6, 0x9, 0x80, 0x4, 0x8, 0x7c1, 0xa14, 0x10000, 0x3ffb, 0x800, 0x800, 0x6, 0x100, 0x26, 0x6, 0xb, 0xffff0000, 0xefb84fde, 0x7, 0xca3, 0x6, 0x0, 0x101, 0x4, 0xc, 0x2, 0x1000, 0xfffffffc, 0x4, 0x5, 0x3ff, 0x1], [0x5, 0x6, 0x8, 0xed6, 0xfffffffa, 0x0, 0x1, 0x4, 0x8, 0x8, 0xfffffffa, 0x3ff, 0x3, 0xfff, 0x8, 0xfffffff8, 0x3, 0x1, 0x200, 0x900, 0x2, 0x8, 0x2, 0x3, 0x1ff, 0x1ff, 0x2, 0x41, 0x5, 0xc04, 0x7, 0x2, 0x80000000, 0x5, 0x2, 0x7ff, 0x6, 0xa3f, 0x4, 0x537, 0x7, 0x8001, 0x2, 0xffffff3e, 0x7, 0x7fffffff, 0x40, 0x4, 0x6d09, 0x4, 0x9, 0xd, 0x5, 0x8, 0x81, 0x80000001, 0x7, 0x1, 0x3ff, 0x80, 0xc, 0xd, 0xe8, 0x377a], [0x1, 0xd, 0xbf, 0x1, 0x0, 0x8, 0x1, 0x80, 0x1000, 0x7, 0x80000001, 0xe, 0x8, 0x100, 0x2fc, 0x10001, 0x0, 0x9, 0x1, 0x1, 0x5, 0x5, 0x8, 0x7, 0xffa, 0xf1e, 0x1, 0x2512, 0x9, 0x6, 0xfffffff2, 0x7f, 0x2, 0x831a, 0xf, 0x1, 0x1000, 0xbe1, 0x8, 0x6, 0x3, 0x80000001, 0x9, 0x100, 0x81, 0x4, 0x0, 0x2, 0x1, 0x5, 0xd5, 0x1, 0x4, 0x5dbb031f, 0xefb, 0x7fff, 0x8, 0x200000, 0x101, 0x4, 0xe, 0x2, 0x9, 0x401], [0x5, 0x3, 0xfffffffd, 0x0, 0x0, 0x3, 0x1cfc, 0xffff7b98, 0xb, 0x0, 0xffffffff, 0xe20, 0x6, 0xc, 0x6, 0x800, 0x6, 0x7, 0xea4, 0x5, 0x33000000, 0x400, 0x6, 0x5, 0x64, 0x3, 0x2, 0x6, 0xd, 0x9, 0x9, 0x10001, 0x6, 0x8, 0xfff, 0x6, 0x6, 0x0, 0x0, 0x2, 0xfff, 0x10001, 0x3, 0x6, 0x0, 0x1000, 0x10, 0xfc8, 0x10, 0x9, 0x1, 0x4, 0x8dc, 0x6, 0x4, 0x1, 0x100, 0x9, 0x8, 0x2, 0x9, 0x8001, 0x17, 0xe04c], 0x30, ['\x84]\x00', '\\[\x00', '/proc/sys/net/ipv4/tcp_congestion_control\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000005c0)="b99f0000400f3266baf80cb8498e3583ef66bafc0cec66baf80cb865f9f189ef66bafc0cec0f35b9c50200000f32660f38819791950000f20f1060ff0f01330f01c40f21d2", 0x45}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r10, 0xe) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 47.243139402s ago: executing program 0 (id=5042): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@restrict, @var={0xd, 0x0, 0x0, 0xe, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @float={0x7, 0x0, 0x0, 0x10, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x0, 0x61, 0x2e, 0x2f]}}, &(0x7f0000000380)=""/67, 0x5f, 0x43, 0x1, 0x3}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0,', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/198, 0xc6}], 0x1000000000000239, 0x8, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x2a6, "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"}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000b80)=@ethtool_stats={0x11}}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x40, 0x2000, 0x41018}, 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xbf925000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f00000002c0)={0xa, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}, {0xaad, 0x0, 0x8}]}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=[@init={0x18, 0x84, 0x0, {0x1, 0x4a, 0x5, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38, 0x4855}, 0x24004016) tee(r8, 0xffffffffffffffff, 0xffffffffffffff42, 0x5) syz_usb_connect$uac1(0x0, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x2, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 44.03928801s ago: executing program 0 (id=5054): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000880)={&(0x7f00000008c0)=[r3, r4, r3], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x10803, @remote, 0x5, 0xfffffffe}, 0x20) getpeername$l2tp6(r6, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @private0, 0x8}, 0x1c) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, 0x0, 0x123) shutdown(r0, 0x1) 40.72332482s ago: executing program 0 (id=5058): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) 36.838064826s ago: executing program 0 (id=5069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r2, 0x0, 0x0, 0xe7c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002b80)) sendmmsg$unix(r2, 0x0, 0x0, 0x8000) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, &(0x7f0000000040)={0x0, @raw}) 36.562442302s ago: executing program 0 (id=5071): r0 = open(&(0x7f0000000000)='.\x00', 0x80, 0x3) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x105102, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400), 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601080000000000000000070000000900020073797a310000000005000100070000002c0007800c00018008000140ac14143f060004400e1f000005000700880000000c0018400000000000000082006ef8c5d61fc15147362dd6338e394b37a229d550c791ab98cb78aef663b51d71aa6eda51f2e48abca19a73ea4594a94bab2c8c926feee3a5bc4b884f63798583044e15056b28f25f770081ff82437118cf0d10041c508d627d198dd9b4a8c9ff12b103f89c9e153d9cad807f9f86fb0632b7ae77832bfbdff473a8258539dda573c325afd1be072020222f0c"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000240012800b00010062726964676500001400028005002c000200001d0820040005000000"], 0x96}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/100, 0x64}], &(0x7f0000000240)=[0x0, 0x1, 0xfffffffffffffff9, 0x7, 0x4, 0x1], 0x1}, 0x20) 35.613352671s ago: executing program 0 (id=5074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f00000067492db5e9a9662a847b1b"], 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) accept4(r6, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80, 0x1800) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00002e000000d412be40b532cc37d442bd95cb06448a5e6a76691230ec0a86c3069b91ea70597f000000000000005377714fd11d04b30940f1eba1047efa80288b92a9f4f4c87a064b186e263d3db9033fc626da94c90cef00167f1b0d6e36feacae56aa820e9a4d6c7fce2dc0cd04e5d7fd05e0a1230da3ba6958d0df5fdc5429a67ea92d5c5c987af3d47b663691243f5780c1a514fae7708a50d8dc183cfcdabea46b4514d4fb3d04fc0ccea7edfa05871d93a146270b86552f6c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) r8 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_usb_connect$uac2(0x1, 0xfe, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x3, 0x10, 0x7f, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x20, 0xf506e8fe1cee8f9b, 0x1c, 0x8}, [@effect_unit={0x13, 0x24, 0x7, 0x4, 0x2, 0x4, [0x2, 0x3, 0x0, 0x0, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6e, 0x1, 0xfa, 0x86}, @as_header={0x10, 0x24, 0x1, 0x3, 0x40, 0x2, 0x1002, 0xec, 0xffff, 0xf}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x17, 0x7, "fa", "b6a236"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xf, "", "1e9c"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0xfff8, 0x5, "bd6d847a33"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x4, 0x5, "ca", "d4f159"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x2, 0x3, {0x8, 0x25, 0x1, 0x2, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x6, "7aeb"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0xfb, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xf, 0x6, 0x4, 0xea}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x28, 0xfb, 0x6, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x80, 0x8, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x35, 0x1}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x24, 0xff, 0x1, 0x10, 0x5}, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="050f02000024a7ebb97d2c6ee19d1d6af65ef27b3e1cd8aa659f1e0a9d555b8cc46b4329a92938dd7030b16da43a456901f45de1ae3786bc38195d7fef192fd1ff70d998694cb70ef8693487b72b9d601febbf75e61ec4c6f0a72077bd6d2ed1308ce14cec80dc1d156598b3e3a8923cf6c271d9c17892a844a1b6fd0a43eb0fb5e79ff8e5e0edbd1f73dcba3aa87088c22b09ab5b0fcfb7420d17fde01e085653c367d66d5ab17c503f5def954ad276c00908cde25fe0fc7caa764169acf5b359d51d457a3ca3690e8bca4023f8dd4a16b04949ca51c5e5253960bb825e"], 0x4, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}]}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x21, @none}, 0xe) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f00000001c0), 0x4) r10 = socket(0x2c, 0x2, 0xb) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={0x0, 0x6}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r12, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r13}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRESHEX=r13], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) 20.184639991s ago: executing program 34 (id=5074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f00000067492db5e9a9662a847b1b"], 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) accept4(r6, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80, 0x1800) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00002e000000d412be40b532cc37d442bd95cb06448a5e6a76691230ec0a86c3069b91ea70597f000000000000005377714fd11d04b30940f1eba1047efa80288b92a9f4f4c87a064b186e263d3db9033fc626da94c90cef00167f1b0d6e36feacae56aa820e9a4d6c7fce2dc0cd04e5d7fd05e0a1230da3ba6958d0df5fdc5429a67ea92d5c5c987af3d47b663691243f5780c1a514fae7708a50d8dc183cfcdabea46b4514d4fb3d04fc0ccea7edfa05871d93a146270b86552f6c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) r8 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_usb_connect$uac2(0x1, 0xfe, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x3, 0x10, 0x7f, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x20, 0xf506e8fe1cee8f9b, 0x1c, 0x8}, [@effect_unit={0x13, 0x24, 0x7, 0x4, 0x2, 0x4, [0x2, 0x3, 0x0, 0x0, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6e, 0x1, 0xfa, 0x86}, @as_header={0x10, 0x24, 0x1, 0x3, 0x40, 0x2, 0x1002, 0xec, 0xffff, 0xf}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x17, 0x7, "fa", "b6a236"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xf, "", "1e9c"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0xfff8, 0x5, "bd6d847a33"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x4, 0x5, "ca", "d4f159"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x2, 0x3, {0x8, 0x25, 0x1, 0x2, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x6, "7aeb"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0xfb, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xf, 0x6, 0x4, 0xea}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x28, 0xfb, 0x6, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x80, 0x8, {0x8, 0x25, 0x1, 0x83, 0x3c, 0x35, 0x1}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x24, 0xff, 0x1, 0x10, 0x5}, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="050f02000024a7ebb97d2c6ee19d1d6af65ef27b3e1cd8aa659f1e0a9d555b8cc46b4329a92938dd7030b16da43a456901f45de1ae3786bc38195d7fef192fd1ff70d998694cb70ef8693487b72b9d601febbf75e61ec4c6f0a72077bd6d2ed1308ce14cec80dc1d156598b3e3a8923cf6c271d9c17892a844a1b6fd0a43eb0fb5e79ff8e5e0edbd1f73dcba3aa87088c22b09ab5b0fcfb7420d17fde01e085653c367d66d5ab17c503f5def954ad276c00908cde25fe0fc7caa764169acf5b359d51d457a3ca3690e8bca4023f8dd4a16b04949ca51c5e5253960bb825e"], 0x4, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}]}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x21, @none}, 0xe) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f00000001c0), 0x4) r10 = socket(0x2c, 0x2, 0xb) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={0x0, 0x6}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r12, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r13}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRESHEX=r13], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc) 12.198662615s ago: executing program 6 (id=5137): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (async) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000040)=0x7) (async, rerun: 64) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x200000000000000) (rerun: 64) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) (async) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, 0x0) (async) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) (async) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x4, 0x0, 0x18, 0x2, 0x3, 0x7}}) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9.921820119s ago: executing program 6 (id=5141): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 8.948471727s ago: executing program 6 (id=5144): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB="000000264ec900000011a6c8c1e1e7c8a1000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x8b59) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 7.828032776s ago: executing program 6 (id=5146): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="ee3a3c835d4426aa80fbe05579e256d4e61a0f6c8a31ba31cec61f995a1cb4812071edbf003aed6d96c510518294ebaf28ffe9ecdc0ce801cbfbcb11c3e634e1b42cf54ad49f96483ca051adf2eb869849e3461feae9bbb6eb04b59e3379d974e52d99ac6deb0b1f8155e6aadcbd3e14685935d52b71bf9470026414377e72dd396a08fca0501d62831714df65ece52ff6ce66bde2ee880a0ba1d7e2d97fc70fd2433407d215584db448aedcfc0e54e1c9b023a65008fa5775acf852c60b3c2ff439934a2eb6b56a25f2a9e91ff6bbc2417e8c8781c4fd790ddc19a5f603d81812b7145f6f7347d2afffdb333efa3c4c10", 0xf1}, {&(0x7f0000000440)="929b924eaa4bbe90b88b32cf032e4a39778bba9bae83b5f4e864234d0f279672c532fb034c69788d2b882b739ae30285b59208983ca44c33956d28a843a60bbfd94d08ccfdc2a92ad386", 0x4a}, {&(0x7f00000004c0)="9fb9a262833e248905011f3034aba8010f493d5ad752ae73d4d703571222749a2be888a0fb1597e5639c151cb72e243d3fad98a78c2604328bc1bab1826d32448f9b341a97c2319ccbc067bcf122cd0f465d6c5f73980e27ad050ec534908d3c610b06833ea75e71cf29c37173186e47ca99c3e81cf86457d93358f76193e89960d7fe29df51", 0x86}], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x9}}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000003f00fe03000100000000", 0x1c) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fd1c291b3091ec1a06000000975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) capset(&(0x7f0000000600)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x400}) r4 = socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, r9}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xa000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0xd8, 0x5a, 0x1, 0x70bd27, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffeffff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xd8}}, 0x0) 6.817581324s ago: executing program 6 (id=5152): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) unshare(0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x4}}, 0x9) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 5.27934608s ago: executing program 3 (id=5156): io_setup(0x9, &(0x7f0000000200)) (async) io_setup(0x9, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) (async) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) (async) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x800000}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000bed000007"], 0x31) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x33f8, &(0x7f0000000380)={0x0, 0x15a1, 0x1, 0x0, 0x20c}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r7, 0x8, 0x0, 0x91a, 0x3}) io_uring_enter(r7, 0xffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x3, 0x8b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, 0x0) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x3, 0x8b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, 0x0) 4.666651806s ago: executing program 2 (id=5158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000780)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n2\n3\n', 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303, 0x38}, "0100010800", "73b59657269ef929ee540a8a0a86c5d0", "c0ffffff", "004574dd3a00"}, 0x28) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000900)="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", &(0x7f0000000540)=@buf="8c616e6ae7f36d593a3a9140adeb80f0ab419b7f79296df37d3e9ac08adfcf94ebb63919638ebd4d74f00e8f2ac3af2354f71518d39eed9c835320fb988558c27fdc889777097b6b13cce7d0a0aaa9fdf5ec12356de84131994390f33ebcbd5ca92338ce411ad1fb3b470a06b5294c4b3fa4c3d338b477cb307184e56166310900000000000000ac82a1c66b1ac7e9c1e21107f06df8655c1e956757da34374c21ce3236738c9817b10b5ec8ad4e8b60517052e78fd1025dbc52f80120403302000000000000000000"}, 0x20) 4.206822652s ago: executing program 3 (id=5159): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r4, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010400000000000000001c0000001c00000005000000030000000000000f0200000034aa000000000000000f0200000003740000005f00"], &(0x7f00000003c0)=""/143, 0x39, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) io_setup(0x4, &(0x7f0000000080)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) socket$netlink(0x10, 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x2, 0x40000000000009a, 0x0, 0x6, &(0x7f0000001600)}) 3.962177187s ago: executing program 3 (id=5160): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40060040}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) mmap(&(0x7f000077e000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r6, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.854497805s ago: executing program 5 (id=5161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0xf0ffffffffffffff, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) 3.780685868s ago: executing program 2 (id=5162): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="01040000000000000400b8000800b700c5000000"], 0x30}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a800000009000000010000000000000c050000000c0000080100000404000000030000000300000006000000000000000000000300000000010000000400000001000000040000000000000a0300000005000000010000130f000000a00000000100000002000000080000000000000901000000060000000400009348c45af2040000007f000000010000000e000000b9d800000101000001000000b800000008000000020000000900000002000000005f5f7f005f5f6100"], &(0x7f0000000240)=""/224, 0xc9, 0xe0, 0x0, 0xb}, 0x28) (async) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async, rerun: 64) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_fuse_handle_req(r5, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write(r6, 0x0, 0x0) (async) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x0, 0x0, 0x1, 0x0, '\x00'}}, 0x2a) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 3.386840657s ago: executing program 5 (id=5163): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff46) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3, 0x600200) write$binfmt_misc(r8, &(0x7f0000000000), 0x0) 3.242454745s ago: executing program 2 (id=5164): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xc, 0x4a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x8010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$inet(0x2, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='kvm,4\x00', 0x5) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) 3.155136865s ago: executing program 5 (id=5165): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB="000000264ec900000011a6c8c1e1e7c8a1000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x8b59) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 3.121820287s ago: executing program 6 (id=5166): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@restrict, @var={0xd, 0x0, 0x0, 0xe, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @float={0x7, 0x0, 0x0, 0x10, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x0, 0x61, 0x2e, 0x2f]}}, &(0x7f0000000380)=""/67, 0x5f, 0x43, 0x1, 0x3}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0,', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/198, 0xc6}], 0x1000000000000239, 0x8, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x2a6, "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"}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000b80)=@ethtool_stats={0x11}}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x40, 0x2000, 0x41018}, 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xbf925000) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f00000002c0)={0xa, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}, {0xaad, 0x0, 0x8}]}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=[@init={0x18, 0x84, 0x0, {0x1, 0x4a, 0x5, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38, 0x4855}, 0x24004016) tee(r9, r5, 0xffffffffffffff42, 0x5) syz_usb_connect$uac1(0x0, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x2, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 2.001688784s ago: executing program 5 (id=5167): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x5, 0x0, 0x100, 0x4, 0x540200, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x12, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000d3feb9e0f06875f09f3263703d9c251913fb1bdd231ffa4bbe985b6c75d1dcbdb45980ae4759030e7d60bee23ec36b34a81937db4596cd6db1cdb2d13cbc0d302223dec59db6f69b50025906bc25c3aad25d0406a266951d3100db22ea90ca81ec1ac7f28affbee642f7953628530b66e2c68999ab1ad41d0f28023a91e48db8c6b9e0eebd1d8890b6bd7fbeaa9e77ecdd740e5577c2bd1f0e7ef43c9266cd679acc55fda4009108572d46d4aaa9fd0aca444bba27ede4488a3cd6b55f24665467bd633d", @ANYRESOCT=r1, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd70010400000003000000280001800e0001006574683a7866726d3000000014000300000001000c00000008000300400000007025bcc2a58e2f13c316c0b64d1ab7a26d3d8a9989b421c515e4d6b5f9489694fbc8766f9c703c638c56fb0ef76480af0d40027daf3344a6cecd5e8937fd03351047bb82a50bf887008587964a9ed7185559a35106"], 0x3c}}, 0x8804) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept$alg(r9, 0x0, 0x0) 1.796772913s ago: executing program 2 (id=5168): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) setuid(0xee00) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) (async) setuid(0xee00) (async) socket$inet6(0xa, 0x5, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) (async) 1.691001026s ago: executing program 3 (id=5169): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r4, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010400000000000000001c0000001c00000005000000030000000000000f0200000034aa000000000000000f0200000003740000005f00"], &(0x7f00000003c0)=""/143, 0x39, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) io_setup(0x4, &(0x7f0000000080)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) socket$netlink(0x10, 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x2, 0x40000000000009a, 0x0, 0x6, &(0x7f0000001600)}) 1.581222043s ago: executing program 5 (id=5170): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000010c0), 0x80000, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001200)={0x8, 0x5, &(0x7f0000001100)=[0x4, 0x101, 0x8, 0xac01, 0x3], &(0x7f0000001140), &(0x7f0000001180), 0x0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FE_READ_UNCORRECTED_BLOCKS(r1, 0x80046f49, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000100)={0x7fff, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.49417152s ago: executing program 2 (id=5171): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) write$tun(r4, &(0x7f0000000240)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@noop]}}, {0x1234, 0x4e20, 0x19, 0x0, @opaque="0123456789abcdef0123456789abcdef01"}}}, 0x3b) r6 = syz_io_uring_setup(0x7ce6, &(0x7f00000005c0)={0x0, 0x800ffff, 0x1, 0x1, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r6, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r6}}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x975, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x114}}}, &(0x7f0000000340)) syz_clone3(&(0x7f0000000640)={0x4800, &(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f0000000380), {0x1f}, &(0x7f00000003c0)=""/126, 0x7e, &(0x7f0000000440)=""/73, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) r11 = syz_ublk_add_dev(r1, r2, r3, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0x424, 0x0, 0x0, 0x1000, 0x9, r10, 0x0, 0x4}}}, &(0x7f0000000180)=0x0) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_setup_queues(r13, r12, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 1.379278292s ago: executing program 3 (id=5172): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0xffffffffffffff8d, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) 1.367297722s ago: executing program 5 (id=5173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x2) fchdir(r2) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000b00)={0x0, 0x2, 0x3010, 0x2, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f00000001c0), 0x1, 0x40}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='4,,:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x10000, 0x1000000, 0x55, 0x0, r3}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) syz_ublk_add_dev(r3, r7, r5, r6, &(0x7f0000000540)={0x2e, 0x8, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x1, 0xc43, 0x0, 0x0, 0x1000, 0x200, 0x0, 0x0, 0xc}}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140), 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000100)={0x32, &(0x7f0000002480)=[{0x20, '\x00', @data=0x3c5, 0x1}]}) write$tun(r0, &(0x7f0000000280)={@val={0x3f00, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x6666, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x1, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x11, 0x6, {0x6, 0x5, "9e56c35f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r10) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r11, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.014656612s ago: executing program 3 (id=5174): socket$inet6(0xa, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x6, 0x0, 0x8, 0xfc, 0x44, 0xe9, 0x7, 0x1, 0x9, 0x3, 0x6, 0x9}, {0xdded0000, 0x40, 0xfc, 0x9, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x4, 0x4, 0x2, 0x2, 0x0, 0x1, 0xfffffffffffffffd}], 0x1ffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x100000000, 0x0) 0s ago: executing program 2 (id=5175): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x14, &(0x7f00000002c0)=[{0x1e, '\x00', @buffer={"5c8310ef19dd8ae6b20542f8a6cd73657287807e00", 0x20}, 0x6}]}) (async) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x14, &(0x7f00000002c0)=[{0x1e, '\x00', @buffer={"5c8310ef19dd8ae6b20542f8a6cd73657287807e00", 0x20}, 0x6}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) name_to_handle_at(r1, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@xfs={0x1c, 0x81, {0x7, 0xd9, 0xc0b, 0x52}}, &(0x7f0000000680), 0x1800) (async) name_to_handle_at(r1, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@xfs={0x1c, 0x81, {0x7, 0xd9, 0xc0b, 0x52}}, &(0x7f0000000680), 0x1800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="2c385a7af3", 0x5) accept4(r6, 0x0, 0x0, 0x800) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000005c0)='auxv\x00') read$FUSE(r11, 0x0, 0x0) (async) read$FUSE(r11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x90420, &(0x7f0000000100)=ANY=[@ANYBLOB='tra.s=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES64=r3], 0x15) kernel console output (not intermixed with test programs): ation [ 1328.381094][T24087] lo speed is unknown, defaulting to 1000 [ 1328.617964][T24119] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4835' sets config #0 [ 1328.672735][T24118] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4835' sets config #1 [ 1328.765045][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1328.827139][ T5714] usb 7-1: new low-speed USB device number 68 using dummy_hcd [ 1328.937544][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1328.963207][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1328.985663][T24129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4838'. [ 1329.017184][ T10] usb 4-1: config 0 has no interface number 0 [ 1329.027400][ T5714] usb 7-1: device descriptor read/64, error -71 [ 1329.067254][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1329.127196][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.444489][T19717] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1329.754297][ T5714] usb 7-1: new low-speed USB device number 69 using dummy_hcd [ 1330.190437][ T10] usb 4-1: Product: syz [ 1330.215498][ T10] usb 4-1: Manufacturer: syz [ 1330.226126][ T10] usb 4-1: SerialNumber: syz [ 1330.260450][ T10] usb 4-1: config 0 descriptor?? [ 1330.296300][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1330.334733][ T5714] usb 7-1: device descriptor read/64, error -71 [ 1330.351454][T19717] usb 3-1: Using ep0 maxpacket: 16 [ 1330.364542][T19717] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1330.376030][T19717] usb 3-1: config 0 has no interface number 0 [ 1330.382113][T19717] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1330.410253][T19717] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1330.438629][T19717] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1330.538043][ T5714] usb usb7-port1: attempt power cycle [ 1330.548989][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1330.676020][T22148] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1330.694098][T19717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.702781][ T30] audit: type=1400 audit(1785700627.549:1323889): avc: denied { name_bind } for pid=24142 comm="syz.0.4843" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1330.754746][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1330.769560][T19717] usb 3-1: Product: syz [ 1330.799606][T19717] usb 3-1: Manufacturer: syz [ 1330.821233][T19717] usb 3-1: SerialNumber: syz [ 1330.827956][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1330.862010][ T10] usb 4-1: USB disconnect, device number 95 [ 1330.882529][T19717] usb 3-1: config 0 descriptor?? [ 1330.897676][T22148] usb 6-1: Using ep0 maxpacket: 8 [ 1330.925919][T22148] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.944883][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1330.961190][T24134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1330.979615][T24151] tmpfs: Unknown parameter 'mpo' [ 1330.999566][T22148] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1331.009327][T24134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1331.034106][ T5714] usb 7-1: new low-speed USB device number 70 using dummy_hcd [ 1331.045425][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1331.069093][T22148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.090860][ T10] quatech2 4-1:0.51: device disconnected [ 1331.098582][ T5714] usb 7-1: device descriptor read/8, error -71 [ 1331.109546][T22148] usb 6-1: config 0 descriptor?? [ 1331.148393][T22148] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1331.197248][ T30] audit: type=1400 audit(1785700628.059:1323890): avc: denied { bind } for pid=24153 comm="syz.0.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1331.266183][T24134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1331.279257][T24134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1331.364034][ T5714] usb 7-1: new low-speed USB device number 71 using dummy_hcd [ 1331.404071][ T5714] usb 7-1: device descriptor read/8, error -71 [ 1331.524064][ T5714] usb usb7-port1: unable to enumerate USB device [ 1331.531498][T19717] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1331.712189][T24162] wireguard0: entered promiscuous mode [ 1331.717771][T24162] wireguard0: entered allmulticast mode [ 1331.727487][T24162] ieee802154 phy0 wpan0: encryption failed: -90 [ 1331.753383][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1331.893722][ T5714] hid_parser_main: 15 callbacks suppressed [ 1331.893734][ T5714] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1331.908580][ T5714] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1331.933806][ T5714] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1331.943619][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1331.971468][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1331.998943][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1332.060301][T24167] fido_id[24167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1332.077581][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1332.136094][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1333.113741][T22148] gspca_vc032x: reg_r err -110 [ 1333.130663][T16058] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1333.160355][T22148] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 1334.136860][T16057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.134112][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.250189][ T5748] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 364 sec [ 1335.269150][T19717] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1335.346124][ T10] usb 4-1: Product: syz [ 1335.368293][ T5748] usb 6-1: USB disconnect, device number 99 [ 1335.380465][T19717] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1335.405627][ T10] usb 4-1: Manufacturer: syz [ 1335.422883][T24177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4850'. [ 1335.453843][ T10] usb 4-1: SerialNumber: syz [ 1335.460653][ T30] audit: type=1400 audit(1785700632.312:1323891): avc: denied { bind } for pid=24178 comm="syz.2.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1335.525289][T19717] asix 3-1:0.34: probe with driver asix failed with error -71 [ 1335.637718][T24196] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4853'. [ 1336.444009][ T10] usb 4-1: can't set config #1, error -71 [ 1336.464277][T19717] usb 3-1: USB disconnect, device number 120 [ 1336.597654][ T10] usb 4-1: USB disconnect, device number 96 [ 1336.799496][T24203] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1336.799513][T24203] CPU: 0 UID: 0 PID: 24203 Comm: syz.0.4856 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.799531][T24203] Tainted: [L]=SOFTLOCKUP [ 1336.799535][T24203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1336.799542][T24203] Call Trace: [ 1336.799547][T24203] [ 1336.799552][T24203] dump_stack_lvl+0x100/0x190 [ 1336.799570][T24203] sysfs_warn_dup.cold+0x1c/0x28 [ 1336.799590][T24203] sysfs_create_dir_ns+0x24b/0x2b0 [ 1336.799603][T24203] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1336.799621][T24203] ? find_held_lock+0x2b/0x80 [ 1336.799631][T24203] ? kobject_add_internal+0x25f/0x930 [ 1336.799649][T24203] ? kobject_add_internal+0x25f/0x930 [ 1336.799667][T24203] ? class_dir_child_ns_type+0xd/0x60 [ 1336.799685][T24203] kobject_add_internal+0x2c8/0x930 [ 1336.799704][T24203] kobject_add+0x16a/0x1e0 [ 1336.799720][T24203] ? __pfx_kobject_add+0x10/0x10 [ 1336.799738][T24203] ? get_device_parent+0x1b3/0x4c0 [ 1336.799753][T24203] ? kobject_put+0xb9/0x640 [ 1336.799772][T24203] device_add+0x294/0x1970 [ 1336.799788][T24203] ? lockdep_init_map_type+0x5c/0x250 [ 1336.799803][T24203] ? __pfx_device_add+0x10/0x10 [ 1336.799819][T24203] ? lockdep_init_map_type+0x5c/0x250 [ 1336.799834][T24203] ? __init_waitqueue_head+0xca/0x150 [ 1336.799853][T24203] tty_register_device_attr+0x388/0x7f0 [ 1336.799868][T24203] ? lockdep_init_map_type+0x5c/0x250 [ 1336.799881][T24203] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1336.799898][T24203] ? tty_port_init+0x156/0x1c0 [ 1336.799914][T24203] gsm_activate_mux+0x155/0x2a0 [ 1336.799929][T24203] gsmld_ioctl+0xbbc/0x15c0 [ 1336.799947][T24203] ? kasan_quarantine_put+0x104/0x240 [ 1336.799960][T24203] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1336.799977][T24203] ? __ldsem_down_read_nested+0xf3/0x890 [ 1336.799995][T24203] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1336.800015][T24203] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1336.800029][T24203] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1336.800041][T24203] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1336.800056][T24203] tty_ioctl+0x11b4/0x1640 [ 1336.800070][T24203] ? __pfx_tty_ioctl+0x10/0x10 [ 1336.800083][T24203] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1336.800106][T24203] ? __fget_files+0x215/0x3d0 [ 1336.800117][T24203] ? hook_file_ioctl_common+0x140/0x440 [ 1336.800134][T24203] ? selinux_file_ioctl+0x13b/0x290 [ 1336.800150][T24203] ? selinux_file_ioctl+0xb6/0x290 [ 1336.800168][T24203] ? __pfx_tty_ioctl+0x10/0x10 [ 1336.800182][T24203] __x64_sys_ioctl+0x18e/0x210 [ 1336.800201][T24203] do_syscall_64+0x115/0x870 [ 1336.800213][T24203] ? clear_bhb_loop+0x40/0x90 [ 1336.800227][T24203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.800239][T24203] RIP: 0033:0x7f545e39e019 [ 1336.800249][T24203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.800260][T24203] RSP: 002b:00007f545f241028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.800271][T24203] RAX: ffffffffffffffda RBX: 00007f545e626090 RCX: 00007f545e39e019 [ 1336.800278][T24203] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 1336.800285][T24203] RBP: 00007f545e43500c R08: 0000000000000000 R09: 0000000000000000 [ 1336.800292][T24203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.800298][T24203] R13: 00007f545e626128 R14: 00007f545e626090 R15: 00007ffd58488a08 [ 1336.800312][T24203] [ 1336.823922][T24203] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1336.980824][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1337.136745][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 1337.136765][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.136778][ T10] usb 4-1: Product: syz [ 1337.136787][ T10] usb 4-1: Manufacturer: syz [ 1337.136796][ T10] usb 4-1: SerialNumber: syz [ 1337.313137][ T30] audit: type=1400 audit(1785700634.163:1323892): avc: denied { setopt } for pid=24209 comm="syz.2.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1337.394053][ T30] audit: type=1400 audit(1785700634.253:1323893): avc: denied { mount } for pid=24198 comm="syz.3.4855" name="/" dev="ocfs2_dlmfs" ino=94018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1337.400179][ T10] mdc800 4-1:39.0: probe fails -> wrong Number of Configuration [ 1337.414266][ T10] usb 4-1: USB disconnect, device number 97 [ 1337.619258][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1337.619278][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1337.622836][ T10] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1337.783685][T24213] fido_id[24213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1337.876804][ T30] audit: type=1400 audit(1785700634.733:1323894): avc: denied { write } for pid=24218 comm="syz.6.4862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1337.971518][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1338.121190][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1338.128184][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 1338.128203][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.128215][ T10] usb 1-1: Product: syz [ 1338.128224][ T10] usb 1-1: Manufacturer: syz [ 1338.128233][ T10] usb 1-1: SerialNumber: syz [ 1338.985034][ T10] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 1338.985075][ T10] gspca_stv06xx: st6422 sensor detected [ 1339.248877][ T10] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71 [ 1339.249371][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1339.249396][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 1339.333841][ T10] usb 1-1: USB disconnect, device number 100 [ 1339.388127][T23271] udevd[23271]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.520664][T22148] usb 7-1: new low-speed USB device number 72 using dummy_hcd [ 1339.734159][T22148] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1339.744576][T22148] usb 7-1: config 127 has an invalid interface number: 106 but max is 0 [ 1339.744592][T22148] usb 7-1: config 127 has no interface number 0 [ 1339.744612][T22148] usb 7-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid maxpacket 128, setting to 8 [ 1339.744627][T22148] usb 7-1: config 127 interface 106 has no altsetting 0 [ 1339.794925][T22148] usb 7-1: string descriptor 0 read error: -22 [ 1339.794991][T22148] usb 7-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 1339.795004][T22148] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.799834][T22148] ftdi_sio 7-1:127.106: FTDI USB Serial Device converter detected [ 1339.800319][T22148] usb 7-1: Detected SIO [ 1339.801366][T22148] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1340.421579][ T10] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1340.477155][ T10] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1340.555271][ T30] audit: type=1400 audit(1785700637.414:1323895): avc: denied { write } for pid=24257 comm="syz.0.4873" name="bcdDevice" dev="configfs" ino=94228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1340.668405][T22148] usb 7-1: USB disconnect, device number 72 [ 1340.685028][ T10] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1340.750274][T22148] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1341.351424][ T30] audit: type=1400 audit(1785700637.414:1323896): avc: denied { open } for pid=24257 comm="syz.0.4873" path="/362/config/usb_gadget/g1/bcdDevice" dev="configfs" ino=94228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1341.419874][T16043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1342.449935][T22148] ftdi_sio 7-1:127.106: device disconnected [ 1343.447155][ T662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1346.432948][T24274] fido_id[24274]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1347.656304][T24283] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 1347.697327][ T30] audit: type=1400 audit(1785700641.276:1323897): avc: denied { ioctl } for pid=24276 comm="syz.3.4877" path="socket:[94331]" dev="sockfs" ino=94331 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1348.295207][ T10] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 1348.430617][T24302] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1348.450857][ T10] usb 3-1: device descriptor read/64, error -71 [ 1348.503459][T24302] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1348.714880][ T10] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 1348.910348][ T10] usb 3-1: device descriptor read/64, error -71 [ 1348.930275][ T30] audit: type=1400 audit(1785700645.698:1323898): avc: denied { bind } for pid=24306 comm="syz.0.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1349.116608][ T10] usb usb3-port1: attempt power cycle [ 1349.122412][T19717] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1349.345651][T19717] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1349.369748][T19717] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1349.397086][T19717] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid maxpacket 179, setting to 64 [ 1349.420646][T19717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1349.436464][T19717] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1349.457444][T19717] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1349.477403][T19717] usb 4-1: Product: syz [ 1349.485678][ T10] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 1349.503708][T19717] usb 4-1: Manufacturer: syz [ 1349.512787][T19717] usb 4-1: SerialNumber: syz [ 1349.526876][ T10] usb 3-1: device descriptor read/8, error -71 [ 1349.534170][T16043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1349.546771][T19717] usb 4-1: config 0 descriptor?? [ 1349.562027][T24305] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1349.577616][T19717] usb 4-1: selecting invalid altsetting 0 [ 1349.795210][T19717] usb 4-1: USB disconnect, device number 98 [ 1349.841279][ T10] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 1349.885223][ T10] usb 3-1: device descriptor read/8, error -71 [ 1350.004857][ T10] usb usb3-port1: unable to enumerate USB device [ 1350.046061][ T5748] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1350.325234][ T5748] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1351.087412][ T5748] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1351.148496][ T5748] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.200990][ T5748] usb 1-1: config 220 has no interface number 2 [ 1351.229679][ T5748] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1351.246563][T19717] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1351.295067][ T5748] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1351.319710][ T5748] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1351.346935][ T5748] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1351.362942][ T30] audit: type=1400 audit(1785700648.230:1323899): avc: denied { ioctl } for pid=24336 comm="syz.5.4894" path="socket:[94648]" dev="sockfs" ino=94648 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1351.400546][ T5748] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1351.410069][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.440805][ T5748] usb 1-1: Product: syz [ 1351.446159][T19717] usb 4-1: Using ep0 maxpacket: 32 [ 1351.460547][ T5748] usb 1-1: Manufacturer: syz [ 1351.467132][T19717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1351.477223][ T5748] usb 1-1: SerialNumber: syz [ 1351.482693][T19717] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1351.512663][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1351.523612][T22148] usb 7-1: new low-speed USB device number 73 using dummy_hcd [ 1351.534790][T19717] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1351.546529][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1351.558237][T19717] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1351.576763][T19717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.588409][T19717] usb 4-1: Product: syz [ 1351.592609][T19717] usb 4-1: Manufacturer: syz [ 1351.604276][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1351.615803][T19717] usb 4-1: SerialNumber: syz [ 1351.621417][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1351.704578][T22148] usb 7-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1351.731673][ T5748] usb 1-1: selecting invalid altsetting 0 [ 1351.741066][T22148] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1351.750533][ T5748] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1351.772465][T22148] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1351.786127][ T5748] uvcvideo 1-1:220.0: No valid video chain found. [ 1351.793575][T22148] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1351.802916][T22148] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.814548][ T5748] usb 1-1: selecting invalid altsetting 0 [ 1351.820587][ T5748] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1351.832078][T22148] hub 7-1:1.0: bad descriptor, ignoring hub [ 1351.847989][T22148] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1351.865955][ T5748] usb 1-1: USB disconnect, device number 101 [ 1351.883506][T22148] cdc_wdm 7-1:1.0: skipping garbage [ 1351.899528][T22148] cdc_wdm 7-1:1.0: skipping garbage [ 1351.905676][T22148] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1351.933428][ T10] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1352.093640][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1352.106073][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1352.122158][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.139038][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1352.148564][T22148] usb 7-1: USB disconnect, device number 73 [ 1352.159607][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1352.178566][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.187770][ T10] usb 6-1: Product: syz [ 1352.191947][ T10] usb 6-1: Manufacturer: syz [ 1352.196822][ T10] usb 6-1: SerialNumber: syz [ 1352.212641][ T10] usb 6-1: 0:2 : does not exist [ 1352.313809][ T5748] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1352.332677][T24345] bridge0: port 3(dummy0) entered disabled state [ 1352.340385][T24345] dummy0: left allmulticast mode [ 1352.345665][T24345] dummy0: left promiscuous mode [ 1352.350829][T24345] bridge0: port 3(dummy0) entered disabled state [ 1352.451860][ T10] usb 6-1: USB disconnect, device number 100 [ 1352.486039][ T5748] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1352.510164][ T5748] usb 3-1: config 1 has no interface number 0 [ 1352.525004][ T5748] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 1352.537033][ T5748] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1352.561060][ T5748] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1352.578884][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.612156][ T5748] usb 3-1: Product: syz [ 1352.620472][ T5748] usb 3-1: Manufacturer: syz [ 1352.625535][ T5748] usb 3-1: SerialNumber: syz [ 1352.633924][T24343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1352.653616][ T5748] usb 3-1: Expected 3 endpoints, found: 2 [ 1352.828738][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4900'. [ 1352.882857][T24343] ip6erspan0: entered allmulticast mode [ 1352.929574][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1353.043042][T16052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1353.106883][T19717] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1353.147080][T19717] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1353.180867][T19717] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1353.216170][T19717] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1353.834595][T24362] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 1354.111631][T19717] usb 4-1: USB disconnect, device number 99 [ 1354.846232][T24355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1354.886129][T19717] usb 3-1: USB disconnect, device number 125 [ 1354.965319][T16051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1355.064861][ T30] audit: type=1400 audit(1785700651.941:1323900): avc: denied { watch } for pid=24372 comm="syz.5.4903" path="/423" dev="tmpfs" ino=2307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1356.242910][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.986094][ T30] audit: type=1400 audit(1785700653.852:1323901): avc: denied { create } for pid=24395 comm="syz.6.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1357.138812][T24403] xt_cgroup: invalid path, errno=-2 [ 1357.886761][T24406] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 1357.894036][T19717] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1358.141642][T19717] usb 7-1: Using ep0 maxpacket: 16 [ 1358.160671][T16043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1358.198460][T19717] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1358.244012][T19717] usb 7-1: config 0 has no interface number 0 [ 1358.311606][T19717] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1358.325777][ T30] audit: type=1400 audit(1785700655.193:1323902): avc: denied { read } for pid=24413 comm="syz.3.4918" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1358.368085][T19717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.380928][T24417] netlink: 'syz.3.4918': attribute type 23 has an invalid length. [ 1358.404555][T19717] usb 7-1: Product: syz [ 1358.424039][T19717] usb 7-1: Manufacturer: syz [ 1358.446281][T19717] usb 7-1: SerialNumber: syz [ 1358.457344][ T30] audit: type=1400 audit(1785700655.323:1323903): avc: denied { connect } for pid=24415 comm="syz.0.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1358.508930][T19717] usb 7-1: config 0 descriptor?? [ 1358.544141][T19717] hub 7-1:0.132: bad descriptor, ignoring hub [ 1358.571404][T19717] hub 7-1:0.132: probe with driver hub failed with error -5 [ 1358.609063][ T30] audit: type=1400 audit(1785700655.463:1323904): avc: denied { write } for pid=24415 comm="syz.0.4919" path="socket:[95077]" dev="sockfs" ino=95077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1358.646626][T19717] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input39 [ 1359.090015][ T5748] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1359.311637][T24429] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24429 comm=syz.3.4921 [ 1359.415859][T24433] netlink: 'syz.2.4920': attribute type 4 has an invalid length. [ 1359.434553][ T5748] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1359.467007][T24429] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24429 comm=syz.3.4921 [ 1359.506552][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1359.546855][ T5748] usb 1-1: Product: syz [ 1359.556209][T24435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24435 comm=syz.3.4921 [ 1359.583058][ T5748] usb 1-1: Manufacturer: syz [ 1359.607144][ T5748] usb 1-1: SerialNumber: syz [ 1359.657678][ T5748] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1359.702619][T24429] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24429 comm=syz.3.4921 [ 1359.749332][ T10] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1359.785738][T24435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24435 comm=syz.3.4921 [ 1359.930109][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1359.954596][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1359.993141][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1360.075169][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1360.139000][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1360.194974][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.257637][ T10] usb 6-1: Product: syz [ 1360.292352][ T10] usb 6-1: Manufacturer: syz [ 1360.337453][ T10] usb 6-1: SerialNumber: syz [ 1361.079995][T24447] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 1361.152797][ T662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1361.290416][T23276] usb 7-1: reset high-speed USB device number 74 using dummy_hcd [ 1361.355145][T23276] usb 7-1: device reset changed ep0 maxpacket size! [ 1361.415024][T19717] usb 7-1: USB disconnect, device number 74 [ 1361.465977][ T5748] vp7045: USB control message 'out' went wrong. [ 1361.496286][ T5748] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1361.573439][ T5748] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1361.636575][ T5748] usb 1-1: USB disconnect, device number 102 [ 1361.669633][T19717] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1362.640268][T19717] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1362.706861][T19717] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1362.771406][ T10] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1362.843873][ T10] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1362.855707][T19717] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1362.902134][ T10] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1362.916273][T19717] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1362.963975][ T10] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1362.997546][T19717] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1363.068539][T19717] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1363.088956][ T30] audit: type=1400 audit(1785700659.955:1323905): avc: denied { setopt } for pid=24466 comm="syz.5.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1363.135339][T19717] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1363.186000][T19717] usb 7-1: Product: syz [ 1363.212007][T19717] usb 7-1: Manufacturer: syz [ 1363.262748][T19717] cdc_wdm 7-1:1.0: skipping garbage [ 1363.296787][T19717] cdc_wdm 7-1:1.0: skipping garbage [ 1363.368173][T19717] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1363.417681][T19717] cdc_wdm 7-1:1.0: Unknown control protocol [ 1363.445231][ T10] usb 6-1: USB disconnect, device number 101 [ 1363.496777][T19717] usb 7-1: USB disconnect, device number 75 [ 1363.607135][T24470] qnx4: unable to read the superblock [ 1363.876561][T23271] udevd[23271]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1363.924879][T16052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1363.957827][T24487] overlayfs: workdir and upperdir must be separate subtrees [ 1366.476988][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:1) [ 1366.986974][T13550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1367.096673][T24495] binder: 24485:24495 ioctl b704 2000000004c0 returned -22 [ 1367.224673][T24497] 9p: Bad value for 'rfdno' [ 1367.232438][T24498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4938'. [ 1367.595505][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1367.815546][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1367.911012][ T30] audit: type=1326 audit(1785700664.778:1323906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1368.091896][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1368.295019][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1368.367529][T24527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1368.377748][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1368.392501][ T30] audit: type=1326 audit(1785700664.778:1323907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1368.431039][T24519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.438399][T24519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.448176][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1368.467534][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.486138][ T10] usb 4-1: Product: syz [ 1368.502297][ T10] usb 4-1: Manufacturer: syz [ 1368.512732][ T30] audit: type=1326 audit(1785700664.778:1323908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1368.629137][ T10] usb 4-1: SerialNumber: syz [ 1368.707673][T24531] overlayfs: failed to resolve './file1': -2 [ 1368.747165][ T30] audit: type=1326 audit(1785700664.778:1323909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1368.874460][T24519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1368.936620][T16065] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1368.953431][ T30] audit: type=1326 audit(1785700664.778:1323910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1368.993439][T16065] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1369.048886][T16065] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1369.063941][T24519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.130714][ T30] audit: type=1326 audit(1785700664.788:1323911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1369.229015][T24541] fido_id[24541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1369.313265][ T30] audit: type=1326 audit(1785700664.788:1323912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1369.399627][ T30] audit: type=1326 audit(1785700664.788:1323913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1369.475071][T24552] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4952'. [ 1369.511941][T24519] macvlan2: left promiscuous mode [ 1369.528256][T24519] macvlan2: left allmulticast mode [ 1369.539427][ T30] audit: type=1326 audit(1785700664.788:1323914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1369.582288][T24519] sit1: left allmulticast mode [ 1369.628384][ T30] audit: type=1326 audit(1785700664.788:1323915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1369.656625][T24519] bond3: left promiscuous mode [ 1369.673930][T24519] bond3: left allmulticast mode [ 1369.686822][T24519] bridge3: left promiscuous mode [ 1369.698353][T24519] bridge3: left allmulticast mode [ 1369.709227][T24519] bridge4: left promiscuous mode [ 1369.721128][T24519] bridge4: left allmulticast mode [ 1369.729751][ T30] audit: type=1326 audit(1785700664.788:1323916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.6.4943" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1899e019 code=0x7ffc0000 [ 1369.785601][T13550] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.833492][T24551] tap0: tun_chr_ioctl cmd 1074828353 [ 1370.020509][T24557] bridge0: port 3(vlan2) entered disabled state [ 1370.028325][T24557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.035467][T24557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.013409][T13550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1371.063215][ T10] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1371.213174][ T10] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1371.367974][ T10] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1371.548407][ T10] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1371.561190][T24557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.591133][T24557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.792328][ T10] usb 4-1: USB disconnect, device number 100 [ 1371.962552][T23281] udevd[23281]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.178436][T24557] vxlan0: left promiscuous mode [ 1372.189299][T24557] vxlan0: left allmulticast mode [ 1372.200981][T24557] vxlan1: left promiscuous mode [ 1372.207482][T24557] vxlan1: left allmulticast mode [ 1372.222012][T24557] ipip0: left promiscuous mode [ 1372.227328][T24557] ipip0: left allmulticast mode [ 1372.290715][T21350] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.338648][T21350] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.453245][T11846] usb 6-1: new low-speed USB device number 102 using dummy_hcd [ 1372.523654][T16051] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.537367][T22148] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1372.586033][T16051] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.610371][T22148] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1372.663827][T16051] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1372.687123][T22148] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1372.715161][T11846] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1372.750495][T16051] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.762988][T11846] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.836360][T11846] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1372.857709][T21350] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.894098][T16051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1372.945767][T24595] fido_id[24595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1372.964286][T11846] usb 6-1: string descriptor 0 read error: -22 [ 1372.973608][T16049] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.993880][T24602] netlink: 'syz.3.4966': attribute type 1 has an invalid length. [ 1373.003099][T16065] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1373.069677][T11846] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1373.094512][T16049] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.118886][T11846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.157119][T24602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4966'. [ 1373.177013][T16049] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1373.233960][T16049] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.244486][T16065] usb 1-1: Using ep0 maxpacket: 32 [ 1373.283929][T16065] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1373.314071][T16065] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1373.347905][T16065] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1373.392205][T16065] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1373.447148][T16065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.477062][T16065] usb 1-1: Product: syz [ 1373.488935][T16065] usb 1-1: Manufacturer: syz [ 1373.499759][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1373.499769][ T30] audit: type=1400 audit(1785700670.381:1323928): avc: denied { write } for pid=24593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1373.530507][T11846] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1373.550244][T16065] usb 1-1: SerialNumber: syz [ 1373.610821][ T30] audit: type=1400 audit(1785700670.491:1323929): avc: denied { write } for pid=24620 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1373.702490][T22148] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1373.853124][T22148] usb 7-1: Using ep0 maxpacket: 32 [ 1373.859490][T22148] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1373.878398][T22148] usb 7-1: config 0 has no interface number 0 [ 1373.903089][T22148] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1373.921173][T22148] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.940602][T22148] usb 7-1: Product: syz [ 1373.956609][T22148] usb 7-1: Manufacturer: syz [ 1373.969358][ T30] audit: type=1400 audit(1785700670.851:1323930): avc: denied { write } for pid=24622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1374.007191][T22148] usb 7-1: SerialNumber: syz [ 1374.040859][T22148] usb 7-1: config 0 descriptor?? [ 1374.074589][T22148] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1374.115552][T22148] usb 7-1: selecting invalid altsetting 1 [ 1374.134365][T22148] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1374.175969][T22148] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1374.196656][ T30] audit: type=1400 audit(1785700671.071:1323931): avc: denied { write } for pid=24637 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1374.240843][T22148] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1374.290443][T22148] usb 7-1: media controller created [ 1374.339510][T22148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1374.384679][T11846] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1374.406450][T11846] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1374.443573][T22148] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1374.459052][T11846] usb 4-1: can't read configurations, error -71 [ 1374.487056][T22148] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1374.515484][T22148] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1375.510250][T11846] usb 6-1: USB disconnect, device number 102 [ 1375.658710][T22148] usb 7-1: USB disconnect, device number 76 [ 1375.670662][T16065] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1375.728600][T24646] sctp: [Deprecated]: syz.6.4971 (pid 24646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1375.728600][T24646] Use struct sctp_sack_info instead [ 1375.745597][T16065] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 1375.798470][T16065] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1375.842392][T24650] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4973'. [ 1375.862007][T16065] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 1376.008000][T24653] FAULT_INJECTION: forcing a failure. [ 1376.008000][T24653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.021193][T24653] CPU: 0 UID: 0 PID: 24653 Comm: syz.5.4974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.021211][T24653] Tainted: [L]=SOFTLOCKUP [ 1376.021215][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1376.021222][T24653] Call Trace: [ 1376.021226][T24653] [ 1376.021230][T24653] dump_stack_lvl+0x100/0x190 [ 1376.021247][T24653] should_fail_ex.cold+0x5/0xa [ 1376.021261][T24653] _copy_from_user+0x2e/0xd0 [ 1376.021277][T24653] copy_msghdr_from_user+0x9f/0x4c0 [ 1376.021288][T24653] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1376.021301][T24653] ? __pfx__kstrtoull+0x10/0x10 [ 1376.021311][T24653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1376.021327][T24653] ___sys_sendmsg+0x106/0x1e0 [ 1376.021338][T24653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1376.021357][T24653] ? find_held_lock+0x2b/0x80 [ 1376.021375][T24653] __sys_sendmmsg+0x20c/0x440 [ 1376.021390][T24653] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1376.021415][T24653] ? find_held_lock+0x2b/0x80 [ 1376.021424][T24653] ? trace_syscall_enter+0xd9/0x110 [ 1376.021439][T24653] ? trace_syscall_enter+0xd9/0x110 [ 1376.021455][T24653] __x64_sys_sendmmsg+0x9c/0x100 [ 1376.021468][T24653] ? trace_syscall_enter+0xe3/0x110 [ 1376.021483][T24653] do_syscall_64+0x115/0x870 [ 1376.021496][T24653] ? clear_bhb_loop+0x40/0x90 [ 1376.021509][T24653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.021520][T24653] RIP: 0033:0x7f782739e019 [ 1376.021529][T24653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.021539][T24653] RSP: 002b:00007f78282a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1376.021550][T24653] RAX: ffffffffffffffda RBX: 00007f7827625fa0 RCX: 00007f782739e019 [ 1376.021556][T24653] RDX: 04924924924923d5 RSI: 0000200000000b80 RDI: 0000000000000006 [ 1376.021563][T24653] RBP: 00007f78282a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.021569][T24653] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 1376.021576][T24653] R13: 00007f7827626038 R14: 00007f7827625fa0 R15: 00007ffc80d330e8 [ 1376.021589][T24653] [ 1376.388412][T11846] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1376.396121][T11846] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1376.465392][T11846] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1376.668047][T16065] usb 1-1: USB disconnect, device number 103 [ 1376.715378][T16045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.761680][ T30] audit: type=1400 audit(1785700673.572:1323932): avc: denied { read write } for pid=16269 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.918535][T24674] fido_id[24674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1376.976592][ T30] audit: type=1400 audit(1785700673.572:1323933): avc: denied { open } for pid=16524 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1377.036017][T24681] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1377.089151][ T30] audit: type=1400 audit(1785700673.572:1323934): avc: denied { ioctl } for pid=16524 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1377.117736][T22148] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1377.139848][T23271] udevd[23271]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1377.265922][T24686] netlink: 'syz.2.4984': attribute type 61 has an invalid length. [ 1377.278861][ T30] audit: type=1400 audit(1785700673.672:1323935): avc: denied { unmount } for pid=15269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1377.347082][ T30] audit: type=1400 audit(1785700673.672:1323936): avc: denied { create } for pid=24675 comm="syz.0.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1377.368525][T22148] usb 7-1: Using ep0 maxpacket: 16 [ 1377.395422][T22148] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.411776][ T30] audit: type=1400 audit(1785700673.682:1323937): avc: denied { write } for pid=24676 comm="syz.6.4981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1377.453353][T22148] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1377.473799][T22148] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.545550][T22148] usb 7-1: config 0 descriptor?? [ 1378.022968][T22148] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1378.324880][T24703] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1378.504474][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1378.504486][ T30] audit: type=1400 audit(1785700675.383:1323989): avc: denied { load_policy } for pid=24701 comm="syz.2.4989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1378.613434][T24703] SELinux: invalid class [ 1378.638810][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1378.746740][T24703] SELinux: failed to load policy [ 1378.852989][ T30] audit: type=1400 audit(1785700675.733:1323990): avc: denied { prog_run } for pid=24705 comm="syz.2.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1378.980429][T11846] usb 7-1: USB disconnect, device number 77 [ 1379.002291][ T30] audit: type=1400 audit(1785700675.873:1323991): avc: denied { map_create } for pid=24705 comm="syz.2.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1379.092505][ T30] audit: type=1400 audit(1785700675.873:1323992): avc: denied { map_read map_write } for pid=24705 comm="syz.2.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1379.177300][ T30] audit: type=1400 audit(1785700676.063:1323993): avc: denied { create } for pid=24711 comm="syz.6.4992" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1379.213384][T22148] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1379.222569][ T30] audit: type=1400 audit(1785700676.063:1323994): avc: denied { ioctl } for pid=24711 comm="syz.6.4992" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97141 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1379.483683][T22148] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1379.493256][T22148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1379.518708][T11846] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1379.533644][T22148] usb 4-1: Product: syz [ 1379.537957][T22148] usb 4-1: Manufacturer: syz [ 1379.548996][T22148] usb 4-1: SerialNumber: syz [ 1379.577042][T22148] usb 4-1: config 0 descriptor?? [ 1379.602970][T22148] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1379.622469][T22148] dvb-usb: bulk message failed: -22 (2/0) [ 1379.634978][T22148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1379.667048][T22148] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1379.676337][T22148] usb 4-1: media controller created [ 1379.692395][T11846] usb 7-1: Using ep0 maxpacket: 32 [ 1379.703724][T22148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1379.723813][T11846] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1379.736710][T11846] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1379.778251][T11846] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1379.805309][T22148] cxusb: set interface failed [ 1379.810314][T22148] dvb-usb: bulk message failed: -22 (1/0) [ 1379.829558][T11846] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1379.843179][T11846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.872161][T11846] usb 7-1: Product: syz [ 1379.881243][T11846] usb 7-1: Manufacturer: syz [ 1379.886966][T22148] DVB: Unable to find symbol mt352_attach() [ 1379.905267][T11846] usb 7-1: SerialNumber: syz [ 1379.913022][T22148] dvb-usb: bulk message failed: -22 (5/0) [ 1379.940947][T22148] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1379.948276][T22148] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1380.040993][T22148] rc_core: IR keymap rc-dvico-mce not found [ 1380.047027][T22148] Registered IR keymap rc-empty [ 1380.054758][T22148] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1380.090732][T22148] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input40 [ 1380.120690][ T30] audit: type=1400 audit(1785700677.004:1323995): avc: denied { read } for pid=4963 comm="acpid" name="event2" dev="devtmpfs" ino=5083 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1380.144004][T22148] dvb-usb: schedule remote query interval to 100 msecs. [ 1380.190677][T22148] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1380.224899][ T30] audit: type=1400 audit(1785700677.004:1323996): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=5083 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1380.250705][T22148] usb 4-1: USB disconnect, device number 103 [ 1380.313429][T22148] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1380.338622][ T30] audit: type=1400 audit(1785700677.004:1323997): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=5083 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1380.456022][ T30] audit: type=1400 audit(1785700677.304:1323998): avc: denied { read write } for pid=24717 comm="syz.3.4993" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1382.059214][T22148] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1382.262374][T22148] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 1382.271748][T22148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.291585][T22148] usb 4-1: Product: syz [ 1382.295851][T22148] usb 4-1: Manufacturer: syz [ 1382.310714][T22148] usb 4-1: SerialNumber: syz [ 1382.472068][T16053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.532157][T22148] usb 4-1: Can't get UAC3 power state for id 10 [ 1382.568742][T22148] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 1382.629344][T22148] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1382.654853][T22148] usb 4-1: USB disconnect, device number 104 [ 1382.694016][T23271] udevd[23271]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.129110][T24723] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4995'. [ 1383.748859][T16049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1383.941986][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1383.941998][ T30] audit: type=1400 audit(1785700680.826:1324019): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1384.012028][T11846] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1384.090748][T11846] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 1384.136735][ T30] audit: type=1400 audit(1785700680.876:1324020): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1384.180729][T11846] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1384.271789][T24733] FAULT_INJECTION: forcing a failure. [ 1384.271789][T24733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.284912][T24733] CPU: 0 UID: 0 PID: 24733 Comm: syz.0.4999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.284930][T24733] Tainted: [L]=SOFTLOCKUP [ 1384.284935][T24733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1384.284941][T24733] Call Trace: [ 1384.284945][T24733] [ 1384.284949][T24733] dump_stack_lvl+0x100/0x190 [ 1384.284967][T24733] should_fail_ex.cold+0x5/0xa [ 1384.284980][T24733] _copy_from_user+0x2e/0xd0 [ 1384.285005][T24733] copy_msghdr_from_user+0x9f/0x4c0 [ 1384.285017][T24733] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1384.285030][T24733] ? rcu_is_watching+0x12/0xc0 [ 1384.285046][T24733] ? ___sys_sendmsg+0x19d/0x1e0 [ 1384.285056][T24733] ? kfree+0x1e5/0x6c0 [ 1384.285074][T24733] ___sys_sendmsg+0x106/0x1e0 [ 1384.285085][T24733] ? __pfx____sys_sendmsg+0x10/0x10 [ 1384.285107][T24733] ? __pfx___might_resched+0x10/0x10 [ 1384.285123][T24733] __sys_sendmmsg+0x20c/0x440 [ 1384.285138][T24733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1384.285163][T24733] ? find_held_lock+0x2b/0x80 [ 1384.285172][T24733] ? trace_syscall_enter+0xd9/0x110 [ 1384.285187][T24733] ? trace_syscall_enter+0xd9/0x110 [ 1384.285203][T24733] __x64_sys_sendmmsg+0x9c/0x100 [ 1384.285216][T24733] ? trace_syscall_enter+0xe3/0x110 [ 1384.285231][T24733] do_syscall_64+0x115/0x870 [ 1384.285244][T24733] ? clear_bhb_loop+0x40/0x90 [ 1384.285256][T24733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.285268][T24733] RIP: 0033:0x7f545e39e019 [ 1384.285277][T24733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.285288][T24733] RSP: 002b:00007f545f262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1384.285299][T24733] RAX: ffffffffffffffda RBX: 00007f545e625fa0 RCX: 00007f545e39e019 [ 1384.285306][T24733] RDX: 04924924924923d5 RSI: 0000200000000b80 RDI: 0000000000000006 [ 1384.285312][T24733] RBP: 00007f545f262090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.285318][T24733] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 1384.285325][T24733] R13: 00007f545e626038 R14: 00007f545e625fa0 R15: 00007ffd58488a08 [ 1384.285338][T24733] [ 1384.746392][T11846] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 1384.924559][ T30] audit: type=1400 audit(1785700680.876:1324021): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1385.151960][ T30] audit: type=1400 audit(1785700680.876:1324022): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1385.246159][ T30] audit: type=1400 audit(1785700680.876:1324023): avc: denied { read } for pid=5273 comm="dhcpcd" name="n69" dev="tmpfs" ino=13579 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1385.354839][ T30] audit: type=1400 audit(1785700680.876:1324024): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=13579 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1385.430799][T11846] usb 7-1: USB disconnect, device number 78 [ 1385.503921][ T30] audit: type=1400 audit(1785700680.876:1324025): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=13579 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1385.570953][T24749] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1385.684400][T24749] netlink: 'syz.2.5002': attribute type 6 has an invalid length. [ 1385.723890][ T30] audit: type=1400 audit(1785700681.396:1324026): avc: denied { allowed } for pid=24727 comm="syz.6.4997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1385.771716][T24749] netlink: 'syz.2.5002': attribute type 2 has an invalid length. [ 1385.792170][T24751] tap0: tun_chr_ioctl cmd 1074025677 [ 1385.825509][T24751] tap0: linktype set to 768 [ 1385.857716][T23281] udevd[23281]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.902863][ T30] audit: type=1400 audit(1785700681.406:1324027): avc: denied { map } for pid=24727 comm="syz.6.4997" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1385.931024][T24753] tap0: tun_chr_ioctl cmd 1074025672 [ 1385.983908][T24753] tap0: ignored: set checksum disabled [ 1386.059028][ T5748] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1386.102085][ T30] audit: type=1400 audit(1785700681.406:1324028): avc: denied { read write } for pid=24727 comm="syz.6.4997" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1386.147471][T24751] lo speed is unknown, defaulting to 1000 [ 1386.238422][ T5748] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1386.247693][ T5748] usb 3-1: config 0 has no interface number 0 [ 1386.279302][ T5748] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1386.329259][ T5748] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1386.349721][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.405755][T24764] mmap: syz.5.5005 (24764): VmData 43626496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1386.419851][T11846] usb 7-1: new low-speed USB device number 79 using dummy_hcd [ 1386.441370][ T5748] usb 3-1: Product: syz [ 1386.463221][ T5748] usb 3-1: Manufacturer: syz [ 1386.481753][ T5748] usb 3-1: SerialNumber: syz [ 1386.520145][T24769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.533117][ T5748] usb 3-1: config 0 descriptor?? [ 1386.578223][T11846] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1386.588487][T11846] usb 7-1: config 8 has an invalid interface number: 254 but max is 0 [ 1386.628739][T24769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.664506][T11846] usb 7-1: config 8 has an invalid descriptor of length 207, skipping remainder of the config [ 1386.727397][T24769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.749415][T11846] usb 7-1: config 8 has no interface number 0 [ 1387.557567][T22148] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1387.620624][T24769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.641486][T11846] usb 7-1: config 8 interface 254 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1387.776415][T24749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7285 sclass=netlink_route_socket pid=24749 comm=syz.2.5002 [ 1387.815737][T22148] usb 4-1: Using ep0 maxpacket: 16 [ 1387.833793][T11846] usb 7-1: config 8 interface 254 has no altsetting 0 [ 1387.860225][T22148] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.892323][ T5748] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1387.937364][T11846] usb 7-1: string descriptor 0 read error: -22 [ 1387.946926][T22148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1388.079061][T11846] usb 7-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=c8.b9 [ 1388.092993][ T5748] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1388.811464][T21350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.851855][T22148] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1388.889417][T11846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.981235][ T5748] usb 3-1: USB disconnect, device number 126 [ 1389.055643][T22148] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1389.167185][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1389.167196][ T30] audit: type=1400 audit(1785700686.058:1324053): avc: denied { write } for pid=24789 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.327159][T24792] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1389.352339][T11846] mct_u232 7-1:8.254: MCT U232 converter detected [ 1389.380404][T22148] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1389.419432][T11846] mct_u232 ttyUSB0: expected endpoint missing [ 1389.428714][T22148] usb 4-1: Manufacturer: syz [ 1390.193707][T21353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1390.349607][T11846] usb 7-1: USB disconnect, device number 79 [ 1390.356673][T22148] usb 4-1: config 0 descriptor?? [ 1390.424772][T22148] usb 4-1: can't set config #0, error -71 [ 1390.443997][ T30] audit: type=1400 audit(1785700686.058:1324054): avc: denied { remove_name } for pid=24789 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=13630 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1391.050633][T11846] mct_u232 7-1:8.254: device disconnected [ 1391.312399][T22148] usb 4-1: USB disconnect, device number 105 [ 1391.603812][ T30] audit: type=1400 audit(1785700686.058:1324055): avc: denied { unlink } for pid=24789 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=13630 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1392.460562][ T30] audit: type=1400 audit(1785700686.219:1324056): avc: denied { write } for pid=24790 comm="syz.0.5010" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1393.460238][ T30] audit: type=1400 audit(1785700686.339:1324057): avc: denied { mount } for pid=24795 comm="syz.5.5011" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1393.493957][T22148] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1393.545059][T24843] netlink: 'syz.6.5020': attribute type 11 has an invalid length. [ 1393.647677][ T30] audit: type=1400 audit(1785700687.299:1324058): avc: denied { read } for pid=24795 comm="syz.5.5011" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1393.695865][T24850] vivid-002: ================= START STATUS ================= [ 1393.705655][T22148] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1393.764790][T22148] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1393.781601][T24850] vivid-002: Radio HW Seek Mode: Bounded [ 1393.813676][T22148] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1393.847215][ T30] audit: type=1400 audit(1785700687.299:1324059): avc: denied { open } for pid=24795 comm="syz.5.5011" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1393.900794][T24850] vivid-002: Radio Programmable HW Seek: false [ 1393.914496][T22148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1393.942040][T24850] vivid-002: RDS Rx I/O Mode: Block I/O [ 1393.969451][T22148] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1393.982928][T24859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=24859 comm=syz.2.5023 [ 1394.001258][T24850] vivid-002: Generate RBDS Instead of RDS: false [ 1394.035710][T22148] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1394.051681][T24850] vivid-002: RDS Reception: true [ 1394.060463][ T30] audit: type=1400 audit(1785700687.389:1324060): avc: denied { getopt } for pid=24802 comm="syz.0.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1394.101430][T24860] netlink: 'syz.2.5023': attribute type 1 has an invalid length. [ 1394.111192][T24850] vivid-002: RDS Program Type: 0 inactive [ 1394.138435][T22148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1394.149453][T24850] vivid-002: RDS PS Name: inactive [ 1394.193427][T24850] vivid-002: RDS Radio Text: inactive [ 1394.201795][T22148] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1394.235777][ T30] audit: type=1400 audit(1785700688.330:1324061): avc: denied { name_bind } for pid=24811 comm="syz.3.5016" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1394.261234][T24860] bond5: entered promiscuous mode [ 1394.289393][T24850] vivid-002: RDS Traffic Announcement: false inactive [ 1394.313205][T22148] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1394.333614][T24860] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1394.374825][T24850] vivid-002: RDS Traffic Program: false inactive [ 1394.404194][T22148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1394.427570][T24850] vivid-002: RDS Music: false inactive [ 1394.457219][ T30] audit: type=1400 audit(1785700688.330:1324062): avc: denied { node_bind } for pid=24811 comm="syz.3.5016" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1394.494009][T22148] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1394.508928][T24850] vivid-002: ================== END STATUS ================== [ 1394.545793][T22148] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1394.617684][T22148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1394.628803][T16049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1395.406333][ T30] audit: type=1400 audit(1785700688.330:1324063): avc: denied { append } for pid=24803 comm="syz.2.5015" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1395.525926][T22148] usb 4-1: unable to read config index 4 descriptor/start: -71 [ 1395.570913][T22148] usb 4-1: can't read configurations, error -71 [ 1396.280154][ T5748] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 425 sec [ 1396.309072][ T662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1396.424551][ T30] audit: type=1400 audit(1785700688.340:1324064): avc: denied { create } for pid=24808 comm="syz.6.5013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1396.608250][ T30] audit: type=1400 audit(1785700688.340:1324065): avc: denied { ioctl } for pid=24808 comm="syz.6.5013" path="socket:[97889]" dev="sockfs" ino=97889 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1396.679210][ T5748] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1396.725819][T24912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1396.883737][ T30] audit: type=1400 audit(1785700688.360:1324066): avc: denied { create } for pid=24808 comm="syz.6.5013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1396.916301][ T5748] usb 3-1: Using ep0 maxpacket: 32 [ 1396.955964][ T5748] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1397.026384][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1397.063636][ T30] audit: type=1400 audit(1785700688.550:1324067): avc: denied { connect } for pid=24802 comm="syz.0.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1397.104441][T24920] set match dimension is over the limit! [ 1397.121675][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1397.138758][T24920] afs: Unknown parameter '' [ 1397.202438][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1397.227054][ T30] audit: type=1400 audit(1785700688.550:1324068): avc: denied { name_connect } for pid=24802 comm="syz.0.5014" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1397.292350][T24920] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5038'. [ 1397.330910][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1397.437444][ T5748] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1397.456639][ T30] audit: type=1400 audit(1785700688.600:1324069): avc: denied { sqpoll } for pid=24824 comm="syz.3.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1397.511230][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.573623][ T5748] usb 3-1: Product: syz [ 1397.599794][ T5748] usb 3-1: Manufacturer: syz [ 1397.621409][ T30] audit: type=1400 audit(1785700688.700:1324070): avc: denied { unmount } for pid=15269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1397.655929][ T5748] usb 3-1: SerialNumber: syz [ 1397.668591][T24938] 9p: Bad value for 'wfdno' [ 1397.686635][ T5748] usb 3-1: config 0 descriptor?? [ 1397.840759][T22148] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1397.926229][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1397.973565][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1398.002203][T22148] usb 6-1: device descriptor read/64, error -71 [ 1398.164574][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.205880][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.244496][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.278355][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.290289][T22148] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1398.329736][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.350167][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.375541][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.407279][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.437116][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.446672][T24954] Falling back ldisc for ttyS3. [ 1398.470769][T22148] usb 6-1: device descriptor read/64, error -71 [ 1398.480434][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.507136][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.539239][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.570566][T11846] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1398.586230][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.601475][T22148] usb usb6-port1: attempt power cycle [ 1398.620327][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.661647][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.703724][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.749832][T11846] usb 1-1: Using ep0 maxpacket: 32 [ 1398.755367][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.783095][T11846] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1398.807760][ T5748] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1398.829060][T11846] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1398.848213][ T5748] input input41: Timeout waiting for response from device. [ 1398.900920][T11846] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1398.944645][ T5748] usb 3-1: USB disconnect, device number 127 [ 1398.971296][T22148] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1398.979113][T11846] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1399.022312][T11846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.037753][T22148] usb 6-1: device descriptor read/8, error -71 [ 1399.067135][T11846] usb 1-1: Product: syz [ 1399.094250][T11846] usb 1-1: Manufacturer: syz [ 1399.116655][T11846] usb 1-1: SerialNumber: syz [ 1399.180283][T16045] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.234094][T16045] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.288081][T16045] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.303253][T22148] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1400.154954][T16045] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.179387][T22148] usb 6-1: device descriptor read/8, error -71 [ 1400.343840][T24976] CUSE: unknown device info "" [ 1400.348730][T24976] CUSE: unknown device info "Ö" [ 1400.353672][T24976] CUSE: unknown device info "" [ 1400.358505][T24976] CUSE: unknown device info "" [ 1400.363451][T24976] CUSE: unknown device info "" [ 1400.368280][T24976] CUSE: unknown device info "" [ 1400.373143][T24976] CUSE: unknown device info "ðÿÿÿ" [ 1400.378242][T24976] CUSE: unknown device info "" [ 1400.383253][T24976] CUSE: unknown device info "" [ 1400.388083][T24976] CUSE: unknown device info "" [ 1400.393036][T24976] CUSE: unknown device info "" [ 1400.397896][T24976] CUSE: unknown device info "r" [ 1400.402753][T24976] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 1400.408371][T24976] CUSE: unknown device info "ÿÿÿÿ" [ 1400.413574][T24976] CUSE: unknown device info "" [ 1400.418412][T24976] CUSE: unknown device info "€" [ 1400.423292][T24976] CUSE: DEVNAME unspecified [ 1400.454680][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1400.454692][ T30] audit: type=1400 audit(1785700697.324:1324104): avc: denied { create } for pid=24975 comm="syz.6.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1400.482152][T22148] usb usb6-port1: unable to enumerate USB device [ 1400.714832][ T30] audit: type=1400 audit(1785700697.324:1324105): avc: denied { ioctl } for pid=24975 comm="syz.6.5045" path="socket:[98904]" dev="sockfs" ino=98904 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1400.902674][ T30] audit: type=1400 audit(1785700697.664:1324106): avc: denied { sys_module } for pid=24977 comm="syz.6.5047" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1401.019729][T16045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1401.084286][ T30] audit: type=1400 audit(1785700697.774:1324107): avc: denied { read } for pid=24990 comm="syz.3.5049" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1401.145583][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5050'. [ 1401.233230][T11846] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1401.252478][T25005] netlink: 'syz.6.5050': attribute type 3 has an invalid length. [ 1401.315833][T11846] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 1401.435221][ T30] audit: type=1400 audit(1785700697.774:1324108): avc: denied { open } for pid=24990 comm="syz.3.5049" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1403.457569][T11846] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1404.430590][T11846] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 1404.626207][ T30] audit: type=1400 audit(1785700699.905:1324109): avc: denied { create } for pid=25009 comm="syz.3.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1405.352050][T25026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5055'. [ 1405.573170][ T30] audit: type=1400 audit(1785700701.146:1324110): avc: denied { bind } for pid=25013 comm="syz.0.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1405.796280][T11846] usb 1-1: USB disconnect, device number 104 [ 1405.803049][ T30] audit: type=1400 audit(1785700701.146:1324111): avc: denied { node_bind } for pid=25013 comm="syz.0.5054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1406.776605][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1406.833426][ T30] audit: type=1400 audit(1785700701.296:1324112): avc: denied { write } for pid=24970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1407.929796][ T30] audit: type=1400 audit(1785700702.227:1324113): avc: denied { unlink } for pid=25024 comm="syz.6.5056" name="#45" dev="tmpfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1408.138611][ T30] audit: type=1400 audit(1785700702.227:1324114): avc: denied { mount } for pid=25024 comm="syz.6.5056" name="/" dev="overlay" ino=2130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1408.173206][T25068] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5066'. [ 1408.245662][T11846] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 1408.276753][ T30] audit: type=1400 audit(1785700702.447:1324115): avc: denied { unmount } for pid=16524 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1408.337853][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1408.436770][ T30] audit: type=1400 audit(1785700702.527:1324116): avc: denied { write } for pid=25033 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1408.463429][T11846] usb 1-1: device descriptor read/all, error -71 [ 1408.566294][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1408.592714][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1408.642689][ T30] audit: type=1400 audit(1785700702.537:1324117): avc: denied { connect } for pid=25021 comm="syz.3.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1408.678321][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1408.762548][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1408.813270][ T30] audit: type=1400 audit(1785700702.537:1324118): avc: denied { getopt } for pid=25021 comm="syz.3.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1408.862067][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1408.916751][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.946735][T25100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5071'. [ 1408.959164][T25100] bridge5: entered promiscuous mode [ 1409.011505][ T10] usb 3-1: Product: syz [ 1409.021084][ T30] audit: type=1400 audit(1785700702.557:1324119): avc: denied { ioctl } for pid=25021 comm="syz.3.5055" path="socket:[99176]" dev="sockfs" ino=99176 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1409.058602][ T10] usb 3-1: Manufacturer: syz [ 1409.086762][ T10] usb 3-1: SerialNumber: syz [ 1409.214806][ T5748] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1409.374901][ T5748] usb 7-1: Using ep0 maxpacket: 8 [ 1409.390152][ T5748] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1409.421489][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.479049][ T5748] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1409.511272][ T5748] pvrusb2: ********** [ 1409.526177][ T5748] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1409.572691][ T5748] pvrusb2: Important functionality might not be entirely working. [ 1409.601202][ T5748] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1409.613730][T22148] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1409.651383][ T5748] pvrusb2: ********** [ 1409.795312][T22148] usb 6-1: Using ep0 maxpacket: 16 [ 1409.823768][T22148] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1409.867189][T22148] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1409.901719][ T2365] pvrusb2: Invalid write control endpoint [ 1409.922033][T22148] usb 6-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 1409.950611][ T5748] usb 7-1: USB disconnect, device number 80 [ 1410.003732][T22148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.077554][T22148] usb 6-1: Product: syz [ 1410.119609][T22148] usb 6-1: Manufacturer: syz [ 1410.164259][T22148] usb 6-1: SerialNumber: syz [ 1410.493323][T22148] pwc: Sotec Afina Eye USB webcam detected. [ 1410.542093][T22148] pwc: Failed to set LED on/off time (-71) [ 1410.591000][T22148] pwc: send_video_command error -71 [ 1410.630012][T22148] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1410.671470][ T2365] pvrusb2: Invalid write control endpoint [ 1410.684560][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1410.684570][ T30] audit: type=1400 audit(1785700707.579:1324138): avc: denied { write } for pid=25130 comm="syz.6.5076" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1410.715661][T25131] 0x000000000007-0x000000020000 : "" [ 1410.728182][T25131] ftl_cs: FTL header corrupt! [ 1410.776190][T22148] Philips webcam 6-1:1.0: probe with driver Philips webcam failed with error -71 [ 1410.786863][T25131] netlink: 'syz.6.5076': attribute type 4 has an invalid length. [ 1410.824459][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1410.880446][T22148] usb 6-1: USB disconnect, device number 107 [ 1410.983347][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1411.292782][ T10] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1411.311888][ T30] audit: type=1400 audit(1785700707.589:1324139): avc: denied { open } for pid=25130 comm="syz.6.5076" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1411.371656][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1411.433059][ T10] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 1411.489491][ T2365] pvrusb2: Device being rendered inoperable [ 1411.522738][ T10] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1411.560520][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1411.590403][ T30] audit: type=1400 audit(1785700707.619:1324140): avc: denied { ioctl } for pid=25130 comm="syz.6.5076" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1411.621190][ T10] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 1411.688782][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1411.808584][ T30] audit: type=1400 audit(1785700707.689:1324141): avc: denied { write } for pid=25130 comm="syz.6.5076" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1412.004577][T25146] syzkaller0: entered promiscuous mode [ 1412.049927][T25146] syzkaller0: entered allmulticast mode [ 1412.059229][ T2365] pvrusb2: Attached sub-driver cx25840 [ 1412.092874][ T30] audit: type=1400 audit(1785700707.689:1324142): avc: denied { open } for pid=25130 comm="syz.6.5076" path="/dev/sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1412.154794][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1412.250261][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1412.259588][T16065] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1412.292593][ T10] usb 3-1: USB disconnect, device number 2 [ 1412.380242][T25162] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1412.388427][ T30] audit: type=1400 audit(1785700707.689:1324143): avc: denied { ioctl } for pid=25130 comm="syz.6.5076" path="/dev/sg0" dev="devtmpfs" ino=780 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1412.462427][T25162] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1412.504331][T16065] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1412.535353][ T662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1412.584129][T16065] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1412.640425][ T30] audit: type=1400 audit(1785700708.420:1324144): avc: denied { write } for pid=25143 comm="syz.2.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1412.672226][T16065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.762909][T16065] usb 4-1: Product: syz [ 1412.791186][T23281] udevd[23281]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1412.809744][T16065] usb 4-1: Manufacturer: syz [ 1412.847669][T16065] usb 4-1: SerialNumber: syz [ 1412.879681][ T30] audit: type=1400 audit(1785700708.630:1324145): avc: denied { getopt } for pid=25145 comm="syz.5.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1413.040416][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1413.063809][ T30] audit: type=1400 audit(1785700708.630:1324146): avc: denied { create } for pid=25145 comm="syz.5.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1413.225534][ T30] audit: type=1400 audit(1785700708.880:1324147): avc: denied { setopt } for pid=25145 comm="syz.5.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1413.322849][T25157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.442890][T25157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.583443][T22148] usb 4-1: USB disconnect, device number 108 [ 1414.132217][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1414.603634][ T10] ath9k_htc: Failed to initialize the device [ 1414.634194][T22148] usb 4-1: ath9k_htc: USB layer deinitialized [ 1414.951912][T22148] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1415.401875][T22148] usb 4-1: device descriptor read/64, error -71 [ 1415.651702][T22148] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1415.732472][T16043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1415.822012][T22148] usb 4-1: Using ep0 maxpacket: 32 [ 1415.850027][T22148] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1415.873838][T22148] usb 4-1: config 0 has no interface number 0 [ 1415.898466][T22148] usb 4-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 1415.940368][T22148] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1415.983035][T22148] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1416.001159][T22148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.035549][T22148] usb 4-1: Product: syz [ 1416.053091][T22148] usb 4-1: Manufacturer: syz [ 1416.057772][T22148] usb 4-1: SerialNumber: syz [ 1416.082488][T22148] usb 4-1: config 0 descriptor?? [ 1416.121265][T25185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1416.141961][T22148] hub 4-1:0.89: bad descriptor, ignoring hub [ 1416.159672][T22148] hub 4-1:0.89: probe with driver hub failed with error -5 [ 1416.184517][T22148] option 4-1:0.89: GSM modem (1-port) converter detected [ 1416.216559][T22148] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1417.007060][T22148] usb 4-1: USB disconnect, device number 110 [ 1417.031762][T22148] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1417.075954][T22148] option 4-1:0.89: device disconnected [ 1417.360488][T22148] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1417.561566][T22148] usb 4-1: Using ep0 maxpacket: 32 [ 1417.571497][T22148] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1417.581334][T22148] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1417.612105][T22148] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1417.658549][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.669568][T22148] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1417.710915][T22148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.718953][T22148] usb 4-1: Product: syz [ 1417.758229][T22148] usb 4-1: Manufacturer: syz [ 1417.767997][T22148] usb 4-1: SerialNumber: syz [ 1418.290493][T16043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.849320][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.409638][T22148] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1422.496335][T22148] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1422.555931][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1422.555942][ T30] audit: type=1400 audit(1785700719.455:1324156): avc: denied { shutdown } for pid=25195 comm="syz.2.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1422.593864][T22148] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1422.669857][T22148] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1422.702597][T25202] block nbd5: shutting down sockets [ 1422.801130][ T30] audit: type=1400 audit(1785700719.495:1324157): avc: denied { name_connect } for pid=25195 comm="syz.2.5090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1422.857191][T25205] vlan3: entered allmulticast mode [ 1422.913191][T25205] bond0: entered allmulticast mode [ 1422.963749][T25215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25215 comm=syz.5.5096 [ 1422.977291][T25205] bond_slave_0: entered allmulticast mode [ 1422.996493][ T30] audit: type=1400 audit(1785700719.625:1324158): avc: denied { mounton } for pid=25204 comm="syz.6.5093" path="/393/file0" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1423.040893][T25205] bond_slave_1: entered allmulticast mode [ 1423.067457][T22148] usb 4-1: USB disconnect, device number 111 [ 1423.082015][T25205] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1423.225875][ T30] audit: type=1400 audit(1785700719.755:1324159): avc: denied { compute_member } for pid=25207 comm="syz.2.5094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1423.449400][ T30] audit: type=1400 audit(1785700719.755:1324160): avc: denied { read } for pid=25207 comm="syz.2.5094" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1423.511638][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5099'. [ 1423.609373][ T30] audit: type=1400 audit(1785700719.755:1324161): avc: denied { open } for pid=25207 comm="syz.2.5094" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1423.773631][ T30] audit: type=1400 audit(1785700719.755:1324162): avc: denied { ioctl } for pid=25207 comm="syz.2.5094" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1424.048080][T16043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1424.127342][ T5748] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1424.297531][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 1424.313574][T25246] xt_connbytes: Forcing CT accounting to be enabled [ 1424.332785][ T5748] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1424.351575][ T5748] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1424.387642][T22148] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 1424.421674][ T5748] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1424.504984][ T5748] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1424.529682][ T30] audit: type=1400 audit(1785700721.426:1324163): avc: denied { ioctl } for pid=25248 comm="syz.5.5106" path="socket:[100721]" dev="sockfs" ino=100721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1424.580241][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.615517][T22148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1424.642193][ T5748] usb 7-1: Product: syz [ 1424.662773][T22148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.675518][ T5748] usb 7-1: Manufacturer: syz [ 1424.792134][ T5748] usb 7-1: SerialNumber: syz [ 1424.803178][T22148] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1424.835237][T25256] lo speed is unknown, defaulting to 1000 [ 1425.033311][ T30] audit: type=1400 audit(1785700721.786:1324164): avc: denied { mount } for pid=25253 comm="syz.3.5107" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1425.144297][T22148] usb 3-1: string descriptor 0 read error: -22 [ 1425.158210][T22148] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1425.192602][T22148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.383849][T13760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1425.409160][T13760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1425.419717][T13760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1425.427521][T13760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1425.434925][T13760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1425.463716][T18117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1425.491774][T18117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1425.499323][T18117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1425.508274][T18117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1425.517164][T18117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1425.631253][ T30] audit: type=1400 audit(1785700722.537:1324165): avc: denied { unmount } for pid=16089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1426.334720][T25282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5112'. [ 1426.610950][ T662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1426.666052][T22148] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1426.734294][ T5748] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1426.803794][ T5748] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 1426.835845][T22148] usb 6-1: Using ep0 maxpacket: 32 [ 1426.853066][ T5748] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1426.873367][T22148] usb 6-1: config index 0 descriptor too short (expected 65375, got 863) [ 1426.883512][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5114'. [ 1426.915284][T22148] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1426.924646][ T5748] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 1426.969027][ T10] usb 3-1: USB disconnect, device number 3 [ 1426.982704][T22148] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.086986][T22148] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1427.228552][T25297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5114'. [ 1427.254842][T22148] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1427.949815][T13760] Bluetooth: hci1: command tx timeout [ 1428.036595][T22148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.176238][T25261] lo speed is unknown, defaulting to 1000 [ 1428.182417][T22148] usb 6-1: Product: syz [ 1428.220067][T22148] usb 6-1: Manufacturer: syz [ 1428.252392][T22148] usb 6-1: SerialNumber: syz [ 1428.270049][ T5748] usb 7-1: USB disconnect, device number 81 [ 1428.303335][T22148] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1428.354862][T22148] usb 6-1: no configuration chosen from 1 choice [ 1428.574009][T23281] udevd[23281]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1429.329238][ T5748] usb 6-1: USB disconnect, device number 108 [ 1429.806219][T16051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1429.964433][T18117] Bluetooth: hci1: command tx timeout [ 1430.027648][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1430.027660][ T30] audit: type=1400 audit(1785700726.929:1324171): avc: denied { accept } for pid=25335 comm="syz.3.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1430.074732][ T5748] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1430.142108][T22148] libceph: connect (1)[c::]:6789 error -101 [ 1430.170147][T22148] libceph: mon0 (1)[c::]:6789 connect error [ 1430.220712][ T30] audit: type=1400 audit(1785700726.929:1324172): avc: denied { getopt } for pid=25335 comm="syz.3.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1430.273991][ T5748] usb 6-1: Using ep0 maxpacket: 32 [ 1430.333405][ T5748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1430.390555][ T5748] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1430.409967][ T30] audit: type=1326 audit(1785700727.099:1324173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25342 comm="syz.3.5126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f59e019 code=0x7fc00000 [ 1430.474947][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1430.481005][ T5748] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1430.503569][ T36] bridge_slave_1: left allmulticast mode [ 1430.519815][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1430.547149][ T36] bridge_slave_1: left promiscuous mode [ 1430.569229][ T5748] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1430.590168][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.605642][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.628964][ T36] bridge_slave_0: left allmulticast mode [ 1430.649228][ T5748] usb 6-1: Product: syz [ 1430.661669][ T36] bridge_slave_0: left promiscuous mode [ 1430.672889][ T5748] usb 6-1: Manufacturer: syz [ 1430.691405][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.701184][ T5748] usb 6-1: SerialNumber: syz [ 1430.835091][T25339] ceph: No mds server is up or the cluster is laggy [ 1431.057293][ T36] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1431.202020][ T30] audit: type=1400 audit(1785700728.109:1324174): avc: denied { write } for pid=25358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1431.431751][ T30] audit: type=1400 audit(1785700728.340:1324175): avc: denied { write } for pid=25381 comm="syz.6.5131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1431.564514][T13760] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1431.599435][ T30] audit: type=1400 audit(1785700728.380:1324176): avc: denied { ioctl } for pid=25381 comm="syz.6.5131" path="socket:[101644]" dev="sockfs" ino=101644 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1432.576480][T13760] Bluetooth: hci1: command tx timeout [ 1432.612836][T16057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.758460][ T30] audit: type=1400 audit(1785700728.450:1324177): avc: denied { write } for pid=25380 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1432.967371][ T5748] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1433.040476][ T5748] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1433.055754][ T36] team0: Port device bridge3 removed [ 1433.095152][ T5748] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1433.116784][ T36] team0: Port device bridge4 removed [ 1433.154315][ T5748] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1433.178593][T25402] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5137'. [ 1433.194303][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.258340][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.310692][ T36] bond0 (unregistering): Released all slaves [ 1433.411010][ T36] bond1 (unregistering): Released all slaves [ 1433.450617][ T5748] usb 6-1: USB disconnect, device number 109 [ 1433.491182][T11846] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1433.519584][ T36] bond2 (unregistering): Released all slaves [ 1433.577252][ T36] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1433.649812][ T36] bond3 (unregistering): Released all slaves [ 1433.695998][T11846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.750436][T11846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1433.795208][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1433.831567][T11846] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1433.900516][T25402] team0 (unregistering): Port device team_slave_0 removed [ 1433.916057][T11846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.979215][ T5748] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1434.006108][ T30] audit: type=1400 audit(1785700730.911:1324178): avc: denied { block_suspend } for pid=25418 comm="syz.3.5139" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1434.065658][T11846] usb 7-1: config 0 descriptor?? [ 1434.078645][T25402] team0 (unregistering): Port device team_slave_1 removed [ 1434.132156][T11846] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1434.175938][T25261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.189347][T11846] dvb-usb: bulk message failed: -22 (3/0) [ 1434.202497][ T5748] usb 6-1: device descriptor read/64, error -71 [ 1434.219843][T25261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.259043][T11846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1434.331077][ T30] audit: type=1400 audit(1785700731.241:1324179): avc: denied { append } for pid=25401 comm="syz.6.5137" name="i2c-1" dev="devtmpfs" ino=5200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1434.571864][ T5748] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1434.614152][T13760] Bluetooth: hci1: command tx timeout [ 1434.719093][T25261] bridge_slave_0: entered allmulticast mode [ 1435.355800][T11846] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1435.380874][T25261] bridge_slave_0: entered promiscuous mode [ 1435.425378][T11846] usb 7-1: media controller created [ 1435.452749][ T36] tipc: Left network mode [ 1435.465390][T25261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.476350][T11846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1435.587266][ T5748] usb 6-1: device descriptor read/64, error -71 [ 1435.594875][T21353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1435.621170][T25261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.768361][ T5748] usb usb6-port1: attempt power cycle [ 1435.796995][ T30] audit: type=1400 audit(1785700732.712:1324180): avc: denied { mount } for pid=25420 comm="syz.3.5140" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1435.830402][T11846] dvb-usb: bulk message failed: -22 (6/0) [ 1435.844806][T25261] bridge_slave_1: entered allmulticast mode [ 1435.881190][T11846] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1435.892718][T25261] bridge_slave_1: entered promiscuous mode [ 1435.923558][T11846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input42 [ 1436.057205][T11846] dvb-usb: schedule remote query interval to 150 msecs. [ 1436.064341][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1436.104823][T25261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.135297][T11846] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1436.162525][ T5748] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1436.200739][T25261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.226469][T11846] usb 7-1: USB disconnect, device number 82 [ 1436.252941][ T10] usb 4-1: device descriptor read/64, error -71 [ 1436.393282][T25441] netlink: 'syz.2.5143': attribute type 27 has an invalid length. [ 1436.418278][T11846] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1436.431059][ T5748] usb 6-1: device not accepting address 112, error -71 [ 1436.505850][ T30] audit: type=1400 audit(1785700733.412:1324181): avc: denied { read } for pid=25439 comm="iou-wrk-25440" path="socket:[101918]" dev="sockfs" ino=101918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1436.530916][ T10] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1437.569820][T25261] team0: Port device team_slave_0 added [ 1437.753091][T25261] team0: Port device team_slave_1 added [ 1437.943907][T25261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.995882][T25261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.036435][ T5748] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1438.099198][ T5748] usb 6-1: Using ep0 maxpacket: 32 [ 1438.131041][T16058] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.154783][ T5748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1438.175026][ T30] audit: type=1400 audit(1785700735.083:1324182): avc: denied { write } for pid=25438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1438.204685][T25261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.223866][ T5748] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1438.236505][T25478] tmpfs: Bad value for 'mpol' [ 1438.270416][ T5748] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1438.322289][T25478] lo speed is unknown, defaulting to 1000 [ 1438.372550][T25261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.429180][ T5748] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1438.448807][T25261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.504933][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.562234][ T5748] usb 6-1: Product: syz [ 1438.571375][ T30] audit: type=1400 audit(1785700735.463:1324183): avc: denied { write } for pid=25481 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1438.618816][T25486] netlink: 'syz.6.5152': attribute type 1 has an invalid length. [ 1438.628753][ T5748] usb 6-1: Manufacturer: syz [ 1438.646977][ T5748] usb 6-1: SerialNumber: syz [ 1438.677320][T25261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.889229][T25486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1438.968444][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1438.994412][T25494] gretap1: entered promiscuous mode [ 1439.114572][T25494] bond5: (slave gretap1): making interface the new active one [ 1439.139427][T25494] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1439.984087][ T5748] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1440.097238][ T36] hsr_slave_0: left promiscuous mode [ 1440.112154][ T5748] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1440.143879][ T36] hsr_slave_1: left promiscuous mode [ 1440.157692][ T5748] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1440.175285][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.193291][T25508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1440.202336][ T30] audit: type=1400 audit(1785700737.104:1324184): avc: denied { create } for pid=25507 comm="syz.5.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1440.231741][ T5748] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 1440.247672][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.266723][T25508] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1440.311140][ T30] audit: type=1400 audit(1785700737.104:1324185): avc: denied { setopt } for pid=25507 comm="syz.5.5157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1440.490235][ T5748] usb 6-1: USB disconnect, device number 113 [ 1440.767755][ T30] audit: type=1400 audit(1785700737.674:1324186): avc: denied { write } for pid=25510 comm="syz.2.5158" name="extensions" dev="configfs" ino=60069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1440.835998][T23271] udevd[23271]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.914912][ T30] audit: type=1400 audit(1785700737.674:1324187): avc: denied { write } for pid=25510 comm="syz.2.5158" name="baSourceID" dev="configfs" ino=102390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1440.944801][T21350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1440.995081][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1441.048434][ T30] audit: type=1400 audit(1785700737.674:1324188): avc: denied { open } for pid=25510 comm="syz.2.5158" path="/426/config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID" dev="configfs" ino=102390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1441.142665][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1441.278089][T25496] macvlan2: entered promiscuous mode [ 1441.287268][T25496] macvlan2: entered allmulticast mode [ 1441.294476][T25496] bond5: entered promiscuous mode [ 1441.300272][T25496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1441.307692][T25496] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1441.324715][T25496] bond5: left promiscuous mode [ 1441.469808][T25261] hsr_slave_0: entered promiscuous mode [ 1441.631944][T25261] hsr_slave_1: entered promiscuous mode [ 1441.876101][T25261] debugfs: 'hsr0' already exists in 'hsr' [ 1441.905311][T25261] Cannot create hsr debugfs directory [ 1442.052495][ T30] audit: type=1400 audit(1785700738.945:1324189): avc: denied { write } for pid=25537 comm="syz.5.5163" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1442.328875][ T30] audit: type=1400 audit(1785700738.945:1324190): avc: denied { read } for pid=25537 comm="syz.5.5163" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1442.474098][ T36] IPVS: stop unused estimator thread 0... [ 1443.308884][ T5748] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1443.333304][T16049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1443.456196][ T30] audit: type=1400 audit(1785700739.125:1324191): avc: denied { write } for pid=25541 comm="syz.2.5164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1443.516854][T25555] netlink: 'syz.5.5167': attribute type 3 has an invalid length. [ 1443.525316][T25555] tipc: Enabled bearer , priority 10 [ 1443.697349][ T10] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1443.850702][ T30] audit: type=1400 audit(1785700740.766:1324192): avc: denied { read } for pid=25566 comm="syz.5.5170" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1443.908126][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1443.982424][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1444.098212][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1444.161568][ T30] audit: type=1400 audit(1785700740.766:1324193): avc: denied { open } for pid=25566 comm="syz.5.5170" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1444.236642][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1444.280205][T25578] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1444.327654][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1445.241702][ T30] audit: type=1400 audit(1785700740.796:1324194): avc: denied { ioctl } for pid=25566 comm="syz.5.5170" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1445.267405][T11846] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1445.293347][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.389816][ T10] usb 7-1: Product: syz [ 1445.421879][T25582] [ 1445.424215][T25582] ====================================================== [ 1445.431202][T25582] WARNING: possible circular locking dependency detected [ 1445.438202][T25582] syzkaller #0 Tainted: G L [ 1445.444147][T25582] ------------------------------------------------------ [ 1445.451132][T25582] syz.3.5174/25582 is trying to acquire lock: [ 1445.457164][T25582] ffff888027433bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkcg_deactivate_policy+0x167/0x600 [ 1445.467049][T25582] [ 1445.467049][T25582] but task is already holding lock: [ 1445.474380][T25582] ffff888033ed50b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 1445.483217][T25582] [ 1445.483217][T25582] which lock already depends on the new lock. [ 1445.483217][T25582] [ 1445.493600][T25582] [ 1445.493600][T25582] the existing dependency chain (in reverse order) is: [ 1445.502582][T25582] [ 1445.502582][T25582] -> #5 (&eq->sysfs_lock){+.+.}-{4:4}: [ 1445.510204][T25582] lock_acquire+0x1b9/0x370 [ 1445.515204][T25582] __mutex_lock+0x1a4/0x1bd0 [ 1445.520287][T25582] elevator_exit+0x88/0xf0 [ 1445.525194][T25582] elevator_switch+0x3a7/0x7e0 [ 1445.530459][T25582] elevator_change+0x352/0x530 [ 1445.535725][T25582] elevator_set_none+0x92/0xf0 [ 1445.540988][T25582] blk_unregister_queue+0x178/0x310 [ 1445.546689][T25582] __del_gendisk+0x2e3/0xb20 [ 1445.551781][T25582] del_gendisk+0x10e/0x1b0 [ 1445.556686][T25582] sd_remove+0x95/0x240 [ 1445.561344][T25582] scsi_bus_remove+0x68/0x90 [ 1445.566442][T25582] device_remove+0xcb/0x180 [ 1445.571437][T25582] device_release_driver_internal+0x44e/0x620 [ 1445.577996][T25582] bus_remove_device+0x2bc/0x560 [ 1445.583424][T25582] device_del+0x376/0x9b0 [ 1445.588245][T25582] __scsi_remove_device+0x359/0x430 [ 1445.593946][T25582] scsi_forget_host+0x66/0x230 [ 1445.599215][T25582] scsi_remove_host+0xf8/0x320 [ 1445.604469][T25582] usb_stor_disconnect+0x121/0x270 [ 1445.610081][T25582] usb_unbind_interface+0x1dd/0x9e0 [ 1445.615781][T25582] device_remove+0x12a/0x180 [ 1445.620872][T25582] device_release_driver_internal+0x44e/0x620 [ 1445.627440][T25582] bus_remove_device+0x2bc/0x560 [ 1445.632878][T25582] device_del+0x376/0x9b0 [ 1445.637699][T25582] usb_disable_device+0x367/0x810 [ 1445.643217][T25582] usb_disconnect+0x2e2/0x9a0 [ 1445.648386][T25582] hub_event+0x1c4f/0x4a60 [ 1445.653295][T25582] process_one_work+0xa23/0x1940 [ 1445.658722][T25582] worker_thread+0x5ef/0xe50 [ 1445.663811][T25582] kthread+0x370/0x450 [ 1445.668396][T25582] ret_from_fork+0x72b/0xd50 [ 1445.673492][T25582] ret_from_fork_asm+0x1a/0x30 [ 1445.678761][T25582] [ 1445.678761][T25582] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1445.686543][T25582] lock_acquire+0x1b9/0x370 [ 1445.691538][T25582] __mutex_lock+0x1a4/0x1bd0 [ 1445.696620][T25582] elevator_change+0x1bc/0x530 [ 1445.701884][T25582] elv_iosched_store+0x3be/0x460 [ 1445.707314][T25582] queue_attr_store+0x25f/0x2f0 [ 1445.712664][T25582] sysfs_kf_write+0xf2/0x150 [ 1445.717747][T25582] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1445.723536][T25582] vfs_write+0x6ac/0x1050 [ 1445.728369][T25582] ksys_write+0x12a/0x250 [ 1445.733193][T25582] do_syscall_64+0x115/0x870 [ 1445.738279][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.744662][T25582] [ 1445.744662][T25582] -> #3 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 1445.753225][T25582] lock_acquire+0x1b9/0x370 [ 1445.758220][T25582] blk_alloc_queue+0x610/0x790 [ 1445.763475][T25582] blk_mq_alloc_queue+0x174/0x290 [ 1445.768987][T25582] __blk_mq_alloc_disk+0x29/0x120 [ 1445.774500][T25582] loop_add+0x498/0xb60 [ 1445.779144][T25582] loop_init+0x1d3/0x200 [ 1445.783878][T25582] do_one_initcall+0x11d/0x700 [ 1445.789136][T25582] kernel_init_freeable+0x6ea/0x7b0 [ 1445.794830][T25582] kernel_init+0x1f/0x1e0 [ 1445.799652][T25582] ret_from_fork+0x72b/0xd50 [ 1445.804743][T25582] ret_from_fork_asm+0x1a/0x30 [ 1445.810010][T25582] [ 1445.810010][T25582] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1445.817181][T25582] lock_acquire+0x1b9/0x370 [ 1445.822176][T25582] fs_reclaim_acquire+0xc4/0x100 [ 1445.827606][T25582] prepare_alloc_pages+0x166/0x5f0 [ 1445.833209][T25582] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1445.839592][T25582] __alloc_pages_noprof+0xb/0x110 [ 1445.845105][T25582] pcpu_populate_chunk+0x118/0x990 [ 1445.850710][T25582] pcpu_alloc_noprof+0x881/0x1ca0 [ 1445.856222][T25582] xt_percpu_counter_alloc+0x13e/0x1b0 [ 1445.862171][T25582] find_check_entry.isra.0+0xbf/0x990 [ 1445.868035][T25582] translate_table+0xbcd/0x1630 [ 1445.873378][T25582] ipt_register_table+0x106/0x2b0 [ 1445.878906][T25582] iptable_filter_table_init+0x75/0xa0 [ 1445.884857][T25582] xt_find_table_lock+0x2db/0x520 [ 1445.890370][T25582] xt_request_find_table_lock+0x28/0xf0 [ 1445.896418][T25582] get_info+0x1a7/0x790 [ 1445.901076][T25582] do_ipt_get_ctl+0x231/0xbf0 [ 1445.906244][T25582] nf_getsockopt+0x7c/0xe0 [ 1445.911154][T25582] ip_getsockopt+0x192/0x1e0 [ 1445.916236][T25582] tcp_getsockopt+0xa1/0x110 [ 1445.921322][T25582] do_sock_getsockopt+0x50a/0x6e0 [ 1445.926841][T25582] __sys_getsockopt+0x148/0x260 [ 1445.932182][T25582] __x64_sys_getsockopt+0xbd/0x160 [ 1445.937783][T25582] do_syscall_64+0x115/0x870 [ 1445.942864][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.949245][T25582] [ 1445.949245][T25582] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1445.956943][T25582] lock_acquire+0x1b9/0x370 [ 1445.961943][T25582] __mutex_lock+0x1a4/0x1bd0 [ 1445.967033][T25582] pcpu_alloc_noprof+0xe87/0x1ca0 [ 1445.972577][T25582] percpu_ref_init+0x37/0x3f0 [ 1445.977766][T25582] blkg_alloc+0xf0/0xf80 [ 1445.982527][T25582] blkg_conf_prep+0x46e/0xf10 [ 1445.987698][T25582] tg_set_conf.isra.0+0x1ed/0x500 [ 1445.993211][T25582] cgroup_file_write+0x1e6/0x8a0 [ 1445.998642][T25582] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1446.004430][T25582] vfs_write+0x6ac/0x1050 [ 1446.009255][T25582] ksys_write+0x12a/0x250 [ 1446.014077][T25582] do_syscall_64+0x115/0x870 [ 1446.019159][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.025550][T25582] [ 1446.025550][T25582] -> #0 (&q->blkcg_mutex){+.+.}-{4:4}: [ 1446.033167][T25582] check_prev_add+0xeb/0xe60 [ 1446.038270][T25582] __lock_acquire+0x136c/0x1a40 [ 1446.043622][T25582] lock_acquire+0x1b9/0x370 [ 1446.048630][T25582] __mutex_lock+0x1a4/0x1bd0 [ 1446.053723][T25582] blkcg_deactivate_policy+0x167/0x600 [ 1446.059677][T25582] bfq_exit_queue+0x29d/0x430 [ 1446.064845][T25582] blk_mq_exit_sched+0x20e/0x4e0 [ 1446.070277][T25582] elevator_exit+0x93/0xf0 [ 1446.075192][T25582] elevator_switch+0x3a7/0x7e0 [ 1446.080448][T25582] elevator_change+0x352/0x530 [ 1446.085704][T25582] elevator_set_none+0x92/0xf0 [ 1446.090961][T25582] blk_unregister_queue+0x178/0x310 [ 1446.096663][T25582] __del_gendisk+0x2e3/0xb20 [ 1446.101743][T25582] del_gendisk+0x10e/0x1b0 [ 1446.106655][T25582] loop_control_ioctl+0x4f8/0x620 [ 1446.112171][T25582] __x64_sys_ioctl+0x18e/0x210 [ 1446.117429][T25582] do_syscall_64+0x115/0x870 [ 1446.122512][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.128894][T25582] [ 1446.128894][T25582] other info that might help us debug this: [ 1446.128894][T25582] [ 1446.139089][T25582] Chain exists of: [ 1446.139089][T25582] &q->blkcg_mutex --> &q->elevator_lock --> &eq->sysfs_lock [ 1446.139089][T25582] [ 1446.152266][T25582] Possible unsafe locking scenario: [ 1446.152266][T25582] [ 1446.159692][T25582] CPU0 CPU1 [ 1446.165026][T25582] ---- ---- [ 1446.170369][T25582] lock(&eq->sysfs_lock); [ 1446.174753][T25582] lock(&q->elevator_lock); [ 1446.181854][T25582] lock(&eq->sysfs_lock); [ 1446.188772][T25582] lock(&q->blkcg_mutex); [ 1446.193155][T25582] [ 1446.193155][T25582] *** DEADLOCK *** [ 1446.193155][T25582] [ 1446.201266][T25582] 3 locks held by syz.3.5174/25582: [ 1446.206429][T25582] #0: ffff88802748a3a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x106/0x1b0 [ 1446.216480][T25582] #1: ffff888027433d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 1446.226280][T25582] #2: ffff888033ed50b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_exit+0x88/0xf0 [ 1446.235549][T25582] [ 1446.235549][T25582] stack backtrace: [ 1446.241409][T25582] CPU: 0 UID: 0 PID: 25582 Comm: syz.3.5174 Tainted: G L syzkaller #0 PREEMPT(full) [ 1446.241425][T25582] Tainted: [L]=SOFTLOCKUP [ 1446.241430][T25582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1446.241436][T25582] Call Trace: [ 1446.241441][T25582] [ 1446.241447][T25582] dump_stack_lvl+0x100/0x190 [ 1446.241460][T25582] print_circular_bug.cold+0x178/0x1c7 [ 1446.241477][T25582] check_noncircular+0x146/0x160 [ 1446.241491][T25582] check_prev_add+0xeb/0xe60 [ 1446.241504][T25582] __lock_acquire+0x136c/0x1a40 [ 1446.241518][T25582] lock_acquire+0x1b9/0x370 [ 1446.241531][T25582] ? blkcg_deactivate_policy+0x167/0x600 [ 1446.241545][T25582] ? __pfx___might_resched+0x10/0x10 [ 1446.241559][T25582] __mutex_lock+0x1a4/0x1bd0 [ 1446.241573][T25582] ? blkcg_deactivate_policy+0x167/0x600 [ 1446.241587][T25582] ? blkcg_deactivate_policy+0x167/0x600 [ 1446.241601][T25582] ? mark_held_locks+0x40/0x70 [ 1446.241613][T25582] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1446.241625][T25582] ? __pfx___mutex_lock+0x10/0x10 [ 1446.241637][T25582] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1446.241648][T25582] ? percpu_ref_is_zero+0xe7/0x150 [ 1446.241660][T25582] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1446.241673][T25582] ? __blk_freeze_queue_start+0xd2/0x460 [ 1446.241689][T25582] ? blkcg_deactivate_policy+0x167/0x600 [ 1446.241703][T25582] blkcg_deactivate_policy+0x167/0x600 [ 1446.241719][T25582] bfq_exit_queue+0x29d/0x430 [ 1446.241729][T25582] ? __pfx_bfq_exit_queue+0x10/0x10 [ 1446.241740][T25582] blk_mq_exit_sched+0x20e/0x4e0 [ 1446.241756][T25582] elevator_exit+0x93/0xf0 [ 1446.241773][T25582] elevator_switch+0x3a7/0x7e0 [ 1446.241786][T25582] elevator_change+0x352/0x530 [ 1446.241799][T25582] elevator_set_none+0x92/0xf0 [ 1446.241813][T25582] ? __pfx_elevator_set_none+0x10/0x10 [ 1446.241827][T25582] ? kobject_put+0xb9/0x640 [ 1446.241843][T25582] blk_unregister_queue+0x178/0x310 [ 1446.241856][T25582] __del_gendisk+0x2e3/0xb20 [ 1446.241867][T25582] ? del_gendisk+0xb9/0x1b0 [ 1446.241877][T25582] ? __pfx___del_gendisk+0x10/0x10 [ 1446.241889][T25582] ? up_write+0x2e5/0x5c0 [ 1446.241903][T25582] del_gendisk+0x10e/0x1b0 [ 1446.241914][T25582] loop_control_ioctl+0x4f8/0x620 [ 1446.241925][T25582] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1446.241936][T25582] ? selinux_file_ioctl+0x13b/0x290 [ 1446.241953][T25582] ? selinux_file_ioctl+0xb6/0x290 [ 1446.241969][T25582] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1446.241980][T25582] __x64_sys_ioctl+0x18e/0x210 [ 1446.241996][T25582] do_syscall_64+0x115/0x870 [ 1446.242008][T25582] ? clear_bhb_loop+0x40/0x90 [ 1446.242020][T25582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.242031][T25582] RIP: 0033:0x7f669f59e019 [ 1446.242041][T25582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.242052][T25582] RSP: 002b:00007f66a0390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.242062][T25582] RAX: ffffffffffffffda RBX: 00007f669f825fa0 RCX: 00007f669f59e019 [ 1446.242069][T25582] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 000000000000000a [ 1446.242076][T25582] RBP: 00007f669f63500c R08: 0000000000000000 R09: 0000000000000000 [ 1446.242082][T25582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1446.242088][T25582] R13: 00007f669f826038 R14: 00007f669f825fa0 R15: 00007ffcc1915b98 [ 1446.242098][T25582] [ 1446.596170][T16053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1446.613556][T25583] block device autoloading is deprecated and will be removed. [ 1446.621213][T25583] PM: Image not found (code -22) [ 1446.649002][ T10] usb 7-1: Manufacturer: syz [ 1446.653647][ T10] usb 7-1: SerialNumber: syz [ 1446.659518][ T10] usb 7-1: can't set config #1, error -71 [ 1446.667185][ T10] usb 7-1: USB disconnect, device number 83 [ 1446.685833][T11846] usb 6-1: Using ep0 maxpacket: 16 [ 1446.695675][T16065] tipc: Node number set to 2035774871 [ 1446.708398][T11846] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1446.721685][T11846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.728301][T11846] usb 6-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 1446.737365][T11846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.749171][T11846] usb 6-1: config 0 descriptor?? [ 1446.768896][T25261] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1446.777946][T25261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1446.785344][T25261] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1446.793494][T25261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1446.801083][T25261] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1446.808914][T25261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1446.816505][T25261] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1446.824242][T25261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1446.878688][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1446.934141][ T30] audit: type=1400 audit(1785700740.866:1324195): avc: denied { name_bind } for pid=25569 comm="syz.2.5171" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1446.994411][T25261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.032249][ T30] audit: type=1400 audit(1785700740.946:1324196): avc: denied { write } for pid=25533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.057604][T25261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.081164][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.088336][T16052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.108809][ T30] audit: type=1400 audit(1785700742.267:1324197): avc: denied { read } for pid=25581 comm="syz.3.5174" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1447.152240][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.159326][T16052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.200126][T11846] smartjoyplus 0003:6666:8802.0030: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.5-1/input0 [ 1447.242756][ T30] audit: type=1400 audit(1785700742.267:1324198): avc: denied { open } for pid=25581 comm="syz.3.5174" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1447.280377][T11846] smartjoyplus 0003:6666:8802.0030: no output reports found [ 1447.352218][ T30] audit: type=1400 audit(1785700742.267:1324199): avc: denied { ioctl } for pid=25581 comm="syz.3.5174" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1447.432049][T11846] usb 6-1: USB disconnect, device number 114 [ 1447.470499][ T30] audit: type=1400 audit(1785700742.277:1324200): avc: denied { mount } for pid=25581 comm="syz.3.5174" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1447.548822][ T30] audit: type=1400 audit(1785700742.327:1324201): avc: denied { write } for pid=25580 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.617547][ T30] audit: type=1400 audit(1785700743.757:1324202): avc: denied { remount } for pid=25584 comm="syz.2.5175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1447.686589][ T30] audit: type=1400 audit(1785700744.207:1324203): avc: denied { write } for pid=25593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.729676][T25261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1447.762754][ T30] audit: type=1400 audit(1785700744.298:1324204): avc: denied { write } for pid=25609 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1447.915172][T25261] veth0_vlan: entered promiscuous mode [ 1447.926870][T25261] veth1_vlan: entered promiscuous mode [ 1447.961128][T25261] veth0_macvtap: entered promiscuous mode [ 1447.976548][T25261] veth1_macvtap: entered promiscuous mode [ 1448.013061][T25261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.039778][T25261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.077517][T25261] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 1448.111111][T16057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.126144][T16049] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.143097][T16057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.153309][T16049] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.174381][T25261] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 1448.199655][T16053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.219288][T16053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.240494][T16052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.252707][T16052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.287637][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1448.595561][T16057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.193275][T16049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1453.712601][T16053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration