last executing test programs: 17.639880694s ago: executing program 0 (id=2121): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000250009011fbd7008f9ffffbf02000000030047000000080069000000", @ANYRESOCT=r0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1404c5d2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x24004040) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2440) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x6000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000280)) ftruncate(r2, 0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x4000840) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r7, 0x0, 0x18) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1f, 0x0, 0x1000000}) socket$nl_generic(0x10, 0x3, 0x10) 15.879214271s ago: executing program 0 (id=2125): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x80000000, 0xffffffff, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x68, 0x9, 0xfa, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x41, 0x2, [{0x2, 0x6, "5558e5d7"}, {0x2, 0x7, "03913b6a08"}, {0x0, 0xa, "8ebb03dd9002e8b4"}, {0x1, 0x5, 'tl_'}, {0x2, 0x4, "5102"}, {0x0, 0x12, "2d78e8beb99dd0a04e24dcfc5ab8e9c5"}, {0x5, 0x3, "81"}, {0x2, 0x6, "8d0e9dc5"}]}, @timestamp_prespec={0x44, 0x14, 0xdf, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x53f4}]}, @timestamp_addr={0x44, 0x1c, 0xfd, 0x1, 0x1, [{@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@broadcast, 0x9}]}]}}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x7041, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x18, 0x42, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 14.59350607s ago: executing program 0 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYBLOB="08000400ac1414aa08000a000400000008000a000100000008000400ac1e000108000200e00000020800090003010000"], 0x48}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x4) dup(0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e23, 0x2, 0x0, 0x0, 0xa, 0x0, 0x60, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000000000}, {0xfffffffffffffe01, 0x0, 0x6, 0x1000000000}, 0xfffffffe, 0x6e6bba, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1}}, 0xe8) 14.45404713s ago: executing program 3 (id=2129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') sendmsg$NFT_BATCH(r3, 0x0, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)={0x87, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7, [0x3]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0xf}}]}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x1000000}, 0x50) 13.689628948s ago: executing program 0 (id=2134): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xd6}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 10.404407383s ago: executing program 1 (id=2141): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mkdir(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r3, 0x4, 0x42800) r4 = dup(r3) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000180)={0x0, 0x16, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a80000e2", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf250d000000280006800000040067636d2861657329000000000000000000000000000000000000000000000000000000003785a8ee535d1aea4a8a3d967e50df1601c5df16268c31959013f9a4a37879ed9a0000003c00040067636d28616573290000000000000000000000000000000000000000000000001400000022682f26a0d8473a3c1ac7505e5252d42a23ad7a0800010003000000080006000e000000"], 0xa8}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801000148008000d00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 10.279334787s ago: executing program 3 (id=2142): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x628c00) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x1, 0x2080000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xa, &(0x7f0000000540)={0x3, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x103) setregid(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0) 9.197866823s ago: executing program 1 (id=2144): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') sendmsg$NFT_BATCH(r3, 0x0, 0x5) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)={0x87, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7, [0x3]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0xf}}]}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x1000000}, 0x50) 7.714420998s ago: executing program 3 (id=2146): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x20000, 0x7e, 0xffffdfff, 0x0, 0x0, 0x1}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5bc}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00030400000004030c1828437bd34e46cb1375e38cab0a3916c181d6956f953f61950e33fdc180e922858ac73c98413db1fc66b39a7536b499d72817c6f1e80771aca730f98a8ee7d61198a2d88d3e0ee116717ea2b3e990e8e04fd23d91bf61bccbc06e36f57dee08609a294d969097c61356c4001d3c10ce8cba57580e4dfab79a0fde4c4d02d58116c1fc50f8737ebd757ed98ffbcbd4aa530dfb3c58ac1c99e0868c921c3c866a831b1e07c37001ea70ab3575bab110b6c845436762c0ed7abc4c591e86419672ea3f422ded9590471640377ab2f3c75218852e50acd6", @ANYRESOCT=r1], 0x0, 0x0}, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(0x3) r6 = socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r7) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r7) r8 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) r9 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') execveat$binfmt(r8, r9, 0x0, &(0x7f00000000c0)={[&(0x7f0000000080)='cgroup.freeze\x00'], 0xf000}, 0x400) 7.482479959s ago: executing program 0 (id=2147): r0 = syz_usb_connect(0x0, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0xb6, 0x65, 0x20, 0x413, 0x6023, 0x31ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0xa1, 0x7, 0x2, 0xb8, 0x3b, 0xfc, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x1, 0x0, 0x6, "d3dd"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x1, 0x8, "3fa1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x0, 0x0, ','}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x0, 0x1, 0xa4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2f}, @ncm={0x6, 0x24, 0x1a, 0x401}]}], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r2, r1, &(0x7f00000001c0)=0x1, 0x8) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000007c0)={{0x8, 0x6}, 0x100, './file0\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="601004000000cf", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000001c0)={0x40, 0x17, 0x4, "000c16bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.352473356s ago: executing program 1 (id=2148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESOCT], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x104, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0xb6, 0x65, 0x20, 0x413, 0x6023, 0x31ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x40, [{{0x9, 0x4, 0xa1, 0x7, 0x1, 0xb8, 0x3b, 0xfc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x6ca02, 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0xf4, {0xf4, 0xc, "bebe5afe8585468232827446702cf8faf0366c4df5088c1ebc462db03b91264a47b8dfba6b9814539a807935ff599b7220e84a853b4f7baffbd07c33d377eaf7d47f38a29008ddfa9f459dc0e3d75e4ec31832352c55ea065a57250a43e1c3310db7bf08d017ba8940505ec79be6a580442bef4462aa405deb73480f7ca575cc0b7fd7762e06243dde958282d5d9cd1d3e48357c3e461ac6578afd2487dc8d5ca02d30ebcbe238708ad03191d3296862aabde403cf874adec7e47e8b0b0a1ca6f6c7407cd161cb8b848f168daea0f0009725121e7cf15089a9426044d4bf55f0657865b0af6f657f3da38e08334365edc990"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x60, 0x8, 0xd, "f69a3dc7", "932edce3"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x9, 0x3, 0x1e, 0xa64, 0x1}}}, &(0x7f0000000840)={0x84, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0xb, 0x2, "a97b"}, &(0x7f0000000280)={0x40, 0xf, 0x2, 0xfff3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "cc6c"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2f}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x1}}) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r3, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) fchdir(r2) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x104, 0x0) pread64(r5, &(0x7f00000004c0)=""/68, 0x44, 0x3a4) r6 = syz_usb_connect(0x0, 0x81d, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x201, 0x3, 0xe, 0x6, 0x8}, 0xe0, &(0x7f0000001180)=ANY=[@ANYBLOB="050fe0000420100a000500ffff000f0400c000000000ff00000000ff000f000000c03f0000ad100a741a4e05ec15f0d941069c541775af909b70f235ba8071b4f000966b473187e776c31cd3cf9952a42d17c4c0f16604946bedea3be73eb7166c6386809476fa56f2dee66e6634d16ead0e4f348695a5440d43369d335ab6893cfe4297a312cead94a3f276d9c357dbac13cb87fc12fcbbdee7b10c49b6d0fe1ea7d6b5fc3c8c6486327be1707e741b73bcd9a9ddf66ee09bd810fdea28849e0776c12bf4bab92a0d418726f455807b1fe607100210170300071002102d0300"], 0x7, [{0x3d, &(0x7f0000001280)=@string={0x3d, 0x3, "39c2d05adebb387e1b22cf32ed4832d51487731d490b159b321e7076e583cda752a858791396c1b542729db95b18000a0e0f0161ae75be8e3bc170"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x81c}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x445}}, {0x19, &(0x7f0000001440)=ANY=[@ANYBLOB="19034ee7d91b094ab407b09ea649b59643991ae61daf02eff0"]}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'pimreg0\x00', 0x1000}) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) syz_usb_ep_write(r6, 0x4, 0x8e, &(0x7f0000001540)="4587df96c562095771e85976663381610ed092880d59b2d6d028407cea5fa5f86cef18ca432d26aa9159c66a5117a2fe2593f99850ae310f1f414c41a940482c7dfb7059c1c68e9b67af8585b8c437f46c100194d6ea019278ab742ce4d636076d008548cddc1a6c56dd14963e1a61dd116d28c3f08d38bce299cbe081db1b98e1da110248bc929c3145cb669b95") 6.897534314s ago: executing program 2 (id=2150): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffffff7d}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) getsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f00000001c0), &(0x7f0000000280)=0x4) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_emit_ethernet(0x2aa, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "660091", 0x274, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc4, 0x1, [], "47d02f1fca804217c6841eff66c89d285311aef7c439bde0b64ab1b2a90919191196f078b647c8e2ddc9131c3cb59dac7ce66dcb2f1dbd97a37987d205e5cb757e81f1d6ad906b93105752dd1d5c8657ca255be86335db3ecbfa1afb03ff6c6b1d17d893da482b05c0b092f2bd8efe6e196a076f32077982b0be77da5e4e146c48139a5dbf4bfecdc88f4510d90cd5c1f9224fb7edd612edf62f41d8e63470e0bf29e76645d5c4b9cf11ad1c68759ed1c0eb38a51bd5af7ee56bcdaf043281aa1851c927"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1200], "d67ae73841256e3cf95a814be67495b1dd1fc3eb1b13b4a384bf43f26f0bce29013161a3e1bc0dd80c38bb2bc429c30337c7122502c6270b2e0967e0e1b81d37ad9142d32f233b46abb7e4cbe8ce3298470e290537d54ac427af6d134f84de5a2f6660f8fcf028ea027728c408c19ffc2c8f4084cf69fd0129227aa3006592490c74e2d6ea02346bddaa91d7ccae4d2baeddd1345a396f010e73f75eacef68d4d789edc63618adc23b2e37a508cfaa710e3f02c021f8940d3da6f16abf45"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "ee749ade73ecce584177fbe5d7949782fe5c187edba11fd851"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x5, 0x2, 0x0, 0x1, 0x0, 0x6}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x2, {0xbb, 0xd3, 0x2, 0xc, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "75a4010c97d230778b11942d94b1cd3149ecfbe5182c17670cdbab731256461ad56ecb95ad6597dc6087da4d734b05f287293e278fcd32e7f3c6a364e395942f065e5563a07224f9e045e78c977616ff145382d6525595745339ddc83826e3689cf66d6caffb4633e977994ade0ae630d5514311dd554715f019a77c4abb8ae0c0002fa4e6f76f799fa5256670bb6a08bc6526"}}}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 6.74839746s ago: executing program 4 (id=2151): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0x3d8c3144653f8606, 0x102000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r7, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x890) socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0xfffffffffffffffc) socket$alg(0x26, 0x5, 0x0) 6.14131194s ago: executing program 4 (id=2152): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') sendmsg$NFT_BATCH(r3, 0x0, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)={0x87, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7, [0x3]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0xf}}]}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x1000000}, 0x50) 5.938369867s ago: executing program 2 (id=2153): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0xf1, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 5.870176213s ago: executing program 2 (id=2154): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000000c0), &(0x7f0000000080)=r1}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000193c0)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5.138054209s ago: executing program 4 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffb8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) 4.882058024s ago: executing program 3 (id=2156): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x100, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82882, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000003c0)={r7, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) io_uring_setup(0x3450, &(0x7f0000000280)={0x0, 0x3ff3, 0x803fc}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03062fbd7000fcdbdf25060000000c00", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x42080}, 0x4000054) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x4041) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.165880781s ago: executing program 4 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, r8, &(0x7f0000000300)={0x6, 0x1, 0x0, 0x2}) 4.118436297s ago: executing program 2 (id=2158): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') sendmsg$NFT_BATCH(r3, 0x0, 0x5) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)={0x87, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7, [0x3]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0xf}}]}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1, 0x1000000}, 0x50) 3.53614313s ago: executing program 1 (id=2159): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000080)={r2, r3, 0x9, 0x20000000000, 0x3}) 2.92036641s ago: executing program 2 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000040)={0x28, 0x140d, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r6}) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.919807155s ago: executing program 3 (id=2161): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc9, 0xc61, 0x7fff, "23f99dc792fbb316f564ac13d64964b4"}}}, 0x20) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000030100"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000002"], 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2006000, &(0x7f00000000c0)=ANY=[@ANYBLOB="67727002006f74615f626c6f636b5f686172646c696d69743d65336d344e2c75737271756f74615f696e6f64655f686172646c696d69743d2d31377046387467392c00"]) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002940)={0x1388, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x135c, 0xf, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @nested={0x1345, 0xe, 0x0, 0x1, [@nested={0x4, 0x66}, @typed={0x1004, 0x2d, 0x0, 0x0, @binary="6a8625c24f8d053f4722b920bdd7968fffe4e4d075b61f446f84e8534848f9b045b8c4552dbe6af89f9961b18d9b6a71a091f8e23d8eebe6278ca37fd878416c83be51f3e015f1411737efeac48ed7f60fc8365d0240541778fa4864e4559ad05299885c7b2b94d2391820df6a230687d3f23a2fcc2b5c816f9e6460efff4070a9790ec6b96ed963b2d7dbadd24bb54dadc8f769a2bb19c7f861cf85d28068eb100d52010ff75d065fa8538964937b24a080bc34ebca2c1e1ab79630c7f8526062c9861d06907877e8c2c14066fcb42ad2dcdad5bbd6bd01e7f89b48ba687a2b579d5054d863a2a32203a9b1dc7a2b601faeff36749dcd9063e258186a4cbcc27c0d82a7989250ee38db6b4fbbaca33fedd953873855b61cfaf3f616cac3c12dda4e02803c2773bf7cc5bdcb5b0e2df5c5c7a3e5be344b8e59b6d12846ad13ebc7fa1385970190b8414cce496a61fee9177e125c47fc80fa1de90f325deb1ed8ecb0d1bb16d96461a03b62f946bb88dca0b768115b64af2a3d8abce131ec353a1fdc29b2283ed818f47f549fc8ffe4f6fe361378c70f075dd24fed21160dd9bdb8c81d036451417ef2cc1c18cdaeb7fe9bce07fb8db55cf4341e88e704da0aa9e08c048c8e81c0e08f9bacadc676fd1f78f1433e03fcce15e5261cb4c00ca5356adfa0024c5b393662fc2ac417b4f265a5688b3d27a90e9f991621827ae7153dcacda3f86403b47b0386dcf6dffc486fd871712fbb6fdcb4a39948d73ee48553771ad947c613b1c79b2a663e990930f835d5fd876ec827e54dbb48ddef4e7751602784716abe7374fab10bddec4d543c749c472d231751073243f52ccc493b69703c4161e94d3bc81dd70acd09f37b1ebdd1814772351dd4e6888eaa42406cce95650c96d0c55c4ec39e3c497d9c5dd5cb18bf67401325ffa597ff2d180a6b67b5502af48eb8501f94c23ab2afed04e886ef252043b869b9793a31006d677e0998232b82272188960c55fdf30b0a62dd9c1bbcd1b8eb022f7ef3fc9bad06e6a69887b8fcaddc6080ecc1d4ee00765a52fd614943bd662231973182fd4580a00273f76a9a3585b06d48ec9f8515f50cb5bd86018ec39122ce339ab7a3ee315caa395e8e77bf34e6c57764d9aed3f30e582f52ef941e841598bf377221a6133488958529d6ea106c4ae8f76d25581baf96005f5ef80f384fd65652c9752aa80fd049f743dfbf73068ae29e93b0d970882942c4c479b7a06936bb13eed491cb20556cbf52bd6ee5f5999aa454eab870353195384acbca1c54b60595c782f6908724d0de9e5668d1cc664c74e1698e16f483e6c7ac72f00eb36e09a4f5979ecec5f19957aa3cf9a81a09f4db3477bcf6441fc0003587e7d74cc520c9362fe0414481bac6cde40f9003f6afd392c49a91fde5dcacff7f0bb43933d0d9e2eafcd934121a1a65ad94ffe514feb3494facfc7f3cd17af3f850917ae58cd1d4a360209fec42c113900f8371b16adf477d1aeb50d59c7c9d91748d49cbec93199abb79287938cf543cf058ba7795eafb8ad69979daf121c3517ff8b005600a7ae80d6d587964a357c2fcc3b3535d3249a9717218e741bb27ff4f9c27a9232b75d2955fc300431b0c8b8c68680560225287dec2c3552b6a46c08696ca4355e382433830c1955819aab58a3d904f671072b3cf4acdfcc0170bc16db9d8ffaa42a1adb3ca7f64c0272896bf2cd6d1461372ff8b19ec83c31a9f1d72177d0192838576b728c4d985cd96064d43260f635c13b4cb3d161099792d0ef83490a98eaf01aacf06f9b23507a08d385cd4cef50b8b92d700c2ba01403aa966fdb95e4f2fb3b7b72b051760fdfd1b19d927873a89c4dfaec2fd3c08fe92cb7c11b3f0a5667bf4840092e95c55794a6ed40e358cc0811a1016cc25da811312a2128a51a817e8400b769cecd25cbcf8d72f66f9f2009090de1923160066311b541e92e6ed14d637dace1d5146d033e63335629e0efdda48c5a3b7f25233b02a0fa101283cd343f89b124a59db544030d1f2e1b33bc308da5ee7c6c1f4b611b9edd913e7a231869d5cde1b16f404f7cb347443bb9d3df37a1d3cf4c22985a1e036296292e434e703caac6f594216d80d0267b018a5e66d3ee6ec5a5a12cf986022a2f92ba42adf09445362e7ee37cf96dfc49bdd1d6f1990c1c389df79e179909ceccadd73eba329609df25c11ac7c34528107ae3a84a670adfc4ac6179584e4f2669e485071b9a420f244b803d5e3a25c800863c3382b168681e56e955cd585ffa808df0f6faa7df44528e640402fa71188278805f267943d8ab36e67c5540c895115f2cac6a3f1b07d0565d714f7409ec5d0fcc63491f0232ba3bacee362a7747d014e31289796c2ed1defc2a76fa082ca199613385e199215ed3c7a9ea5c02982f841beb5ab1547b7612a644c790e7da12c7019ebdaf80f75c55dd21b0446675b1e67e6121088d9e03d38de35102e489e2ec3b437bcc5c58e029ac389d65fa4cdab06fb272aa56ea782b374bc85229db2f1613c17deae54124f23fefaf83d50b8c44520be1dcd5a40284a07a27738bd73bd10f1e5ea2f434d20b677b0c9ef4bcf829931bffa5e9872d6d094ad9bd127197502a5642584e23703dd3131e3dbd7ed299713c5e2fa1c7f341b7636e90de1d376feea9b01827eb6ff2a277ae996a5cae677b7b9a91fbf42a2136b64e16ee6b1d94f7c8ea552b4aeba0e646adf735252b57562422915f1b514ff0f482ed07c82b38e0fb342a8ac8e13f771d5b912b30c1cc2aefb796a902e02c09937977cef907bea414e45892e6acd62909567cd2c0f881a84f023b5c72dc70c2d0502387cc9fa2c64c15bd52c91d38f6b8e5f20d04ac76b96f72f58d810e8deef03baa8518581e6c90301888d35687669867673fcb19a9392c3b53b8c6f294428f6c52cb29473628314393a094f0351cfa982ae611f06a245d8e8b5dbb3a663cc4fbecc56fbe828809efde04bf2cce89f2c0ebe7321441a2d846d6ad7451ef11501c7c3a072cb46062c55a4bea65faefcefc786faacb1eae98dc5611f711311d7a4ae3b17ad7820fb5e29561b0a09b9a8f048d3d484fa2ac03533c545f866bde3470d3cf35ab679ad8e58af97d724aa5be4cd2d788462c2fdb93136edd4755337a17dcb9adb9421b41590b6f4439c6985ed4420ce048245b0e53ff50734cfa57688d60693fc0b4f4f16e046e06ae796ef8fad76b57d182c55fc571dc349819636da2fe1eae9e0daa3f511c26dc64d627d95c3e42a4ac73f9c74194940ef5fcdc2e394f3152922b47f6cbbc4b052ccfb602c3c2d88d0fb5a74939d121b4687e186e0d7cb4d90e2bad9029eae43de4e6aeca3ae639a0202e34faa446c88cda540a5254fab71658281320b33c27c27681dec0e3f187c64b8ec0523f9afe5e6f06650742884fab7bda2cfd3bc08af40278ac2a193fa0b9947a9e0f5bdc2c9f1da9d6744c170ed4a86a08ee6ba15fd48d698eec622e42a1cf1c93e9089742fcbf29ae045f2af01ef834c5eff3cafededff9cce2137239681524cdb5d3450f8965607ce675c2ad2a754ffd45637f3a3c142341056fb295949726e91782cd2fbf56af7de1e6029f9680c27df97a503acd741f26cf0ede2ee06ab8fd51c5fa2f06f86e69a1411b374a634098ee1fd48b40d51f0632ab1c0029d43a7a4a22282f1785efa006264b8f783fc601bd069caa4efd6f270e600a71514fb79b2095a77bf2bbd3d6da74b00e91ce8cbe75133d1a1f1440fc71b984c5d0bf91544e747bf31a56b9113b13bf1acefc73b003e5e03fee838bf0fd3238aa30059037bb88998bc55a3f3da816eeaf6f3c2c748ded608b496da7aca750235923165b324fb51915b1b3aeb99b68ac357f563f8f59334471b8e79ef8aa7ccec5bb3da6cda23615b2100fed7407d5c4ed00fa24eab04b44f5a0250fff7173a31aecdd21535071b7ceb0a7f267b1d92ee840fc220fce928c3a9209fc5dbab4cd9ae5b2b09e110ce93d8212b7994eabb88bd83285fa465d354e68dd90cd3de35e0b8f6ebe5eecdd7047d83b3c7783a3044bd0eed92bd85e802edd90e4e89add91a360faf525c73ee2d1325850dcd9fc7ea90f6ee9f6ec3cbc83d0c8e3ad3318b764bb15c8540009b73c101be07f35b0fad7580bf7882ffacf812fea1ccbe50dfc3c1a74a3ccf9d51794986cabf9fe79f701a86bb33051a67cc770bc0909788e409ecf8d612728c4a5ed65ad77fa01a21739b15b298bf57beceb8c43926f9d9ce06280fe1681cef43192e0bf4ca64b22bc7a41956a940972c109c488ac078d47768e818b9834468c67e41359fb743b988287b356d60fbef1d18c4c1a26ded9e02bc0b76d901b0855e578e9cba7f0bce5a4dc931a889081dc0bc80d7bdfa9acb0d510910d003bdd8b5cceb3c95a773300808880df6c03b26c07ac6bfb8c31d74638a8e307c7e0bea57e4f757d0ec6dead7d28242378fe901769a055518f2fdba81b6f13c85c3bcce66bb38c4f2284fe5e5ff1c80baea663e494f8112f12231a41c124bb927631aa4829e7071f8a12f2309d647be08660c3967f56820783aa5a08eb48416006d3c609126f734492d37e289ce25d5c4be63a55eec4f1a6a9e9b38667e7f942af77f0617ef7424554cd834cb7af6ef4be1a77af2420166cb049d873dcfc7fd1cd162c92fe9663f3c6441e6be6d5babdf01611a717b141bb0692c46ef1a59e1e8925c4d807834fead3c23776159b26e6ecf95e5cd79e5088b4526d8bab601a39e82ad6a79e1bc7eaefe77f71ade60ac5e7b07722810ce3b3c8dbfae61b6d55a222bc857a3ac8545e633e0b062e89a5150796833ad0104961dac98b9c3852dae4c18a0b8954ebb30cfacdcb9423f39199c29298f224c4911d0c60685c59df60865a9b83d43c6d334da6a5c62e9da21384be5e903a76f777ec0824e083d3fe6f71064d9fb667b1aee2d45d96d8a1fab72b56f310728cf32866f1c5fc359d47f825a04beff191fed0e215df9abe6dcfe3e0cadf62cfe29ee15f1139cb7f88c22412b1a7ff8f33cc8cc256beb3cf75755823121ecc995a6f426d0d3ed26efab6632bd518dac7947d6eb9a50834eba8a300c79a7e91a1b393c6d25a715f27d896993d78bbed8fefc85dad2eff7529f5ecf574dde19d97a152a473e27d2ef5f03f61930a3e4cef06a466df3804747d6ddeb42ba1e1ae570676e27b3d3d1e36c6e5e735200fec68a3c9dbf16287af3078cb7d638553660741526792a6a77ea0a4c4f091d5902df5b0d89deb944f60e8d4daaecc9a1d079b809868bf8f8dfc0ec780a9db756cf41e79ec7476b2d6c26dbc0821d86fa6650956bd132e02a005b237c5b3036713d97c3619325aebf0144c275553a6cc143074e9a32df30520215bd329526a2265179ca6e9be7b62037a68d3f4b2aa73753e7ed5c5c4106cb0b7af17b6d55f06d817df08ddb3d5407b677f415802af021f7eb98c96240893689eacd391f5a03f8ae010a8f5e92bafddce06c7478b5757f05b01b006250df70763421665cec29afa749c3e05566ac800e915dbbaed61b91bd564a0485f6d720c6366130bed4d4176b9b5ea4661c63d74b323d1edccd42e7e5cc406f4429043d0035aa082f5558e5bfaf423193d577a26192c86bf9ae8525cc2bf02949c56b78f258c562a8cc1891f973253d4f6cbed8a841a886c95a161f8a7d42ec35e4f304e62fac096ecf3526b3fb9f519ca0debce3439a5c96f75a60015fe40c7364ebb544c6e1b97ebae424ff86cd21cf0c4a8d"}, @generic="0b8b29f8e942ed5b69052974e573365b8f8132ba63084a8987e03896999cee23c42175aa4d23144b59b3cb0f4c7497db2faf20100b86d7839e82e16fc6cb782b08fa24ac2bf8a44fa657b5d46d8fb5a3cff577f9ece3cc88bbcbad6e8c76e98e0d15793df0b707253a9aa6fe3dc3ee6b28a83e379e20f020475a6e81c1913d377cbe3186d59b128cc379c9c9bca6b2b45800c0e4c8c54a1718fc8f9f947a607d3471bf3ac56c78d2fc4a91c195bf85295169f3bc9536973c45b2c0c935b1a463eb337669db9465033f90bc15b006f91b5b15e614b9e0ab4c0d6ef7edbc63dfa7", @generic="2811c5cac60a56a7ee90ea65b3515d405c6d6dea2ca8e2c4d1148ca6475cb49eb89053adc704294da164f97c2237dbcd1197b0895988d62b04346891bd56f6d2c825343b2bb4873b5b12f5cd259501b9390be048c20a5af78e85a1ae049c72b76eab3d6508d6a1989ea25bf21a525a74ef1bc6e05b6fddfd4314b8ba5ddb23dc65564825d353c7", @typed={0x8, 0xea, 0x0, 0x0, @ipv4=@empty}, @generic="f1119a13bdeede8c1f94d70000617956d0453bbbe1ec412f2abf3b16332dcc899f5a363d355b27335eb1dbe52b", @nested={0x4, 0x9a}, @generic="821a1ad325520bdcef7d4495a0bb0ec03dc11b2d6e5c0ce921f9f385797a56cfd50e42b0c9da8ac3f9348cd33c0341e12684fe09af890ea3a2f6ecb9378de41bca59a59b42686ce96f5a8998ead81e893086b63356a59b3a8934bd59bed85527c3f6e0c06ba0ad6af5282d549242c1580ffdcd957d5d6e06d70da337c6e409f27119c1d51ae897cbd6b7a8ed288596619d467e4534784e21d947035c92299cf984907b49af958b8e877d0d3bfea67c525d3109214a609851e3b74b", @generic="0edd406da1d2acb38c5ddf3bd81e91fb713ae08ddf174d0ef8005e0eaa991d8ead309f5dd883fffc37400b07330cf43b54d7eb34bb82d3233f74c8c5f2d92b1cab579dbfb2b4d1f434fdbd27f07e749ea619ab3a223f0ebff90919b26bb0bd49fa465e5eb13c74c9ca8eaab3362a0137abdda47020ce7443a3537f9fe6412c3dc426a9ebcf1522ac19ae371c5669eea94c1ee036d278988dfa2e7f2fdfb2e954ccda1f671df2790865646f3ad92044f14fbe03575be3fffc5cc21afb2249b0a828d611efa819a2eb555cc23bed4a5c326c320337e488e0708f865bc01d5b"]}, @typed={0x8, 0x63, 0x0, 0x0, @uid=r6}]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x1388}], 0x1}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r9, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f0000000000037dc125020000003f420f00000000000029ffffff000000", 0x20000238}]) syz_usb_control_io$printer(r3, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) 2.252158845s ago: executing program 4 (id=2162): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xd6}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 2.23174416s ago: executing program 1 (id=2163): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2b, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x61c1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2.194744588s ago: executing program 0 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000540)="c145098a49de90cb684f701701afa087aab0b90c9e0d19eec0da6a9270abd0512241a2e1a7aefb3d72517d35039a0db14b28f934f10ba53d85e591db18684e050068d37a0e5f4fc6b21f743cff56e141d22ebbf8082f1a", 0x57) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x6, 0x1, 0x0, 0x2}) 1.567032802s ago: executing program 1 (id=2165): r0 = socket(0x40000000015, 0x5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x100) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 'pim6reg\x00'}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="dab099c7cf6132c9f815621dcab55fc7ecadbe28841ba6f3418f97127d0f26d74c2438c85b47478bfc6056d921ad815eeb22af1bd1bb53d5aacb189b855309a524cfd3ff9604a1bb17895992f8bd10f7561becfc85c691c654eddb39b41e6bc609cdd24f5bffe0e1aafa67a1abe1a2db9e75d0bbe33d473c13f239ad36b669791aec278e88f750f473a34d2da435eafafb2521c15611ae81dd23aa366e14426a71a170035eeac4916f3e1d52f1", 0xad}], 0x1, &(0x7f0000000380)=[{0x110, 0x10a, 0x1, "a35298bffc7bbe4db879ae808183940dd0f450c1c0efd67005e69f14125661ecca6ffd27df532b70cf2a9487de2b62b8db588fd31e7b8c792e20b56c68d3324eedb4bae0927dadd8a102cd473b6f02b66ed29322a6391a5835ffc179fab3b53cc01f34b2162db609f12f855b7681744493de3cfa804ed42b8cc7763b8ba968d7310593bca746f52dc1613037c6a910e4b4d7092ef9d8c14a9ddf197fd0a81591e33fe517cef68580078c29851b7adfdff3dbb3ac19e11e4135f5b3476174fb4fd21cf822a629fbb45931e2abfbd61acbd671b4ed1ae9407bd8a27c9ead9863f2e9e19b102e01fabbb7bae1bb8122f3ea92019286b8620efe1171"}], 0x110}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="d3fd0ca25b331185ab1d74e71dd0b866049194e40244d39b2744f7384ba4e761f9ab91921fb02835888f4cb1ba08aaa4b3cbe1278cf4e0777ab13b457cd0b860319edc99f6250896d41a3b", 0x4b}, {&(0x7f00000004c0)="73c858002d24bb79a108e228b97736e31cbec96782a1e57bf07c0906fb3494238730080e6dec9767b06c557a1768aeb39e3a5f91204a5c07269607", 0x3b}, {&(0x7f0000000500)="431766c20333ef3070cbab66fbb11696add846e1500b62e4dcd4895a116d414c48c9bd78afadf544debaa344a88ba7d0795d0a76f271ebda84", 0x39}, {&(0x7f0000000540)="0a903cfbd25dd55229f4ca7980914babd02bec3681a6a232675bc4be933eb8137b6ea61e59c422bd84e29eab07841de7b73d817282d50fce234620fe4cc230e14d6d71a09dfb97a0ec7fdeae7df9a9e2418e5bbb2331", 0x56}, {&(0x7f00000005c0)="3a48fe5e1c30fa2ab03c472dbf47358f9ee07b", 0x13}, {&(0x7f0000000600)="4af6dfa0fb32982b55da21df2392fe95517ad89b00d6ec0ed6b2235cfcf3d57404e2173f3e2efb35161bf1bf299f79c75a8291a93bfbcaf0edb31a284291bbebf663a81a0d8bf60f519f05364c40c2d87f96ea01f594106b7a92ee643fc5e88154b7bdcf420d75655377be1481ad1da44c68c9f95206b08fb4b4e42d091ef62cbe5ad3e63b00fe067e98e45f0b7195c495732ee61d52eea19d552e6c6b295992921e81cbc8a43b340658bcb072c075bf0d0c0062b3e0918a560a7089be96548955f395ee77c66f5606fd69f96da28d042473e1c39d", 0xd5}], 0x6}}, {{&(0x7f0000000780)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000800), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1358}}, {{&(0x7f0000000840)=@tipc=@id={0x1e, 0x3, 0x4, {0x4e20}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000024c0)="9aa8ebafe9239bf4c5f312604afd40cf3573c6c8272f5b1dd6f532eca20435832ed3a7efab175638f5328f53082e06e08f8ee3fc8d5633be2445b443a2855849184e03ee3c5978722b898588f57d1ae36b2ecd0b21af9d531471425eefd9c4933fb8b610e01b494d7ebe2087028919c25f95ee442e827dde12202cf884f4ed856d4aaa499be285db971e53faa74467bcb5f90584ae756f01ca17dda0a78390e9407c6c41229fc8d54ac8208d041a1c361dfd5421b78e5cd2fc309c96fb14ddd10cdf09a0d538ddb6588712348fe93ea3d0805b4e56901947e58d15763410851af9e3c972e7195e8f158a65a0f03c39dfcd96a5f1feba042fd48dc7138d51dc7cc4f56d63a8667e1855acc6b60e8eed1ac6eeb087eeaa72dde6fc227f19206ab6cfe4461b4e59418479bb18b81342e36065ed01e922aa69f8c194208258f29220962967c5cbfdf7ee5f047585f70f55e0af84764242df123ce7f006a1ccaf53a63de221febe97b190334d767fb00ec4e1bfad91338dd2fe8a31a0d83f473675ff1d4a06fcf450bc609764985777bbe7137a4dd30dcbe5e6084efa22a5247a8b63279e0f35ec3d542eedb8bec53a7401f0bd60420b3f53ac2f7205da4efb7f3a65f9ae3a17c12162bc3ab9713e42f7f5bbaac24c7a333460df600bdb0a3a58249889cb1565472c355de40d004b9f5a83fdda84848a90e7a9cd234c0de67ff3e510c9fbba0e07aef8b565743c9709ecf1b2c8ab798750021e121cf1778c51392a7a951ce8257f00604257c4f455c550013763852065822968ea60d608a5a58b138d38103086a05d0bf19ef3f4be668f9850618a6c7c6d5354730d231dfc34e695ef899b345f65ddd4d82ffa50509f0c7e891a03aa482e19b48885653a1983e692f3b4669c3d4ae40bf4bcc1f4e06e4d16058d01479353280fe1a64ba73bddcf04ff627d3c0f6743581191d38317233f5ef692f4a930e48990699f2f17ae9eff0740a97371232789a12bed928dddd8154199fae8f268993fff75dd66b1f532307c6305540be85cb90ff8feb305824ea114da928e4fc4dab72dff74c2ada8cf2f44c47a46c6a72958bcf49544d912019b2a020e1e1d729d6381f5e5020a38ace7befe92d24b4ec02db8779a2f26067690dcfafaf16a3fb5984846cf6d3a28664b6afb1a2cf7077ee0b87d74c577f9e1df6be023dd022f40a58de07e66078110420c5d46cfee15e2eb6ca920d3d92b8b22005bde3922220ad7bbbbd4517a6a710ac24e6d601ff9a2709d2e449e1e4d5b6646f8e0b54fbfe7b4ddcc88dc434dd2016eac2ef4c712904b166fe61cd09e4b32b0b484d8bf7eee797f3f0298754fc777e59bd9b3f367c8961ac3b615aec7bc62e0c7ed3aa7fff62613d2cbc5d2d4134d145fe400e5e7b9569f96d975be28b11943f7b1d862d6ce42c15ef2205929fcda053b79a1c33c012fe51ab73387e81cd0200125bc5205fad6882ffa7093d5913b0124b14835df930020bbae56404d2fa1a268c0df4c7f83200d18827539615e9b2865c61056b26beaf52d53d0b9d983e948447f9fb687ef28aedcc982acf6edc7f035dcdeec09dd395af354bbfe106e01f5d408bf563e1701fe899a97602b65b69c9578c75ea2236a1a137fc9a73fba724125d38ec5a2220a5afd054d43c4d86ff37e08113cf01cf2a57bc07c9baadd6b51d0379b703466e4be239204190584e022394fb838255cc252ae3a52e8155c4600ff9f83fc21817d1e9f29f02f31ad4f55942e8977f2e3011acf93c0a640222952a1612b933810c83746e281b09bf8b519a675ede8c91a2654533276387c695bd1983022d2a8c691988549cee125e72411c97596e0798e9b0176c1874d6bebd3d5fb0ca3b1ce1e9375fd225f4c737eac05a8bdccc7a83893190bcc88f887027376bbf416d4316999ea6aef01788809c8aec28b4546e0dfac1c4320a395ae9218c9fe53fa51896c5e2e3ff55ff3aaf82dff87a6540e176cd07899b8c19ed6bb41b19787e206143a6bb0ea80baf10e8a256d5b52ca954482db88cfc37c4624a44450175b0a407d96a9d323e2c7feabece9c9979f25b05320d38ddff76b30a428853c007372da42fd177d2700b4bd591f1e946d60bf7c9f911fac633d483d8a98f447364a7e495fa6c0cea2abd70d794190d68096283e248326381e62b320fbcea86a9e7e346cd7439a6657eba7c500f34ef7aa4b238a9b3ee0554e9af8969e88c8ebfe031d95d69fa26dcd3c945b60b8ff33bafbf18b6b24be294f73e188fd8dc1a3b6811fa395ebfaf10c2c25b2f56208aeef5db852d5604fb3a29d77e9945929c9d37fdd4b40b668db16b4b37827ea933c7a4788d9e58a8d1adc9636ad224c9b95c066f3d391387ae9fa0ef122fd72e4a777a7de9472ff309804ba399475f8d36aedfb0951846c30b85252707234eb94792df548141db6f09c27dfe0d86dade1bed257f664c8541e5c28775897955ac41bb4c7d214fead172bfdf0a8f477cc604467fb25619faaec1cb1b0810d16fa8b724f47876e65524b3c8e1f4781eae493600d1c075ca409424aca227bb9a5dcf0e2ba56b75ac89a9549a0aad4bd2147f44e962d48450b185d7f7f3fc92a43eede5d1a887b0f79d7b971018ee2d57e8a0aa194e58f2a9b345c040cd1247c80b3a66718a36ae8bdbc404d238265a21b5033a0df112f611867f8d4fd717f9dd1b86af23f695f56dadcb8de9d9e011e63fabf8e491ef957f778008a3d3ce2a92bcf5143538d2e9b0b255186b58207792570e89f9c8d7b0ffe0be99a880632c29d3da695f53342e931308874d8f5e81e044cb592cc2746d1807ce4309287d28bd09aad696526660dd099ccb714ea152f53d70b5ba296cee64f695e01acb8e1b67e9d3abc9632916ae37b32bce02df7a5b15b4ba2ce5a8805050f256f1e551ef36ed4ad2a0033cd5a7d77962242365220e12a18f1552c31f957e018bc4a55672edc40db61ae55aae7d72ac5c0bdc77c54c2383514a898d1dab53aa55c1dd99b5b160f608b37bc23b4adc26c7a67bff1204b291d44e64d10412b58239739cb4766966947ddec039ccb9ff8bc466ff5071e259aa468f55cff35f67c4a851a31fa61d7632d7a8a3aaa647bb5a24ffe1ec4e036ed7207c57230c48605165db2db34fcdc2e1fd7fc55df516f4ebf8c38fff0c71cc6077915d27f82a0990c9f288c6e0f08988930da55002b5c0e96c1c7c834f5d76b306ecf58faf8454a82c7c6060c12a1377f8303802b40e67f0263bbe54c57ae520728b8a08316d61433840e51a02b9145d57898176ea5bbf5ac4d4eff2d8ba050937f82f69796af9bd3bf999acde77ba545ccb928412fa76f0b16acf249dffa3d85435dd4b64991c34776703ed5934f4eab855c2f07372c0176347c645a863faa6f6ea83e19c8bdf00c369ce27897fc3b0bd79b9da8d9dcc1a1c4410d8969ad8ab8de0b3548a8e4fc773c85391f4b0c03f7bef1706b780dafed4b13fc0678ebe205c25f1a644598d8baae21239b4593dd558bab2f5aee81c6533adf187d504c0fcefee92cb6f7b86723bcfdb79cc18086b846e27429595f5877a93d2aabd209c826d24fd3acf8a45c99d3feaa7260c429af83fbfef3061d96d0384ace80328389d71b107f8f2a4cd01a8b69eea8ea9455e8fc5cfa89b5475f890b7af770a57846d8a2a0dfe9ef22a0263ed4218afe254eb9f8a6e803682f7c53e8a9afc920be8701e863870f91990570b7ce8ea9c87c35fa1c75ef3e9ac4c47f28a467e486ef9af179dfe4340c46517095899a57c95aedd570a17599964054124f6cef0359c1152d6104cd97ffb9f47deb19a83b65aa88eb6633b51c1fd2a9bc3504028ee18341189f57c24a21b3b20c0b24af571d874c6e3c7f83ce12070453216d1243e66eb1223bd9bb718646a45d8c06277e13b994ecbb0285f755ef75ad92b204d6c25b24efada2e2aa1fd5a9de91db378b82353743b10df93828ae46ac97f2c28aa94d373174f52cc27a0b34f483147fca5c60a261d471efd0fe780b5c528a59b5c4b09bcefdcfdb7d2a4e53feb298e806793d0177b3f7a10b45fdb862ed060916626a56bc8951a0e049b3b2431aefb6c26a583e0a04688ec8f5119c682c9d1be5581a835db2bcf90514aef7488e79449375cbc41389904e89f002f29fbf94b725f819ed6c5766390b49321413ace93ad67eff07e2e78946fd3f6ec50a2ade628736a330cc493beafeaee31a1f2d73d996de302ec774cf5ef9772329e6886f7f3597c8f7ba167b984c8b03143bf004e6aa40227a89bdd981954d47e7689e998f912c9e7172f7f04b2ddb5267b133ccd250e2c653e3e01e0e5bb8cfc3f5f28de2b077643afaa2cc713ed10068f4cdba8d081e86a2c3dca4501a43415f6fd49c91cf176b2fa14a0127e789669bc8590a271a354b69e1b172f934dc82c6fd3cdc43ba104163d4c687a499afa1968c60977969db8c19d9b88745a6fde084ea8ee86fe945f4305a1a83f8b915c52b27d11b46057aad0280b9ad46ae4c733803c285e9e90bbca466b368793dac91283073e01fb64b47d3e613406aa13ac586fcbd5bb35b950501ef456f98d89644df7dd9b8872a046b9e4c41387984c3726342c495575f857821a8a658046a40c994bf7022c74890849d675b8b152f8ce01563a8df07406b564fdc8e8b71814e42c5d28147d5f53cb589d8a6ad0d6b00850f9cb5365bb4d424def23aa369300e6bdbce19a1e50038c3d37779269a8446d6548962e0fe7377cfa8de9c9815d760e89eeb75fb1ba589ac58eaa3d0f97dd7ff142e7a5ee0e9765a3a1784931d180a866157d87468c5f0478515e1bfbfcc47f64d2e7e232222b612bd8ecfe44abfb231d407fe0db3cc49e85604cb0a54f73120227eb22bd00ab6157b004f942a70fda072ea9bab8c62260d33575e5474bf3b64f315377cf78220a1035c37b320b454ed09a1eb741d1eb4d4100558d4378ee933ad0c1bf49ee04587c951093b3d8e33bbbbf2bb0828cc2b498baa39f5e2f46c326853532848c0627df1f5ce95975e62a0f3c24ce3b6863f73383665d488b0f0144cefb1e4cf0b996c81d31390acbb4e1aa53c108fcc39e402eb52c2999ce1533851643e99d77cc82f7ee9f3127226875a11448d488a3f95f15866b81e2d631f48503d85058d4744fa1e50daeefed5cf3eb047fa4cafc3afc93d1b3593eed5e8cd7b53e5bb25df2a2a4128e153fe90cdafea1ae90c2b40a859d69a3320fe8e0011a1a8a490dcca387989a106f2f1dd5dcce87c88d94506551ff72c7248c907f3c39dafc6df659ca48ae1fade02ed2360d2f154adb1e5d20e3a7bbce47c5a1e94d8d7978a5b5d6312e42e2a89508d4d54145a7f2761fa188d470883fe4fe98a016bbf7e78a5f23489cfb03f13b3338e869563dc3473de9307356404353836d223e89db11d003e4b8b41627da5fead1ff5cf9126a7380ed37737b8c30b8c146f2db25d69d168ee51b105ab92abc603dcaae7f7c28605e267006597da750841ff069dbeb9239589f695e5cee7f1299f7ca5e41bd2855afbc9fcced3c4fde759ff5adedb667d550083e78ebc78be9fc3fc40c39c95f5cabb5da3fda2bb4e7cd7456621394dfae77fa3105137723349f75f769ffd16a4bf36657690632d72ff6fc8dc71fb63da68c3bc6090367cc08f61d38d541b76232ea455e429a0c2ba9ece3519ae007077d0d39ce5ccc94ba02e3c0c5068e0d6a43d27a74b68e9f935dd47bf6d76930daaf76cb02d0947581728c0e62a74555b2904071941bc270e9387", 0x1000}, {&(0x7f00000008c0)}], 0x2}}], 0x4, 0x20040000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x11) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000400200000000000000000800"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x2) 1.215542992s ago: executing program 4 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000480)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x48080) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (fail_nth: 1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x0) 930.271633ms ago: executing program 2 (id=2167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffb8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) 0s ago: executing program 3 (id=2168): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="daf541c1", 0x4}], 0x1) (fail_nth: 1) kernel console output (not intermixed with test programs): yz [ 643.151288][ T5955] usb 2-1: Manufacturer: syz [ 643.155968][ T5955] usb 2-1: SerialNumber: syz [ 643.192354][ T5955] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 643.200153][ T5955] imon 2-1:155.0: unable to initialize intf0, err -19 [ 643.215668][ T5955] imon:imon_probe: failed to initialize context! [ 643.233408][ T5955] imon 2-1:155.0: unable to register, err -19 [ 643.318340][ T979] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 643.396380][ T9] usb 2-1: USB disconnect, device number 44 [ 643.488167][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 643.494712][ T979] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 643.503182][ T979] usb 3-1: config 0 has no interface number 0 [ 643.509366][ T979] usb 3-1: config 0 interface 161 has no altsetting 0 [ 643.518161][ T979] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 643.527283][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.535380][ T979] usb 3-1: Product: syz [ 643.540350][ T979] usb 3-1: Manufacturer: syz [ 643.544973][ T979] usb 3-1: SerialNumber: syz [ 643.551242][ T979] usb 3-1: config 0 descriptor?? [ 643.560918][ T979] em28xx 3-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 643.571320][ T979] em28xx 3-1:0.161: Video interface 161 found: bulk [ 644.015001][ T979] em28xx 3-1:0.161: unknown em28xx chip ID (0) [ 645.129961][ T979] em28xx 3-1:0.161: failed to read eeprom (err=-110) [ 645.136852][ T979] em28xx 3-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 645.288182][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 645.528167][ T979] em28xx 3-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 645.536922][ T979] em28xx 3-1:0.161: analog set to bulk mode. [ 645.661649][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 645.787819][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.796305][ T5955] em28xx 3-1:0.161: Registering V4L2 extension [ 645.840274][ T979] usb 3-1: USB disconnect, device number 55 [ 645.995868][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 646.059900][ T979] em28xx 3-1:0.161: Disconnecting em28xx [ 646.071863][ T24] usb 5-1: config 0 descriptor?? [ 646.080863][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 646.198149][T12603] ceph: No mds server is up or the cluster is laggy [ 646.750794][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 646.756973][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 647.809905][ T24] usb 5-1: string descriptor 0 read error: -71 [ 647.836561][ T5955] em28xx 3-1:0.161: Config register raw data: 0xffffffed [ 647.925416][ T24] ldusb 5-1:0.0: Interrupt in endpoint not found [ 647.932877][ T5955] em28xx 3-1:0.161: AC97 chip type couldn't be determined [ 647.950786][ T24] usb 5-1: USB disconnect, device number 43 [ 647.958141][ T5955] em28xx 3-1:0.161: No AC97 audio processor [ 647.965355][ T5955] usb 3-1: Decoder not found [ 647.972477][ T5955] em28xx 3-1:0.161: failed to create media graph [ 647.980522][ T5955] em28xx 3-1:0.161: V4L2 device video103 deregistered [ 647.990121][ T5955] em28xx 3-1:0.161: Remote control support is not available for this card. [ 647.998931][ T979] em28xx 3-1:0.161: Closing input extension [ 648.007302][ T979] em28xx 3-1:0.161: Freeing device [ 648.046795][ T29] audit: type=1400 audit(1770721262.137:742): avc: denied { connect } for pid=12622 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 648.978136][ T24] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 650.328385][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 650.729021][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 650.741179][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.750883][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 650.762256][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 650.772271][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 650.783666][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 650.793926][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 650.803895][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 650.815470][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 650.829266][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 650.840684][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.850794][ T9] usb 2-1: Product: syz [ 650.855055][ T9] usb 2-1: Manufacturer: syz [ 650.860750][ T9] usb 2-1: SerialNumber: syz [ 650.867971][ T9] usb 2-1: config 0 descriptor?? [ 650.878025][T12648] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.886887][T12648] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.994437][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 651.167389][ T979] libceph: connect (1)[c::]:6789 error -101 [ 651.548928][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 651.556780][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 651.567855][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 651.580824][ T24] usb 1-1: can't read configurations, error -71 [ 651.698089][T12657] ceph: No mds server is up or the cluster is laggy [ 652.196602][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.206046][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.978189][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 653.141650][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 653.168395][ T24] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 653.268600][ T24] usb 1-1: config 0 has no interface number 0 [ 653.275238][ T24] usb 1-1: config 0 interface 161 has no altsetting 0 [ 653.285299][ T24] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 653.296262][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.304647][ T24] usb 1-1: Product: syz [ 653.309195][ T24] usb 1-1: Manufacturer: syz [ 653.313864][ T24] usb 1-1: SerialNumber: syz [ 653.321191][ T24] usb 1-1: config 0 descriptor?? [ 653.331487][ T24] em28xx 1-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 653.346870][ T24] em28xx 1-1:0.161: Video interface 161 found: bulk [ 653.449809][ T5891] usb 2-1: USB disconnect, device number 45 [ 653.783095][ T24] em28xx 1-1:0.161: unknown em28xx chip ID (0) [ 654.105077][T12696] program syz.4.1621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.124083][ T5891] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 654.308250][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 654.356061][ T5891] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 654.452136][ T5891] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 654.499841][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.530666][ T5891] usb 2-1: Product: syz [ 654.541503][ T5891] usb 2-1: Manufacturer: syz [ 654.552511][ T5891] usb 2-1: SerialNumber: syz [ 654.569362][ T5891] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 654.586329][ T5891] imon 2-1:155.0: unable to initialize intf0, err -19 [ 654.600780][ T5891] imon:imon_probe: failed to initialize context! [ 654.610316][ T5891] imon 2-1:155.0: unable to register, err -19 [ 654.788168][ T24] em28xx 1-1:0.161: failed to read eeprom (err=-110) [ 654.794925][ T24] em28xx 1-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 654.809905][T12617] usb 2-1: USB disconnect, device number 46 [ 655.187290][ T979] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 655.278113][ T24] em28xx 1-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 655.289660][ T24] em28xx 1-1:0.161: analog set to bulk mode. [ 655.300827][ T5898] em28xx 1-1:0.161: Registering V4L2 extension [ 656.063567][T12617] usb 1-1: USB disconnect, device number 56 [ 656.070454][T12617] em28xx 1-1:0.161: Disconnecting em28xx [ 656.076530][ T5898] em28xx 1-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 656.103403][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'. [ 656.200299][T12719] fuse: Unknown parameter '000000000000000000000000x0000000000000005' [ 656.232129][T12714] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1624'. [ 656.236772][ T5898] em28xx 1-1:0.161: Config register raw data: 0xffffffed [ 656.254364][ T5898] em28xx 1-1:0.161: AC97 chip type couldn't be determined [ 656.282066][ T5898] em28xx 1-1:0.161: No AC97 audio processor [ 656.323879][ T5898] usb 1-1: Decoder not found [ 656.340314][ T29] audit: type=1326 audit(1770721270.437:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.3.1627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc009d9af79 code=0x0 [ 656.364408][ T5898] em28xx 1-1:0.161: failed to create media graph [ 656.372201][ T5898] em28xx 1-1:0.161: V4L2 device video103 deregistered [ 656.387757][ T5898] em28xx 1-1:0.161: Remote control support is not available for this card. [ 656.402891][T12617] em28xx 1-1:0.161: Closing input extension [ 656.412065][T12617] em28xx 1-1:0.161: Freeing device [ 656.545776][ T29] audit: type=1400 audit(1770721270.637:744): avc: denied { ioctl } for pid=12726 comm="syz.4.1628" path="socket:[35460]" dev="sockfs" ino=35460 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 656.678153][ T5898] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 656.828115][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 656.838994][ T5898] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 656.848582][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.856888][ T5898] usb 2-1: Product: syz [ 656.861217][ T5891] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 656.869187][ T5898] usb 2-1: Manufacturer: syz [ 656.873899][ T5898] usb 2-1: SerialNumber: syz [ 656.883007][ T5898] usb 2-1: config 0 descriptor?? [ 656.892953][ T5898] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 657.009798][ T5891] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 657.025526][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.043309][ T5891] usb 5-1: config 0 descriptor?? [ 658.445876][ T5891] usb 5-1: string descriptor 0 read error: -71 [ 658.452221][ T5891] ldusb 5-1:0.0: Interrupt in endpoint not found [ 658.460725][ T5891] usb 5-1: USB disconnect, device number 44 [ 658.465810][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 658.506993][ T979] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 658.537317][ T979] usb 3-1: can't read configurations, error -71 [ 659.266496][ T5891] usb 2-1: USB disconnect, device number 47 [ 660.100489][T12763] program syz.4.1633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.588659][ T5955] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 660.845315][ T5955] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 660.855680][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 660.870210][ T5955] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 660.988325][ T5955] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 661.004806][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.023456][ T5955] usb 1-1: Product: syz [ 661.032093][ T5955] usb 1-1: Manufacturer: syz [ 661.109393][ T5891] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 661.268148][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 661.452379][ T5955] usb 1-1: SerialNumber: syz [ 661.488844][ T5955] usb 1-1: config 0 descriptor?? [ 661.584064][T12761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 661.584152][T12761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 661.585013][ T5891] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 661.585037][ T5891] usb 2-1: config 0 has no interface number 0 [ 661.585072][ T5891] usb 2-1: config 0 interface 161 has no altsetting 0 [ 661.590237][ T5955] usb 1-1: ucan: probing device on interface #0 [ 661.591363][ T5891] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 661.591390][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.591415][ T5891] usb 2-1: Product: syz [ 661.591428][ T5891] usb 2-1: Manufacturer: syz [ 661.591443][ T5891] usb 2-1: SerialNumber: syz [ 661.593822][ T5891] usb 2-1: config 0 descriptor?? [ 661.597366][ T5891] em28xx 2-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 661.597410][ T5891] em28xx 2-1:0.161: Video interface 161 found: bulk [ 661.845629][T12761] fuse: Unknown parameter 'Qy' [ 661.847006][ T5955] usb 1-1: ucan: device protocol version -1481929679 is not supported [ 661.847034][ T5955] usb 1-1: ucan: probe failed; try to update the device firmware [ 662.035456][ T5891] em28xx 2-1:0.161: unknown em28xx chip ID (0) [ 662.178875][ T5955] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 662.216972][ T979] usb 1-1: USB disconnect, device number 57 [ 662.310101][ T29] audit: type=1400 audit(1770721276.407:745): avc: denied { getopt } for pid=12792 comm="syz.4.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 662.730785][ T5955] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 662.747010][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.761961][ T5955] usb 3-1: config 0 descriptor?? [ 664.129419][ T5891] em28xx 2-1:0.161: failed to trigger write to i2c address 0xa0 (error=-5) [ 664.133840][ T5955] usb 3-1: string descriptor 0 read error: -71 [ 664.139610][ T5891] em28xx 2-1:0.161: failed to read eeprom (err=-5) [ 664.151436][ T5891] em28xx 2-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 664.211898][ T5955] ldusb 3-1:0.0: Interrupt in endpoint not found [ 664.243184][ T5955] usb 3-1: USB disconnect, device number 58 [ 664.288973][ T5891] em28xx 2-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 664.299317][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 664.308440][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 664.328293][ T5891] em28xx 2-1:0.161: analog set to bulk mode. [ 664.347613][ T5890] em28xx 2-1:0.161: Registering V4L2 extension [ 664.535544][ T5890] em28xx 2-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 664.535834][ T5955] usb 2-1: USB disconnect, device number 48 [ 664.546971][ T5890] em28xx 2-1:0.161: failed to trigger read from i2c address 0x48 (error=-19) [ 664.569676][ T5955] em28xx 2-1:0.161: Disconnecting em28xx [ 664.716248][ T5890] em28xx 2-1:0.161: Config register raw data: 0xffffffed [ 664.940031][ T5890] em28xx 2-1:0.161: AC97 chip type couldn't be determined [ 664.947428][ T5890] em28xx 2-1:0.161: No AC97 audio processor [ 664.956708][ T5890] usb 2-1: Decoder not found [ 664.964888][ T5890] em28xx 2-1:0.161: failed to create media graph [ 664.974576][ T5890] em28xx 2-1:0.161: V4L2 device video103 deregistered [ 664.990262][ T5890] em28xx 2-1:0.161: Remote control support is not available for this card. [ 665.010912][ T5955] em28xx 2-1:0.161: Closing input extension [ 665.054098][ T5955] em28xx 2-1:0.161: Freeing device [ 666.308223][ T5890] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 666.573015][ T5890] usb 1-1: not running at top speed; connect to a high speed hub [ 666.653376][ T5890] usb 1-1: config 1 has no interfaces? [ 666.732128][ T5890] usb 1-1: New USB device found, idVendor=19d2, idProduct=1162, bcdDevice=49.7a [ 666.767484][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.787608][ T5890] usb 1-1: Product: syz [ 666.897952][ T5890] usb 1-1: Manufacturer: syz [ 666.905075][ T5890] usb 1-1: SerialNumber: syz [ 666.938133][ T5934] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 667.468256][T12617] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 667.479611][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 667.618292][T12617] usb 2-1: device descriptor read/64, error -32 [ 668.021256][ T29] audit: type=1804 audit(1770721282.117:746): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1653" name="/newroot/327/file1" dev="tmpfs" ino=1751 res=1 errno=0 [ 668.060173][T12617] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 669.008514][ T5890] usb 1-1: USB disconnect, device number 58 [ 669.432926][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 669.432926][T12617] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 669.440744][T12617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.478262][T12617] usb 2-1: config 0 descriptor?? [ 669.629188][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 669.637411][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 669.647124][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 669.659465][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 669.669217][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 669.680302][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 669.690277][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 669.699962][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 669.711103][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 670.868983][T12617] usb 2-1: string descriptor 0 read error: -71 [ 670.918123][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 670.939167][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 670.964174][T12617] ldusb 2-1:0.0: Interrupt in endpoint not found [ 670.992439][ T5934] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 671.001358][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.013187][ T5934] usb 5-1: can't read configurations, error -71 [ 671.021097][T12617] usb 2-1: USB disconnect, device number 50 [ 671.021753][ T9] usb 3-1: Product: syz [ 671.053033][ T9] usb 3-1: Manufacturer: syz [ 671.062007][ T9] usb 3-1: SerialNumber: syz [ 671.166679][ T9] usb 3-1: config 0 descriptor?? [ 671.181521][ T9] usb 3-1: can't set config #0, error -71 [ 671.196521][ T9] usb 3-1: USB disconnect, device number 59 [ 671.388502][ T5934] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 671.844291][ T5934] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 671.867462][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.985198][ T5934] usb 5-1: Product: syz [ 671.990424][ T5934] usb 5-1: Manufacturer: syz [ 671.995260][ T5934] usb 5-1: SerialNumber: syz [ 672.002059][ T5934] usb 5-1: config 0 descriptor?? [ 672.012269][ T5934] usb 5-1: invalid MIDI EP [ 672.018233][ T5934] usb 5-1: snd-bcd2000: error during probing [ 672.031790][ T5934] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 674.279077][ T979] usb 5-1: USB disconnect, device number 46 [ 674.400150][T12617] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 674.538254][ T5934] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 674.560883][T12617] usb 1-1: not running at top speed; connect to a high speed hub [ 674.572583][T12617] usb 1-1: config 5 has an invalid interface number: 160 but max is 0 [ 674.580858][ T5881] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 674.591030][T12617] usb 1-1: config 5 has no interface number 0 [ 674.597364][T12617] usb 1-1: config 5 interface 160 has no altsetting 0 [ 674.607988][T12617] usb 1-1: New USB device found, idVendor=1608, idProduct=0307, bcdDevice=ac.17 [ 674.617342][T12617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.625669][T12617] usb 1-1: Product: syz [ 674.633163][T12617] usb 1-1: Manufacturer: syz [ 674.640934][T12617] usb 1-1: SerialNumber: syz [ 674.688151][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 674.700642][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 674.711215][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 674.726301][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 674.741735][ T5881] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 674.755715][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 674.767441][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.784773][ T5881] usb 2-1: config 0 descriptor?? [ 674.791740][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 674.821126][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 674.848466][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 674.863875][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 674.930560][ T5934] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 674.944770][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.956369][ T5934] usb 3-1: Product: syz [ 674.962367][ T5934] usb 3-1: Manufacturer: syz [ 675.091024][ T5934] usb 3-1: SerialNumber: syz [ 675.101388][ T5934] usb 3-1: config 0 descriptor?? [ 675.108619][T12916] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 675.118565][T12916] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 676.334700][ T5881] usb 2-1: string descriptor 0 read error: -71 [ 676.343552][ T5934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 676.350835][ T5881] ldusb 2-1:0.0: Interrupt in endpoint not found [ 676.422481][ T5881] usb 2-1: USB disconnect, device number 51 [ 677.345298][T12617] io_ti 1-1:5.160: required endpoints missing [ 677.362073][T12617] usb 1-1: USB disconnect, device number 59 [ 678.256723][T12956] zonefs (nullb0) ERROR: Not a zoned block device [ 678.284786][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 678.528688][ T5934] usb 3-1: USB disconnect, device number 60 [ 678.573478][ T29] audit: type=1400 audit(1770721292.667:747): avc: denied { map } for pid=12957 comm="syz.4.1687" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 679.379899][ T1147] Bluetooth: (null): Invalid header checksum [ 679.507843][ T3518] Bluetooth: (null): Invalid header checksum [ 679.762763][ T29] audit: type=1400 audit(1770721293.837:748): avc: denied { execute } for pid=12965 comm="syz.0.1689" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 679.984529][ T1147] Bluetooth: (null): Invalid header checksum [ 680.075526][ T1147] Bluetooth: (null): Invalid header checksum [ 680.083540][ T1147] Bluetooth: (null): Invalid header checksum [ 680.094593][ T1147] Bluetooth: (null): Invalid header checksum [ 680.181876][T12958] mkiss: ax0: crc mode is auto. [ 680.378246][ T5934] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 680.426526][ T5881] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 680.548235][T12861] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 680.555864][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 680.563147][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 680.571775][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 680.583026][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 680.588180][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 680.597837][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 680.610079][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 680.620237][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 680.630611][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 680.641985][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 680.653587][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 680.662046][ T5934] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 680.671295][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 680.682649][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 680.692387][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.700521][ T5934] usb 3-1: Product: syz [ 680.704763][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 680.715885][ T5934] usb 3-1: Manufacturer: syz [ 680.720602][ T5934] usb 3-1: SerialNumber: syz [ 680.725498][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 680.736388][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 680.746157][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 680.754675][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 680.765946][ T5934] usb 3-1: config 0 descriptor?? [ 680.771126][T12861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 680.779291][T12970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 680.786841][T12970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 680.794516][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 680.807760][ T5934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.814797][T12861] usb 1-1: not running at top speed; connect to a high speed hub [ 680.825032][T12861] usb 1-1: config 136 has an invalid interface number: 30 but max is 0 [ 680.834373][T12861] usb 1-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 680.845951][T12861] usb 1-1: config 136 has no interface number 0 [ 680.855087][ T5881] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 680.866379][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.878672][ T5881] usb 2-1: Product: syz [ 680.884176][T12861] usb 1-1: config 136 interface 30 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 680.894233][ T5881] usb 2-1: Manufacturer: syz [ 680.918245][ T5881] usb 2-1: SerialNumber: syz [ 680.924345][T12861] usb 1-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.940510][ T5881] usb 2-1: config 0 descriptor?? [ 680.946296][T12972] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 680.947654][T12861] usb 1-1: New USB device found, idVendor=0499, idProduct=1a0e, bcdDevice=f0.f4 [ 680.964471][T12861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.972631][T12861] usb 1-1: Product: syz [ 680.976837][T12861] usb 1-1: Manufacturer: syz [ 680.981508][T12861] usb 1-1: SerialNumber: syz [ 681.009207][T12972] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 681.045212][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.861388][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.870872][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.649669][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.659283][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.472341][ T5898] usb 3-1: USB disconnect, device number 61 [ 683.483050][T12861] usb 1-1: USB disconnect, device number 60 [ 683.524602][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 683.540013][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 684.168953][ T9] usb 5-1: can't read configurations, error -71 [ 684.515563][ T5934] usb 2-1: USB disconnect, device number 52 [ 684.569259][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:136.30/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 685.420807][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.428954][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.013120][T13030] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 687.724899][ T29] audit: type=1400 audit(1770721301.317:749): avc: denied { ioctl } for pid=13025 comm="syz.1.1702" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 687.796180][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 687.810220][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 687.819825][ T29] audit: type=1400 audit(1770721301.317:750): avc: denied { remount } for pid=13025 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 687.955044][T13034] ceph: No mds server is up or the cluster is laggy [ 688.098290][ T5898] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 688.280744][T13052] lo speed is unknown, defaulting to 1000 [ 688.340622][ T5898] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 688.350721][ T5898] usb 3-1: config 0 has no interface number 0 [ 688.358773][ T5898] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 688.373657][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.410127][ T5898] usb 3-1: config 0 descriptor?? [ 688.440511][ T5898] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 688.671869][T13056] loop8: detected capacity change from 0 to 7 [ 688.702044][ T5824] Dev loop8: unable to read RDB block 7 [ 688.707853][ T5824] loop8: unable to read partition table [ 688.716839][ T5824] loop8: partition table beyond EOD, truncated [ 688.734390][T13056] Dev loop8: unable to read RDB block 7 [ 688.741260][T13056] loop8: unable to read partition table [ 688.748199][ T5881] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 688.748266][T13056] loop8: partition table beyond EOD, truncated [ 688.778397][ T5934] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 688.803654][T13056] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 688.843322][T13041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.886525][T13041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.941801][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 688.946981][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 688.970913][ T9] usb 3-1: USB disconnect, device number 62 [ 689.010673][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 689.023536][ T5881] usb 5-1: config index 0 descriptor too short (expected 65535, got 56) [ 689.092900][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 689.104002][ T5881] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 689.115683][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 689.125562][ T5881] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 689.164965][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 689.188333][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 689.198718][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 689.208582][ T5881] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 689.219649][ T5881] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 689.227650][ T5881] usb 5-1: Manufacturer: syz [ 689.228295][ T5898] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 689.237973][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 689.333311][ T5881] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 689.342170][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 689.352184][ T5881] usb 5-1: no configuration chosen from 1 choice [ 689.361205][ T5934] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 689.370925][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.380253][ T5934] usb 1-1: Product: syz [ 689.384455][ T5934] usb 1-1: Manufacturer: syz [ 689.389110][ T5934] usb 1-1: SerialNumber: syz [ 689.390780][ T5898] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 689.396265][ T5934] usb 1-1: config 0 descriptor?? [ 689.408692][T13059] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 689.523999][T13059] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 689.932422][ T5934] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 689.948134][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.977522][ T5898] usb 2-1: config 0 descriptor?? [ 690.208242][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 691.359062][ T5898] usb 2-1: string descriptor 0 read error: -71 [ 691.365327][ T5898] ldusb 2-1:0.0: Interrupt in endpoint not found [ 691.427888][ T5898] usb 2-1: USB disconnect, device number 53 [ 691.839484][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.849680][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.056519][T13079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.155184][T13079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.241068][ T5898] usb 5-1: USB disconnect, device number 49 [ 693.163565][ T5934] usb 1-1: USB disconnect, device number 61 [ 693.348542][T13101] xt_ecn: cannot match TCP bits for non-tcp packets [ 693.464199][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 694.109337][ T5934] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 694.117860][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 694.134339][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 694.327811][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 694.342997][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34039, setting to 1024 [ 694.355491][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 694.369307][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 694.459388][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.469445][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.570572][ T9] usb 3-1: Product: syz [ 694.575514][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.585690][ T9] usb 3-1: Manufacturer: syz [ 694.593461][ T9] usb 3-1: SerialNumber: syz [ 694.598365][ T5934] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 694.608404][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.617026][ T9] usb 3-1: config 0 descriptor?? [ 694.624620][T13096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 694.637806][T13118] netem: incorrect gi model size [ 694.643096][T13118] netem: change failed [ 694.655995][ T5934] usb 1-1: config 0 descriptor?? [ 695.364959][ T5934] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 695.507935][ T5934] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 695.518518][ T9] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 695.524393][ T5934] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 695.532236][ T9] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 695.539159][ T5934] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 695.547521][ T9] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 695.556392][ T5934] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 695.564971][ T9] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 695.571802][ T5934] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 695.579602][ T9] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 695.588465][ T5934] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 695.598239][ T9] usb 3-1: USB disconnect, device number 63 [ 695.619551][ T5934] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 695.688897][ T9] mcba_usb 3-1:0.0 can0: device disconnected [ 695.744996][ T5934] cp2112 0003:10C4:EA90.0005: error requesting version [ 695.764496][ T5934] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 695.828566][ T5934] usb 1-1: USB disconnect, device number 62 [ 696.623818][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1726'. [ 696.658744][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 696.667629][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 696.728131][T12617] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 696.770243][T13140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.848222][T13141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.918152][T12617] usb 2-1: Using ep0 maxpacket: 32 [ 696.931907][T12617] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 696.948477][T12617] usb 2-1: config 0 has no interface number 0 [ 696.958862][T12617] usb 2-1: config 0 interface 161 has no altsetting 0 [ 696.968783][T12617] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 696.977999][T12617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.986404][T12617] usb 2-1: Product: syz [ 696.991620][T12617] usb 2-1: Manufacturer: syz [ 696.996333][T12617] usb 2-1: SerialNumber: syz [ 697.076933][T12617] usb 2-1: config 0 descriptor?? [ 697.084628][T12617] em28xx 2-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 697.094852][T12617] em28xx 2-1:0.161: Video interface 161 found: bulk [ 697.691662][T12617] em28xx 2-1:0.161: unknown em28xx chip ID (0) [ 699.074033][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 699.101299][T12617] em28xx 2-1:0.161: failed to read eeprom (err=-110) [ 699.108895][T12617] em28xx 2-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 699.214571][T12617] em28xx 2-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 699.266866][T12617] em28xx 2-1:0.161: analog set to bulk mode. [ 699.273699][ T5898] em28xx 2-1:0.161: Registering V4L2 extension [ 699.338259][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 699.435586][ T9] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 699.458355][ T9] usb 1-1: config 0 has no interface number 0 [ 699.480253][ T9] usb 1-1: config 0 interface 161 has no altsetting 0 [ 699.493081][T13172] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 699.524044][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 699.539021][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.552874][ T5898] em28xx 2-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 699.568281][ T5898] em28xx 2-1:0.161: failed to trigger read from i2c address 0x48 (error=-5) [ 699.571384][ T9] usb 1-1: Product: syz [ 699.581586][ T5934] usb 2-1: USB disconnect, device number 54 [ 699.595385][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1737'. [ 699.607557][ T5898] em28xx 2-1:0.161: failed to trigger read from i2c address 0x42 (error=-19) [ 699.608685][ T5934] em28xx 2-1:0.161: Disconnecting em28xx [ 699.642325][ T9] usb 1-1: Manufacturer: syz [ 699.728521][ T9] usb 1-1: SerialNumber: syz [ 699.752795][ T9] usb 1-1: config 0 descriptor?? [ 699.760935][ T9] em28xx 1-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 699.772261][ T9] em28xx 1-1:0.161: Video interface 161 found: bulk [ 699.925427][T13172] bond1: (slave bridge1): making interface the new active one [ 699.949957][T13172] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 699.997207][ T5898] em28xx 2-1:0.161: Config register raw data: 0xffffffed [ 700.007541][ T5898] em28xx 2-1:0.161: AC97 chip type couldn't be determined [ 700.022346][ T5898] em28xx 2-1:0.161: No AC97 audio processor [ 700.034202][ T5898] usb 2-1: Decoder not found [ 700.040427][ T5898] em28xx 2-1:0.161: failed to create media graph [ 700.048771][ T5898] em28xx 2-1:0.161: V4L2 device video103 deregistered [ 700.061186][ T5898] em28xx 2-1:0.161: Remote control support is not available for this card. [ 700.074163][ T5934] em28xx 2-1:0.161: Closing input extension [ 700.103496][ T5934] em28xx 2-1:0.161: Freeing device [ 700.116699][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 700.179993][ T9] em28xx 1-1:0.161: unknown em28xx chip ID (0) [ 700.700797][ T979] IPVS: starting estimator thread 0... [ 700.789482][T13202] IPVS: using max 48 ests per chain, 115200 per kthread [ 700.808144][ T5898] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 700.848124][ T9] em28xx 1-1:0.161: failed to read eeprom (err=-110) [ 700.859416][ T9] em28xx 1-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 701.177185][ T9] em28xx 1-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 701.359699][ T9] em28xx 1-1:0.161: analog set to bulk mode. [ 701.368918][ T5934] em28xx 1-1:0.161: Registering V4L2 extension [ 701.749062][ T5881] usb 1-1: USB disconnect, device number 63 [ 701.766554][ T5881] em28xx 1-1:0.161: Disconnecting em28xx [ 702.335709][ T5934] em28xx 1-1:0.161: Config register raw data: 0xffffffed [ 702.352289][ T5934] em28xx 1-1:0.161: AC97 chip type couldn't be determined [ 702.367931][ T5934] em28xx 1-1:0.161: No AC97 audio processor [ 702.393561][ T5934] usb 1-1: Decoder not found [ 702.408167][ T5934] em28xx 1-1:0.161: failed to create media graph [ 702.425036][ T5934] em28xx 1-1:0.161: V4L2 device video103 deregistered [ 702.476052][ T5934] em28xx 1-1:0.161: Remote control support is not available for this card. [ 702.498243][ T5881] em28xx 1-1:0.161: Closing input extension [ 702.514150][ T5881] em28xx 1-1:0.161: Freeing device [ 703.684492][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 703.959946][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 704.012051][ T5898] usb 3-1: can't read configurations, error -71 [ 704.063674][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 705.297265][T13247] lo speed is unknown, defaulting to 1000 [ 705.457994][T13262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1764'. [ 707.699206][T13302] overlayfs: overlapping lowerdir path [ 708.408150][ T29] audit: type=1400 audit(1770721322.487:751): avc: denied { read } for pid=13305 comm="syz.1.1776" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 708.566393][T13310] syzkaller0: entered promiscuous mode [ 708.573865][T13310] syzkaller0: entered allmulticast mode [ 709.489617][ T979] libceph: connect (1)[c::]:6789 error -101 [ 709.498462][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 709.685516][T13324] SELinux: Context system_u:object_r:audisp_var_run_t:s0 is not valid (left unmapped). [ 709.699950][ T29] audit: type=1400 audit(1770721323.797:752): avc: denied { relabelto } for pid=13323 comm="syz.1.1780" name="memfd:" dev="tmpfs" ino=1351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:audisp_var_run_t:s0" [ 709.745646][T13316] ceph: No mds server is up or the cluster is laggy [ 709.758467][ T979] libceph: connect (1)[c::]:6789 error -101 [ 709.780707][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 709.793381][T13324] lo speed is unknown, defaulting to 1000 [ 709.863526][ T29] audit: type=1400 audit(1770721323.847:753): avc: denied { associate } for pid=13323 comm="syz.1.1780" name="memfd:" dev="tmpfs" ino=1351 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:audisp_var_run_t:s0" [ 710.004491][T13328] xt_hashlimit: size too large, truncated to 1048576 [ 710.289906][ T979] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 710.468264][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 710.504061][ T979] usb 3-1: config 5 has an invalid interface number: 161 but max is 0 [ 710.514866][ T979] usb 3-1: config 5 has no interface number 0 [ 710.523696][ T979] usb 3-1: config 5 interface 161 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 710.562087][ T979] usb 3-1: config 5 interface 161 has no altsetting 0 [ 710.584018][ T979] usb 3-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice=1f.9f [ 710.601728][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.953830][ T979] usb 3-1: Product: syz [ 710.966131][ T979] usb 3-1: Manufacturer: syz [ 710.978112][ T979] usb 3-1: SerialNumber: syz [ 711.198212][T12617] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 711.671554][ T979] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 711.871192][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 711.880271][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 713.081165][T13362] ceph: No mds server is up or the cluster is laggy [ 713.089025][ T24] libceph: connect (1)[c::]:6789 error -101 [ 713.095153][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 713.215630][ T979] snd-usb-audio 3-1:5.161: probe with driver snd-usb-audio failed with error -2 [ 713.225246][T12617] usb 5-1: Using ep0 maxpacket: 8 [ 713.318867][T12617] usb 5-1: unable to get BOS descriptor or descriptor too short [ 713.332403][T12617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 713.344783][ T979] usb 3-1: USB disconnect, device number 66 [ 713.358163][T12617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 713.367839][T12617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 713.380033][T12617] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 713.474382][T12617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 713.490467][T12617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 713.554575][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.161/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.570174][T12617] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 713.591825][T13369] netlink: 584 bytes leftover after parsing attributes in process `syz.3.1793'. [ 713.718246][T12617] usb 5-1: string descriptor 0 read error: -71 [ 713.750824][T12617] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 713.809208][T13375] FAULT_INJECTION: forcing a failure. [ 713.809208][T13375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.826956][T12617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.932809][T13375] CPU: 1 UID: 0 PID: 13375 Comm: syz.4.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.932835][T13375] Tainted: [L]=SOFTLOCKUP [ 713.932838][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 713.932845][T13375] Call Trace: [ 713.932849][T13375] [ 713.932853][T13375] dump_stack_lvl+0x100/0x190 [ 713.932873][T13375] should_fail_ex.cold+0x5/0xa [ 713.932886][T13375] _copy_to_user+0x32/0xd0 [ 713.932905][T13375] simple_read_from_buffer+0xcb/0x170 [ 713.932919][T13375] proc_fail_nth_read+0x1af/0x230 [ 713.932933][T13375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.932948][T13375] ? rw_verify_area+0xce/0x6d0 [ 713.932964][T13375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 713.932978][T13375] vfs_read+0x1e4/0xb30 [ 713.932992][T13375] ? __pfx_vfs_read+0x10/0x10 [ 713.933002][T13375] ? find_held_lock+0x2b/0x80 [ 713.933018][T13375] ? __fget_files+0x215/0x3d0 [ 713.933033][T13375] ? __fget_files+0x21f/0x3d0 [ 713.933049][T13375] ksys_read+0x12a/0x250 [ 713.933060][T13375] ? __pfx_ksys_read+0x10/0x10 [ 713.933071][T13375] ? fput+0x79/0x100 [ 713.933087][T13375] do_syscall_64+0xc9/0xf80 [ 713.933102][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.933113][T13375] RIP: 0033:0x7fbd1015b84e [ 713.933122][T13375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 713.933133][T13375] RSP: 002b:00007fbd10ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 713.933143][T13375] RAX: ffffffffffffffda RBX: 00007fbd10ff76c0 RCX: 00007fbd1015b84e [ 713.933150][T13375] RDX: 000000000000000f RSI: 00007fbd10ff70a0 RDI: 0000000000000005 [ 713.933156][T13375] RBP: 00007fbd10ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 713.933162][T13375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.933168][T13375] R13: 00007fbd10416038 R14: 00007fbd10415fa0 R15: 00007ffd68faaca8 [ 713.933181][T13375] [ 713.934409][T12617] usb 5-1: config 0 descriptor?? [ 714.739461][T12617] usb 5-1: can't set config #0, error -71 [ 714.773658][T12617] usb 5-1: USB disconnect, device number 50 [ 714.812002][T13368] Process accounting resumed [ 714.898100][ T29] audit: type=1400 audit(1770721328.987:754): avc: denied { ioctl } for pid=13384 comm="syz.1.1799" path="socket:[39082]" dev="sockfs" ino=39082 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 714.985815][ T29] audit: type=1400 audit(1770721329.077:755): avc: denied { firmware_load } for pid=13388 comm="syz.3.1800" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 715.205088][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1801'. [ 715.252623][T13396] [U] [ 715.255557][T13396] [U] [ 715.258239][T13396] [U] [ 715.260910][T13396] [U] [ 715.263577][T13396] [U] [ 715.266247][T13396] [U] [ 715.268920][T13396] [U] [ 715.271585][T13396] [U] [ 715.274640][T13396] [U] [ 715.277318][T13396] [U] [ 715.279982][T13396] [U] [ 716.214825][T13399] [U] [ 716.696080][T12617] libceph: connect (1)[c::]:6789 error -101 [ 716.718274][T12617] libceph: mon0 (1)[c::]:6789 connect error [ 717.007765][T13405] ceph: No mds server is up or the cluster is laggy [ 717.015853][T12617] libceph: connect (1)[c::]:6789 error -101 [ 717.022186][T12617] libceph: mon0 (1)[c::]:6789 connect error [ 719.460038][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 720.057723][T13426] openvswitch: netlink: Flow actions attr not present in new flow. [ 720.818544][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 720.827406][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 721.485600][T12617] libceph: connect (1)[c::]:6789 error -101 [ 721.503616][T12617] libceph: mon0 (1)[c::]:6789 connect error [ 722.160397][T13475] ceph: No mds server is up or the cluster is laggy [ 722.167423][T12617] libceph: connect (1)[c::]:6789 error -101 [ 722.173604][T12617] libceph: mon0 (1)[c::]:6789 connect error [ 722.310678][T13485] binfmt_misc: register: failed to install interpreter file ./file0 [ 724.668191][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 724.676128][T12617] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 724.828177][T12617] usb 3-1: Using ep0 maxpacket: 8 [ 724.840225][T12617] usb 3-1: unable to get BOS descriptor or descriptor too short [ 724.907619][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 724.923184][ T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 724.934850][T12617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 725.029150][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 725.203081][T12617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 725.215008][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.231349][T12617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 725.246941][ T24] usb 5-1: Product: syz [ 725.264937][ T24] usb 5-1: Manufacturer: syz [ 725.278006][ T24] usb 5-1: SerialNumber: syz [ 725.282910][T12617] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 725.297968][T12617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 725.312253][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 725.320253][T12617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 725.331589][ T24] imon 5-1:155.0: unable to initialize intf0, err -19 [ 725.338645][ T24] imon:imon_probe: failed to initialize context! [ 725.345114][T12617] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 725.355399][ T24] imon 5-1:155.0: unable to register, err -19 [ 725.364200][T12617] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 725.375427][T12617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.383711][T12617] usb 3-1: Product: syz [ 725.388210][T12617] usb 3-1: Manufacturer: syz [ 725.392882][T12617] usb 3-1: SerialNumber: syz [ 725.400254][T12617] usb 3-1: config 0 descriptor?? [ 725.406188][T13517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 725.413992][T13517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 725.467076][T12617] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.519309][ T24] usb 5-1: USB disconnect, device number 51 [ 726.289153][T13531] SELinux: policydb string length 262152 does not match expected length 8 [ 726.297830][T13531] SELinux: failed to load policy [ 727.130106][ T29] audit: type=1400 audit(1770721341.227:756): avc: denied { read } for pid=13548 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.169656][ T29] audit: type=1400 audit(1770721341.247:757): avc: denied { shutdown } for pid=13548 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.552041][T12617] usb 3-1: USB disconnect, device number 67 [ 733.834146][ T24] libceph: connect (1)[c::]:6789 error -101 [ 733.863475][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 733.993541][T13626] ceph: No mds server is up or the cluster is laggy [ 734.145000][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 734.485235][T13634] SELinux: policydb string length 262152 does not match expected length 8 [ 734.494145][T13634] SELinux: failed to load policy [ 736.771218][T13649] [U] [ 736.773935][T13649] [U] [ 736.776602][T13649] [U] [ 736.779263][T13649] [U] [ 736.781926][T13649] [U] [ 736.784605][T13649] [U] [ 736.787296][T13649] [U] [ 736.789974][T13649] [U] [ 736.792850][T13649] [U] [ 736.795530][T13649] [U] [ 736.798197][T13649] [U] [ 736.916354][T13651] [U] [ 737.657047][T13655] [U] [ 737.659842][T13655] [U] [ 737.662612][T13655] [U] [ 737.666088][T13655] [U] [ 737.668842][T13655] [U] [ 737.671524][T13655] [U] [ 737.674203][T13655] [U] [ 737.676892][T13655] [U] [ 737.679860][T13655] [U] [ 737.682539][T13655] [U] [ 737.685202][T13655] [U] [ 737.844737][T13658] [U] [ 737.865632][ T5934] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 738.050019][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 738.491141][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 738.522431][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 738.552073][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 738.678153][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 738.690626][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 738.700612][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 738.710875][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 738.765078][ T979] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 739.120415][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 739.134692][ T5934] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 739.151210][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.167747][ T5934] usb 3-1: Product: syz [ 739.176140][ T5934] usb 3-1: Manufacturer: syz [ 739.185514][ T5934] usb 3-1: SerialNumber: syz [ 739.200288][ T5934] usb 3-1: config 0 descriptor?? [ 739.211974][T13657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 739.220027][T13657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 739.240081][ T5934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.288152][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 739.331580][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 739.355368][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 739.377889][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 739.459782][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 739.601506][ T979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 739.612191][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 739.622703][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 739.637653][ T979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 739.652788][ T979] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 739.666064][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.868442][T13677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.878978][T13677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.113089][T13670] "syz.1.1873" (13670) uses obsolete ecb(arc4) skcipher [ 740.134865][ T979] usb 5-1: Product: syz [ 740.141178][ T979] usb 5-1: Manufacturer: syz [ 740.145918][ T979] usb 5-1: SerialNumber: syz [ 740.154096][ T979] usb 5-1: config 0 descriptor?? [ 740.176989][T13662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 740.198724][T13662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 740.217188][ T979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 740.242504][T13681] syzkaller0: entered promiscuous mode [ 740.248995][T13681] syzkaller0: entered allmulticast mode [ 741.088746][T13693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.100143][T13693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.482397][ T5898] usb 3-1: USB disconnect, device number 68 [ 743.120425][ T979] usb 5-1: USB disconnect, device number 52 [ 745.918845][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 746.137510][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 746.418097][ T5881] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 746.418373][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 746.443397][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 746.560386][T13733] ceph: No mds server is up or the cluster is laggy [ 746.578100][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 746.591662][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 746.606360][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 746.647803][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 746.668141][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 746.688130][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 746.723876][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 746.743303][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 746.795390][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 746.808248][ T5898] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 746.821424][ T5881] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 746.830804][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.840215][ T5881] usb 2-1: Product: syz [ 746.844515][ T5881] usb 2-1: Manufacturer: syz [ 746.849273][ T5881] usb 2-1: SerialNumber: syz [ 746.856863][ T5881] usb 2-1: config 0 descriptor?? [ 746.863000][T13738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 746.878656][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.885203][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.907518][T13738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 747.000561][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.021127][T13746] [U] [ 747.023839][T13746] [U] [ 747.026510][T13746] [U] [ 747.029210][T13746] [U] [ 747.031890][T13746] [U] [ 747.034561][T13746] [U] [ 747.037225][T13746] [U] [ 747.039910][T13746] [U] [ 747.449130][T13746] [U] [ 747.451905][T13746] [U] [ 747.454593][T13746] [U] [ 747.923787][T13750] [U] [ 748.045543][ T5898] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 748.053976][ T5898] usb 3-1: config 0 has no interface number 0 [ 748.060217][ T5898] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 748.069337][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.128104][ T5898] usb 3-1: config 0 descriptor?? [ 748.146536][ T5898] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 748.282055][T13757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.345078][T13757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.571137][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.587121][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.610541][ T5881] usb 3-1: USB disconnect, device number 69 [ 749.488633][ T5881] usb 2-1: USB disconnect, device number 55 [ 750.621917][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 750.643575][T13784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1898'. [ 750.652790][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1898'. [ 752.566749][T13808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.770432][T13808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.819935][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 752.829009][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 752.962996][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'. [ 753.211437][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1909'. [ 753.221801][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 753.338142][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 753.518248][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 753.527557][ T9] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 753.564867][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'. [ 753.888681][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 753.901010][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.911249][ T9] usb 3-1: Product: syz [ 753.916547][ T9] usb 3-1: Manufacturer: syz [ 753.923722][ T9] usb 3-1: SerialNumber: syz [ 753.938442][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 753.950311][ T9] imon 3-1:155.0: unable to initialize intf0, err -19 [ 753.958372][ T9] imon:imon_probe: failed to initialize context! [ 754.062181][ T9] imon 3-1:155.0: unable to register, err -19 [ 754.474083][ T9] usb 3-1: USB disconnect, device number 70 [ 756.116192][T13857] lo speed is unknown, defaulting to 1000 [ 756.711250][T13866] [U] [ 756.713960][T13866] [U] [ 756.716623][T13866] [U] [ 756.719282][T13866] [U] [ 756.721957][T13866] [U] [ 756.724635][T13866] [U] [ 756.727321][T13866] [U] [ 756.730025][T13866] [U] [ 756.733348][T13866] [U] [ 756.736045][T13866] [U] [ 756.738843][T13866] [U] [ 756.859062][T13868] [U] [ 757.071235][ T29] audit: type=1400 audit(1770721371.117:758): avc: denied { read } for pid=13862 comm="syz.4.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 757.675824][T13878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1921'. [ 758.010032][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 758.019274][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 759.317775][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 759.327017][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 759.878216][ T5934] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 760.408081][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 760.415088][ T5934] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 760.427388][ T5934] usb 1-1: config 0 has no interface number 0 [ 760.434958][ T5934] usb 1-1: config 0 interface 161 has no altsetting 0 [ 760.451910][ T5934] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 760.465357][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.478426][ T5934] usb 1-1: Product: syz [ 760.485489][ T5934] usb 1-1: Manufacturer: syz [ 760.493482][ T5934] usb 1-1: SerialNumber: syz [ 760.504145][ T5934] usb 1-1: config 0 descriptor?? [ 760.517168][ T5934] em28xx 1-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 760.533425][ T5934] em28xx 1-1:0.161: Video interface 161 found: bulk [ 761.604519][ T5934] em28xx 1-1:0.161: unknown em28xx chip ID (0) [ 761.738456][ T979] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 761.939599][ T979] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 761.947981][ T979] usb 5-1: config 0 has no interface number 0 [ 762.671757][ T5934] em28xx 1-1:0.161: failed to read eeprom (err=-110) [ 762.684013][ T979] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 762.697990][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.698225][ T5934] em28xx 1-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 762.729694][ T979] usb 5-1: config 0 descriptor?? [ 762.736607][ T979] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 762.928236][ T5934] em28xx 1-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 762.936236][ T5934] em28xx 1-1:0.161: analog set to bulk mode. [ 762.944709][ T5881] em28xx 1-1:0.161: Registering V4L2 extension [ 763.146306][T13918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.156885][ T5881] em28xx 1-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 763.157184][ T979] usb 1-1: USB disconnect, device number 64 [ 763.172801][T13918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.185584][ T979] em28xx 1-1:0.161: Disconnecting em28xx [ 763.312507][ T5898] usb 5-1: USB disconnect, device number 53 [ 763.384906][ T5881] em28xx 1-1:0.161: Config register raw data: 0xffffffed [ 763.392268][ T5881] em28xx 1-1:0.161: AC97 chip type couldn't be determined [ 763.402719][ T5881] em28xx 1-1:0.161: No AC97 audio processor [ 763.415831][ T5881] usb 1-1: Decoder not found [ 763.430186][ T5881] em28xx 1-1:0.161: failed to create media graph [ 763.445473][ T5881] em28xx 1-1:0.161: V4L2 device video103 deregistered [ 763.479141][ T5881] em28xx 1-1:0.161: Remote control support is not available for this card. [ 763.501990][ T979] em28xx 1-1:0.161: Closing input extension [ 763.527538][ T979] em28xx 1-1:0.161: Freeing device [ 764.046694][T13956] [U] [ 764.049427][T13956] [U] [ 764.052109][T13956] [U] [ 764.054786][T13956] [U] [ 764.057445][T13956] [U] [ 764.060110][T13956] [U] [ 764.062787][T13956] [U] [ 764.065467][T13956] [U] [ 764.068442][T13956] [U] [ 764.071138][T13956] [U] [ 764.073801][T13956] [U] [ 764.201650][T13961] [U] [ 764.442644][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 764.924286][T13962] lo speed is unknown, defaulting to 1000 [ 766.642830][T13987] fuse: Unknown parameter '' [ 767.158445][ T979] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 767.328212][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 767.348650][ T979] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 767.370316][ T979] usb 5-1: config 0 has no interface number 0 [ 767.388128][ T979] usb 5-1: config 0 interface 161 has no altsetting 0 [ 767.413383][ T979] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 767.436571][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.463863][ T979] usb 5-1: Product: syz [ 767.476087][ T979] usb 5-1: Manufacturer: syz [ 767.489658][ T979] usb 5-1: SerialNumber: syz [ 767.515172][ T979] usb 5-1: config 0 descriptor?? [ 767.541924][ T979] em28xx 5-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 767.567558][ T979] em28xx 5-1:0.161: Video interface 161 found: bulk [ 767.925260][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 768.068329][ T5898] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 768.087592][ T979] em28xx 5-1:0.161: unknown em28xx chip ID (0) [ 768.260053][ T5898] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 768.268554][ T5898] usb 1-1: config 0 has no interface number 0 [ 768.274866][ T5898] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 768.290773][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.330826][ T5898] usb 1-1: config 0 descriptor?? [ 768.341793][ T5898] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 769.373206][T14007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.382331][T14007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.393465][ T5881] usb 1-1: USB disconnect, device number 65 [ 770.584467][ T979] em28xx 5-1:0.161: failed to trigger write to i2c address 0xa0 (error=-5) [ 770.638144][ T979] em28xx 5-1:0.161: failed to read eeprom (err=-5) [ 770.644717][ T979] em28xx 5-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 770.847420][ T979] em28xx 5-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 770.855933][ T979] em28xx 5-1:0.161: analog set to bulk mode. [ 770.862869][ T5898] em28xx 5-1:0.161: Registering V4L2 extension [ 770.885987][ T979] usb 5-1: USB disconnect, device number 54 [ 770.899442][ T979] em28xx 5-1:0.161: Disconnecting em28xx [ 771.340124][ T24] libceph: connect (1)[c::]:6789 error -101 [ 771.355754][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 771.363644][T14036] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 771.385655][T14036] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 771.473287][T14036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1965'. [ 771.509547][ T5898] em28xx 5-1:0.161: Config register raw data: 0xffffffed [ 771.516801][ T5898] em28xx 5-1:0.161: AC97 chip type couldn't be determined [ 771.525491][T14036] batadv0: entered promiscuous mode [ 771.528255][ T5898] em28xx 5-1:0.161: No AC97 audio processor [ 771.540071][T14036] batadv0: entered allmulticast mode [ 771.543143][ T5898] usb 5-1: Decoder not found [ 771.566709][T14031] ceph: No mds server is up or the cluster is laggy [ 771.579557][T14036] bond0: (slave batadv0): Releasing backup interface [ 771.584447][ T5898] em28xx 5-1:0.161: failed to create media graph [ 771.685263][ T5898] em28xx 5-1:0.161: V4L2 device video103 deregistered [ 771.721035][ T5898] em28xx 5-1:0.161: Remote control support is not available for this card. [ 771.735444][T14036] bridge0: port 3(batadv0) entered blocking state [ 771.746412][ T979] em28xx 5-1:0.161: Closing input extension [ 771.763193][ T979] em28xx 5-1:0.161: Freeing device [ 771.778315][T14036] bridge0: port 3(batadv0) entered disabled state [ 771.857020][T14038] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 772.358245][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 772.367770][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 772.669983][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 772.918201][ T979] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 773.085662][ T979] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 773.097633][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.299159][ T979] usb 5-1: config 0 descriptor?? [ 775.878485][ T979] usb 5-1: string descriptor 0 read error: -71 [ 775.884745][ T979] ldusb 5-1:0.0: Interrupt in endpoint not found [ 775.947747][ T979] usb 5-1: USB disconnect, device number 55 [ 776.040945][T14079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1975'. [ 776.498687][ T979] libceph: connect (1)[c::]:6789 error -101 [ 776.505716][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 776.808157][ T5881] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 776.851412][ T29] audit: type=1400 audit(1770721390.947:759): avc: denied { name_bind } for pid=14091 comm="syz.3.1979" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 777.034692][ T5881] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 777.047299][ T5881] usb 2-1: config 0 has no interface number 0 [ 777.047330][T14094] ceph: No mds server is up or the cluster is laggy [ 777.139742][ T979] libceph: connect (1)[c::]:6789 error -101 [ 777.148297][ T5881] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 777.168076][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.197074][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 777.197619][ T5881] usb 2-1: config 0 descriptor?? [ 777.298690][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 777.347502][ T5881] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 777.413628][T14106] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 778.433270][T14116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.748707][T14117] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 778.829042][T14116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.903929][ T24] usb 2-1: USB disconnect, device number 56 [ 779.594907][T14128] loop5: detected capacity change from 0 to 7 [ 779.606613][ C1] blk_print_req_error: 11 callbacks suppressed [ 779.606631][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.622713][ C1] buffer_io_error: 11 callbacks suppressed [ 779.622725][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.646882][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.656511][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.664535][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.674179][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.694286][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.704040][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.724971][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.734591][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.751473][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.761113][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.771369][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.780958][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.789245][T14128] ldm_validate_partition_table(): Disk read failed. [ 779.798064][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.807712][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.815846][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.825446][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.835986][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.845607][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 779.854678][T14128] Dev loop5: unable to read RDB block 0 [ 779.879425][T14128] loop5: unable to read partition table [ 779.886153][T14128] loop5: partition table beyond EOD, truncated [ 779.894013][T14128] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?%`ր{֐ȵ4FLQk݊5) failed (rc=-5) [ 780.348101][ T5898] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 780.971509][ T979] libceph: connect (1)[c::]:6789 error -101 [ 780.979523][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 781.823161][T14152] ceph: No mds server is up or the cluster is laggy [ 783.176536][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 783.192604][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 783.200370][ T5898] usb 1-1: can't read configurations, error -71 [ 783.910123][T14181] binfmt_misc: register: failed to install interpreter file ./file0 [ 783.957955][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 784.258147][ T5898] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 784.390009][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2001'. [ 784.399612][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2001'. [ 784.465922][ T5898] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 784.808126][ T5898] usb 1-1: config 0 has no interface number 0 [ 784.814313][ T5898] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 784.824145][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.838157][ T5898] usb 1-1: config 0 descriptor?? [ 784.851300][ T5898] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 784.932775][ T29] audit: type=1400 audit(1770721399.027:760): avc: denied { connect } for pid=14197 comm="syz.4.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 785.282425][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.308374][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.012136][T14212] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 786.032003][ T5881] usb 1-1: USB disconnect, device number 67 [ 786.228501][T14219] 9p: Bad value for 'rfdno' [ 786.254640][ T29] audit: type=1326 audit(1770721400.327:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.304036][ T29] audit: type=1326 audit(1770721400.327:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.329138][ T29] audit: type=1326 audit(1770721400.327:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.353009][ T29] audit: type=1326 audit(1770721400.387:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.379983][ T29] audit: type=1326 audit(1770721400.387:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.404387][ T29] audit: type=1326 audit(1770721400.447:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.428473][ T29] audit: type=1326 audit(1770721400.447:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.453778][ T29] audit: type=1326 audit(1770721400.447:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fbd1019af79 code=0x7ffc0000 [ 786.976518][T14237] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 787.031629][ T29] audit: type=1326 audit(1770721400.647:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd10194d97 code=0x7ffc0000 [ 788.009796][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 788.319186][ T5898] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 788.343075][ T5898] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 790.550910][T14268] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 790.715393][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 790.715412][ T29] audit: type=1326 audit(1770721404.027:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1013c399 code=0x7ffc0000 [ 790.793666][T14277] binfmt_misc: register: failed to install interpreter file ./file0 [ 790.867453][T14249] hid-generic 0000:0000:0000.0006: pid 14249 passed too short report [ 790.876310][ T29] audit: type=1326 audit(1770721404.807:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd10194d97 code=0x7ffc0000 [ 790.934234][ T29] audit: type=1326 audit(1770721404.807:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1013c399 code=0x7ffc0000 [ 791.026162][ T29] audit: type=1326 audit(1770721404.807:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd10194d97 code=0x7ffc0000 [ 791.096821][ T29] audit: type=1326 audit(1770721404.807:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1013c399 code=0x7ffc0000 [ 791.152520][ T5881] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 791.203716][ T29] audit: type=1326 audit(1770721404.807:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd10194d97 code=0x7ffc0000 [ 791.284154][T14291] [U] [ 791.286857][T14291] [U] [ 791.289537][T14291] [U] [ 791.292233][T14291] [U] [ 791.294946][T14291] [U] [ 791.297648][T14291] [U] [ 791.300331][T14291] [U] [ 791.302992][T14291] [U] [ 791.305714][T14291] [U] [ 791.308392][T14291] [U] [ 791.311060][T14291] [U] [ 791.540338][T14293] [U] [ 792.106004][ T29] audit: type=1326 audit(1770721404.807:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1013c399 code=0x7ffc0000 [ 792.129475][ T29] audit: type=1326 audit(1770721404.807:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd10194d97 code=0x7ffc0000 [ 792.153226][ T29] audit: type=1326 audit(1770721404.807:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1013c399 code=0x7ffc0000 [ 792.181024][ T29] audit: type=1326 audit(1770721404.807:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.4.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd10194d97 code=0x7ffc0000 [ 794.152324][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 794.162315][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 794.171013][ T5881] usb 2-1: can't read configurations, error -71 [ 795.117903][T14320] SELinux: policydb string length 262152 does not match expected length 8 [ 795.126881][T14320] SELinux: failed to load policy [ 795.737406][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 795.753530][ T24] libceph: connect (1)[c::]:6789 error -101 [ 795.761548][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 795.877929][T14321] ceph: No mds server is up or the cluster is laggy [ 795.964026][T14331] binfmt_misc: register: failed to install interpreter file ./file0 [ 796.921648][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 796.921668][ T29] audit: type=1400 audit(1770721410.947:1421): avc: denied { override_creds } for pid=14337 comm="syz.4.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 797.181083][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 797.190044][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 797.201792][T14353] FAULT_INJECTION: forcing a failure. [ 797.201792][T14353] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 797.234184][T14353] CPU: 1 UID: 0 PID: 14353 Comm: syz.0.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.234214][T14353] Tainted: [L]=SOFTLOCKUP [ 797.234219][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 797.234229][T14353] Call Trace: [ 797.234234][T14353] [ 797.234241][T14353] dump_stack_lvl+0x100/0x190 [ 797.234262][T14353] should_fail_ex.cold+0x5/0xa [ 797.234273][T14353] ? prepare_alloc_pages+0x16d/0x5f0 [ 797.234290][T14353] should_fail_alloc_page+0xeb/0x140 [ 797.234305][T14353] prepare_alloc_pages+0x1f0/0x5f0 [ 797.234326][T14353] ? rcu_is_watching+0x12/0xc0 [ 797.234342][T14353] __alloc_frozen_pages_noprof+0x193/0x2410 [ 797.234357][T14353] ? rcu_is_watching+0x12/0xc0 [ 797.234370][T14353] ? trace_mm_page_alloc+0x10e/0x160 [ 797.234386][T14353] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 797.234398][T14353] ? __pfx_stack_trace_save+0x10/0x10 [ 797.234414][T14353] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 797.234425][T14353] ? stack_depot_save_flags+0x27/0x9c0 [ 797.234511][T14353] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 797.234538][T14353] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 797.234562][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.234581][T14353] ? do_alloc_pages+0x113/0x250 [ 797.234603][T14353] ? snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 797.234628][T14353] ? snd_pcm_hw_params+0x1729/0x1cb0 [ 797.234650][T14353] ? snd_pcm_kernel_ioctl+0x167/0x2e0 [ 797.234674][T14353] ? snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 797.234697][T14353] ? snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 797.234720][T14353] ? snd_pcm_oss_get_formats+0x7d/0x350 [ 797.234751][T14353] alloc_pages_bulk_noprof+0x777/0x1500 [ 797.234773][T14353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 797.234808][T14353] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 797.234838][T14353] ? alloc_pages_noprof+0x233/0x390 [ 797.234864][T14353] __kasan_populate_vmalloc+0xf0/0x210 [ 797.234891][T14353] alloc_vmap_area+0x935/0x2a00 [ 797.234924][T14353] ? __pfx_alloc_vmap_area+0x10/0x10 [ 797.234955][T14353] __get_vm_area_node+0x1ca/0x330 [ 797.234986][T14353] __vmalloc_node_range_noprof+0x213/0x1530 [ 797.235013][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.235034][T14353] ? lock_acquire+0x17c/0x330 [ 797.235057][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.235079][T14353] ? trace_contention_end+0xd6/0x110 [ 797.235110][T14353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.235130][T14353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 797.235157][T14353] ? do_alloc_pages+0xd1/0x250 [ 797.235181][T14353] ? do_alloc_pages+0xd1/0x250 [ 797.235210][T14353] ? __mutex_unlock_slowpath+0x15c/0x790 [ 797.235238][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.235255][T14353] __vmalloc_node_noprof+0xad/0xf0 [ 797.235282][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.235302][T14353] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 797.235332][T14353] __snd_dma_alloc_pages+0xd2/0x150 [ 797.235351][T14353] snd_dma_alloc_dir_pages+0x151/0x240 [ 797.235374][T14353] do_alloc_pages+0x113/0x250 [ 797.235405][T14353] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 797.235437][T14353] snd_pcm_hw_params+0x1729/0x1cb0 [ 797.235470][T14353] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 797.235497][T14353] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 797.235526][T14353] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 797.235556][T14353] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 797.235586][T14353] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 797.235624][T14353] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 797.235648][T14353] ? __pfx___mutex_lock+0x10/0x10 [ 797.235672][T14353] ? tomoyo_path_number_perm+0x28f/0x580 [ 797.235707][T14353] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 797.235734][T14353] snd_pcm_oss_get_formats+0x7d/0x350 [ 797.235754][T14353] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 797.235782][T14353] snd_pcm_oss_ioctl+0x17d7/0x3720 [ 797.235808][T14353] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 797.235832][T14353] ? selinux_file_ioctl+0x139/0x290 [ 797.235856][T14353] ? selinux_file_ioctl+0xb4/0x290 [ 797.235882][T14353] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 797.235907][T14353] __x64_sys_ioctl+0x18e/0x210 [ 797.235927][T14353] do_syscall_64+0xc9/0xf80 [ 797.235953][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.235972][T14353] RIP: 0033:0x7fe510d9af79 [ 797.235989][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.236007][T14353] RSP: 002b:00007fe50efd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.236026][T14353] RAX: ffffffffffffffda RBX: 00007fe511016090 RCX: 00007fe510d9af79 [ 797.236038][T14353] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 797.236049][T14353] RBP: 00007fe50efd5090 R08: 0000000000000000 R09: 0000000000000000 [ 797.236059][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.236069][T14353] R13: 00007fe511016128 R14: 00007fe511016090 R15: 00007ffefcd74598 [ 797.236103][T14353] [ 797.724028][T14353] syz.0.2041: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 797.738974][T14353] CPU: 1 UID: 0 PID: 14353 Comm: syz.0.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.739002][T14353] Tainted: [L]=SOFTLOCKUP [ 797.739008][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 797.739019][T14353] Call Trace: [ 797.739025][T14353] [ 797.739031][T14353] dump_stack_lvl+0x100/0x190 [ 797.739060][T14353] warn_alloc.cold+0x95/0x1c1 [ 797.739095][T14353] ? __pfx_warn_alloc+0x10/0x10 [ 797.739125][T14353] ? __get_vm_area_node+0x2c5/0x330 [ 797.739149][T14353] ? __get_vm_area_node+0x208/0x330 [ 797.739178][T14353] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 797.739206][T14353] ? lock_acquire+0x17c/0x330 [ 797.739228][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.739249][T14353] ? trace_contention_end+0xd6/0x110 [ 797.739270][T14353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.739288][T14353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 797.739315][T14353] ? do_alloc_pages+0xd1/0x250 [ 797.739338][T14353] ? do_alloc_pages+0xd1/0x250 [ 797.739365][T14353] ? __mutex_unlock_slowpath+0x15c/0x790 [ 797.739391][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.739408][T14353] __vmalloc_node_noprof+0xad/0xf0 [ 797.739433][T14353] ? __snd_dma_alloc_pages+0xd2/0x150 [ 797.739452][T14353] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 797.739480][T14353] __snd_dma_alloc_pages+0xd2/0x150 [ 797.739497][T14353] snd_dma_alloc_dir_pages+0x151/0x240 [ 797.739517][T14353] do_alloc_pages+0x113/0x250 [ 797.739545][T14353] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 797.739572][T14353] snd_pcm_hw_params+0x1729/0x1cb0 [ 797.739603][T14353] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 797.739629][T14353] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 797.739656][T14353] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 797.739684][T14353] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 797.739712][T14353] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 797.739747][T14353] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 797.739768][T14353] ? __pfx___mutex_lock+0x10/0x10 [ 797.739789][T14353] ? tomoyo_path_number_perm+0x28f/0x580 [ 797.739825][T14353] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 797.739849][T14353] snd_pcm_oss_get_formats+0x7d/0x350 [ 797.739870][T14353] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 797.739899][T14353] snd_pcm_oss_ioctl+0x17d7/0x3720 [ 797.739925][T14353] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 797.739952][T14353] ? selinux_file_ioctl+0x139/0x290 [ 797.739973][T14353] ? selinux_file_ioctl+0xb4/0x290 [ 797.739997][T14353] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 797.740025][T14353] __x64_sys_ioctl+0x18e/0x210 [ 797.740042][T14353] do_syscall_64+0xc9/0xf80 [ 797.740063][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.740079][T14353] RIP: 0033:0x7fe510d9af79 [ 797.740096][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.740106][T14353] RSP: 002b:00007fe50efd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.740117][T14353] RAX: ffffffffffffffda RBX: 00007fe511016090 RCX: 00007fe510d9af79 [ 797.740123][T14353] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 797.740129][T14353] RBP: 00007fe50efd5090 R08: 0000000000000000 R09: 0000000000000000 [ 797.740135][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.740141][T14353] R13: 00007fe511016128 R14: 00007fe511016090 R15: 00007ffefcd74598 [ 797.740155][T14353] [ 797.740189][T14353] Mem-Info: [ 798.081422][T14353] active_anon:17831 inactive_anon:0 isolated_anon:0 [ 798.081422][T14353] active_file:23584 inactive_file:4023 isolated_file:0 [ 798.081422][T14353] unevictable:768 dirty:302 writeback:0 [ 798.081422][T14353] slab_reclaimable:8355 slab_unreclaimable:138900 [ 798.081422][T14353] mapped:39008 shmem:8323 pagetables:1391 [ 798.081422][T14353] sec_pagetables:0 bounce:0 [ 798.081422][T14353] kernel_misc_reclaimable:0 [ 798.081422][T14353] free:1282971 free_pcp:11131 free_cma:0 [ 798.126850][T14353] Node 0 active_anon:71324kB inactive_anon:0kB active_file:94336kB inactive_file:15948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156032kB dirty:1208kB writeback:0kB shmem:31756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12104kB pagetables:5428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 798.158719][T14353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 798.188712][T14353] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 798.219723][T14353] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 798.225659][T14353] Node 0 DMA32 free:1238364kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71324kB inactive_anon:0kB active_file:94336kB inactive_file:15948kB unevictable:1536kB writepending:1208kB zspages:0kB present:3129332kB managed:2537100kB mlocked:0kB bounce:0kB free_pcp:23068kB local_pcp:17784kB free_cma:0kB [ 798.264368][T14353] lowmem_reserve[]: 0 0 1 1 1 [ 798.269605][T14353] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 798.381557][T14353] lowmem_reserve[]: 0 0 0 0 0 [ 798.401907][T14353] Node 1 Normal free:3878160kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21456kB local_pcp:10272kB free_cma:0kB [ 798.627014][T14353] lowmem_reserve[]: 0 0 0 0 0 [ 798.636862][T14353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 798.680494][T14353] Node 0 DMA32: 3488*4kB (UME) 3614*8kB (UME) 2001*16kB (UME) 889*32kB (UME) 531*64kB (M) 358*128kB (ME) 157*256kB (UME) 87*512kB (UME) 61*1024kB (UME) 13*2048kB (UM) 214*4096kB (UM) = 1233504kB [ 798.714179][T14353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 798.739193][T14353] Node 1 Normal: 216*4kB (UM) 52*8kB (UME) 33*16kB (UME) 114*32kB (UME) 41*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 943*4096kB (M) = 3878160kB [ 798.757834][T14353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.777730][T14353] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 798.808326][T14353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.878055][T14353] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 798.909380][T14353] 37953 total pagecache pages [ 798.928069][T14353] 0 pages in swap cache [ 798.935122][T14353] Free swap = 124996kB [ 798.948367][T14353] Total swap = 124996kB [ 799.038181][T14353] 2097051 pages RAM [ 799.044355][T14353] 0 pages HighMem/MovableOnly [ 799.055397][T14353] 430878 pages reserved [ 799.065533][T14353] 0 pages cma reserved [ 800.572880][T14374] SELinux: policydb string length 262152 does not match expected length 8 [ 800.584343][T14374] SELinux: failed to load policy [ 801.266147][T14382] binfmt_misc: register: failed to install interpreter file ./file0 [ 801.782920][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 801.793004][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 803.162991][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 806.618425][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 807.110525][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 807.117379][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 807.153667][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 807.582754][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 807.661606][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 808.010894][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 808.029727][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 808.039756][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 808.051256][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 808.079142][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 808.096521][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.104879][ T9] usb 3-1: Product: syz [ 808.109322][ T9] usb 3-1: Manufacturer: syz [ 808.112949][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 808.123639][ T9] usb 3-1: SerialNumber: syz [ 808.129744][ T9] usb 3-1: config 0 descriptor?? [ 808.145288][T14441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 808.154877][T14441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 808.170912][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.300724][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.338160][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.580795][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 808.675815][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 808.902385][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.912285][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.238064][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 809.285465][ T24] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 809.298067][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 809.298674][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 809.305344][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 809.312566][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.329909][ T24] usb 2-1: Product: syz [ 809.334211][ T24] usb 2-1: Manufacturer: syz [ 809.339281][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 809.339576][ T24] usb 2-1: SerialNumber: syz [ 809.350656][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 809.371689][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 809.390306][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 809.410206][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 809.455757][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 809.466942][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 809.526727][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 809.540017][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.564548][ T9] usb 1-1: Product: syz [ 809.568258][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 809.570893][ T9] usb 1-1: Manufacturer: syz [ 809.576734][ T24] imon 2-1:155.0: unable to initialize intf0, err -19 [ 809.604456][ T9] usb 1-1: SerialNumber: syz [ 809.616461][ T24] imon:imon_probe: failed to initialize context! [ 809.617816][ T9] usb 1-1: config 0 descriptor?? [ 809.630690][T14461] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 809.638904][T14461] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 809.642874][ T24] imon 2-1:155.0: unable to register, err -19 [ 809.664029][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.781466][ T9] usb 2-1: USB disconnect, device number 59 [ 810.388468][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.398428][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.592149][ T9] usb 3-1: USB disconnect, device number 71 [ 812.242864][ T24] usb 1-1: USB disconnect, device number 68 [ 812.354292][ T29] audit: type=1400 audit(1770721426.447:1422): avc: denied { create } for pid=14494 comm="syz.0.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 812.963440][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 813.169902][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 813.295021][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 813.334019][ T9] usb 3-1: config 0 has no interface number 0 [ 813.350267][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 813.379132][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 813.502069][ T29] audit: type=1400 audit(1770721427.577:1423): avc: denied { read } for pid=14494 comm="syz.0.2076" path="socket:[44402]" dev="sockfs" ino=44402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 813.608150][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.619859][ T9] usb 3-1: Product: syz [ 813.627472][ T9] usb 3-1: Manufacturer: syz [ 813.637910][ T9] usb 3-1: SerialNumber: syz [ 813.754846][ T9] usb 3-1: config 0 descriptor?? [ 813.868178][ T9] usb 3-1: can't set config #0, error -71 [ 813.876220][ T9] usb 3-1: USB disconnect, device number 72 [ 814.039575][ T29] audit: type=1400 audit(1770721428.127:1424): avc: denied { setopt } for pid=14518 comm="syz.4.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 815.018304][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 815.082839][ T29] audit: type=1400 audit(1770721429.177:1425): avc: denied { map } for pid=14533 comm="syz.0.2084" path="socket:[43864]" dev="sockfs" ino=43864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 816.073670][T14535] lo speed is unknown, defaulting to 1000 [ 816.795696][T14563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2089'. [ 816.928473][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 818.236140][T14569] veth3: entered allmulticast mode [ 819.056868][ T29] audit: type=1400 audit(1770721433.147:1426): avc: denied { map } for pid=14589 comm="syz.0.2097" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 819.230859][ T29] audit: type=1400 audit(1770721433.237:1427): avc: denied { mounton } for pid=14586 comm="syz.4.2096" path="/proc/1595/task" dev="proc" ino=44017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 819.303155][T14593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2098'. [ 819.373417][ T29] audit: type=1400 audit(1770721433.247:1428): avc: denied { mount } for pid=14586 comm="syz.4.2096" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 819.465243][ T29] audit: type=1400 audit(1770721433.317:1429): avc: denied { ioctl } for pid=14592 comm="syz.2.2098" path="socket:[44019]" dev="sockfs" ino=44019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 819.823793][ T29] audit: type=1400 audit(1770721433.317:1430): avc: denied { associate } for pid=14594 comm="syz.4.2096" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 820.037931][ T29] audit: type=1400 audit(1770721433.417:1431): avc: denied { write } for pid=14598 comm="syz.0.2100" name="file0" dev="tmpfs" ino=2194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 820.094232][ T29] audit: type=1400 audit(1770721433.417:1432): avc: denied { open } for pid=14598 comm="syz.0.2100" path="/412/file0" dev="tmpfs" ino=2194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 820.149434][ T29] audit: type=1400 audit(1770721433.417:1433): avc: denied { ioctl } for pid=14598 comm="syz.0.2100" path="/412/file0" dev="tmpfs" ino=2194 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 820.208225][ T29] audit: type=1400 audit(1770721433.927:1434): avc: denied { mounton } for pid=14598 comm="syz.0.2100" path="/412/file0" dev="tmpfs" ino=2194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 820.298138][ T29] audit: type=1400 audit(1770721433.927:1435): avc: denied { read } for pid=14598 comm="syz.0.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 820.388111][ T9] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 822.835955][T14648] bond2 (unregistering): Released all slaves [ 823.058401][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 823.091147][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 823.107265][ T9] usb 3-1: can't read configurations, error -71 [ 823.159627][T14652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.359658][ T979] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 823.378917][ T979] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 823.489407][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 823.568161][ T5934] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 823.621100][T14660] hid-generic 0000:0000:0000.0007: pid 14660 passed too short report [ 823.658512][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 823.665326][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 823.676199][T14670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'. [ 823.676923][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 823.697006][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.708134][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 823.719808][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 823.730891][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 823.741819][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.753770][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.765339][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 823.796198][ T5934] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 823.820024][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 823.847205][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.875612][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 823.885641][ T5934] usb 2-1: config 0 descriptor?? [ 823.898301][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.906585][ T9] usb 3-1: Product: syz [ 823.912275][ T9] usb 3-1: Manufacturer: syz [ 823.926437][ T9] usb 3-1: SerialNumber: syz [ 823.937265][ T9] usb 3-1: config 0 descriptor?? [ 823.943541][T14655] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 823.951041][T14655] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 823.961978][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.360711][ T5934] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 825.350331][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 825.350347][ T29] audit: type=1400 audit(1770721439.447:1441): avc: denied { lock } for pid=14657 comm="syz.1.2117" path="socket:[44800]" dev="sockfs" ino=44800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 825.354128][T14682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.423656][ T5934] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -32 [ 825.634722][T14682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.650717][ T5934] usb 2-1: USB disconnect, device number 60 [ 825.652719][ T29] audit: type=1400 audit(1770721439.747:1442): avc: denied { ioctl } for pid=14689 comm="syz.0.2125" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 826.172803][ T29] audit: type=1400 audit(1770721439.797:1443): avc: denied { listen } for pid=14689 comm="syz.0.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 826.732703][T14700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14700 comm=syz.0.2128 [ 826.868740][ T979] usb 3-1: USB disconnect, device number 74 [ 827.994233][T14719] SELinux: policydb string length 262152 does not match expected length 8 [ 828.003035][T14719] SELinux: failed to load policy [ 828.301325][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 828.312716][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 828.315585][ T29] audit: type=1400 audit(1770721442.397:1444): avc: denied { mount } for pid=14721 comm="syz.1.2133" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 828.322342][T14723] netlink: 'syz.1.2133': attribute type 19 has an invalid length. [ 828.394071][T14723] netlink: 'syz.1.2133': attribute type 20 has an invalid length. [ 828.934617][T14731] netlink: 'syz.4.2135': attribute type 3 has an invalid length. [ 829.045498][T14731] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 830.942608][ T24] libceph: connect (1)[c::]:6789 error -101 [ 830.950533][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 831.209898][T12617] libceph: connect (1)[c::]:6789 error -101 [ 831.217029][T12617] libceph: mon0 (1)[c::]:6789 connect error [ 831.393037][T14742] ceph: No mds server is up or the cluster is laggy [ 831.504322][T14760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.060094][T14766] program syz.2.2143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.228101][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 834.270666][T12861] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 834.445778][T12861] usb 1-1: Using ep0 maxpacket: 32 [ 834.471290][T12861] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 834.480893][T12861] usb 1-1: config 0 has no interface number 0 [ 834.487036][T12861] usb 1-1: config 0 interface 161 has no altsetting 0 [ 834.530654][T12861] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 834.548215][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 834.555028][ T24] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 834.558845][T12861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.563577][ T24] usb 2-1: config 0 has no interface number 0 [ 834.577659][ T24] usb 2-1: config 0 interface 161 has no altsetting 0 [ 834.586959][ T24] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 834.596831][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.605677][T12861] usb 1-1: Product: syz [ 834.605898][ T24] usb 2-1: Product: syz [ 834.617677][ T24] usb 2-1: Manufacturer: syz [ 834.624051][ T24] usb 2-1: SerialNumber: syz [ 834.720660][ T24] usb 2-1: config 0 descriptor?? [ 835.035797][T12861] usb 1-1: Manufacturer: syz [ 835.040531][T12861] usb 1-1: SerialNumber: syz [ 835.057067][T12861] usb 1-1: config 0 descriptor?? [ 835.063773][ T24] em28xx 2-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 835.066471][T12861] em28xx 1-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 835.087599][T12861] em28xx 1-1:0.161: Video interface 161 found: bulk [ 835.093040][ T24] em28xx 2-1:0.161: Video interface 161 found: bulk [ 835.309844][T14786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.318358][ T24] em28xx 2-1:0.161: unknown em28xx chip ID (0) [ 835.331281][T14786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.517292][T12861] em28xx 1-1:0.161: unknown em28xx chip ID (0) [ 836.154233][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 836.163250][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 836.188749][ T24] em28xx 2-1:0.161: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 836.219273][ T24] em28xx 2-1:0.161: board has no eeprom [ 836.408435][ T24] em28xx 2-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 836.416385][ T24] em28xx 2-1:0.161: analog set to bulk mode. [ 836.462864][T14815] program syz.4.2155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 836.815778][T12861] em28xx 1-1:0.161: failed to get i2c transfer status from bridge register (error=-5) [ 836.828644][T12861] em28xx 1-1:0.161: board has no eeprom [ 836.832068][T12617] em28xx 2-1:0.161: Registering V4L2 extension [ 836.911513][T12861] em28xx 1-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 836.921325][T12861] em28xx 1-1:0.161: analog set to bulk mode. [ 836.979595][T14786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.992942][T14786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.153632][T12617] em28xx 2-1:0.161: failed to trigger read from i2c address 0x4a (error=-5) [ 837.178735][ T24] usb 2-1: USB disconnect, device number 61 [ 837.184762][T12617] em28xx 2-1:0.161: failed to trigger read from i2c address 0x48 (error=-5) [ 837.209544][ T24] em28xx 2-1:0.161: Disconnecting em28xx [ 837.686300][T12617] em28xx 2-1:0.161: Config register raw data: 0xffffffed [ 837.696373][T12617] em28xx 2-1:0.161: AC97 chip type couldn't be determined [ 837.708161][T12617] em28xx 2-1:0.161: No AC97 audio processor [ 837.728538][T12617] usb 2-1: Decoder not found [ 837.780881][T12617] em28xx 2-1:0.161: failed to create media graph [ 837.794977][T12617] em28xx 2-1:0.161: V4L2 device video103 deregistered [ 837.830578][T12617] em28xx 2-1:0.161: Remote control support is not available for this card. [ 838.707174][ T24] em28xx 2-1:0.161: Closing input extension [ 838.725878][ T5934] em28xx 1-1:0.161: Registering V4L2 extension [ 838.969080][ T24] em28xx 2-1:0.161: Freeing device [ 839.031124][T14840] netlink: 864 bytes leftover after parsing attributes in process `syz.3.2161'. [ 839.086426][ T9] usb 1-1: USB disconnect, device number 69 [ 839.104813][ T9] em28xx 1-1:0.161: Disconnecting em28xx [ 839.301829][ T5934] em28xx 1-1:0.161: Config register raw data: 0xffffffed [ 839.308997][ T5934] em28xx 1-1:0.161: AC97 chip type couldn't be determined [ 839.756505][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 839.776028][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 839.920443][ T5934] em28xx 1-1:0.161: No AC97 audio processor [ 839.956504][T14856] ceph: No mds server is up or the cluster is laggy [ 840.065973][ T5934] usb 1-1: Decoder not found [ 840.109140][ T5934] em28xx 1-1:0.161: failed to create media graph [ 840.342436][ T5934] em28xx 1-1:0.161: V4L2 device video103 deregistered [ 840.864009][T14872] FAULT_INJECTION: forcing a failure. [ 840.864009][T14872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.877233][T14872] CPU: 0 UID: 0 PID: 14872 Comm: syz.4.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.877260][T14872] Tainted: [L]=SOFTLOCKUP [ 840.877265][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 840.877274][T14872] Call Trace: [ 840.877279][T14872] [ 840.877283][T14872] dump_stack_lvl+0x100/0x190 [ 840.877302][T14872] should_fail_ex.cold+0x5/0xa [ 840.877315][T14872] _copy_from_user+0x2e/0xd0 [ 840.877332][T14872] copy_msghdr_from_user+0x9f/0x4f0 [ 840.877347][T14872] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 840.877363][T14872] ? rcu_is_watching+0x12/0xc0 [ 840.877379][T14872] ___sys_sendmsg+0x106/0x1e0 [ 840.877393][T14872] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.877412][T14872] ? find_held_lock+0x2b/0x80 [ 840.877435][T14872] __sys_sendmsg+0x170/0x220 [ 840.877451][T14872] ? __pfx___sys_sendmsg+0x10/0x10 [ 840.877476][T14872] do_syscall_64+0xc9/0xf80 [ 840.877490][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.877501][T14872] RIP: 0033:0x7fbd1019af79 [ 840.877510][T14872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.877520][T14872] RSP: 002b:00007fbd10fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.877531][T14872] RAX: ffffffffffffffda RBX: 00007fbd10416090 RCX: 00007fbd1019af79 [ 840.877537][T14872] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 840.877543][T14872] RBP: 00007fbd10fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 840.877548][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.877554][T14872] R13: 00007fbd10416128 R14: 00007fbd10416090 R15: 00007ffd68faaca8 [ 840.877567][T14872] [ 841.280601][ T5934] em28xx 1-1:0.161: Remote control support is not available for this card. [ 841.290161][ T9] em28xx 1-1:0.161: Closing input extension [ 841.296071][ T9] ================================================================== [ 841.304125][ T9] BUG: KASAN: slab-use-after-free in media_device_unregister+0x565/0x5e0 [ 841.312547][ T9] Read of size 8 at addr ffff88804f874210 by task kworker/0:0/9 [ 841.320150][ T9] [ 841.322455][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.322471][ T9] Tainted: [L]=SOFTLOCKUP [ 841.322475][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 841.322483][ T9] Workqueue: usb_hub_wq hub_event [ 841.322501][ T9] Call Trace: [ 841.322507][ T9] [ 841.322512][ T9] dump_stack_lvl+0x100/0x190 [ 841.322528][ T9] print_report+0x156/0x4c9 [ 841.322543][ T9] ? __virt_addr_valid+0x81/0x620 [ 841.322555][ T9] ? __phys_addr+0xe8/0x180 [ 841.322567][ T9] ? media_device_unregister+0x565/0x5e0 [ 841.322584][ T9] kasan_report+0xdf/0x1a0 [ 841.322599][ T9] ? media_device_unregister+0x565/0x5e0 [ 841.322619][ T9] media_device_unregister+0x565/0x5e0 [ 841.322638][ T9] em28xx_unregister_media_device+0x4e/0xe0 [ 841.322654][ T9] em28xx_release_resources+0x79/0x1b0 [ 841.322668][ T9] em28xx_usb_disconnect.cold+0x17d/0x253 [ 841.322683][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 841.322700][ T9] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 841.322712][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 841.322729][ T9] device_remove+0x12a/0x180 [ 841.322742][ T9] device_release_driver_internal+0x42e/0x600 [ 841.322757][ T9] bus_remove_device+0x22f/0x440 [ 841.322770][ T9] device_del+0x376/0x9b0 [ 841.322782][ T9] ? kfree_const+0x5a/0x70 [ 841.322796][ T9] ? __pfx_device_del+0x10/0x10 [ 841.322807][ T9] ? kobject_put+0xb9/0x640 [ 841.322825][ T9] usb_disable_device+0x367/0x810 [ 841.322841][ T9] usb_disconnect+0x2e2/0x9a0 [ 841.322856][ T9] hub_event+0x1d0c/0x4af0 [ 841.322874][ T9] ? __lock_acquire+0x4a5/0x2630 [ 841.322885][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 841.322899][ T9] ? __pfx_hub_event+0x10/0x10 [ 841.322913][ T9] ? debug_stats_show+0x150/0x250 [ 841.322925][ T9] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 841.322943][ T9] ? process_one_work+0x80b/0x1840 [ 841.322957][ T9] ? rcu_is_watching+0x12/0xc0 [ 841.322971][ T9] process_one_work+0x9c2/0x1840 [ 841.322986][ T9] ? __pfx_process_one_work+0x10/0x10 [ 841.323008][ T9] ? assign_work+0x19c/0x250 [ 841.323022][ T9] worker_thread+0x5da/0xe40 [ 841.323039][ T9] ? kthread+0x17d/0x730 [ 841.323051][ T9] ? __pfx_worker_thread+0x10/0x10 [ 841.323064][ T9] kthread+0x3b3/0x730 [ 841.323077][ T9] ? __pfx_kthread+0x10/0x10 [ 841.323089][ T9] ? ret_from_fork+0x79/0xaf0 [ 841.323102][ T9] ? ret_from_fork+0x79/0xaf0 [ 841.323117][ T9] ? rcu_is_watching+0x12/0xc0 [ 841.323130][ T9] ? __pfx_kthread+0x10/0x10 [ 841.323143][ T9] ret_from_fork+0x754/0xaf0 [ 841.323156][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 841.323169][ T9] ? __switch_to+0x7b9/0x10c0 [ 841.323184][ T9] ? __pfx_kthread+0x10/0x10 [ 841.323195][ T9] ret_from_fork_asm+0x1a/0x30 [ 841.323209][ T9] [ 841.323213][ T9] [ 841.600769][ T9] Allocated by task 5934: [ 841.605081][ T9] kasan_save_stack+0x30/0x50 [ 841.609753][ T9] kasan_save_track+0x14/0x30 [ 841.614417][ T9] __kasan_kmalloc+0xaa/0xb0 [ 841.619253][ T9] em28xx_v4l2_init.cold+0x94/0x3503 [ 841.624522][ T9] em28xx_init_extension+0x13a/0x200 [ 841.629814][ T9] request_module_async+0x61/0x80 [ 841.634863][ T9] process_one_work+0x9c2/0x1840 [ 841.639845][ T9] worker_thread+0x5da/0xe40 [ 841.644452][ T9] kthread+0x3b3/0x730 [ 841.648530][ T9] ret_from_fork+0x754/0xaf0 [ 841.653135][ T9] ret_from_fork_asm+0x1a/0x30 [ 841.657924][ T9] [ 841.660242][ T9] Freed by task 5934: [ 841.664214][ T9] kasan_save_stack+0x30/0x50 [ 841.668915][ T9] kasan_save_track+0x14/0x30 [ 841.673604][ T9] kasan_save_free_info+0x3b/0x70 [ 841.678624][ T9] __kasan_slab_free+0x5f/0x80 [ 841.683373][ T9] kfree+0x1c7/0x690 [ 841.687248][ T9] kref_put.isra.0+0x56/0x90 [ 841.691820][ T9] em28xx_v4l2_init.cold+0x280/0x3503 [ 841.697175][ T9] em28xx_init_extension+0x13a/0x200 [ 841.702440][ T9] request_module_async+0x61/0x80 [ 841.707462][ T9] process_one_work+0x9c2/0x1840 [ 841.712572][ T9] worker_thread+0x5da/0xe40 [ 841.717148][ T9] kthread+0x3b3/0x730 [ 841.721199][ T9] ret_from_fork+0x754/0xaf0 [ 841.725803][ T9] ret_from_fork_asm+0x1a/0x30 [ 841.730554][ T9] [ 841.732852][ T9] The buggy address belongs to the object at ffff88804f874000 [ 841.732852][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 841.746892][ T9] The buggy address is located 528 bytes inside of [ 841.746892][ T9] freed 8192-byte region [ffff88804f874000, ffff88804f876000) [ 841.760763][ T9] [ 841.763075][ T9] The buggy address belongs to the physical page: [ 841.769461][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f870 [ 841.778198][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 841.786684][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 841.794228][ T9] page_type: f5(slab) [ 841.798206][ T9] raw: 00fff00000000040 ffff88813fe27280 ffffea000114f800 0000000000000004 [ 841.806791][ T9] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 841.815384][ T9] head: 00fff00000000040 ffff88813fe27280 ffffea000114f800 0000000000000004 [ 841.824051][ T9] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 841.832704][ T9] head: 00fff00000000003 ffffea00013e1c01 00000000ffffffff 00000000ffffffff [ 841.841357][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 841.850008][ T9] page dumped because: kasan: bad access detected [ 841.856396][ T9] page_owner tracks the page as allocated [ 841.862082][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14219, tgid 14218 (syz.4.2007), ts 788575103644, free_ts 788259310305 [ 841.883597][ T9] post_alloc_hook+0x1e1/0x250 [ 841.888351][ T9] get_page_from_freelist+0xe3d/0x2e10 [ 841.893805][ T9] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 841.899706][ T9] alloc_pages_mpol+0x1fb/0x550 [ 841.904564][ T9] new_slab+0x2c4/0x440 [ 841.908725][ T9] ___slab_alloc+0xda3/0x1ca0 [ 841.913412][ T9] __slab_alloc.isra.0+0x63/0x110 [ 841.918448][ T9] __kmalloc_cache_noprof+0x531/0x810 [ 841.923823][ T9] audit_log_d_path+0xed/0x210 [ 841.928581][ T9] audit_log_d_path_exe+0x46/0x80 [ 841.933618][ T9] audit_log_task+0x2fe/0x3a0 [ 841.938417][ T9] audit_seccomp+0x7a/0x1f0 [ 841.942925][ T9] __seccomp_filter+0x896/0x1140 [ 841.947868][ T9] __secure_computing+0x221/0x2e0 [ 841.952936][ T9] syscall_trace_enter+0x90/0x230 [ 841.957962][ T9] do_syscall_64+0x460/0xf80 [ 841.962573][ T9] page last free pid 14234 tgid 14233 stack trace: [ 841.969063][ T9] __free_frozen_pages+0x822/0x1130 [ 841.974271][ T9] tlb_remove_table_rcu+0x2b2/0x390 [ 841.979599][ T9] rcu_core+0x5a2/0x10d0 [ 841.983844][ T9] handle_softirqs+0x1ea/0x910 [ 841.988611][ T9] __irq_exit_rcu+0xef/0x150 [ 841.993183][ T9] irq_exit_rcu+0x9/0x30 [ 841.997409][ T9] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 842.003030][ T9] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 842.009005][ T9] [ 842.011328][ T9] Memory state around the buggy address: [ 842.016933][ T9] ffff88804f874100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.024980][ T9] ffff88804f874180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.033032][ T9] >ffff88804f874200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.041069][ T9] ^ [ 842.045646][ T9] ffff88804f874280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.053700][ T9] ffff88804f874300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.061749][ T9] ================================================================== [ 842.188049][ T29] audit: type=1400 audit(1770721455.387:1445): avc: denied { ioctl } for pid=14867 comm="syz.4.2166" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x4b30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 842.215281][ T29] audit: type=1400 audit(1770721456.287:1446): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 842.292595][T14875] program syz.2.2167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 842.558301][ T29] audit: type=1400 audit(1770721456.287:1447): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.598387][ T29] audit: type=1400 audit(1770721456.287:1448): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.620352][ T29] audit: type=1400 audit(1770721456.287:1449): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.772655][ T29] audit: type=1400 audit(1770721456.287:1450): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 842.795530][ T29] audit: type=1400 audit(1770721456.287:1451): avc: denied { append open } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 843.056039][ T29] audit: type=1400 audit(1770721456.287:1452): avc: denied { getattr } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 843.108119][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 843.115349][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.126002][ T9] Tainted: [L]=SOFTLOCKUP [ 843.130299][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 843.140330][ T9] Workqueue: usb_hub_wq hub_event [ 843.145343][ T9] Call Trace: [ 843.148605][ T9] [ 843.151522][ T9] dump_stack_lvl+0x100/0x190 [ 843.156192][ T9] vpanic+0x20d/0x630 [ 843.160156][ T9] panic+0xd1/0xd1 [ 843.163855][ T9] ? __pfx_panic+0x10/0x10 [ 843.168247][ T9] ? media_device_unregister+0x565/0x5e0 [ 843.173876][ T9] ? preempt_schedule_common+0x42/0xc0 [ 843.179345][ T9] check_panic_on_warn.cold+0x19/0x34 [ 843.184701][ T9] end_report.part.0+0x3a/0x90 [ 843.189460][ T9] kasan_report.cold+0xe/0x18 [ 843.194121][ T9] ? media_device_unregister+0x565/0x5e0 [ 843.199736][ T9] media_device_unregister+0x565/0x5e0 [ 843.205210][ T9] em28xx_unregister_media_device+0x4e/0xe0 [ 843.211103][ T9] em28xx_release_resources+0x79/0x1b0 [ 843.216542][ T9] em28xx_usb_disconnect.cold+0x17d/0x253 [ 843.222251][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 843.227445][ T9] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 843.232973][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 843.238700][ T9] device_remove+0x12a/0x180 [ 843.243276][ T9] device_release_driver_internal+0x42e/0x600 [ 843.249320][ T9] bus_remove_device+0x22f/0x440 [ 843.254261][ T9] device_del+0x376/0x9b0 [ 843.258601][ T9] ? kfree_const+0x5a/0x70 [ 843.263533][ T9] ? __pfx_device_del+0x10/0x10 [ 843.268379][ T9] ? kobject_put+0xb9/0x640 [ 843.272890][ T9] usb_disable_device+0x367/0x810 [ 843.277910][ T9] usb_disconnect+0x2e2/0x9a0 [ 843.282570][ T9] hub_event+0x1d0c/0x4af0 [ 843.286975][ T9] ? __lock_acquire+0x4a5/0x2630 [ 843.291902][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 843.297087][ T9] ? __pfx_hub_event+0x10/0x10 [ 843.301835][ T9] ? debug_stats_show+0x150/0x250 [ 843.306853][ T9] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 843.312673][ T9] ? process_one_work+0x80b/0x1840 [ 843.317773][ T9] ? rcu_is_watching+0x12/0xc0 [ 843.322530][ T9] process_one_work+0x9c2/0x1840 [ 843.327468][ T9] ? __pfx_process_one_work+0x10/0x10 [ 843.332844][ T9] ? assign_work+0x19c/0x250 [ 843.337434][ T9] worker_thread+0x5da/0xe40 [ 843.342017][ T9] ? kthread+0x17d/0x730 [ 843.346236][ T9] ? __pfx_worker_thread+0x10/0x10 [ 843.351341][ T9] kthread+0x3b3/0x730 [ 843.355429][ T9] ? __pfx_kthread+0x10/0x10 [ 843.360017][ T9] ? ret_from_fork+0x79/0xaf0 [ 843.364689][ T9] ? ret_from_fork+0x79/0xaf0 [ 843.369356][ T9] ? rcu_is_watching+0x12/0xc0 [ 843.374103][ T9] ? __pfx_kthread+0x10/0x10 [ 843.378672][ T9] ret_from_fork+0x754/0xaf0 [ 843.383258][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 843.388362][ T9] ? __switch_to+0x7b9/0x10c0 [ 843.393056][ T9] ? __pfx_kthread+0x10/0x10 [ 843.397637][ T9] ret_from_fork_asm+0x1a/0x30 [ 843.402409][ T9] [ 843.405741][ T9] Kernel Offset: disabled [ 843.410050][ T9] Rebooting in 86400 seconds..