last executing test programs: 7m29.664965998s ago: executing program 0 (id=1683): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)=' -', 0x2}]) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x1) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010067656e65766500000400028008000600e1ff0000fa36cc36786556b102796e3e796405cee281273a4cacb807c9a8e29e933239309711bb63641ecaeef4e56199b4dd7e7c7dd554f5451bcff176bfe0ddfdcef3dd907efdff4f7246e5208a98a678de151478d4b3d8e516a88049997298445d4dd45d63e7d7ee0c98"], 0x3c}}, 0x0) syz_io_uring_setup(0x6a95, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) 7m28.672054883s ago: executing program 0 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async, rerun: 32) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x8000000) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async) connect$pppoe(r4, &(0x7f0000000180)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async, rerun: 32) ioctl$PPPOEIOCSFWD(r4, 0x40047452, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'veth1\x00'}}) (async, rerun: 64) r7 = socket$kcm(0x10, 0x100000000002, 0x4) (async, rerun: 64) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x0, 0x3, "0b2ae0b2fb218de3b125fbbed6753f2a9cabf0fc35ad4912160fe33da8f24c78aec357a66662b979413333e7c07cc2b54aa91cbdde430c67a5731094c45519c439051934df74258e23cc7eb0383ea238c606e2eb1786eab03682915d4790707b2fa73c54b9a7b161109c6a5ee06094a65c18aa8ae1f8b8bc195bccae9a8107b3d8c28945e58c8e357374ca443f24940d9db7d2d594854d590c5b9ca1eb4c9cce80595902bd3923a1963642cf526b2993b31cc8c7a7a28e3e3c9ea76351594dda262af54447e8ad0676134139a5339b47b5ec5d5a5a58755d037f9df5c53b0deeae5dc1cec2e976be1b17f24b9379ea7f03fffee8304dbcd7f3343cfde00c508d", 0x6, 0x8, 0x5, 0x58, 0x9, 0x7, 0xf9, 0x1}}}, 0x120) sendmsg$kcm(r7, 0x0, 0x0) 7m28.236163569s ago: executing program 0 (id=1685): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0xffffffff7fff0000, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) r4 = userfaultfd(0x80801) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x300, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) syz_io_uring_submit(r5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r1, 0xda90) accept4(r0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000333d83, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x380, 0x3, 0x4, 0x7, 0x100, 0x5}, 0x0, 0x0, 0x0, 0x0) socket(0x23, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 7m27.971260902s ago: executing program 0 (id=1686): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) 7m24.886812794s ago: executing program 0 (id=1699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) unshare(0x24020400) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0xf) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7m24.558737901s ago: executing program 0 (id=1702): rseq(0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, 0x0, 0x20040810) tkill(r1, 0xb) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a4b5e002abd7000fedbdf25000000001e29a7c1ceab1d88254c3a45cec268e6ee5ee812eadf61fcb63541fbe930ac5e107d76e58b08e4a50416e1"], 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) write$tun(r3, &(0x7f0000000180)=ANY=[], 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000002000"/28], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="20001000e30000006ddbe511a029000000370000002b070000ddff0000040174000000000024d7701165fce01f0fda10da4e2315075a89d285736c422499f2d17a1ba90fd6069bb2"], 0x20}}], 0x2, 0x4000001) 7m24.18462734s ago: executing program 32 (id=1702): rseq(0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, 0x0, 0x20040810) tkill(r1, 0xb) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a4b5e002abd7000fedbdf25000000001e29a7c1ceab1d88254c3a45cec268e6ee5ee812eadf61fcb63541fbe930ac5e107d76e58b08e4a50416e1"], 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) write$tun(r3, &(0x7f0000000180)=ANY=[], 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000002000"/28], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="20001000e30000006ddbe511a029000000370000002b070000ddff0000040174000000000024d7701165fce01f0fda10da4e2315075a89d285736c422499f2d17a1ba90fd6069bb2"], 0x20}}], 0x2, 0x4000001) 10.959327397s ago: executing program 5 (id=3955): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000580)=""/200, 0xc8, 0x69a) 9.830771308s ago: executing program 5 (id=3962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="2b030000000000001c001280090001006a6f6ed86400000000f20002800500010001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/237, &(0x7f00000002c0)=0xed) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x3, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="2b030000000000001c001280090001006a6f6ed86400000000f20002800500010001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/237, &(0x7f00000002c0)=0xed) (async) 8.841960273s ago: executing program 3 (id=3967): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000000000900010073797a30000000000600024088a800000500030001000040040004800000000000000000000000380000"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$kcm(0x29, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x8487, 0x1000, 0x1, 0x4}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 8.487334545s ago: executing program 5 (id=3970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000800)=@raw=[@func, @func, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) (async) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r2], 0x2b) (async, rerun: 64) sendfile(r4, r2, 0x0, 0x4000000053d2) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async, rerun: 32) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) r8 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) (async) close_range(r5, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.354874057s ago: executing program 4 (id=3971): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r2, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x41cfaa655c5b4876}, 0xc) futimesat(0xffffffffffffffff, 0x0, 0x0) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xff07, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c000480280001800b0001006f626a7265660000180002800900020073"], 0x80}}, 0x2000c000) 8.179020911s ago: executing program 5 (id=3972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}]}}}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5e, 0x331800) recvmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/134, 0x86}], 0x2}, 0x60) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) utime(&(0x7f0000000000)='.\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) unshare(0x40000000) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0xa800000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.952688566s ago: executing program 5 (id=3975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023893) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000100)="9ea7a81c6706fa4827b7fdcc6c94c6d1b188eb7a9f15d4712e12a27cf9707436c752f92a1669b239420eee43cd97aac320628ab511170a0c5f30497a585073b4ac5b829efc45f11b4b7ca526fa4dc9c898df0ec91134e7fc620586ad73537d280e52a48f7f1c490ecfb6158f734db60fed0b12fe96") (async) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000100)="9ea7a81c6706fa4827b7fdcc6c94c6d1b188eb7a9f15d4712e12a27cf9707436c752f92a1669b239420eee43cd97aac320628ab511170a0c5f30497a585073b4ac5b829efc45f11b4b7ca526fa4dc9c898df0ec91134e7fc620586ad73537d280e52a48f7f1c490ecfb6158f734db60fed0b12fe96") r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$bt_l2cap(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) (async) accept4$bt_l2cap(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) 5.803181455s ago: executing program 2 (id=3976): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80, &(0x7f0000000100)}, 0x20000004) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 5.602688848s ago: executing program 2 (id=3977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2, 0x40000000}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r2}}, 0x48) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40000014) r3 = socket(0x1, 0x803, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = getpid() mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r4, 0xa8a05000) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) setpriority(0x1, r5, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@random="4fdae7f4966a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "8300", 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x40, 0x400, 0x8}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x3c, r7, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x20004094) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8d2206000000ff002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5.546379413s ago: executing program 4 (id=3978): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2}, 0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1048, &(0x7f00000000c0)='\x8a\xeb\xffo{+\x8f') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000314010000000000fcdbdf250900020073797a3000000000080041007369770014003300766c616e3100000000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000006aef9266d6de5d2d7469613cc34920a9d4785c6b8527fc413b58407687e46be8754385f9e963a3ec9ca955c0c8ee1f25ce854fb37dd51bebaacedc4e3afd5d125fbfcc1d9074ecd94f5443379a6f4dad15a3bdaaf2756ed76197f0d131458c10fd263e8601b6e8"], 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$audio1(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r8, 0x80045010, &(0x7f0000000040)) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010038f9ffffff0000000c0000000c000000050000000600000000628fab90227700001311000000002e2e2e00000000"], 0x0, 0x29, 0x0, 0x1, 0x8000}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) 5.312907717s ago: executing program 1 (id=3980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x10102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @local, 0x9}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @local, 0x9}], 0x1c) sendmmsg$inet6(r4, &(0x7f000001ddc0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7}, 0x1c, &(0x7f0000019540)=[{&(0x7f0000019340)="14da12", 0x3}], 0x1}}], 0x1, 0x5d9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3.796655098s ago: executing program 4 (id=3981): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="0201000208002000000000000300057984d9f5d2550443aa300000000000020000000000000000000000000000010000000000000000000000007d6148554a1f777eb7015f0a92c80668a1853bcdeb68297bf5a5696693757ba192c7b6e2d1a4edbf4fc8d40b18dc2a865bb3fae024415701a764e25aa3dd11105532b406e7dcd20bb1a97ae0680ff6deece2e813feb97de5efbe09e738c0c95e0de4043d0618d27b45e48f0edbb63bd39b0583c2939032484de778c6e0b6205dca09c404011d609419a0717b7bb31264ed8b63d4767628cf"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}}}, 0x30) pipe(&(0x7f0000000080)) 3.613496259s ago: executing program 3 (id=3982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$int_out(r3, 0x5460, &(0x7f0000002080)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.571805744s ago: executing program 1 (id=3983): r0 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) close(r0) 3.571083656s ago: executing program 2 (id=3984): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000400000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) (async) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x5605, 0x0) 3.146645198s ago: executing program 1 (id=3985): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x4000049c, &(0x7f00000003c0)={0x0, 0x75ae, 0x400, 0x0, 0x38}, &(0x7f0000000140)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x4, 0x7, 0x2, 0x6}}, @TCA_CBS_PARMS={0xfffffe45, 0x1, {0x6, '\x00', 0x4, 0x2, 0xed000000, 0x2b0}}, @TCA_CBS_PARMS={0x18, 0x1, {0xe8, '\x00', 0x0, 0x9, 0xffffff50, 0xf}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf0, '\x00', 0x8d1a, 0x6, 0xbf, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf, '\x00', 0x7, 0x8, 0x3, 0x14d6}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5c061}, 0x4008000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f00000004c0)="800000800000210ee7decd7a000000008100", 0x12, 0x40054, &(0x7f00000001c0)={0x11, 0x8100, r13, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.139236175s ago: executing program 2 (id=3986): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r0, &(0x7f0000000080)='./file0/file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x12, 0x1c0000, {r0}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xeac9431c1e5c324e, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x10001}]}]}, {0x0, [0x5f, 0x0, 0x61, 0x2e, 0x2e]}}, 0x0, 0x33, 0x0, 0x1, 0x1}, 0x28) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) 3.035210686s ago: executing program 3 (id=3987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff33, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000002000107144e230005000000003a000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d46c10000000000000000000000000ffffffffffff000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fdffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x10000080) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20e000, 0x1000, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe8000000000003f453d02000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000"], 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x2}, 0x3, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c00078005001500050000000500010006000000050005000200000005000400000000000900020073797a31000061726b00000000000000000000000000000000000000b7ccbe89a49c436e823daa4a30e2d7b2e9cc157182d9bc7437eae7a8b18ed6e86828463adb61b6e7efa26ee8b2bd1f3062b9eabe7a9c095587737cc053be19ac4c14d85670376e5c4907ca0f0fe87396ce8c107dc33a495a1ed1c6a641b5cc74f9eb7645e7d9733dd5d1cffeee5be181dddd64f21ba1f81281f81330fc7ad183a01e4669e6a08f98a6fa1c273454bf13138232"], 0x58}, 0x1, 0x0, 0x0, 0x20000}, 0x20004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x11855, 0x0, 0x0, &(0x7f0000000640)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r6, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000004000070129bd703ab63c17f6c0cfbbf3a467ccfc42090000000000017c0000040042800c00018006000600800a00000c0002800800148004001900"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.032509215s ago: executing program 2 (id=3988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$kcm(0x10, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x400c4}, 0x8808) r6 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r6, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r7, 0x0, 0x115}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x24, r10, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7cb0}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x48100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r9}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1}}, 0x40) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 2.833795377s ago: executing program 1 (id=3989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r1 = io_uring_setup(0x493, &(0x7f0000000340)={0x0, 0x1eee, 0x80, 0x0, 0x290}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40000110, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0xe, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) 2.828242711s ago: executing program 4 (id=3990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="00214717a70700000000030600710a5eeb9d04710400", 0x60}], 0x1, 0xee, 0x4200004) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000640)=0x2) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1bc, r9, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffff8, @empty, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xedb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3ff, @private0, 0x2fb7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x957a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x5}, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, r10, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r7}}}]}}]}, 0x60}}, 0x40000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000000180)={@empty, @random="1a5e61c812e0", @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0x1}, {0xff000, 0x0, 0x1}, {0x1}, {0x8}, {}], @ipv4=@udp={{0x22, 0x4, 0x1, 0x25, 0x9f, 0x64, 0x0, 0xc, 0x11, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xe7, 0x3, 0x3, [{@loopback, 0xa739}, {@loopback, 0x5}]}, @cipso={0x86, 0xc, 0x2, [{0x6, 0x6, '\'%OK'}]}, @timestamp={0x44, 0x8, 0x91, 0x0, 0x3, [0xa]}, @timestamp_prespec={0x44, 0x14, 0xb3, 0x3, 0x0, [{@rand_addr=0x64010102, 0x1}, {@local, 0x6}]}, @lsrr={0x83, 0x17, 0xbd, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0xbe, [@multicast1, @multicast1]}, @noop, @cipso={0x86, 0x10, 0x0, [{0x5, 0xa, "27c32c6aef9fd0ad"}]}, @generic={0x88, 0x4, "1dcf"}]}}, {0x4e21, 0x4e21, 0x17, 0x0, @gue={{0x2, 0x0, 0x1, 0xf0}, "cceffe8bab3faa"}}}}}}}, &(0x7f0000000040)={0x1, 0x3, [0x88f, 0xb6b, 0x47c, 0x820]}) socket$netlink(0x10, 0x3, 0xa) 2.699619664s ago: executing program 5 (id=3991): syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x69) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86fb, 0x10100, 0x0, 0x4}, 0x0, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x7151, 0x3) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setsockopt$inet6_int(r8, 0x29, 0x38, &(0x7f0000000080)=0xcaf, 0x4) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00014900000000fcdbdf250501f2800c00180008ac0f000000000014000a00fe88000000000000000000000000010150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f693b88d6ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd0400e90000000008e3e339aaae48e5fbffdb27493bcc4c4fcb1820307d92ce4f5e45267f5b58bf0af54f83790af14c77dbd483d761c4a7e72566c07133d52b8240f75186064b912624fddf604a9f600f19feccd1cb12eb6b94d6157937aa06bdfd38af81094ba35318e7"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 2.588102133s ago: executing program 4 (id=3992): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x375, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r4 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000180)={0x9, 0x2, 0x0, {0x4, 0x4, 0xb, 0x8001}}) open(0x0, 0x64c42, 0x389b0d52417bb201) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r8 = epoll_create(0x5) r9 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x300, r9, &(0x7f0000000040)={0x32000000}) fchown(r7, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) sendmsg$sock(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x10}]}) connect$unix(r3, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) 2.508966124s ago: executing program 1 (id=3993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004"], 0xac}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0xa, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x800) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}]}) (async) r7 = epoll_create1(0x80000) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000180)={0x90000009}) (async) mount(0x0, 0x0, 0x0, 0x40078, 0x0) socket$kcm(0x2, 0x2, 0x0) 2.395671297s ago: executing program 1 (id=3994): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000180)={0x9, 0x2, 0x0, {0x4, 0x4, 0xb, 0x8001}}) open(0x0, 0x64c42, 0x389b0d52417bb201) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r8 = epoll_create(0x5) r9 = syz_clone(0x2181011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r9, r9) setpgid(0x0, r9) wait4(r9, 0x0, 0x2, 0x0) setpgid(0x0, 0x0) r10 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r8, 0x300, r10, &(0x7f0000000040)={0x32000000}) fchown(r7, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) sendmsg$sock(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40000c0) 2.057579479s ago: executing program 3 (id=3995): r0 = fanotify_init(0x8, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) close(r1) close(0xffffffffffffffff) socket(0x2b, 0x1, 0x1) fcntl$setstatus(r1, 0x4, 0x2c00) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) write$nci(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0xb, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x67}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x1, 0x1, 0x9, 0xbb3, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast2, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x4, [{@multicast2, 0xfffffffd}]}, @noop, @rr={0x7, 0x7, 0x41, [@multicast2]}, @generic={0x89, 0xc, "669ce389e5e401eaf0ed"}, @end, @end, @noop, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x10, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x1, 0x2, 0x9, 0x6, 0x40}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0xffffff50, 0x0, 0x0, 0x41100, 0x30, '\x00', r4, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0x101, 0x9}, 0x10, 0x0, r2, 0x9, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x1, 0x4, 0xa}, {0x2, 0x1, 0x6}, {0x2, 0x4, 0x6, 0x6}, {0x1, 0x4, 0x0, 0xa}, {0x2, 0x4, 0xf}, {0x5, 0x4, 0xd, 0x2}, {0x0, 0x5, 0xe, 0x1}, {0x0, 0x3, 0x5, 0x3}, {0x3, 0x1, 0x4, 0xc}], 0x10, 0x7}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ftruncate(r2, 0x403) inotify_init1(0x80000) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1.326019162s ago: executing program 3 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) (async) openat$sw_sync(0xffffffffffffff9c, 0x0, 0xc8101, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000340)) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10001, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.143075101s ago: executing program 3 (id=3997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000540)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_open_procfs$pagemap(r1, &(0x7f0000000000)) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000640)=0x13) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xee66a8a5366d6b95, 0x4000010, r7, 0x3000) poll(&(0x7f0000000200)=[{r6, 0x10}], 0x1, 0x20000000) ioctl$TCSETA(r6, 0x5406, &(0x7f00000001c0)={0x9, 0xfe, 0xff82, 0xa, 0x30}) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040)=0x5110, 0xff65) 1.069771882s ago: executing program 4 (id=3998): syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x0) 0s ago: executing program 2 (id=3999): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2}, 0x94) kernel console output (not intermixed with test programs): 11][ T5810] magicmouse 0003:05AC:0324.0035: probe with driver magicmouse failed with error -22 [ 830.524892][T19735] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 831.021687][ T30] audit: type=1400 audit(1766725664.818:8634): avc: denied { ioctl } for pid=19741 comm="syz.5.3605" path="socket:[73603]" dev="sockfs" ino=73603 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 831.258113][T19751] syz_tun: entered promiscuous mode [ 831.264828][T19751] vlan4: entered promiscuous mode [ 831.400339][ T5810] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 831.541515][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 831.545202][ T5810] usb 4-1: device descriptor read/64, error -71 [ 831.667065][T19760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.678697][T19760] batadv_slave_0: entered promiscuous mode [ 832.183120][T19769] tipc: Started in network mode [ 832.194659][T19769] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 832.206782][ T5810] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 832.218838][T19769] tipc: Enabled bearer , priority 10 [ 832.323876][T19771] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 832.330390][T19771] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 832.338852][T19771] vhci_hcd vhci_hcd.0: Device attached [ 832.367096][ T5810] usb 4-1: device descriptor read/64, error -71 [ 832.505732][ T5870] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 832.514024][ T5810] usb usb4-port1: attempt power cycle [ 832.538442][ T9] usb 5-1: USB disconnect, device number 30 [ 832.718751][ T5862] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 832.732268][ T44] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 832.742408][ T30] audit: type=1400 audit(1766725666.439:8635): avc: denied { ioctl } for pid=19777 comm="syz.4.3617" path="socket:[73843]" dev="sockfs" ino=73843 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 832.767912][ T30] audit: type=1400 audit(1766725666.467:8636): avc: denied { bind } for pid=19777 comm="syz.4.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 832.805023][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 832.819295][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.867288][ T5870] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 832.900969][T19787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3616'. [ 832.917754][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.010669][ T5870] usb 2-1: Product: syz [ 833.018573][ T5810] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 833.058670][ T5870] usb 2-1: Manufacturer: syz [ 833.112515][ T5870] usb 2-1: SerialNumber: syz [ 833.124971][ T5810] usb 4-1: device descriptor read/8, error -71 [ 833.158995][ T5870] usb 2-1: config 0 descriptor?? [ 833.175600][ T5870] net1080 2-1:0.0: probe with driver net1080 failed with error -22 [ 833.233979][ T5862] usb 3-1: config 0 has no interfaces? [ 833.240346][ T5862] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 833.255062][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.266600][ T5862] usb 3-1: config 0 descriptor?? [ 833.296887][ T5862] tipc: Node number set to 10398378 [ 833.390014][ T5862] usb 2-1: USB disconnect, device number 121 [ 833.402603][ T5810] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 833.423957][ T5810] usb 4-1: device descriptor read/8, error -71 [ 833.462621][T19793] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 833.494883][T19772] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 833.495387][ T5930] usb 3-1: USB disconnect, device number 9 [ 833.515535][T11660] vhci_hcd vhci_hcd.2: stop threads [ 833.522974][T11660] vhci_hcd vhci_hcd.2: release socket [ 833.528508][T11660] vhci_hcd vhci_hcd.2: disconnect device [ 833.541186][ T5810] usb usb4-port1: unable to enumerate USB device [ 834.341353][ T5810] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 834.972856][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.987227][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 835.001205][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 835.012457][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 835.037188][ T5810] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 835.046948][ T5810] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 835.055576][ T5810] usb 2-1: Manufacturer: syz [ 835.062726][ T5810] usb 2-1: config 0 descriptor?? [ 835.068387][T19826] gfs2: error -5 reading superblock [ 835.076620][T19824] gfs2: error -5 reading superblock [ 835.226989][ T5862] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 835.292587][T19795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.309606][T19795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.336716][T19795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.353508][T19795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.370936][T19795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.388512][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 835.400027][ T5862] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 835.412046][T19795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.419959][ T5862] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 835.448660][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 835.477360][T17573] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 835.491016][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 835.507962][T19795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.523623][ T5862] usb 5-1: config 1 has no interface number 0 [ 835.532273][T19795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.542309][ T5862] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 835.554918][T19795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.563302][ T5862] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 835.576614][T19795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.584563][ T5862] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 835.595797][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.619538][ T5862] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 835.668297][T17573] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 835.677102][T17573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.689153][T17573] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 835.698848][T17573] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 835.706927][T17573] usb 4-1: Manufacturer: syz [ 835.715392][T17573] usb 4-1: config 0 descriptor?? [ 835.792675][T17573] rc_core: IR keymap rc-hauppauge not found [ 835.799127][T17573] Registered IR keymap rc-empty [ 835.806412][T17573] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 835.820068][T17573] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 835.844639][ T5862] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 836.405998][ T5897] usb 4-1: USB disconnect, device number 9 [ 836.597966][T17573] usb 5-1: USB disconnect, device number 31 [ 836.606320][T17573] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 837.254745][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 837.324163][T19861] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 837.340316][ T5810] rc_core: IR keymap rc-hauppauge not found [ 837.346317][ T5810] Registered IR keymap rc-empty [ 837.351331][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.372164][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 837.394174][ T5810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 837.407338][ T5810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67 [ 838.846273][T17573] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 838.920198][ T44] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 838.933130][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.115730][T17573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 839.154421][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.178388][T17573] usb 5-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.00 [ 839.215018][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.416109][T17573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.454728][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.497788][T17573] usb 5-1: config 0 descriptor?? [ 839.539416][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.562513][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.592760][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.661823][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.698731][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.741678][ T5810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 839.770034][ T5810] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 839.798203][ T5810] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 839.811854][ T5810] usb 2-1: USB disconnect, device number 122 [ 839.933733][ T5897] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 840.518867][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 840.534395][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.605343][T17573] usbhid 5-1:0.0: can't add hid device: -71 [ 840.719119][T17573] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 840.730912][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.608774][T17573] usb 5-1: USB disconnect, device number 32 [ 841.616407][T19906] netlink: 'syz.3.3645': attribute type 1 has an invalid length. [ 841.628174][T19809] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 841.638126][ T5897] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 841.662387][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.692065][T19906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.699789][ T5897] usb 6-1: config 0 descriptor?? [ 841.803649][T19809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.831597][T19908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.838633][T19908] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 841.859880][ T5810] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 841.865921][T19908] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 841.875998][T19809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.902808][T19809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.926571][T19809] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 841.945314][T19809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.960795][ T5897] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 841.974074][T19809] usb 2-1: config 0 descriptor?? [ 842.059152][ T5810] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 842.074131][ T5810] usb 3-1: config 7 has no interface number 0 [ 842.082249][ T5810] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 842.091676][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.099691][ T5810] usb 3-1: Product: syz [ 842.112306][ T5810] usb 3-1: Manufacturer: syz [ 842.122615][ T5810] usb 3-1: SerialNumber: syz [ 842.229793][ T6117] usb 6-1: USB disconnect, device number 52 [ 842.422287][ T30] audit: type=1400 audit(1766725675.510:8637): avc: denied { accept } for pid=19920 comm="syz.3.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 842.445300][T19809] hid-udraw 0003:20D6:CB17.0037: unknown main item tag 0x0 [ 842.453925][T19809] hid-udraw 0003:20D6:CB17.0037: unbalanced collection at end of report description [ 842.477431][T19809] hid-udraw 0003:20D6:CB17.0037: parse failed [ 842.483653][T19809] hid-udraw 0003:20D6:CB17.0037: probe with driver hid-udraw failed with error -22 [ 844.859390][ T6117] usb 2-1: USB disconnect, device number 123 [ 844.976937][ T5810] as10x_usb: device has been detected [ 845.014222][ T5810] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 845.047268][ T5810] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 845.077617][T19959] vxcan1: entered allmulticast mode [ 845.117616][T19967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.154735][ T5810] as10x_usb: error during firmware upload part1 [ 845.171243][ T5810] Registered device Elgato EyeTV DTT Deluxe [ 845.175938][ T5810] usb 3-1: USB disconnect, device number 10 [ 845.245330][ T5810] Unregistered device Elgato EyeTV DTT Deluxe [ 845.248613][ T5810] as10x_usb: device has been disconnected [ 845.280318][ T6117] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 845.383766][T19980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.392406][ T30] audit: type=1400 audit(1766725678.292:8638): avc: denied { append } for pid=19976 comm="syz.2.3662" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 845.394162][T19979] loop5: detected capacity change from 0 to 7 [ 845.583260][ T6117] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 845.646771][ T6117] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.669455][T19980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.692759][T19979] Dev loop5: unable to read RDB block 7 [ 845.725464][T19979] loop5: unable to read partition table [ 845.731352][T19809] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 845.770089][ T6117] usb 6-1: config 2 interface 0 has no altsetting 0 [ 845.797559][T19979] loop5: partition table beyond EOD, truncated [ 845.829327][T19979] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 845.839357][ T6117] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 845.866403][ T6117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 845.883611][T19980] tipc: Started in network mode [ 845.890743][ T6117] usb 6-1: SerialNumber: syz [ 845.905413][T19980] tipc: Node identity b646d3ce194f, cluster identity 4711 [ 845.928648][T19980] tipc: Enabled bearer , priority 0 [ 845.942149][T19809] usb 4-1: Using ep0 maxpacket: 16 [ 845.957122][T19982] syzkaller0: MTU too low for tipc bearer [ 845.967486][T19982] tipc: Disabling bearer [ 846.051963][T19809] usb 4-1: device descriptor read/all, error -71 [ 846.101703][ T30] audit: type=1400 audit(1766725678.948:8639): avc: denied { ioctl } for pid=19986 comm="syz.2.3664" path="socket:[74413]" dev="sockfs" ino=74413 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 846.149672][T19993] comedi comedi3: comedi_config --init_data is deprecated [ 846.175124][ T6117] ims_pcu 6-1:2.0: Missing CDC union descriptor [ 846.193049][ T6117] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22 [ 846.245333][ T6117] usb 6-1: USB disconnect, device number 53 [ 847.308137][ T5940] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 847.489687][ T5940] usb 3-1: device descriptor read/64, error -71 [ 847.986558][ T5810] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 848.044653][ T5940] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 848.508898][ T5810] usb 5-1: device descriptor read/64, error -71 [ 848.578135][ T5940] usb 3-1: device descriptor read/64, error -71 [ 848.585365][ T30] audit: type=1400 audit(1766725682.273:8640): avc: denied { map } for pid=20026 comm="syz.3.3673" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 848.728758][ T5940] usb usb3-port1: attempt power cycle [ 848.948390][ T5810] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 849.133191][ T5940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 849.174096][ T30] audit: type=1400 audit(1766725682.273:8641): avc: denied { execute } for pid=20026 comm="syz.3.3673" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 849.218447][ T5810] usb 5-1: device descriptor read/64, error -71 [ 849.229550][ T5940] usb 3-1: device descriptor read/8, error -71 [ 849.336067][ T5810] usb usb5-port1: attempt power cycle [ 849.384104][T20040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20992 sclass=netlink_route_socket pid=20040 comm=syz.3.3676 [ 849.502423][ T5940] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 849.563859][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 849.570331][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 849.577320][T20045] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 849.709347][ T5810] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 849.731170][ T5810] usb 5-1: device descriptor read/8, error -71 [ 849.742332][ T5940] usb 3-1: device not accepting address 14, error -71 [ 849.750110][ T5940] usb usb3-port1: unable to enumerate USB device [ 850.074659][ T5810] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 850.105201][ T5810] usb 5-1: device descriptor read/8, error -71 [ 850.168329][ T5940] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 850.232705][ T5810] usb usb5-port1: unable to enumerate USB device [ 850.307654][ T5940] usb 3-1: device descriptor read/64, error -71 [ 850.573853][ T5940] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 850.711801][T20063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 850.765927][ T5940] usb 3-1: device descriptor read/64, error -71 [ 850.883866][ T5940] usb usb3-port1: attempt power cycle [ 851.406351][ T5940] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 851.428182][ T5940] usb 3-1: device descriptor read/8, error -71 [ 851.694602][ T5940] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 851.780019][ T5824] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 851.787747][T16406] Bluetooth: hci2: command 0x1003 tx timeout [ 851.868279][T20070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 851.889667][ T5940] usb 3-1: device descriptor read/8, error -71 [ 852.104538][ T5940] usb usb3-port1: unable to enumerate USB device [ 853.426162][T20119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 854.010308][ T5810] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 854.081329][ T44] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 854.182513][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 854.193669][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.242890][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.320524][T20133] openvswitch: netlink: Message has 2712 unknown bytes. [ 854.499824][ T5810] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 854.552368][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.576322][ T44] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 854.578034][ T5810] usb 5-1: config 0 descriptor?? [ 854.607529][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.647643][ T44] usb 2-1: config 0 descriptor?? [ 854.826664][ T44] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 854.838039][ T30] audit: type=1400 audit(1766725688.130:8642): avc: denied { unmount } for pid=12711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 854.919093][T20140] netlink: 'syz.3.3693': attribute type 33 has an invalid length. [ 854.937793][T20140] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3693'. [ 855.114093][T20126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.123398][T20126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.139712][T20125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.163402][T20146] loop6: detected capacity change from 0 to 2640 [ 855.170094][T20146] buffer_io_error: 54 callbacks suppressed [ 855.170108][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.183801][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.191683][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.199525][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.207378][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.215216][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.223150][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.231021][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.238854][T20146] ldm_validate_partition_table(): Disk read failed. [ 855.238884][T20147] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.253421][T20146] Buffer I/O error on dev loop6, logical block 0, async page read [ 855.261551][T20146] Dev loop6: unable to read RDB block 0 [ 855.267249][T20146] loop6: unable to read partition table [ 855.273047][T20146] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 855.912712][ T30] audit: type=1400 audit(1766725688.504:8643): avc: denied { map } for pid=20142 comm="syz.5.3704" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 855.953603][ T5810] usbhid 5-1:0.0: can't add hid device: -71 [ 855.960120][ T5810] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 855.970218][ T5810] usb 5-1: USB disconnect, device number 37 [ 856.005685][T20156] netlink: 'syz.2.3706': attribute type 10 has an invalid length. [ 856.018972][T20156] bond0: (slave wlan1): Opening slave failed [ 856.088575][ T30] audit: type=1400 audit(1766725689.301:8644): avc: denied { accept } for pid=20157 comm="syz.5.3707" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 856.230192][ T5930] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 856.390928][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 856.403077][ T5930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 856.414876][ T5930] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 856.426069][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.476067][ T5930] usb 4-1: Product: syz [ 856.483897][ T5930] usb 4-1: Manufacturer: syz [ 856.491199][ T5930] usb 4-1: SerialNumber: syz [ 856.534769][ T5930] usb 4-1: config 0 descriptor?? [ 857.230316][ T5810] usb 2-1: USB disconnect, device number 124 [ 857.575083][ T5930] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 857.675333][T20175] MINIX-fs: unable to read superblock [ 857.757702][ T5930] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 857.767732][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.784310][ T5930] usb 5-1: Product: syz [ 857.813228][ T5930] usb 5-1: Manufacturer: syz [ 857.840199][ T5930] usb 5-1: SerialNumber: syz [ 857.941388][ T5930] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 857.978290][ T5862] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 858.383205][ T5810] usb 5-1: USB disconnect, device number 38 [ 859.101397][ T5862] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 859.108413][ T5862] ath9k_htc: Failed to initialize the device [ 859.128777][ T5810] usb 5-1: ath9k_htc: USB layer deinitialized [ 859.444248][T16406] Bluetooth: hci2: command 0xfc11 tx timeout [ 859.485334][ T5824] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 859.657385][ T5930] usb 4-1: USB disconnect, device number 12 [ 860.052729][ T30] audit: type=1400 audit(1766725693.030:8645): avc: denied { setattr } for pid=20217 comm="syz.2.3722" name="file1" dev="overlay" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 860.105400][ T30] audit: type=1400 audit(1766725693.058:8646): avc: denied { rename } for pid=20217 comm="syz.2.3722" name="#45" dev="tmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 860.129916][ T30] audit: type=1400 audit(1766725693.058:8647): avc: denied { link } for pid=20217 comm="syz.2.3722" name="00fb210001d13ee43de1c542aead29e3d912a35bac1a931831e703000000000000" dev="tmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 860.168426][ T5810] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 860.349749][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 860.366602][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 860.391941][ T5810] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 860.392383][ T5930] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 860.421780][ T5810] usb 4-1: config 0 has no interface number 0 [ 860.432464][ T5810] usb 4-1: config 0 interface 104 altsetting 129 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 860.477071][ T5810] usb 4-1: config 0 interface 104 has no altsetting 0 [ 860.495804][ T30] audit: type=1400 audit(1766725693.424:8648): avc: denied { setattr } for pid=20222 comm="syz.5.3724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 860.571350][ T5810] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=2f.46 [ 860.595336][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.603340][ T5810] usb 4-1: Product: syz [ 860.627274][ T5810] usb 4-1: Manufacturer: syz [ 860.631890][ T5810] usb 4-1: SerialNumber: syz [ 860.644324][ T30] audit: type=1326 audit(1766725693.583:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 860.704242][ T5810] usb 4-1: config 0 descriptor?? [ 860.727297][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.744536][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.754286][ T5930] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 860.768263][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.832773][ T5930] usb 3-1: config 0 descriptor?? [ 860.854698][ T30] audit: type=1326 audit(1766725693.583:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 860.937850][ T30] audit: type=1326 audit(1766725693.583:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 861.011397][ T30] audit: type=1326 audit(1766725693.583:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 861.014499][ T5810] option 4-1:0.104: GSM modem (1-port) converter detected [ 861.060047][ T5930] magicmouse 0003:05AC:0324.0038: item fetching failed at offset 5/7 [ 861.083611][T20245] lo speed is unknown, defaulting to 1000 [ 861.090131][ T5930] magicmouse 0003:05AC:0324.0038: magicmouse hid parse failed [ 861.099976][ T30] audit: type=1326 audit(1766725693.583:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 861.139542][ T5930] magicmouse 0003:05AC:0324.0038: probe with driver magicmouse failed with error -22 [ 861.153907][ T5810] usb 4-1: USB disconnect, device number 13 [ 861.174889][ T5810] option 4-1:0.104: device disconnected [ 861.176256][ T5930] usb 3-1: USB disconnect, device number 19 [ 861.199621][ T30] audit: type=1326 audit(1766725693.583:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 861.273866][ T30] audit: type=1326 audit(1766725693.620:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 861.311990][T20252] block nbd2: shutting down sockets [ 861.331560][ T5897] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 861.339697][ T30] audit: type=1326 audit(1766725693.620:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20222 comm="syz.5.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71478f749 code=0x7ffc0000 [ 861.401163][ T30] audit: type=1400 audit(1766725693.648:8657): avc: denied { ioctl } for pid=20219 comm="syz.2.3723" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 861.524021][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 861.595348][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.626967][ T5897] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 861.659810][ T5897] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 861.754546][T20267] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:21 [ 861.961253][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.066307][ T5897] usb 5-1: config 0 descriptor?? [ 862.406667][T20277] sock: sock_timestamping_bind_phc: sock not bind to device [ 862.878745][ T5870] IPVS: starting estimator thread 0... [ 862.909991][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3727'. [ 862.994290][T20279] IPVS: using max 49 ests per chain, 117600 per kthread [ 863.370573][ T5870] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 863.417354][T20293] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 863.428321][T20293] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3739'. [ 863.437415][T20293] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3739'. [ 863.446420][T20293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3739'. [ 863.562105][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 863.568732][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.570621][T20296] bridge_slave_0: left allmulticast mode [ 863.579403][T19809] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 863.587161][T20296] bridge_slave_0: left promiscuous mode [ 863.603378][T20296] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.605034][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 863.622229][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 863.636906][ T5870] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 863.646073][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.654286][ T5870] usb 6-1: Product: syz [ 863.654807][T20296] bridge_slave_1: left allmulticast mode [ 863.658514][ T5870] usb 6-1: Manufacturer: syz [ 863.669230][T20296] bridge_slave_1: left promiscuous mode [ 863.674847][ T5870] usb 6-1: SerialNumber: syz [ 863.680515][T20296] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.688304][ T5870] usb 6-1: config 0 descriptor?? [ 863.703033][T20296] team0: Port device team_slave_0 removed [ 863.711216][T20296] team0: Port device team_slave_1 removed [ 863.718148][T20296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.730256][T20296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.739179][T20296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.746904][T20296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.755414][T19809] usb 3-1: too many configurations: 222, using maximum allowed: 8 [ 863.764158][T20296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 863.780616][T19809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 863.788658][T19809] usb 3-1: can't read configurations, error -61 [ 863.801900][ T5870] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 863.811161][ T5897] !yz!: Port: 1 Link DOWN [ 863.821563][ T5870] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -8) [ 863.847803][T20301] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 863.876869][ T5870] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -8 [ 863.991289][ T5870] usb 6-1: USB disconnect, device number 54 [ 864.010629][T19809] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 864.270711][T19809] usb 3-1: too many configurations: 222, using maximum allowed: 8 [ 864.309386][ T5870] usb 5-1: USB disconnect, device number 39 [ 864.319056][T19809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 864.337218][T19809] usb 3-1: can't read configurations, error -61 [ 864.357693][T19809] usb usb3-port1: attempt power cycle [ 864.412198][T20314] tipc: Enabled bearer , priority 0 [ 864.422107][T20315] syzkaller0: entered promiscuous mode [ 864.430882][T20315] syzkaller0: entered allmulticast mode [ 864.455545][T20315] tipc: Resetting bearer [ 864.463744][T20321] binder: 20320:20321 ioctl ae80 0 returned -22 [ 864.478866][T20315] tipc: Disabling bearer [ 864.533472][ T5897] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 864.694032][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 864.710415][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.722525][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.734603][T19809] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 864.747570][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 864.765027][ T5897] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 864.775598][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.789212][T19809] usb 3-1: too many configurations: 222, using maximum allowed: 8 [ 864.806732][T19809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 864.810810][ T7131] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 864.814544][ T5870] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 864.832920][T19809] usb 3-1: can't read configurations, error -61 [ 864.863994][ T5897] usb 2-1: config 0 descriptor?? [ 864.981639][T19809] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 864.993599][ T7131] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.009447][ T7131] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.023665][ T7131] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 865.025128][T19809] usb 3-1: too many configurations: 222, using maximum allowed: 8 [ 865.033143][ T7131] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 865.040706][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 865.049200][ T7131] usb 6-1: Manufacturer: syz [ 865.055879][T19809] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 865.060667][ T7131] usb 6-1: config 0 descriptor?? [ 865.071259][T19809] usb 3-1: can't read configurations, error -61 [ 865.077906][T19809] usb usb3-port1: unable to enumerate USB device [ 865.084773][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 865.095407][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.107841][ T5870] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 865.117123][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 865.129301][ T5870] usb 5-1: Product: syz [ 865.133517][ T5870] usb 5-1: Manufacturer: syz [ 865.138200][ T5870] usb 5-1: SerialNumber: syz [ 865.145017][ T5870] usb 5-1: config 0 descriptor?? [ 865.280505][ T5930] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 865.320115][T20306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.328816][T20306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.343329][ T5897] hid-multitouch 0003:0457:07DA.0039: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 865.372876][ T5870] usb 5-1: USB disconnect, device number 40 [ 865.451086][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 865.457981][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.468216][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 865.479213][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 865.488959][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 865.498650][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.512425][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 865.521568][ T5930] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 865.529606][ T5930] usb 4-1: Manufacturer: syz [ 865.544996][ T5930] usb 4-1: config 0 descriptor?? [ 865.618954][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 865.629640][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 865.643493][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 865.653494][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 865.674115][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 865.686253][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 865.700339][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 865.710151][T20331] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 865.719701][T20331] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 865.744951][ T5862] usb 2-1: USB disconnect, device number 125 [ 865.888682][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 865.888705][ T30] audit: type=1400 audit(1766725698.427:8762): avc: denied { ioctl } for pid=20329 comm="syz.3.3751" path="socket:[76122]" dev="sockfs" ino=76122 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 867.281360][ T30] audit: type=1400 audit(1766725699.805:8763): avc: denied { name_bind } for pid=20335 comm="syz.4.3752" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 867.375605][ T7131] uclogic 0003:256C:006D.003A: failed retrieving Huion firmware version: -71 [ 867.389679][ T30] audit: type=1400 audit(1766725699.833:8764): avc: denied { node_bind } for pid=20335 comm="syz.4.3752" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 867.414805][ T7131] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 867.422322][ T7131] uclogic 0003:256C:006D.003A: probe with driver uclogic failed with error -71 [ 867.434690][ T7131] usb 6-1: USB disconnect, device number 55 [ 867.530474][ T30] audit: type=1400 audit(1766725700.029:8765): avc: denied { create } for pid=20335 comm="syz.4.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 867.550816][ T30] audit: type=1400 audit(1766725700.048:8766): avc: denied { ioctl } for pid=20335 comm="syz.4.3752" path="socket:[76859]" dev="sockfs" ino=76859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 867.576516][ T30] audit: type=1400 audit(1766725700.067:8767): avc: denied { connect } for pid=20335 comm="syz.4.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 867.596714][ T30] audit: type=1400 audit(1766725700.067:8768): avc: denied { write } for pid=20335 comm="syz.4.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 867.618613][ T30] audit: type=1400 audit(1766725700.086:8769): avc: denied { write } for pid=20335 comm="syz.4.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 867.671042][ T5862] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 867.838781][ T30] audit: type=1326 audit(1766725700.320:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20338 comm="syz.1.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272df8f749 code=0x7fc00000 [ 867.862777][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3753'. [ 867.863171][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 867.879267][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.904679][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.921734][T20346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 867.929203][T20349] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3755'. [ 868.027114][ T5862] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 868.037293][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.051921][ T5862] usb 3-1: config 0 descriptor?? [ 868.270594][ T7131] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 868.398036][ T30] audit: type=1326 audit(1766725700.751:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20338 comm="syz.1.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f272df8f749 code=0x7fc00000 [ 869.304493][ T5930] rc_core: IR keymap rc-hauppauge not found [ 869.310440][ T5930] Registered IR keymap rc-empty [ 869.317542][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.336012][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.346547][ T7131] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 869.358075][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 869.370061][ T7131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.380360][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 869.392639][ T7131] usb 5-1: Product: syz [ 869.396867][ T7131] usb 5-1: Manufacturer: syz [ 869.401865][ T7131] usb 5-1: SerialNumber: syz [ 869.416011][ T7131] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 869.445399][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.467846][ T44] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 869.496975][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.523030][T20365] block nbd3: shutting down sockets [ 869.529921][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.551300][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.570663][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.805627][T19809] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 869.866685][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.890937][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.953869][ T5897] usb 5-1: USB disconnect, device number 41 [ 869.976503][T19809] usb 2-1: Using ep0 maxpacket: 32 [ 869.984919][T19809] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 870.036141][T19809] usb 2-1: config 0 has no interface number 0 [ 870.058308][T19809] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.072625][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 870.094005][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 870.126452][ T5930] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 870.136897][T20379] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3762'. [ 870.173775][ T5930] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 870.188784][ T5930] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 870.292134][ T5930] usb 4-1: USB disconnect, device number 14 [ 871.217400][T19809] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.227606][T19809] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 871.236675][T19809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.256806][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 871.256823][ T30] audit: type=1400 audit(1766725702.925:8809): avc: denied { execute_no_trans } for pid=20381 comm="syz.5.3763" path="/409/file0" dev="tmpfs" ino=2198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 871.296817][T19809] usb 2-1: config 0 descriptor?? [ 871.309017][ T44] usb 5-1: Service connection timeout for: 256 [ 871.316197][ T5862] usbhid 3-1:0.0: can't add hid device: -71 [ 871.323714][ T44] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 871.332097][ T5862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 871.340629][ T44] ath9k_htc: Failed to initialize the device [ 871.353357][ T5897] usb 5-1: ath9k_htc: USB layer deinitialized [ 871.353521][ T5862] usb 3-1: USB disconnect, device number 24 [ 871.550978][T19809] usbhid 2-1:0.1: can't add hid device: -71 [ 871.703873][T20395] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 871.989665][T19809] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 872.000309][T19809] usb 2-1: USB disconnect, device number 126 [ 872.310776][ T30] audit: type=1400 audit(1766725704.499:8810): avc: denied { bind } for pid=20403 comm="syz.1.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 872.391906][ T30] audit: type=1400 audit(1766725704.499:8811): avc: denied { name_bind } for pid=20403 comm="syz.1.3770" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 872.469880][ T30] audit: type=1400 audit(1766725704.499:8812): avc: denied { node_bind } for pid=20403 comm="syz.1.3770" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 872.497090][ T30] audit: type=1400 audit(1766725704.508:8813): avc: denied { connect } for pid=20403 comm="syz.1.3770" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 872.520268][ T5897] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 872.530179][ T30] audit: type=1400 audit(1766725704.508:8814): avc: denied { write } for pid=20403 comm="syz.1.3770" path="socket:[76986]" dev="sockfs" ino=76986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 872.602811][ T5862] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 872.689945][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 872.699132][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.708746][ T5897] usb 5-1: config 0 descriptor?? [ 872.715069][ T5897] cp210x 5-1:0.0: cp210x converter detected [ 872.751005][ T5862] usb 3-1: device descriptor read/64, error -71 [ 873.034999][ T5862] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 873.045633][ T30] audit: type=1400 audit(1766725705.202:8815): avc: denied { mount } for pid=20413 comm="syz.3.3772" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 873.082495][ T30] audit: type=1400 audit(1766725705.230:8816): avc: denied { create } for pid=20413 comm="syz.3.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 873.102685][ T30] audit: type=1400 audit(1766725705.230:8817): avc: denied { listen } for pid=20413 comm="syz.3.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 873.124974][ T30] audit: type=1400 audit(1766725705.230:8818): avc: denied { write } for pid=20413 comm="syz.3.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 873.146058][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 873.154207][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 873.163738][ T5897] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 873.175047][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 873.175416][T20400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.188630][T19809] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 873.190388][ T5862] usb 3-1: device descriptor read/64, error -71 [ 873.205601][T20400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.222255][ T5930] usb 5-1: USB disconnect, device number 42 [ 873.230741][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 873.239032][ T5930] cp210x 5-1:0.0: device disconnected [ 873.338323][ T5862] usb usb3-port1: attempt power cycle [ 873.359747][T19809] usb 6-1: Using ep0 maxpacket: 16 [ 873.366236][T19809] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 873.374355][T19809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.384564][T19809] usb 6-1: config 0 has no interface number 0 [ 873.390623][T19809] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.410214][T19809] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 873.419461][T19809] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 873.427689][T19809] usb 6-1: Product: syz [ 873.431964][T19809] usb 6-1: SerialNumber: syz [ 873.457358][T19809] usb 6-1: config 0 descriptor?? [ 873.466035][ T5897] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 873.473821][T19809] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 873.548942][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 873.615473][ T5897] usb 2-1: device descriptor read/64, error -71 [ 873.712911][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.723856][ T44] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 873.732919][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.742104][ T44] usb 4-1: config 0 descriptor?? [ 873.839802][ T5862] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 873.861455][ T5862] usb 3-1: device descriptor read/8, error -71 [ 873.882268][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 874.021015][ T5897] usb 2-1: device descriptor read/64, error -71 [ 874.117066][ T5862] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 874.139044][ T5862] usb 3-1: device descriptor read/8, error -71 [ 874.145864][ T5897] usb usb2-port1: attempt power cycle [ 874.194580][ T44] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor [ 874.215213][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003B/input/input70 [ 874.390626][ T5862] usb usb3-port1: unable to enumerate USB device [ 874.412345][ T44] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 875.034077][T20438] netlink: 'syz.3.3772': attribute type 5 has an invalid length. [ 875.058348][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 875.089354][ T5897] usb 2-1: device descriptor read/8, error -71 [ 875.215295][ T5862] usb 4-1: USB disconnect, device number 15 [ 876.445733][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 877.340388][ T5897] usb 2-1: device descriptor read/8, error -71 [ 877.498940][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 877.498957][ T30] audit: type=1400 audit(1766725709.353:8826): avc: denied { map } for pid=20441 comm="syz.2.3777" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 877.531288][ T5897] usb usb2-port1: unable to enumerate USB device [ 877.597250][ T5862] usb 6-1: USB disconnect, device number 56 [ 877.622234][T20456] ./cgroup: Can't lookup blockdev [ 877.651024][ T30] audit: type=1400 audit(1766725709.493:8827): avc: denied { mounton } for pid=20455 comm="syz.5.3781" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 877.761700][ T30] audit: type=1400 audit(1766725709.624:8828): avc: denied { ioctl } for pid=20459 comm="syz.4.3782" path="socket:[77067]" dev="sockfs" ino=77067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 877.844625][T20466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3782'. [ 878.220672][ T5862] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 878.415459][ T30] audit: type=1400 audit(1766725709.990:8829): avc: denied { read } for pid=20457 comm="syz.1.3780" path="socket:[77070]" dev="sockfs" ino=77070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 878.881255][ T5862] usb 4-1: config 16 has an invalid interface number: 92 but max is 0 [ 878.902284][ T5862] usb 4-1: config 16 has no interface number 0 [ 878.908465][ T5862] usb 4-1: New USB device found, idVendor=04cb, idProduct=012d, bcdDevice=bd.dd [ 878.926223][ T30] audit: type=1400 audit(1766725710.065:8830): avc: denied { create } for pid=20457 comm="syz.1.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 878.946467][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.968628][ T5862] gspca_main: finepix-2.14.0 probing 04cb:012d [ 879.054912][ T30] audit: type=1400 audit(1766725710.767:8831): avc: denied { ioctl } for pid=20455 comm="syz.5.3781" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 879.186892][ T5897] usb 4-1: USB disconnect, device number 16 [ 879.499887][ T5862] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 879.507588][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 879.688029][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 879.698784][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 879.705699][ T5862] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 879.713805][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.725547][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.735195][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.745271][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.751868][ T44] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 879.761984][ T30] audit: type=1400 audit(1766725711.489:8832): avc: denied { create } for pid=20482 comm="syz.5.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 879.782199][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.790878][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.799020][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.807711][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.816434][ T44] usb 2-1: config 0 descriptor?? [ 879.821481][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.829144][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.839700][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.846908][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.855506][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.862920][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.871427][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.878034][ T30] audit: type=1400 audit(1766725711.601:8833): avc: denied { ioctl } for pid=20482 comm="syz.5.3788" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 879.878887][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.915183][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.922333][ T5862] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 879.930612][ T5862] usb 3-1: config 0 has no interface number 0 [ 879.938962][ T5862] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df [ 879.948280][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.956347][ T5862] usb 3-1: Product: syz [ 880.028852][ T5862] usb 3-1: Manufacturer: syz [ 880.034251][ T5862] usb 3-1: SerialNumber: syz [ 880.036781][ T30] audit: type=1400 audit(1766725711.751:8834): avc: denied { write } for pid=20485 comm="syz.3.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 880.059961][ T5862] usb 3-1: config 0 descriptor?? [ 880.086487][ T30] audit: type=1400 audit(1766725711.789:8835): avc: denied { ioctl } for pid=20485 comm="syz.3.3789" path="socket:[77095]" dev="sockfs" ino=77095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 880.417675][T20497] netlink: 'syz.2.3784': attribute type 10 has an invalid length. [ 880.508221][ T44] corsair 0003:1B1C:1B02.003C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 880.542274][T20472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.713020][T20472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.785058][T20497] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 880.827801][T20498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 880.842419][T20500] sp0: Synchronizing with TNC [ 880.847432][T20500] [U] è [ 880.850588][ T5862] usb 3-1: USB disconnect, device number 29 [ 881.089666][ T5897] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 881.565886][ T5862] usb 2-1: USB disconnect, device number 5 [ 881.695866][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.707063][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.717068][ T5897] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 881.726847][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.736024][ T5897] usb 4-1: config 0 descriptor?? [ 881.886682][ T5810] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 882.058195][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 882.064737][ T5810] usb 5-1: config 2 has an invalid interface number: 1 but max is 0 [ 882.074482][ T5810] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 882.085034][ T5810] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 882.100219][ T5810] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 882.109513][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.117764][ T5810] usb 5-1: Product: syz [ 882.122329][ T5810] usb 5-1: Manufacturer: syz [ 882.127392][ T5810] usb 5-1: SerialNumber: syz [ 882.140836][ T5810] cdc_acm 5-1:2.1: probe with driver cdc_acm failed with error -22 [ 882.151513][ T5810] cdc_acm 5-1:2.0: probe with driver cdc_acm failed with error -22 [ 882.173676][ T5897] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 882.181277][ T5897] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 882.189239][ T5897] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 882.197713][ T5897] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 882.205198][ T5897] playstation 0003:054C:0DF2.003D: unknown main item tag 0x0 [ 882.214964][ T5897] playstation 0003:054C:0DF2.003D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 882.359204][ T5810] usb 5-1: USB disconnect, device number 43 [ 882.640949][T20503] openvswitch: netlink: Missing key (keys=40, expected=100) [ 882.721233][T20536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3793'. [ 883.014978][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 883.014994][ T30] audit: type=1400 audit(1766725714.544:8844): avc: denied { read } for pid=20541 comm="syz.4.3804" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 883.412684][T19809] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 883.584759][T19809] usb 5-1: Using ep0 maxpacket: 16 [ 883.597703][T19809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.628220][T19809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.657869][T19809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 883.674804][T19809] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 883.723460][T19809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.734425][T19809] usb 5-1: config 0 descriptor?? [ 883.787868][ T30] audit: type=1400 audit(1766725715.274:8845): avc: denied { append } for pid=20550 comm="syz.5.3807" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 883.830083][T20551] loop5: detected capacity change from 0 to 7 [ 883.841740][T20551] Dev loop5: unable to read RDB block 7 [ 883.848490][T20553] random: crng reseeded on system resumption [ 883.851927][ T30] audit: type=1400 audit(1766725715.321:8846): avc: denied { setopt } for pid=20552 comm="syz.2.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 883.874371][T20551] loop5: unable to read partition table [ 883.884830][T20551] loop5: partition table beyond EOD, truncated [ 883.903695][T20551] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 883.925025][ T30] audit: type=1400 audit(1766725715.321:8847): avc: denied { write } for pid=20552 comm="syz.2.3808" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 883.958317][ T30] audit: type=1400 audit(1766725715.321:8848): avc: denied { open } for pid=20552 comm="syz.2.3808" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 883.982653][ T30] audit: type=1400 audit(1766725715.359:8849): avc: denied { ioctl } for pid=20552 comm="syz.2.3808" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 884.103539][ T30] audit: type=1400 audit(1766725715.565:8850): avc: denied { read } for pid=20552 comm="syz.2.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 884.163530][ T5897] playstation 0003:054C:0DF2.003D: Failed to retrieve feature with reportID 32: -71 [ 884.173161][ T5897] playstation 0003:054C:0DF2.003D: Failed to retrieve DualSense firmware info: -71 [ 884.206811][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 884.215911][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.227021][ T5897] playstation 0003:054C:0DF2.003D: Failed to get firmware info from DualSense [ 884.250844][T19809] hid (null): global environment stack underflow [ 884.260530][T19809] hid (null): unknown global tag 0xe [ 884.323254][ T5897] playstation 0003:054C:0DF2.003D: Failed to create dualsense. [ 884.338251][T19809] hid (null): report_id 62470 is invalid [ 884.347191][ T5897] playstation 0003:054C:0DF2.003D: probe with driver playstation failed with error -71 [ 884.357220][T19809] hid (null): report_id 0 is invalid [ 884.854625][T20542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.854800][T19809] hid (null): global environment stack underflow [ 884.863198][T20542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.873907][ T5897] usb 4-1: USB disconnect, device number 17 [ 884.938867][T19809] hid (null): unknown global tag 0xc [ 884.945428][T19809] hid (null): unknown global tag 0xe [ 884.962048][T19809] hid (null): report_id 1478990255 is invalid [ 884.968328][T19809] hid (null): report_id 17176 is invalid [ 885.058165][T19809] cougar 0003:060B:500A.003E: unknown main item tag 0x0 [ 885.092692][T19809] cougar 0003:060B:500A.003E: unknown main item tag 0x0 [ 885.100151][T19809] cougar 0003:060B:500A.003E: unknown main item tag 0x0 [ 885.110808][T19809] cougar 0003:060B:500A.003E: unknown main item tag 0x0 [ 885.117775][T19809] cougar 0003:060B:500A.003E: unknown main item tag 0x0 [ 885.125995][T19809] cougar 0003:060B:500A.003E: unexpected long global item [ 885.135346][T19809] cougar 0003:060B:500A.003E: parse failed [ 885.141369][T19809] cougar 0003:060B:500A.003E: probe with driver cougar failed with error -22 [ 885.164015][T19809] usb 5-1: USB disconnect, device number 44 [ 885.173638][ T5810] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 885.185431][ T30] audit: type=1400 audit(1766725716.586:8851): avc: denied { write } for pid=20560 comm="syz.3.3811" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 885.404850][ T5810] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 885.440509][ T5810] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 885.461931][ T5810] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 885.494110][ T5810] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 885.538395][ T5810] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 885.563914][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.039898][ T30] audit: type=1400 audit(1766725717.383:8852): avc: denied { accept } for pid=20571 comm="syz.4.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 886.112872][ T30] audit: type=1400 audit(1766725717.401:8853): avc: denied { write } for pid=20571 comm="syz.4.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 886.326236][T19809] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 886.487852][T19809] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 886.497600][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 886.500475][T19809] usb 5-1: config 0 has no interface number 0 [ 886.524583][T19809] usb 5-1: config 0 interface 99 altsetting 254 has an endpoint descriptor with address 0x99, changing to 0x89 [ 886.550516][T19809] usb 5-1: config 0 interface 99 has no altsetting 0 [ 886.564923][T19809] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=f4.ce [ 886.584797][T19809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.607369][T19809] usb 5-1: config 0 descriptor?? [ 886.646449][ T44] usb 4-1: device descriptor read/64, error -71 [ 886.764258][ T5810] ath6kl: Failed to submit usb control message: -110 [ 886.771300][ T5810] ath6kl: unable to send the bmi data to the device: -110 [ 886.778610][ T5810] ath6kl: Unable to send get target info: -110 [ 886.795635][ T5810] ath6kl: Failed to init ath6kl core: -110 [ 886.807268][ T5810] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 886.833937][T19809] usb 5-1: string descriptor 0 read error: -71 [ 886.847219][T19809] usb 5-1: USB disconnect, device number 45 [ 886.935025][ T44] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 887.084049][ T44] usb 4-1: device descriptor read/64, error -71 [ 887.202339][ T44] usb usb4-port1: attempt power cycle [ 887.382674][ T5930] usb 6-1: USB disconnect, device number 57 [ 887.410429][T20594] loop5: detected capacity change from 0 to 7 [ 887.419845][T20594] Dev loop5: unable to read RDB block 7 [ 887.424355][T20596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3818'. [ 887.425897][T20594] loop5: unable to read partition table [ 887.440901][T20594] loop5: partition table beyond EOD, truncated [ 887.448327][T20594] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 887.542424][T20606] mkiss: ax0: crc mode is auto. [ 887.564322][ T44] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 887.586732][ T44] usb 4-1: device descriptor read/8, error -71 [ 887.724538][T20609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3823'. [ 887.788306][ T5930] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 887.841697][ T44] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 887.884811][ T44] usb 4-1: device descriptor read/8, error -71 [ 887.962228][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 887.971258][ T5930] usb 2-1: not running at top speed; connect to a high speed hub [ 887.979829][ T5930] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 887.989056][ T5930] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 887.999507][ T5930] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 888.009572][ T44] usb usb4-port1: unable to enumerate USB device [ 888.016101][ T5930] usb 2-1: config 17 has no interface number 0 [ 888.024319][ T5930] usb 2-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.037610][ T5930] usb 2-1: config 17 interface 8 has no altsetting 0 [ 888.092846][ T5930] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 888.105038][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.113980][ T5930] usb 2-1: Product: syz [ 888.118588][ T5930] usb 2-1: Manufacturer: syz [ 888.123891][ T5930] usb 2-1: SerialNumber: syz [ 888.440176][ T44] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 888.455751][ T5930] usb 2-1: selecting invalid altsetting 0 [ 888.472786][ T5930] usb 2-1: USB disconnect, device number 6 [ 888.628861][ T44] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 888.644820][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.659467][ T44] usb 6-1: Product: syz [ 888.670223][ T44] usb 6-1: Manufacturer: syz [ 888.677487][ T44] usb 6-1: SerialNumber: syz [ 888.692388][ T44] usb 6-1: config 0 descriptor?? [ 888.704221][ T44] ch341 6-1:0.0: ch341-uart converter detected [ 888.705690][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 888.705703][ T30] audit: type=1326 audit(1766725719.875:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20619 comm="syz.4.3827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ab578f749 code=0x0 [ 888.773243][ T30] audit: type=1400 audit(1766725719.941:8866): avc: denied { unmount } for pid=16404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 888.815178][T20621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3827'. [ 888.824504][ T30] audit: type=1400 audit(1766725719.978:8867): avc: denied { create } for pid=20622 comm="syz.2.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 888.844687][ T30] audit: type=1400 audit(1766725719.978:8868): avc: denied { write } for pid=20622 comm="syz.2.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 889.061939][ T30] audit: type=1400 audit(1766725720.212:8869): avc: denied { name_bind } for pid=20634 comm="syz.1.3831" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 889.085697][ T30] audit: type=1400 audit(1766725720.231:8870): avc: denied { create } for pid=20634 comm="syz.1.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 889.107755][ T30] audit: type=1400 audit(1766725720.259:8871): avc: denied { ioctl } for pid=20634 comm="syz.1.3831" path="socket:[76671]" dev="sockfs" ino=76671 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 889.165562][T20637] loop5: detected capacity change from 0 to 7 [ 889.172219][T20637] Dev loop5: unable to read RDB block 7 [ 889.177884][T20637] loop5: unable to read partition table [ 889.183642][T20637] loop5: partition table beyond EOD, truncated [ 889.190812][T20637] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 889.207909][ T5930] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 889.238110][T20639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3833'. [ 889.364096][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.385382][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.404759][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.419913][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.430935][ T5930] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 889.440277][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.490391][ T5930] usb 3-1: config 0 descriptor?? [ 889.518175][T20616] veth4: entered allmulticast mode [ 889.798972][ T30] audit: type=1400 audit(1766725720.906:8872): avc: denied { write } for pid=20643 comm="syz.4.3835" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 889.828551][T20646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3834'. [ 889.859363][ T30] audit: type=1400 audit(1766725720.925:8873): avc: denied { open } for pid=20643 comm="syz.4.3835" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 889.907731][ T30] audit: type=1400 audit(1766725720.934:8874): avc: denied { getopt } for pid=20643 comm="syz.4.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 889.972523][ T5930] hid_parser_main: 78 callbacks suppressed [ 889.972536][ T5930] hid-steam 0003:28DE:1142.003F: unknown main item tag 0x0 [ 890.006782][ T5930] hid-steam 0003:28DE:1142.003F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 890.082941][ T5930] hid-steam 0003:28DE:1142.003F: Steam wireless receiver connected [ 890.090890][ T5930] hid-steam 0003:28DE:1142.003F: No HID_FEATURE_REPORT submitted - nothing to read [ 890.093616][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 890.103615][ T5930] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 890.115421][ T5940] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 890.124774][ T5930] hid-steam 0003:28DE:1142.0040: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 890.178990][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 890.274028][ T44] ch341-uart ttyUSB0: failed to read break control: -71 [ 890.281150][ T44] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 890.285635][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 890.291429][ T44] usb 6-1: USB disconnect, device number 58 [ 890.297322][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.301720][ T5940] usb 2-1: config index 0 descriptor too short (expected 292, got 36) [ 890.312421][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 890.320393][ T44] ch341 6-1:0.0: device disconnected [ 890.330212][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.334115][ T5940] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 890.344138][ T9] usb 5-1: config 0 descriptor?? [ 890.354273][ T5940] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 890.369245][ T5940] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 890.371003][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 890.378490][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.389106][ T5897] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 890.393528][ T5940] usb 2-1: config 0 descriptor?? [ 890.402016][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.421421][ T5897] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 890.431139][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.440756][ T5897] usb 4-1: Product: syz [ 890.444956][ T5897] usb 4-1: Manufacturer: syz [ 890.450225][ T5897] usb 4-1: SerialNumber: syz [ 890.456226][ T5897] usb 4-1: config 0 descriptor?? [ 890.679695][ T5897] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 890.690336][ T5897] usb 4-1: USB disconnect, device number 22 [ 890.799876][ T9] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0041/input/input72 [ 890.813011][ T5810] usb 3-1: USB disconnect, device number 30 [ 890.825644][ T5810] hid-steam 0003:28DE:1142.003F: Steam wireless receiver disconnected [ 890.909277][ T9] uclogic 0003:28BD:0933.0041: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 891.017604][ T44] usb 5-1: USB disconnect, device number 46 [ 891.107428][ T5940] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 891.240882][T20658] input: syz1 as /devices/virtual/input/input73 [ 891.280459][ T5940] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 891.289614][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.310829][ T5940] usb 6-1: config 0 descriptor?? [ 891.317465][ T5940] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 891.521036][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 891.547808][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 892.090330][T19809] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 892.138697][ T5940] gspca_cpia1: usb_control_msg 01, error -71 [ 892.144978][ T5940] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 892.180021][ T5940] usb 6-1: USB disconnect, device number 59 [ 892.282778][T19809] usb 5-1: Using ep0 maxpacket: 32 [ 892.291796][T19809] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 892.301877][T19809] usb 5-1: config 0 has no interface number 0 [ 892.308223][T19809] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.320098][T19809] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.329940][T19809] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 892.339171][T19809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.351391][T19809] usb 5-1: config 0 descriptor?? [ 892.577849][T20682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.588784][T20682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.622938][ T5897] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 892.795125][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 892.802231][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.819015][ T5897] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 892.830152][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.838430][ T5897] usb 3-1: Product: syz [ 892.842800][ T5897] usb 3-1: Manufacturer: syz [ 892.847823][ T5897] usb 3-1: SerialNumber: syz [ 892.855311][ T5897] usb 3-1: config 0 descriptor?? [ 892.877094][ T5897] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 893.029065][T19809] uclogic 0003:28BD:0094.0042: pen parameters not found [ 893.133885][T19809] uclogic 0003:28BD:0094.0042: interface is invalid, ignoring [ 893.154718][ T5940] usb 2-1: USB disconnect, device number 7 [ 893.222774][T19809] usb 5-1: USB disconnect, device number 47 [ 893.434416][ T5897] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 893.545065][ T5897] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 894.018474][T20726] sctp: [Deprecated]: syz.3.3854 (pid 20726) Use of int in max_burst socket option deprecated. [ 894.018474][T20726] Use struct sctp_assoc_value instead [ 894.034519][ T5930] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 894.042374][ T5940] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 894.135086][T20728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3855'. [ 894.186419][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 894.186435][ T30] audit: type=1400 audit(1766725725.010:8891): avc: denied { name_connect } for pid=20730 comm="syz.1.3856" dest=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 894.202437][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 894.220186][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 894.228991][ T5940] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 894.241430][ T5940] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.253796][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 894.265463][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 894.276127][ T5940] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.276304][ T5930] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 894.297807][ T5940] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 894.307750][ T5930] usb 5-1: config 0 has no interface number 0 [ 894.314176][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.323614][ T5930] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 894.335636][ T30] audit: type=1400 audit(1766725725.057:8892): avc: denied { setopt } for pid=20730 comm="syz.1.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 894.358477][ T5930] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 894.371257][ T5930] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 894.380823][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.389083][ T5930] usb 5-1: Product: syz [ 894.393443][ T5930] usb 5-1: Manufacturer: syz [ 894.398530][ T5930] usb 5-1: SerialNumber: syz [ 894.449116][ T5930] usb 5-1: config 0 descriptor?? [ 894.454975][ T5940] usb 6-1: config 0 descriptor?? [ 894.461394][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 894.483753][ T5940] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input74 [ 894.496834][T20721] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 894.504482][T20721] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 894.521612][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 894.574437][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 894.592783][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 894.608292][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 894.701564][T20723] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 894.713296][T20723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.722079][T20723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.731229][ T5897] usb 6-1: USB disconnect, device number 60 [ 894.751780][T20721] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 894.769729][ T30] audit: type=1400 audit(1766725725.563:8893): avc: denied { ioctl } for pid=20740 comm="syz.1.3858" path="socket:[77905]" dev="sockfs" ino=77905 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 894.868353][ T5930] asix 5-1:0.251: probe with driver asix failed with error -71 [ 894.889629][T20750] netlink: 'syz.3.3860': attribute type 11 has an invalid length. [ 894.895525][ T5930] usb 5-1: USB disconnect, device number 48 [ 894.956029][T20752] sctp: [Deprecated]: syz.4.3859 (pid 20752) Use of int in max_burst socket option. [ 894.956029][T20752] Use struct sctp_assoc_value instead [ 895.255655][ T5940] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 895.419082][ T5940] usb 4-1: device descriptor read/64, error -71 [ 895.586787][ T30] audit: type=1400 audit(1766725726.322:8894): avc: denied { append } for pid=20756 comm="syz.5.3862" name="v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 895.655696][ T5930] usb 3-1: USB disconnect, device number 31 [ 895.686272][ T5940] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 895.824591][ T5940] usb 4-1: device descriptor read/64, error -71 [ 895.857672][ T30] audit: type=1400 audit(1766725726.584:8895): avc: denied { read write } for pid=20758 comm="syz.5.3863" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 895.942312][ T5940] usb usb4-port1: attempt power cycle [ 895.947963][ T30] audit: type=1400 audit(1766725726.603:8896): avc: denied { open } for pid=20758 comm="syz.5.3863" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 895.991413][T20767] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20000 [ 896.025433][ T30] audit: type=1400 audit(1766725726.687:8897): avc: denied { shutdown } for pid=20758 comm="syz.5.3863" lport=39401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 896.076107][ T30] audit: type=1400 audit(1766725726.706:8898): avc: denied { create } for pid=20764 comm="syz.2.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 896.273356][ T5930] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 896.337156][ T5940] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 896.367354][ T5940] usb 4-1: device descriptor read/8, error -71 [ 896.454715][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 896.500097][ T5930] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 896.518339][ T5930] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 896.533728][ T5930] usb 3-1: config 135 has no interface number 0 [ 896.552639][ T5930] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.578948][ T5930] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 896.618931][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.636003][ T5940] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 896.657026][ T5930] usb 3-1: Product: syz [ 896.661207][ T5930] usb 3-1: Manufacturer: syz [ 896.665783][ T5930] usb 3-1: SerialNumber: syz [ 896.700227][ T5940] usb 4-1: device descriptor read/8, error -71 [ 896.779927][ T5930] uvcvideo 3-1:135.230: Found Unit with invalid ID 0 [ 896.786745][ T5930] uvcvideo 3-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 896.794214][ T5930] uvcvideo 3-1:135.230: No valid video chain found. [ 896.922142][ T5940] usb usb4-port1: unable to enumerate USB device [ 897.902925][ T30] audit: type=1400 audit(1766725728.495:8899): avc: denied { mount } for pid=20764 comm="syz.2.3865" name="/" dev="autofs" ino=78056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 898.103478][ T5810] usb 3-1: USB disconnect, device number 32 [ 898.119158][ T30] audit: type=1400 audit(1766725728.674:8900): avc: denied { getopt } for pid=20764 comm="syz.2.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 899.069948][T20825] Device name not specified. [ 899.069948][T20825] [ 900.642905][T20851] misc userio: No port type given on /dev/userio [ 900.672640][T20851] misc userio: Begin command sent, but we're already running [ 900.696316][T20851] misc userio: Begin command sent, but we're already running [ 900.713486][T20851] misc userio: Begin command sent, but we're already running [ 900.720889][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 900.720902][ T30] audit: type=1400 audit(1766725731.128:8914): avc: denied { write } for pid=20845 comm="syz.4.3885" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 900.750148][ T5810] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 900.794318][T20851] misc userio: Begin command sent, but we're already running [ 900.822175][T20848] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3885'. [ 900.840593][T20851] misc userio: Begin command sent, but we're already running [ 900.887368][T20851] misc userio: Begin command sent, but we're already running [ 900.901351][T20851] misc userio: Begin command sent, but we're already running [ 901.028109][ T5810] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 901.049880][ T5810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 901.078053][ T5810] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 901.099187][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 901.122305][ T5810] usb 6-1: Product: syz [ 901.130394][ T5810] usb 6-1: Manufacturer: syz [ 901.135093][ T5810] usb 6-1: SerialNumber: syz [ 901.144297][ T5810] usb 6-1: config 0 descriptor?? [ 901.155480][ T5810] usb 6-1: selecting invalid altsetting 0 [ 901.291409][ T30] audit: type=1400 audit(1766725731.672:8915): avc: denied { getopt } for pid=20860 comm="syz.2.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 901.336465][ T5810] IPVS: starting estimator thread 0... [ 901.450610][T20863] IPVS: using max 43 ests per chain, 103200 per kthread [ 901.480388][T20865] netlink: 'syz.2.3889': attribute type 4 has an invalid length. [ 902.232146][ T5940] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 902.350962][ T30] audit: type=1400 audit(1766725732.665:8916): avc: denied { setopt } for pid=20882 comm="syz.2.3894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 902.480458][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 902.489975][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 902.619516][ T30] audit: type=1400 audit(1766725732.740:8917): avc: denied { connect } for pid=20886 comm="syz.3.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 902.882748][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 902.892158][ T5940] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 902.904416][ T5940] usb 2-1: can't read configurations, error -71 [ 902.996476][ T5862] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 903.220553][ T44] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 903.266083][ T5862] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 903.391330][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.399553][ T5862] usb 4-1: Product: syz [ 903.403862][ T5862] usb 4-1: Manufacturer: syz [ 903.408861][ T5862] usb 4-1: SerialNumber: syz [ 903.693844][ T9] usb 6-1: USB disconnect, device number 61 [ 903.743640][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 903.757225][ T44] usb 5-1: config 222 has an invalid interface number: 31 but max is 0 [ 903.781249][ T44] usb 5-1: config 222 has no interface number 0 [ 903.799762][ T44] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 903.829993][ T44] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 903.859004][ T44] usb 5-1: config 222 interface 31 has no altsetting 0 [ 903.876281][ T44] usb 5-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 903.886559][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.905052][ T44] usb 5-1: Product: syz [ 903.913659][ T44] usb 5-1: Manufacturer: syz [ 903.944860][ T44] usb 5-1: SerialNumber: syz [ 904.051030][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 904.071842][ T5862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 904.095464][ T5862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 904.124722][T20908] lo speed is unknown, defaulting to 1000 [ 904.322531][ T5862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 904.323978][T20893] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 904.335537][ T5862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 904.407510][ T5862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 904.424973][ T5862] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 904.445469][ T5862] usb 4-1: USB disconnect, device number 27 [ 904.501288][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 904.661322][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 904.677741][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 904.700934][ T9] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 904.720994][ T9] usb 6-1: Product: syz [ 904.729579][ T9] usb 6-1: Manufacturer: syz [ 904.746322][ T9] usb 6-1: SerialNumber: syz [ 904.758374][ T9] usb 6-1: config 0 descriptor?? [ 904.812168][ T5940] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 904.843669][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 904.850870][T20893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.877915][T20893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.902227][ T44] ldusb 5-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 905.013839][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 905.115621][T20920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20920 comm=syz.1.3903 [ 905.363989][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 905.374715][ T44] usb 5-1: USB disconnect, device number 49 [ 905.414768][T20924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3904'. [ 905.440956][ T30] audit: type=1400 audit(1766725735.542:8918): avc: denied { read write } for pid=20923 comm="syz.1.3905" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 905.539719][ T30] audit: type=1400 audit(1766725735.542:8919): avc: denied { open } for pid=20923 comm="syz.1.3905" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 905.595219][ T5940] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 905.609005][ T30] audit: type=1400 audit(1766725735.542:8920): avc: denied { ioctl } for pid=20923 comm="syz.1.3905" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 905.645361][ T9] gspca_zc3xx: reg_w_i err -71 [ 905.651077][ T9] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 905.670063][T20930] XFS (nbd1): SB validate failed with error -5. [ 905.719521][ T9] usb 6-1: USB disconnect, device number 62 [ 905.751521][ T30] audit: type=1400 audit(1766725735.851:8921): avc: denied { relabelfrom } for pid=20922 comm="syz.3.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 905.817932][ T30] audit: type=1400 audit(1766725735.870:8922): avc: denied { relabelto } for pid=20922 comm="syz.3.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 905.824802][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.926938][ T44] ldusb 5-1:222.31: LD USB Device #0 now disconnected [ 905.994175][ T5940] usb 3-1: Product: syz [ 906.013565][ T5940] usb 3-1: Manufacturer: syz [ 906.036355][ T5940] usb 3-1: SerialNumber: syz [ 906.082475][ T5940] usb 3-1: config 0 descriptor?? [ 906.088932][T20913] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 906.119619][ T5940] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.220690][T20946] lo speed is unknown, defaulting to 1000 [ 906.260010][T20947] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3909'. [ 906.308498][ T30] audit: type=1400 audit(1766725736.376:8923): avc: denied { mount } for pid=20949 comm="syz.5.3911" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 906.436310][T20953] pim6reg: entered allmulticast mode [ 906.465988][ T30] audit: type=1400 audit(1766725736.497:8924): avc: denied { getopt } for pid=20952 comm="syz.5.3912" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 906.497183][ T44] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 906.669306][ T44] usb 5-1: config 6 has an invalid interface number: 57 but max is 0 [ 906.689644][ T44] usb 5-1: config 6 has no interface number 0 [ 906.699564][ T44] usb 5-1: config 6 interface 57 has no altsetting 0 [ 906.702611][ T9] usb 3-1: USB disconnect, device number 33 [ 906.706338][ T5940] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 906.734320][ T44] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 906.743743][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.751712][ T44] usb 5-1: Product: syz [ 906.766750][ T44] usb 5-1: Manufacturer: syz [ 906.771475][ T44] usb 5-1: SerialNumber: syz [ 906.942721][ T30] audit: type=1400 audit(1766725736.966:8925): avc: denied { read } for pid=20945 comm="syz.1.3910" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 906.999955][ T5940] usb 6-1: unable to get BOS descriptor or descriptor too short [ 907.017147][T20939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.025941][T20939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.026849][ T5940] usb 6-1: config 66 interface 0 has no altsetting 0 [ 907.044361][ T5940] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 907.055821][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.068261][ T5940] usb 6-1: Product: syz [ 907.074698][ T5940] usb 6-1: Manufacturer: syz [ 907.080504][ T5940] usb 6-1: SerialNumber: syz [ 907.093017][ T44] usb-storage 5-1:6.57: USB Mass Storage device detected [ 907.146889][ T44] usb 5-1: USB disconnect, device number 50 [ 907.320145][T20953] netlink: 21 bytes leftover after parsing attributes in process `syz.5.3912'. [ 907.388378][ T5940] ati_remote2 6-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 907.410345][ T5940] usb 6-1: USB disconnect, device number 63 [ 907.682276][ T30] audit: type=1400 audit(1766725737.659:8926): avc: denied { create } for pid=20964 comm="syz.4.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 907.720229][ T30] audit: type=1400 audit(1766725737.659:8927): avc: denied { write } for pid=20964 comm="syz.4.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 907.746712][ T44] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 907.881707][ T30] audit: type=1400 audit(1766725737.837:8928): avc: denied { audit_write } for pid=20962 comm="syz.1.3914" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 907.920925][ T30] audit: type=1400 audit(1766725737.884:8929): avc: denied { map } for pid=20962 comm="syz.1.3914" path="socket:[78453]" dev="sockfs" ino=78453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 907.947447][ T30] audit: type=1400 audit(1766725737.884:8930): avc: denied { read } for pid=20962 comm="syz.1.3914" path="socket:[78453]" dev="sockfs" ino=78453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 907.981844][ T44] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 907.996297][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 908.030538][ T44] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 908.221986][ T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.233252][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 909.265451][ T44] usb 3-1: SerialNumber: syz [ 909.733828][ T30] audit: type=1400 audit(1766725739.580:8931): avc: denied { getopt } for pid=20960 comm="syz.2.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 909.847925][ T5992] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 909.867371][ T30] audit: type=1400 audit(1766725739.618:8932): avc: denied { read write } for pid=20989 comm="syz.4.3920" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 909.881188][ T5992] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 910.091777][ T44] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 910.309963][ T44] usb 3-1: USB disconnect, device number 34 [ 912.180077][ T6117] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 912.429284][ T6117] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 912.441570][ T6117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.463419][ T6117] usb 6-1: config 0 descriptor?? [ 912.984048][ T5940] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 913.064449][T21062] tipc: Enabled bearer , priority 0 [ 913.077392][T21061] tipc: Disabling bearer [ 913.165369][ T44] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 913.173048][ T5940] usb 3-1: Invalid ep0 maxpacket: 16 [ 913.329567][ T5940] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 913.352105][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.374130][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 913.391346][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 913.413056][ T44] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 913.425390][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.445864][T21057] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 913.454389][ T44] hub 4-1:1.0: bad descriptor, ignoring hub [ 913.464548][ T44] hub 4-1:1.0: probe with driver hub failed with error -5 [ 913.483233][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 913.493593][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 913.498912][ T5940] usb 3-1: Invalid ep0 maxpacket: 16 [ 913.507868][ T5940] usb usb3-port1: attempt power cycle [ 913.521332][ T44] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 913.533900][ T44] cdc_wdm 4-1:1.0: Unknown control protocol [ 913.641836][ T6117] ath6kl: Failed to read usb control message: -71 [ 913.649356][ T6117] ath6kl: Unable to read the bmi data from the device: -71 [ 913.656579][ T6117] ath6kl: unable to read target info byte count: -71 [ 913.664280][ T6117] ath6kl: Failed to init ath6kl core: -71 [ 913.670585][ T6117] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 913.682433][ T6117] usb 6-1: USB disconnect, device number 64 [ 913.797024][ T5992] usb 4-1: USB disconnect, device number 28 [ 913.807546][ T44] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 913.892949][ T5940] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 913.902442][T21058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.911584][T21058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.922200][T21058] hfsplus: unable to find HFS+ superblock [ 913.925376][ T5940] usb 3-1: Invalid ep0 maxpacket: 16 [ 913.979988][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.996437][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 914.016593][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.035540][ T44] usb 5-1: config 0 descriptor?? [ 914.063842][ T5940] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 914.180880][ T5940] usb 3-1: Invalid ep0 maxpacket: 16 [ 914.188626][ T5940] usb usb3-port1: unable to enumerate USB device [ 914.235965][ T5992] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 914.246805][T21071] omfs: Invalid superblock (0) [ 914.506730][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 914.512776][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 914.539105][ T44] usb 5-1: USB disconnect, device number 51 [ 914.557810][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 914.557824][ T30] audit: type=1400 audit(1766725744.106:8936): avc: denied { shutdown } for pid=21072 comm="syz.1.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 914.609439][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 914.619700][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 914.896716][ T44] libceph: connect (1)[c::]:6789 error -101 [ 914.905163][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 914.990248][ T30] audit: type=1400 audit(1766725744.499:8937): avc: denied { mounton } for pid=21094 comm="syz.3.3945" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 915.173579][ T30] audit: type=1400 audit(1766725744.528:8938): avc: denied { setopt } for pid=21094 comm="syz.3.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 915.384005][T21097] overlayfs: failed lookup in lower (newroot/161, name='bus', err=-40): overlapping layers [ 915.394278][T21097] overlayfs: failed to resolve './bus': -40 [ 915.417020][ T30] audit: type=1400 audit(1766725744.856:8939): avc: denied { create } for pid=21094 comm="syz.3.3945" name="#4f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 915.627216][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 915.633624][T21079] ceph: No mds server is up or the cluster is laggy [ 915.640410][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 915.675429][ T30] audit: type=1400 audit(1766725744.856:8940): avc: denied { link } for pid=21094 comm="syz.3.3945" name="#4f" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 915.722376][ T30] audit: type=1400 audit(1766725744.856:8941): avc: denied { rename } for pid=21094 comm="syz.3.3945" name="#50" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 916.359810][ T6117] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 916.539677][ T5870] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 916.553077][ T6117] usb 4-1: Using ep0 maxpacket: 16 [ 916.572703][ T6117] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 916.635834][ T6117] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.656352][ T6117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.725068][ T6117] usb 4-1: SerialNumber: syz [ 916.749309][ T5870] usb 5-1: device descriptor read/64, error -71 [ 916.799560][T21121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3952'. [ 916.822122][T21121] tipc: Started in network mode [ 916.828882][T21121] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 916.839428][T21121] tipc: Enabling of bearer rejected, failed to enable media [ 916.954560][T21131] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3956'. [ 916.977073][ T30] audit: type=1400 audit(1766725746.364:8942): avc: denied { mount } for pid=21133 comm="syz.1.3954" name="/" dev="configfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 917.004900][ T6117] usb 4-1: USB disconnect, device number 30 [ 917.016167][T21134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.025722][T21134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.033371][T21134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.051966][ T5870] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 917.068119][T21134] bond0: (slave batadv0): Releasing backup interface [ 917.084243][ T30] audit: type=1400 audit(1766725746.467:8943): avc: denied { create } for pid=21133 comm="syz.1.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 917.130470][ T30] audit: type=1400 audit(1766725746.467:8944): avc: denied { connect } for pid=21133 comm="syz.1.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 917.212332][ T5870] usb 5-1: device descriptor read/64, error -71 [ 917.239665][ T30] audit: type=1400 audit(1766725746.608:8945): avc: denied { bind } for pid=21140 comm="syz.1.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 917.342878][ T5870] usb usb5-port1: attempt power cycle [ 917.519896][T21153] netlink: 'syz.1.3961': attribute type 10 has an invalid length. [ 917.533205][T21153] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.541116][T21153] bond0: (slave team0): Enslaving as an active interface with an up link [ 918.087178][ T5870] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 918.139571][T21151] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 918.411720][ T5870] usb 5-1: device descriptor read/8, error -71 [ 918.515034][ T5940] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 918.602048][T21162] netlink: 'syz.3.3963': attribute type 2 has an invalid length. [ 918.610620][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 918.674164][ T5870] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 918.696556][ T5870] usb 5-1: device descriptor read/8, error -71 [ 918.727509][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 918.737038][ T5940] usb 6-1: unable to get BOS descriptor or descriptor too short [ 918.756834][ T5940] usb 6-1: config 7 has an invalid interface number: 128 but max is 0 [ 918.774095][ T5940] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 918.790515][ T5940] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 918.791604][ T6117] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 918.812683][ T5940] usb 6-1: config 7 has no interface number 0 [ 918.813141][ T5870] usb usb5-port1: unable to enumerate USB device [ 918.825625][ T5940] usb 6-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 918.846067][ T5940] usb 6-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 918.865789][ T5940] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 918.877768][ T5940] usb 6-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 918.887829][ T5810] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 918.898398][ T5940] usb 6-1: config 7 interface 128 has no altsetting 0 [ 918.913971][ T5940] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 918.932885][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.945689][ T5940] usb 6-1: Product: syz [ 918.949888][ T5940] usb 6-1: Manufacturer: syz [ 918.954556][ T5940] usb 6-1: SerialNumber: syz [ 918.960850][T21158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 918.988625][ T6117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 918.998292][ T6117] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 919.025571][ T6117] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 919.035229][ T6117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.044253][ T6117] usb 3-1: Product: syz [ 919.060223][ T6117] usb 3-1: Manufacturer: syz [ 919.064836][ T6117] usb 3-1: SerialNumber: syz [ 919.079667][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 919.089446][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 919.101337][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 919.115028][ T5810] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 919.130965][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.139383][ T5810] usb 2-1: Product: syz [ 919.144058][ T5810] usb 2-1: Manufacturer: syz [ 919.148686][ T5810] usb 2-1: SerialNumber: syz [ 919.155398][T21172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3967'. [ 919.206975][T21158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.217167][T21174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.218590][T21158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.234645][ T5810] usb 2-1: config 0 descriptor?? [ 919.259135][ T5810] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 919.272474][ T5810] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 919.361762][ T5940] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 919.373619][ T5940] usb 6-1: MIDIStreaming interface descriptor not found [ 919.438668][ T5940] usb 6-1: USB disconnect, device number 65 [ 919.470835][T21184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.492437][T21184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.550988][T21186] EXT4-fs: Conflicting test_dummy_encryption options [ 919.687105][ T5810] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 919.693846][ T5810] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 919.709458][ T5810] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 919.719887][ T5810] em28xx 2-1:0.0: No AC97 audio processor [ 919.758280][ T5810] usb 2-1: USB disconnect, device number 10 [ 919.772807][ T5810] em28xx 2-1:0.0: Disconnecting em28xx [ 919.792396][ T5810] em28xx 2-1:0.0: Freeing device [ 919.801996][T21192] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 919.924550][ T5940] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 920.240356][T21195] lo speed is unknown, defaulting to 1000 [ 920.609742][T21192] lo speed is unknown, defaulting to 1000 [ 921.043405][ T6117] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 921.075416][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 921.108958][ T5940] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 921.110438][ T6117] usb 3-1: device reset changed ep0 maxpacket size! [ 921.117176][ T5940] usb 5-1: config 0 has no interface number 0 [ 921.132804][ T5940] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 921.149689][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.164880][ T5940] usb 5-1: Product: syz [ 921.169075][ T5940] usb 5-1: Manufacturer: syz [ 921.173704][ T5940] usb 5-1: SerialNumber: syz [ 921.183985][ T5940] usb 5-1: config 0 descriptor?? [ 921.481592][ T6117] usb 3-1: USB disconnect, device number 39 [ 921.620035][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 921.632254][ T5940] msi2500 5-1:0.246: Registered as swradio24 [ 921.643798][ T5940] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 921.716926][ T6117] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 921.735203][ T5940] usb 5-1: USB disconnect, device number 56 [ 922.138439][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3976'. [ 922.166022][T21211] chnl_net:caif_netlink_parms(): no params data found [ 922.392570][T21215] xt_hashlimit: size too large, truncated to 1048576 [ 922.504730][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 922.504755][ T30] audit: type=1400 audit(1766725751.546:8956): avc: denied { map } for pid=21214 comm="syz.2.3977" path="socket:[80043]" dev="sockfs" ino=80043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 922.752537][T21225] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 923.840926][T21223] Dead loop on virtual device ip6_vti0, fix it urgently! [ 923.852089][ T30] audit: type=1400 audit(1766725751.593:8957): avc: denied { write } for pid=21216 comm="syz.1.3979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 924.021024][ T30] audit: type=1400 audit(1766725751.808:8958): avc: denied { read } for pid=21217 comm="syz.4.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 924.246950][ T30] audit: type=1400 audit(1766725753.185:8959): avc: denied { listen } for pid=21231 comm="syz.5.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 924.401367][ T30] audit: type=1400 audit(1766725753.242:8960): avc: denied { accept } for pid=21231 comm="syz.5.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 924.790843][T21246] mkiss: ax0: crc mode is auto. [ 924.888382][T18235] bond0: (slave syz_tun): Releasing backup interface [ 924.899289][T21254] netlink: 'syz.3.3987': attribute type 4 has an invalid length. [ 924.907187][ T1155] smc: removing ib device syz1 [ 925.126688][T21258] SET target dimension over the limit! [ 925.170609][ T30] audit: type=1400 audit(1766725754.038:8961): avc: denied { read } for pid=21255 comm="syz.4.3990" dev="sockfs" ino=80120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 925.193740][T21257] 9p: Bad value for 'rfdno' [ 925.233946][ T30] audit: type=1400 audit(1766725754.076:8962): avc: denied { setattr } for pid=21255 comm="syz.4.3990" path="socket:[80133]" dev="sockfs" ino=80133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 925.313457][ T30] audit: type=1400 audit(1766725754.076:8963): avc: denied { create } for pid=21255 comm="syz.4.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 925.356491][T21268] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=21268 comm=syz.5.3991 [ 925.399762][T21271] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3993'. [ 925.410210][T21271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3993'. [ 925.420850][T21268] netlink: 'syz.5.3991': attribute type 10 has an invalid length. [ 925.428705][T21268] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3991'. [ 925.524660][ T30] audit: type=1400 audit(1766725754.366:8964): avc: denied { block_suspend } for pid=21266 comm="syz.4.3992" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 925.546420][T21276] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 925.590358][ T30] audit: type=1400 audit(1766725754.366:8965): avc: denied { write } for pid=21266 comm="syz.4.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 928.193888][ T5992] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 928.418180][ T5992] usb 5-1: device descriptor read/64, error -71 [ 928.812384][ T1155] ------------[ cut here ]------------ [ 928.818216][ T1155] GID entry ref leak for dev syz1 index 2 ref=1 [ 928.824759][ T1155] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#1: kworker/u8:9/1155 [ 928.836656][ T1155] Modules linked in: [ 928.840753][ T1155] CPU: 1 UID: 0 PID: 1155 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.851994][ T1155] Tainted: [L]=SOFTLOCKUP [ 928.856486][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 928.866691][ T1155] Workqueue: ib-unreg-wq ib_unregister_work [ 928.872658][ T1155] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 928.878928][ T1155] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 ea 67 4d f9 48 8d 3d 93 af 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 d0 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 928.898726][ T1155] RSP: 0018:ffffc9000477fac8 EFLAGS: 00010293 [ 928.904768][ T1155] RAX: 0000000000000000 RBX: ffff88814b52a800 RCX: 0000000000000001 [ 928.912871][ T1155] RDX: 0000000000000002 RSI: ffff8880837ebc40 RDI: ffffffff90952e20 [ 928.920982][ T1155] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100eb4af60 [ 928.928927][ T1155] R10: ffff888075a57b03 R11: 0000000000002ba1 R12: ffffed10296a551b [ 928.936884][ T1155] R13: ffff888073334000 R14: 0000000000000002 R15: dffffc0000000000 [ 928.944862][ T1155] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 928.953787][ T1155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.960353][ T1155] CR2: 00007f6db9472f98 CR3: 0000000046a7b000 CR4: 00000000003526f0 [ 928.968345][ T1155] Call Trace: [ 928.971606][ T1155] [ 928.974715][ T1155] ib_device_release+0xef/0x1e0 [ 928.979576][ T1155] ? __pfx_ib_device_release+0x10/0x10 [ 928.985037][ T1155] device_release+0xa4/0x240 [ 928.989608][ T1155] kobject_put+0x1ef/0x6f0 [ 928.994008][ T1155] put_device+0x1f/0x30 [ 928.998164][ T1155] process_one_work+0x9ba/0x1b20 [ 929.003098][ T1155] ? __pfx_process_one_work+0x10/0x10 [ 929.008475][ T1155] ? assign_work+0x1a0/0x250 [ 929.013043][ T1155] worker_thread+0x6c8/0xf10 [ 929.017646][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 929.022733][ T1155] kthread+0x3c5/0x780 [ 929.027455][ T1155] ? __pfx_kthread+0x10/0x10 [ 929.032051][ T1155] ? rcu_is_watching+0x12/0xc0 [ 929.036795][ T1155] ? __pfx_kthread+0x10/0x10 [ 929.041428][ T1155] ret_from_fork+0x983/0xb10 [ 929.046199][ T1155] ? __pfx_ret_from_fork+0x10/0x10 [ 929.051340][ T1155] ? __switch_to+0x7af/0x10d0 [ 929.057340][ T1155] ? __pfx_kthread+0x10/0x10 [ 929.062001][ T1155] ret_from_fork_asm+0x1a/0x30 [ 929.066755][ T1155] [ 929.070619][ T1155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 929.077874][ T1155] CPU: 1 UID: 0 PID: 1155 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.088864][ T1155] Tainted: [L]=SOFTLOCKUP [ 929.093161][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 929.103190][ T1155] Workqueue: ib-unreg-wq ib_unregister_work [ 929.109065][ T1155] Call Trace: [ 929.112318][ T1155] [ 929.115224][ T1155] dump_stack_lvl+0x3d/0x1f0 [ 929.119791][ T1155] vpanic+0x640/0x6f0 [ 929.123749][ T1155] ? gid_table_release_one+0x1ad/0x450 [ 929.129183][ T1155] panic+0xca/0xd0 [ 929.132875][ T1155] ? __pfx_panic+0x10/0x10 [ 929.137270][ T1155] ? check_panic_on_warn+0x1f/0xb0 [ 929.142356][ T1155] check_panic_on_warn+0xab/0xb0 [ 929.147275][ T1155] __warn+0x108/0x3c0 [ 929.151241][ T1155] __report_bug+0x2a0/0x520 [ 929.155722][ T1155] ? gid_table_release_one+0x1ad/0x450 [ 929.161163][ T1155] ? __pfx___report_bug+0x10/0x10 [ 929.166184][ T1155] report_bug_entry+0xe1/0x290 [ 929.170926][ T1155] ? gid_table_release_one+0x1b6/0x450 [ 929.176370][ T1155] handle_bug+0x18a/0x260 [ 929.180683][ T1155] exc_invalid_op+0x17/0x50 [ 929.185163][ T1155] asm_exc_invalid_op+0x1a/0x20 [ 929.189987][ T1155] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 929.196029][ T1155] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 ea 67 4d f9 48 8d 3d 93 af 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 d0 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 929.215616][ T1155] RSP: 0018:ffffc9000477fac8 EFLAGS: 00010293 [ 929.221655][ T1155] RAX: 0000000000000000 RBX: ffff88814b52a800 RCX: 0000000000000001 [ 929.229598][ T1155] RDX: 0000000000000002 RSI: ffff8880837ebc40 RDI: ffffffff90952e20 [ 929.237540][ T1155] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100eb4af60 [ 929.245480][ T1155] R10: ffff888075a57b03 R11: 0000000000002ba1 R12: ffffed10296a551b [ 929.253432][ T1155] R13: ffff888073334000 R14: 0000000000000002 R15: dffffc0000000000 [ 929.261382][ T1155] ? gid_table_release_one+0x1a6/0x450 [ 929.266823][ T1155] ib_device_release+0xef/0x1e0 [ 929.271654][ T1155] ? __pfx_ib_device_release+0x10/0x10 [ 929.277102][ T1155] device_release+0xa4/0x240 [ 929.281676][ T1155] kobject_put+0x1ef/0x6f0 [ 929.286081][ T1155] put_device+0x1f/0x30 [ 929.290226][ T1155] process_one_work+0x9ba/0x1b20 [ 929.295150][ T1155] ? __pfx_process_one_work+0x10/0x10 [ 929.300515][ T1155] ? assign_work+0x1a0/0x250 [ 929.305087][ T1155] worker_thread+0x6c8/0xf10 [ 929.309661][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 929.314749][ T1155] kthread+0x3c5/0x780 [ 929.318795][ T1155] ? __pfx_kthread+0x10/0x10 [ 929.323361][ T1155] ? rcu_is_watching+0x12/0xc0 [ 929.328095][ T1155] ? __pfx_kthread+0x10/0x10 [ 929.332659][ T1155] ret_from_fork+0x983/0xb10 [ 929.337232][ T1155] ? __pfx_ret_from_fork+0x10/0x10 [ 929.342326][ T1155] ? __switch_to+0x7af/0x10d0 [ 929.347071][ T1155] ? __pfx_kthread+0x10/0x10 [ 929.351657][ T1155] ret_from_fork_asm+0x1a/0x30 [ 929.356417][ T1155] [ 929.359694][ T1155] Kernel Offset: disabled [ 929.363991][ T1155] Rebooting in 86400 seconds..