last executing test programs: 3m13.496715825s ago: executing program 1 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x1) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xd038, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0xc, 0x3, "182102"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@lsrr={0x83, 0x7, 0xe3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100032caaa2102b0503180ff501020301090212000166081000090410ff00f14b390d669093aedf13f92fa5d3958bb7219a3bf48e941357180ba376e5ba781984f188a38c4faa2034449f125e56240fe237666ff74940a7f7236885c7aef3"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) 3m10.658275606s ago: executing program 1 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000200085000000c400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m10.151180317s ago: executing program 1 (id=140): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x2, 0x10040, 0x80, 0xd, 0x10, 0x4, 0x2, 0x2000000, 0x20, 0x1d, 0x10, 0xca4, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x4) vmsplice(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r9, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m9.510347611s ago: executing program 1 (id=142): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4bfa, 0x6000000000000041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ip={@broadcast, @local, 0xff000000, 0xffffffff, '\x00', 'vlan0\x00', {}, {0xff}, 0x2f, 0x1, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xb, 0xf, [0x8, 0x11, 0x1, 0xd, 0x35, 0x2c, 0x7, 0xa, 0x40, 0x10, 0x1b, 0x0, 0x4, 0x0, 0x2b, 0x3b], 0x0, 0x4, 0x7f}}}, {{@ip={@remote, @multicast1, 0x0, 0xff, 'bond0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x30}, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'syz_tun\x00', {0x38d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mq_open(&(0x7f0000000400)='!s\xc6(X\xc7_\xa4BM\xa0\xdc]q\xc6\xc0\xbd4yL\x0f\xb2(O\xd7\"D\x9e\xae\xd0Bf\xa2WICn)\xd62\t\b\x9cK\xc8Q\xf6\xa9\xb7pa\x8c\xb2\x1c\xe3\x94\"\xc3\x0e\xb2N\xac\xf9\x10\ra\xef\x05\xc6f\x92\xd1$\xbbh\xe9\x85\xd7<\x8er\x82\"\xc0D\xcb)\xfc\xdf\x88V\xd9\xee\xb8j\x1dO\xd5\xbf\x8cY\x14\xf0*`\xbe\x87\xbb\xfe\xdc\x89\xf5{\xd1\xa6\xf0\xe0\x17jj\xf7\x1dJ\x89\x93\x84\xbe\x05\x89\xc3\xa6>\x90\x9b\xee\x96\xba\x1a\f\xf0\xcd\xa3#\x1biJ\x8b\x19\x8e\xd5P\xeb\r\xc9I~#6x\xf9\r\x87\xac3[zt\xd0e\x10\xd8\x90v\xad2\xa3w\"}\x84\x95p\xfc\xf7F\xfe\x8c\xf5\xfc[\xd6\xaa\x90\x18\xc1 \xa5;\x92\xa2\xe6\x0f%\xf7\x9c\xb5\x0fQ\x0e|T\xf7\x8c\xa9g\xa0\xcdP\n\x9a\x88Q\x8d~&\xcev\x01\x8e\xd07\xb4\xba\xb3\xf7\xfb\xcf\x12i\tw\x9d\xa1d\x84\xe3\x7f\xaci=4\xad\x02\xe6\x7fz\xa2\x01CN\x9d\x93\x14\x8fq\xb2f\x88x,xHe\xd0\xe8o\x88K\x8f\x8c\xa6\xd8*f\xc8j\xd9\n\xa2Q0\xc0\xe1\x81k\xf2\xe1\xcf\xc6\x1d\xd1Z\xa5\xe7\xb6=\xdb\x06n\x9b\xda\x8ah\xd4\xaa\x8c\xe7d\xf9\\\xef\xb0+\x8d)n\xbe=\x1b\x9bu\x16U\x86Q\xcf\xf0\xfb\x0e\aSQ)\xfcf\x1e\x04\xebf0^(\x00\x11\x13\xe6\x1f\xde\x98\x05\x00\x00\x00\xd8\x04<@\x8c1\\\x93\xc4\v\xd8\x06\xb2\x87\x8a|\xe1\xde\xdb\xdcD\xa3\xeeYL\x90\x13\xa5[\x8f\xb9\xc3\xee \x8ey\x85\xde`\xda\x97n \xacy\xf2k\xcec1C\xf1\xbb\xa5E38kE\x84Z\xca@p\xa8N\n\x9a\xdd\x9eT\xe0b\xcd\xff\xf9\xec\x8c\xc2\x1eV\xc5\xa6\xeb\xe6\x977\x18\xc3\x01\xee\xe0c\x0f\xbb\n&[\xc2\xef\xe8\x9d\xce);r\xbd\a\x93\xce5l\x1c1\xd5$\a\x1fW\x1d(>t\x81\x9bH1\x11\xd9W\xc5\x91\x96\x1a5\x8d\xa4o\r\xec\xdc|]\xef\x81\xcd\x90\x05\xd1\xea\xc4q-\xf8\xe6ZG\xdcz\xa1n\x8e\x94\x89o\xbf\xf7O\v\xc2\x97%\xc1\x14\xa7F\xc3\x13\xae\xa1\xc7+\xd0S\xd7w\x87\xd2\xdc\xbf\x86>\xfa\xf9\xb9\xc8\xef\xb5!\xda \xaf\xbd8%\b\xd4\xfd\xc9\x00\x05p\xf7Y\x17\x90\x8f7B\xbfSO\xb55e\x8e\x83\x95', 0x40, 0x90, 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x808, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00') chdir(&(0x7f00000000c0)='./file1\x00') capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x1, 0x3, 0x20000007}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd26, 0x25dfdbed, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffe0, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "f16bc1ea12f2ab9702e74eaac146a398"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "3cf4e8ba9c7b364101da7c8c36ff940b"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3m8.715906598s ago: executing program 1 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) 3m8.210402597s ago: executing program 1 (id=148): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x303843) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r3, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x27800000000, 0x0, 0x0, r3, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x70bd28, 0x25dfdbff, {0xa, 0x20, 0x0, 0x21, 0xfd, 0x0, 0xfd, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040044) write$tun(r0, &(0x7f0000000340)=ANY=[], 0xfdef) read$msr(r0, 0x0, 0x0) 3m7.711315883s ago: executing program 32 (id=148): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x303843) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r3, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x27800000000, 0x0, 0x0, r3, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x70bd28, 0x25dfdbff, {0xa, 0x20, 0x0, 0x21, 0xfd, 0x0, 0xfd, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040044) write$tun(r0, &(0x7f0000000340)=ANY=[], 0xfdef) read$msr(r0, 0x0, 0x0) 1m19.384781156s ago: executing program 3 (id=504): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) preadv(r4, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/100, 0x64}, {&(0x7f0000001040)=""/242, 0xf2}], 0x2, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3, 0x365}]}) write$ppp(r6, &(0x7f0000000400)='k\'', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r7, 0x80045105, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x2000000) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000340)="6e8043d56edf1acef62b6839d0fc073cbca80acd5fc64e9a5ca062d1ca251d7d406c329ef64cc532a6ab46ecfe1ffa1ef277287b178fe1", 0x0, 0x500, 0x60000000, 0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r9 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x140e, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40000c0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m18.527858507s ago: executing program 3 (id=507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x2573, 0x4) sendto$inet(r9, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 1m17.165711409s ago: executing program 3 (id=512): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224000100001010090459e102ff063d0009050b0200020500ff0905820206"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="20205c0000005c0d6da262133756c9363f27100da5b70500d7484e8cbb76948f73ba27bfd7bfe9097404500935437a6f87a30e653fb8041b517abdac737ff36282f4ae49a0c486e2340354f294251e874c97ec1a30f5a932b52811acb6473810e54c0a7a6562208c5c255f3af7eb55d5da1c3b1cac593fb8e6b094f63f9accb4f420aa6901eaa52f000f69046c3ee79b1b7581592849e1d6f1965eb6973f6bf003d4e9c664d89063571a9a020b2449810cc931c3abad445df89213c997b5b643f6f2d5732886d9b99658ca1bcd3fd56970ca9ba5f4bff60ff80fb4fcbed81934a2ebf7e5f0337d1a955456a5b1a38640451b79bc9a"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000b00)=ANY=[@ANYBLOB="4017830000007a8a0411ed06a169622cd33780c6fb2a6bd2e3216b710616aa5f3dbe1ae260cfb9aa8b73f2e03c65d00d0e07c33a5c9bc0a2e05ec98c9e549fa1cb3ad3edf336d9ed46996f682f310c7fc89a30c2fc9e1e0c14a8dae2867e1f7ec307fdffb945b82bb240556c46c837e38565529f7425ae856a66584ce25181850eef4cabc79358d9"], &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000000)={0x20, 0x81, 0x2, "dd74"}, &(0x7f0000000c80)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "e244c5"}, &(0x7f0000000d00)={0x20, 0x84, 0x4, "7a4d0e72"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "17d6ac"}}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket$kcm(0x21, 0xa, 0xa) setresgid(0xee00, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x16000, 0x800, 0x3, 0x43b17eec204a78ca}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x100, 0x141102) mknod$loop(0x0, 0xc000, 0x1) mount(&(0x7f0000000140)=@filename='./file0\x00', 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m14.140363364s ago: executing program 3 (id=517): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc080000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="00000000000000000c00010000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffdfff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000000000000000000000001000000003c00000002000000ac1414aa0000000400000000000000000600000004030000000000000000000000000000da748aaefbc28ef9a0ff6a364f562842abbbf00ea9555d5e0f19e9404bd5c67486314a23eaa09a8834ee4681f944527c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0xffffffffffffffff, r5, r5) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x3, 0x34888521, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r6, r3, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="340700d7", @ANYRES16=r8, @ANYBLOB="180729bd7000fbdbdf25100000000c000600010000000100000005001000650000000c0006000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x8104) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r10, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) io_submit(r10, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, 0x0}]) r11 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3) fcntl$addseals(r11, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0xa, 0x3) 1m13.727585382s ago: executing program 3 (id=518): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x40, 0x0, 0x159}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000180)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000018}, 0xa3e628aca6e5c506) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x28, 0x1, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) getrlimit(0x4, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000e40)={0x2c, &(0x7f0000000c40)={0x20, 0x2, 0xcf, {0xcf, 0x22, "864d1287bfe503289377a72e88270a4e1bc66a7348d561cea16e765f1ee7de1893cc0fb039bf8d26b2756017da1c1f79c1a060f355c8dbc87b82a6f463dc12a3bf39e464a9c0fff023458cf583f5fa2a5f746c70f68b4a386c57c65473ce589dea681a5c70f5679110470b3cf2de18df17f1f7f2767486730119f73b6ab93dff3a8a700327adf3c67c12172de9927e53eccf63f83b86ea34f5abc744feae92e97782e611b5b94b1ee66460a3af3560b40a204595a19270695b34695b29f60e22823ec6e5d488740d8eec2fdf22"}}, &(0x7f0000000d40)={0x0, 0x3, 0xa, @string={0xa, 0x3, "dd5368b3d37fc0ad"}}, &(0x7f0000000d80)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x1, 0xff0f, 0xfff1, [0xc000, 0xffc0cf]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x8, 0xf, 0x80, [0xff0000]}]}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x8, 0x6, "2faa139a", "8ccf6261"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0xff, 0x3b, 0x4, 0x800, 0x6}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e80)={0x20, 0x16, 0x1e, "f69c2727ee03f357dddc6efc54a3cd3dbdedcdd6b951ce31c9ffd114f1f5"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000001040)={0x40, 0xb, 0x2, "32f0"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001100)={0x40, 0x17, 0x6}, &(0x7f0000001140)={0x40, 0x19, 0x2, "8d8d"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001200)={0x40, 0x1e, 0x1}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0xb3}}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffb, 0x204000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) 1m13.371908674s ago: executing program 3 (id=520): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x37) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c9ffeabd518c7ef0ac8c977c726766f973", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000f0000007a0000000a001a000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x10000000) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x8, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) flock(0xffffffffffffffff, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r10 = timerfd_create(0x0, 0x800) timerfd_gettime(r10, 0x0) sysfs$3(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_kvm_assert_syzos_kvm_exit$x86(0x0, 0x4) syz_usb_control_io(r0, 0x0, 0x0) 1m12.970670602s ago: executing program 33 (id=520): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x37) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c9ffeabd518c7ef0ac8c977c726766f973", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000f0000007a0000000a001a000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x10000000) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x8, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) flock(0xffffffffffffffff, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r10 = timerfd_create(0x0, 0x800) timerfd_gettime(r10, 0x0) sysfs$3(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_kvm_assert_syzos_kvm_exit$x86(0x0, 0x4) syz_usb_control_io(r0, 0x0, 0x0) 15.249922746s ago: executing program 6 (id=685): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x35315241, 0x0, 0xfffffff7, 0x8, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x5}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000210557510110f3020fda9010203010902240001de0d000809041f0b02511bdcfc09058e03000203070909050e", @ANYRES64=r0, @ANYBLOB="ad"], 0x0) 13.893510145s ago: executing program 4 (id=690): futex(&(0x7f0000000000)=0x400, 0x5, 0x0, 0x0, &(0x7f0000000500)=0x2, 0x1) syz_open_dev$video4linux(&(0x7f0000000040), 0x505, 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x840000000002, 0x3, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x309, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x2, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r2, &(0x7f0000000140)=""/116, 0x74) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x121}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f00007af000/0x4000)=nil, 0x800000}) 13.816523203s ago: executing program 6 (id=691): syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x3580}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='\x04d', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/221, 0xdd}], 0x4}}], 0x1, 0x0, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) listen(r4, 0xd) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)={0x20002015}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'wlan1\x00', {0x4}, 0x3}) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) 12.316498344s ago: executing program 6 (id=694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x0, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@gettaction={0x78, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x15d}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfff}]}, 0x78}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) socket$nl_generic(0x10, 0x3, 0x10) (async) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000200)=0x188, 0x4) (async) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r9 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r9, &(0x7f0000000640)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="400bec000000ec06449a5c65280dd6dbf467a9593542a8d7a3f7194ee0b55c520f06a3e3a0c130baba016655f67c92173847c506f2f039c4569d3e9caef0e9ae479da06e850a3de7c9388ff3f695f1670b12d2ca8ab8347fc0e44e43e96fb3b3851ccc50e097b1b4cfdf64fc679104c47a5ed51b5ea2471c73e9ffd18d4f3443fa9741d19e4bf72e55cedd3a4c771444c3d7b092ce9ad336de436a1257ccafd15cdc33a1005715727e0796719bc15f36dc3358abc5960e68096f4f19c9fbe2bc639394235b23361c9309b10babc0584801ed164c6fc28a1de888166d6353e18e3d859178fcaef431e18b0000000000000000"], &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'/10]}, &(0x7f00000019c0)={0x34, &(0x7f0000000780)=ANY=[@ANYBLOB="400186000000ab26f66c97d00a090603ad3c3a5b8b3ba39f107ed03ec1dfa40cf6b2d659c35bd667738c6cb1883f772a27fe4fbde7485380d17d11ba11bba5781d508d694bf67322dbac5d23ee13c44ca17cf2614b7e4a26314881e155a542ca927144f0a745fce5eebd6544248ae9705dc248e4e70aaa18b0197157dffb80e9921d3e1d8a3d5bed73af90cd"], &(0x7f0000001880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001900)={0xc0, 0xa1, 0x4, 0x83d6}, &(0x7f0000001940)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000001980)={0xc0, 0xa2, 0x2f, "34933d2e4a0171b98e3f01f5b65e456684a335c694c40a78e074012ba7e748d0303c15ed9c6c450ac38f781ab7f2ea"}}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001a00)=@deltfilter={0xd0c, 0x2d, 0x100, 0x70bd28, 0x25d7dbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff1}, {0x9, 0x4}, {0x6, 0x45a4138053d75b32}}, [@filter_kind_options=@f_u32={{0x8}, {0xcb0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0xd}}, @TCA_U32_HASH={0x8, 0x2, 0xbd7}, @TCA_U32_SEL={0x724, 0x5, {0x0, 0x81, 0x7, 0x1, 0x8001, 0x3, 0x6, 0x1, [{0x9, 0x3, 0x7f, 0x902a}, {0x0, 0x1, 0x10, 0x8}, {0x2, 0x0, 0x11944670, 0x2}, {0x4, 0xf, 0x4b2fcccc, 0x5}, {0x1, 0x1, 0x7, 0x5e43c840}, {0x3, 0x9, 0x4, 0xfffffff7}, {0x7ada, 0xd9, 0x22ac080a}, {0x0, 0x0, 0x680, 0x9}, {0x5, 0x10, 0x8, 0x9}, {0x7f, 0xffffffff, 0x101}, {0x7, 0xfffffffc, 0x2, 0x1}, {0x80000001, 0x7f, 0x7, 0x9}, {0xf2a6, 0x8c, 0x8, 0x7}, {0xf08, 0x6cd4, 0x8, 0x2}, {0xf, 0x200, 0x7, 0x3}, {0x6, 0xd786, 0x3, 0x53eb}, {0xd7d, 0x5, 0x1ff, 0x9}, {0x6, 0xff, 0x401, 0x20c1fcd7}, {0x10000, 0x3, 0x0, 0x10}, {0x8, 0xfffffffa, 0x8a, 0x2}, {0x100, 0x9, 0x9, 0x7}, {0x6153, 0xfffffffa, 0x9, 0x80000}, {0x6, 0x65cc, 0xfffffff7, 0x2}, {0xfffffff7, 0x8, 0xfffff05d, 0x1}, {0x8, 0x3, 0x7, 0x80}, {0x100, 0x5, 0x2, 0x5}, {0x4, 0x75, 0x6, 0x5c7}, {0x3, 0x7, 0x5, 0x3}, {0x6, 0x8ad4, 0x7f, 0x3}, {0xfffff801, 0x8, 0x2, 0x5}, {0x3, 0x8, 0x3, 0x3f78}, {0x1, 0x3, 0xfab, 0x1}, {0x2, 0xfffffffc, 0xffffffff, 0x2}, {0x200, 0x2, 0x5, 0x4}, {0x5, 0x9, 0x4, 0x8001}, {0x400, 0x7fff, 0xd, 0x24d03e44}, {0x5, 0x8bf, 0x2, 0x9}, {0x0, 0x1, 0x9, 0xb1a}, {0x1, 0x5, 0xfffffffd, 0xfdd}, {0x0, 0x9, 0x0, 0xfffffff8}, {0x926, 0x0, 0x8, 0xf}, {0x4, 0x48, 0x4, 0xfffff3c6}, {0x5, 0x2, 0x8, 0x800}, {0x3, 0x2, 0xf, 0xfffffffb}, {0x2, 0x4, 0x4, 0x3}, {0x80000000, 0x3, 0x9}, {0x304, 0xf52f, 0x8, 0x6}, {0x8, 0x5, 0x5, 0x7}, {0x0, 0x9, 0x3, 0x10001}, {0x8, 0x8a23, 0xffffffff, 0x3}, {0x6, 0x401, 0xf, 0x22495b1f}, {0x7, 0x39dc, 0x8, 0xc}, {0x7, 0x101, 0x7f, 0xdf2b}, {0x10, 0x0, 0x4, 0x55}, {0x4, 0x3, 0x5, 0x1}, {0xb, 0x8000, 0x3, 0x3}, {0x80000000, 0x9, 0x5d, 0x2}, {0x6, 0x2, 0xffff}, {0x1, 0xe8, 0x5, 0x10}, {0x9, 0x4, 0x8, 0x9}, {0x8000, 0x81, 0x32ea, 0x8}, {0x8, 0x5, 0x7, 0x2}, {0x2f2, 0x8c2, 0xcc5, 0x4}, {0xff, 0x5a02b633, 0x8, 0x3}, {0x2, 0x7, 0xc01, 0x5}, {0x5, 0x100, 0x60000, 0xb}, {0x5, 0x9, 0x9, 0x6}, {0x0, 0x7, 0x4188fccc, 0x6}, {0x3, 0x9, 0xd0, 0x5}, {0x8, 0x8, 0x4, 0x9}, {0x53, 0x9, 0x7, 0x8000}, {0x9, 0xd, 0x100, 0xe574}, {0xe, 0x8, 0x400, 0x6}, {0x6, 0x624e, 0xd, 0x4}, {0x1, 0x9, 0x2, 0x3}, {0x7, 0x5, 0x1}, {0xa71, 0x7, 0x9, 0x8000}, {0x8, 0x0, 0x9, 0x6}, {0x1, 0x3, 0x0, 0x5}, {0x8, 0x25, 0x8000, 0x2}, {0x0, 0xe1cd, 0x2, 0x8}, {0x8000, 0xfffff958, 0x5, 0x6}, {0x3, 0x6, 0x10000, 0x90}, {0x1, 0x10000, 0x8, 0xffffff06}, {0x4, 0x2, 0x2, 0x9}, {0x1, 0x6, 0x8, 0xffffffff}, {0x200, 0x4, 0x8, 0x8}, {0x1, 0xfffff861, 0x6, 0x2}, {0x401, 0x7, 0x3, 0x5b}, {0x2, 0x6778, 0x52, 0x53ac}, {0x9, 0x0, 0x7f, 0x1}, {0x4, 0x8, 0x2, 0x7f}, {0x101, 0x81, 0x7a}, {0x9, 0x401, 0x0, 0xffffffff}, {0x0, 0x4, 0x3}, {0x800, 0x5, 0x7f, 0xd2a}, {0x80, 0x7, 0x80000001}, {0x0, 0x1, 0x2, 0x4}, {0x7, 0xfffffffd, 0x7fffffff, 0xa0000000}, {0x2, 0x40, 0x4, 0x7}, {0xe, 0x5, 0x0, 0xb}, {0x2, 0x3, 0xc, 0x7}, {0x7, 0x9, 0x3, 0x6}, {0xffffffff, 0x2000000}, {0xff04a000, 0x1, 0x80000001, 0xd}, {0x1, 0x8, 0x0, 0x3ff}, {0x6, 0x10000, 0x5, 0x3}, {0x1, 0x3, 0x9}, {0x8, 0x4, 0xd, 0x40}, {0x7, 0x3, 0x8, 0xff}, {0x7, 0x2, 0x7, 0x2}, {0x63, 0x2, 0x81, 0x5}, {0x8001, 0x8, 0x0, 0x101}]}}, @TCA_U32_SEL={0x3d4, 0x5, {0x3, 0x2, 0x6, 0xa6, 0x86, 0xc, 0x0, 0x10001, [{0x101, 0x0, 0x7ff, 0x9}, {0x1, 0x8, 0x10001, 0x4}, {0xfff, 0xde6a, 0xfffffff9, 0x9}, {0x2, 0xa8, 0x6, 0xd}, {0x7fffffff, 0xff, 0x1000, 0xffffffda}, {0x3, 0x36, 0x7f, 0x8}, {0x0, 0x6, 0x2, 0x5}, {0x6, 0x4, 0x7, 0x5}, {0x0, 0x7, 0x8001, 0x2}, {0xfffffffb, 0xcb81, 0xf34, 0x9}, {0x9b, 0x8, 0x6, 0x680000}, {0x2, 0x3, 0x0, 0x3}, {0x0, 0xffffff86, 0x6}, {0x1, 0xfffffffd, 0x1, 0x7fff}, {0x1, 0x3, 0x1, 0xdf}, {0x2, 0x0, 0x7, 0x4}, {0x8, 0x2, 0x9, 0x1}, {0x7, 0x3, 0x8, 0x7fff}, {0x2, 0xb11, 0xf, 0x4}, {0x7, 0x8001, 0x6, 0xb85}, {0x101, 0x1, 0xec74, 0xf}, {0x8, 0xe, 0x3, 0x80000000}, {0xd5e5, 0x3b, 0xcead, 0x9}, {0xfff, 0x0, 0x6, 0x9}, {0xffffd8cd, 0xfffff320}, {0x0, 0x5, 0x100, 0x1}, {0x2, 0x1e1, 0x0, 0x5}, {0x6, 0x3, 0x10000, 0x80}, {0x3ff, 0x0, 0xa, 0xfffffff8}, {0x87, 0x8, 0x8, 0x6}, {0x2, 0x5, 0x3, 0x5}, {0xd, 0x3, 0x6, 0xc}, {0x0, 0x6, 0x6, 0x6}, {0x8, 0xa0a, 0x0, 0x3}, {0x0, 0x4, 0x7}, {0x1, 0xffff, 0x200, 0xf962}, {0x1a, 0x401, 0x3, 0x47}, {0x4, 0xfffffffd, 0x7, 0x800}, {0xaaaa, 0x9, 0x1000, 0x1}, {0xffffff3f, 0x1, 0xffff, 0x1ff}, {0x100, 0xd9, 0x7, 0x1}, {0x40, 0xffffff45, 0x200, 0x400}, {0xe0, 0x3ff, 0xfffff000, 0x8}, {0x7, 0x200000, 0x3, 0x3}, {0x7, 0x1, 0x3}, {0x2, 0xe, 0x7, 0x7f}, {0x8, 0xc3b, 0x3257, 0x401}, {0x3, 0xf, 0x4, 0x7}, {0x2, 0x0, 0x3, 0x3}, {0x50, 0x1, 0x4, 0xdb280000}, {0x4, 0x7, 0x29a7, 0x80000001}, {0x10, 0x200, 0x4, 0x9}, {0x3ed80000, 0x7ff, 0x0, 0x6}, {0x7, 0x0, 0x4, 0x10}, {0x0, 0x2, 0xfffffff7}, {0xffffffff, 0x4, 0x9, 0x6}, {0x19, 0x10000, 0x7ff, 0x3}, {0x5, 0xa87b, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x1}, {0x8, 0x7, 0x6, 0x7f}]}}, @TCA_U32_INDEV={0x14, 0x8, 'caif0\x00'}, @TCA_U32_ACT={0x150, 0x7, [@m_skbedit={0x14c, 0x3, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xa8d17a47bbc39d6a}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xffff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff8, 0x4, 0x5, 0x3, 0x8}}]}, {0xe0, 0x6, "6c4712df9267d3998c8717739dc72401d35b9800d9e73adf2726caad24adfedc40b1253fd743c7f4289904d38f228a81c431fc7edc90e8ff28a259867a7fedd79f2e6c5150e8ac3f66f95c00be53ee42d92e48e8ec2c0762f7d9bb750fbb0f18470be463dc4553026b261d2e481208b5b8533ff59d1a3d3269b9b2a9e06d9889e3485efdc651474e2bf520621f14517d0d6991a8547e2385d4d0fb6e004943e5f66d3d501c25bd2151aa6fb979a54f47f2735c142c6e3932d4bb40d4431d6a30a85a1e45f64a03d021bcda2030f1fafffb1d48356c7c1a4516c3b6d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_INDEV={0x14, 0x8, 'team_slave_1\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'macvtap0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x25, 0x50}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0xc, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xff}]}, 0xd0c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x1}) 11.405670137s ago: executing program 4 (id=695): migrate_pages(0x0, 0xd, 0x0, &(0x7f0000000300)=0x8) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='cgroup\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0400001000db4fc58b00e9ff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10.189345702s ago: executing program 6 (id=697): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0x3}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102020000402505a1a440000102030109025c000201034005090402000000000000002406000105240001000d240f010f000000010048db0106241ab81606090581030002b301080904010000020d00000900010102020d000009058202ff03052902090503020004fa0567"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x7, 0x0, 0x1}, &(0x7f0000000480)=[{}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpgrp(0x0) sched_setaffinity(r5, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="18005b3b", @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf2501000000"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) lseek(r9, 0x0, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000003342f96f87b9c396e3980af4f8007e0f0085000000a8000000b7080000000000007b8af8ff00000000b708000000000000f57c58192f182b52bf5e3c000000000007010000c929ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x48b, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x20048001) 10.03202421s ago: executing program 4 (id=700): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9.49314203s ago: executing program 4 (id=704): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2842) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(r2, 0x0, 0xfdef) 9.003226495s ago: executing program 4 (id=706): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00'}) r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x2, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = io_uring_setup(0x46eb, &(0x7f0000000400)={0x0, 0x1f8a, 0x1000, 0x0, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r9, &(0x7f0000011440)=""/4103, 0x1007) 7.810556568s ago: executing program 5 (id=707): migrate_pages(0x0, 0xd, 0x0, &(0x7f0000000300)=0x8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='cgroup\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0400001000db4fc58b00e9ff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) 6.654861044s ago: executing program 5 (id=708): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x945, 0x0, 0x100000000abe9}]}) r2 = semget$private(0x0, 0x6, 0x431) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0xfff6, 0xe40, 0x1d7, 0xca2, 0x5, 0x5]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x143142, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) 6.479436142s ago: executing program 6 (id=709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100fff895000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) 5.351996029s ago: executing program 5 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x80}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000580)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/146, 0x92}], 0x2, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000680)=""/14, 0xe}, {&(0x7f0000000740)=""/104, 0x68}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, 0x0) r5 = dup(r2) io_uring_setup(0x6, &(0x7f0000000180)={0x0, 0x5757, 0x200, 0x3, 0x307, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc2, &(0x7f0000000300)=""/194, 0x0, 0x4, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sched_setaffinity(r1, 0x8, &(0x7f00000006c0)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) 5.145865105s ago: executing program 0 (id=712): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) 4.911127889s ago: executing program 2 (id=713): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r3, 0x0, 0xff2e) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffdf5) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x48881}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x42, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r8, @ANYRES16=r4, @ANYBLOB="00001000252155b2841c0012e80b000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r9, 0x25, 0x0, @void}, 0x10) 4.864220238s ago: executing program 0 (id=714): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.179789822s ago: executing program 0 (id=715): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="08010000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a000000", @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff1f0000000000000000000000000040110000000000000002000000000000ae36b8d100000000000000000000000000000c0015005d07"], 0x108}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 4.10610037s ago: executing program 5 (id=716): syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2842) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(r2, 0x0, 0xfdef) 3.930547642s ago: executing program 2 (id=717): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @sliced={0x8, [0x4, 0x3, 0xc99, 0x644c, 0x4, 0x7f, 0x1, 0x0, 0x7fff, 0x7, 0x5cd1, 0xc, 0x8, 0xbb, 0x4, 0x0, 0x8, 0xc5, 0x9, 0xffff, 0x9, 0x2, 0x7, 0x4, 0x1, 0x6, 0x2, 0x2, 0x9507, 0x7, 0x2, 0x9bc, 0x400, 0x7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x0, 0x800, 0xe6ef, 0x8, 0x100, 0x6, 0x2000, 0x2, 0x3], 0x8001}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(r1, &(0x7f0000002940)=[{&(0x7f0000000f80)=""/191, 0xbf}, {&(0x7f0000001040)=""/138, 0x8a}, {&(0x7f0000001100)=""/213, 0xd5}, {&(0x7f0000001200)=""/212, 0xd4}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/104, 0x68}, {0x0}, {&(0x7f0000001540)=""/184, 0xb8}, {&(0x7f0000002880)=""/134, 0x86}], 0x9, &(0x7f0000002d40)=[{&(0x7f0000002a00)=""/223, 0xdf}, {&(0x7f0000002b00)=""/67, 0x43}, {&(0x7f0000002b80)=""/247, 0xf7}, {&(0x7f0000002c80)=""/139, 0x8b}], 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8ffffff}, 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 3.739129245s ago: executing program 0 (id=718): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224000100001010090459e102ff063d0009050b0200020500ff0905820206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 3.730593992s ago: executing program 5 (id=719): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) (async) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x6) socket$inet(0xa, 0x801, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) listen(r1, 0x2007) (async) r3 = socket$inet(0xa, 0x801, 0x84) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xdfa03400, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r3, 0x8) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r6, 0x7) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1403000010"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r10, 0x2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r9, 0x80d}}, 0x48) close(0x3) (async) clock_nanosleep(0x1, 0x1, &(0x7f0000000240), 0x0) listen(r7, 0x100) (async) socket$netlink(0x10, 0x3, 0x4) 3.104038146s ago: executing program 6 (id=720): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300080a000000000700000000000003000600000000000200100000000000000000000000d20002000100000000000000060d00000000030005000000000002000000ac1414000000000000000000"], 0x50}, 0x1, 0x7}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="a4490a25ac95c95fc502af5a3ddafe4227343a4552692df75d3e19d2c49ba14f1105e81f3e46d10ec20d8668a140801d3822a0f6a5dcc16a7834b1e42789f2100c5cd3101f42d53f8c3abf0fb55f63855b", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x5c) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x29, 0x0, 0x11812410, 0x2, 0x0, 0x81}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000800)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x2}}, 0x30) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r9 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xd) 3.09990408s ago: executing program 5 (id=721): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x7c, 0x40000, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x401}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffff}}, 0x30) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) lseek(r5, 0x10001, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000008000000000000008000"/32], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 3.062338364s ago: executing program 4 (id=722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x2573, 0x4) sendto$inet(r8, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 2.940608335s ago: executing program 2 (id=723): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x7, 0x6, 'f(bP', "ceaee6ac"}}, 0x0}, &(0x7f0000000880)={0x84, &(0x7f0000000380)={0x0, 0x14, 0x8, "cdee8b1e5181deea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8}, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2, "8a87"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) 1.731118414s ago: executing program 0 (id=724): migrate_pages(0x0, 0xd, 0x0, &(0x7f0000000300)=0x8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='cgroup\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0400001000db4fc58b00e9ff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) 725.713944ms ago: executing program 2 (id=725): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 698.252481ms ago: executing program 0 (id=726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) mknod(0x0, 0x100, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = fsopen(&(0x7f0000000580)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x3d}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 424.844058ms ago: executing program 2 (id=727): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = socket(0x2b, 0x80801, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000600000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vimc2(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@private2}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 0s ago: executing program 2 (id=728): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) (rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x40000) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(r7) (async) mq_timedreceive(r7, &(0x7f0000000880)=""/179, 0xb3, 0x6, 0x0) (async, rerun: 32) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0xc1cc4badba897c20) (rerun: 32) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)={[&(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000340)='/dev/snd/midiC#D#\x00', &(0x7f00000003c0)='{&-}%}\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\\1)-\x00', &(0x7f0000000480)=',\x00', &(0x7f0000000500)='\x00']}, &(0x7f0000000540)={[&(0x7f0000000600)='\x00', &(0x7f0000000640)='1\'\x00', &(0x7f0000000680)='/dev/snd/midiC#D#\x00', &(0x7f00000006c0)='-$]--*&\\#}#+e\':\xac\x00', &(0x7f0000000700)='\xe5\x00', &(0x7f0000000740)='/dev/sequencer\x00', &(0x7f0000000780)='/dev/net/tun\x00']}, 0x100) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="29db29d36568be5cee635ddcc35e201d5e79ab18d366d1c204907a833cc5a0fe09626ead51d6329807d6fa5167bccb64d39dfffe3faa73fd037048f7870afc103917dead05744c96f4c8bd98c3060e19867b9aeb47738694de2be1a0dd3d433a61448dc79e0da0d30eb99d79fae51077fdf3b04f0251c4a00129e055d8d412505972069e0c6a0d2c6606093d18d037df894d126ca32e385b741a51cd4b4576ff9a369894a7952cbca7a67285ea28939d02ed0dd607432c5f26bf43784a9845f50ec5938de81f2b1c07", @ANYRESOCT=r0, @ANYRES32=r9, @ANYBLOB="c8200000000000000046de0000000000000000000000000001000000b1de77adc4c1ce3f98c0e3508a6531a844e5a9c91e3da0f6f1e2e384a064f44d466ae1ae38040cef12ea1022de8a0ba60d824af54b0c5d6c96357ad053418e6ddc37677e0eec0b67ffa6996852cc76df5b39cff042f4292ea5154d48325973cae2da3dbae1250d2c0be47b6230b4a23757363aaaa0fa52f4a6a1c25f893d4c946c454410d816c28f68ca1632d12b559a364b9e5c2c28bdc4b93090dfcaa339cdfd2a3d2fe7ba342ad2ddc5fdafb49e0f87bd03ba33d11b97ff632a55e57da4f0135442e15bb6a02b93784f"], 0x50) (async, rerun: 64) socket$inet6(0xa, 0x2, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): 9] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.039851][ T7479] Node 0 DMA32: 4609*4kB (UM) 2157*8kB (UM) 978*16kB (UME) 556*32kB (UME) 164*64kB (UME) 69*128kB (UME) 38*256kB (UM) 34*512kB (UME) 18*1024kB (UM) 7*2048kB (UME) 201*4096kB (UM) = 971660kB [ 185.047110][ T6728] usb 1-1: USB disconnect, device number 24 [ 185.143500][ T7517] ÿ: renamed from bond_slave_0 [ 185.462110][ T7479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 185.508558][ T7479] Node 1 Normal: 0*4kB 3*8kB (U) 8*16kB (UM) 4*32kB (U) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 959*4096kB (M) = 3939544kB [ 185.582505][ T1557] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 185.654861][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 185.661809][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 185.661863][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 185.836682][ T29] audit: type=1400 audit(1780581567.035:693): avc: denied { connect } for pid=7507 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.867288][ T1557] usb 4-1: device descriptor read/64, error -71 [ 185.992522][ T7479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.018938][ T7479] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 186.072525][ T7479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.102440][ T7479] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 186.112708][ T7479] 102270 total pagecache pages [ 186.118054][ T7479] 0 pages in swap cache [ 186.126084][ T7479] Free swap = 124996kB [ 186.133354][ T7479] Total swap = 124996kB [ 186.139999][ T7479] 2097051 pages RAM [ 186.143857][ T7479] 0 pages HighMem/MovableOnly [ 186.148613][ T7479] 430837 pages reserved [ 186.156961][ T7479] 0 pages cma reserved [ 186.189850][ T1557] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 186.279967][ T6749] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 186.320161][ T1557] usb 4-1: device descriptor read/64, error -71 [ 186.409947][ T6728] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 186.432564][ T6749] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 186.440614][ T1557] usb usb4-port1: attempt power cycle [ 186.444265][ T6749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.458200][ T6749] usb 1-1: config 0 has no interface number 0 [ 186.464947][ T6749] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 186.476992][ T6749] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 187.528886][ T6749] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.571129][ T1557] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 187.571388][ T6749] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 187.783307][ T6749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.792445][ T6728] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 187.858230][ T6728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.868553][ T6749] usb 1-1: Product: syz [ 187.875684][ T6749] usb 1-1: Manufacturer: syz [ 187.881109][ T6728] usb 3-1: config 0 descriptor?? [ 187.888030][ T6749] usb 1-1: SerialNumber: syz [ 187.908201][ T6728] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 187.917282][ T6749] usb 1-1: config 0 descriptor?? [ 187.932244][ T1557] usb 4-1: device descriptor read/8, error -71 [ 188.007905][ T29] audit: type=1400 audit(1780581569.215:694): avc: denied { setopt } for pid=7541 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.052062][ T29] audit: type=1400 audit(1780581569.215:695): avc: denied { mount } for pid=7541 comm="syz.4.399" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.424008][ T29] audit: type=1400 audit(1780581569.635:696): avc: denied { mounton } for pid=7541 comm="syz.4.399" path="/79/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.485261][ T29] audit: type=1400 audit(1780581569.685:697): avc: denied { read } for pid=7541 comm="syz.4.399" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.515173][ T29] audit: type=1400 audit(1780581569.685:698): avc: denied { read } for pid=7541 comm="syz.4.399" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.555586][ T29] audit: type=1400 audit(1780581569.685:699): avc: denied { open } for pid=7541 comm="syz.4.399" path="/79/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.584505][ T29] audit: type=1400 audit(1780581569.685:700): avc: denied { read } for pid=7541 comm="syz.4.399" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.615326][ T29] audit: type=1400 audit(1780581569.685:701): avc: denied { read } for pid=7541 comm="syz.4.399" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.687057][ T29] audit: type=1400 audit(1780581569.765:702): avc: denied { bind } for pid=7548 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.723559][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.730314][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.783600][ T6728] gp8psk: usb out operation failed. [ 188.789723][ T6728] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 188.804923][ T6728] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 188.831698][ T6728] usb 3-1: USB disconnect, device number 23 [ 188.859821][ T1557] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 188.873618][ T7523] ip6t_srh: unknown srh match flags 4000 [ 188.902313][ T1557] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 189.485376][ T1557] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.557543][ T1557] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 189.568306][ T6723] usb 1-1: USB disconnect, device number 25 [ 189.592806][ T1557] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 189.616021][ T1557] usb 4-1: Manufacturer: syz [ 189.637072][ T1557] usb 4-1: config 0 descriptor?? [ 189.653194][ T1557] igorplugusb 4-1:0.0: incorrect number of endpoints [ 189.779273][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.786615][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.857602][ T6740] usb 4-1: USB disconnect, device number 25 [ 190.009302][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.033227][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.214955][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.252309][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.286710][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.320934][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.026836][ T6723] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 191.090021][ T6728] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.639811][ T6723] usb 5-1: Using ep0 maxpacket: 32 [ 191.664659][ T6723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.681774][ T6728] usb 3-1: device descriptor read/64, error -71 [ 191.701140][ T6723] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 191.717735][ T6723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.747167][ T6723] usb 5-1: config 0 descriptor?? [ 191.959838][ T6728] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 191.981297][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.002328][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.039972][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 192.039988][ T29] audit: type=1400 audit(1780581573.245:705): avc: denied { write } for pid=7601 comm="syz.3.414" path="socket:[15802]" dev="sockfs" ino=15802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 192.154131][ T6728] usb 3-1: device descriptor read/64, error -71 [ 192.709780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.120044][ T6728] usb usb3-port1: attempt power cycle [ 193.190915][ T7607] netlink: 'syz.0.415': attribute type 20 has an invalid length. [ 193.459853][ T6728] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 194.445032][ T6723] hid_parser_main: 221 callbacks suppressed [ 194.445054][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.465631][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.504733][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.537699][ T6728] usb 3-1: device descriptor read/8, error -71 [ 194.545069][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.557313][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.569993][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.580985][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.593486][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.614535][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.630438][ T6723] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 194.667430][ T6723] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.05 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 194.721620][ T6723] usb 5-1: USB disconnect, device number 24 [ 194.940258][ T6740] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 195.085620][ T29] audit: type=1400 audit(1780581576.295:706): avc: denied { create } for pid=7629 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.161681][ T6740] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 195.453408][ T6740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.464206][ T6740] usb 6-1: config 0 has no interface number 0 [ 195.470574][ T6740] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 195.488964][ T6740] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 195.502055][ T6740] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.528607][ T6740] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 195.551514][ T6740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.569718][ T6740] usb 6-1: Product: syz [ 195.575570][ T6740] usb 6-1: Manufacturer: syz [ 195.586003][ T6740] usb 6-1: SerialNumber: syz [ 195.595867][ T6740] usb 6-1: config 0 descriptor?? [ 196.032905][ T7619] mmap: syz.2.420 (7619): VmData 26099712 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 196.078313][ T7649] capability: warning: `syz.3.428' uses 32-bit capabilities (legacy support in use) [ 196.265468][ T7617] ip6t_srh: unknown srh match flags 4000 [ 196.465263][ T29] audit: type=1400 audit(1780581577.675:707): avc: denied { execute } for pid=7656 comm="syz.2.432" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 196.840975][ T6749] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 196.927614][ T29] audit: type=1400 audit(1780581578.135:708): avc: denied { setopt } for pid=7663 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 196.984340][ T29] audit: type=1400 audit(1780581578.165:709): avc: denied { ioctl } for pid=7663 comm="syz.0.433" path="socket:[16810]" dev="sockfs" ino=16810 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 197.030213][ T6749] usb 4-1: device descriptor read/64, error -71 [ 197.031838][ T29] audit: type=1400 audit(1780581578.165:710): avc: denied { nlmsg_read } for pid=7663 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 197.310024][ T6749] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 197.449813][ T6749] usb 4-1: device descriptor read/64, error -71 [ 197.570130][ T6749] usb usb4-port1: attempt power cycle [ 197.619865][ T6723] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 197.781323][ T6723] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 197.806435][ T6723] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.933613][ T7685] netlink: 80 bytes leftover after parsing attributes in process `syz.4.438'. [ 197.943352][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 197.952379][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.438'. [ 198.096356][ T6723] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.118083][ T6723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.147389][ T6723] usbtmc 3-1:16.0: bulk endpoints not found [ 198.170669][ T6749] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 198.200556][ T6749] usb 4-1: device descriptor read/8, error -71 [ 198.353415][ T29] audit: type=1400 audit(1780581579.565:711): avc: denied { bind } for pid=7692 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.398198][ T29] audit: type=1400 audit(1780581579.595:712): avc: denied { block_suspend } for pid=7692 comm="syz.0.442" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 198.476297][ T7695] netlink: 'syz.5.439': attribute type 1 has an invalid length. [ 198.489854][ T6749] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 198.504606][ T7695] bond1: entered promiscuous mode [ 198.510262][ T7695] bond1: entered allmulticast mode [ 198.518627][ T7695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.531895][ T6749] usb 4-1: device descriptor read/8, error -71 [ 198.631287][ T7698] erspan1: entered allmulticast mode [ 198.651988][ T6749] usb usb4-port1: unable to enumerate USB device [ 199.593275][ T7698] bond1: (slave erspan1): making interface the new active one [ 199.650223][ T7698] erspan1: entered promiscuous mode [ 199.879952][ T7698] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 200.246171][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 200.839150][ T7729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.114231][ T29] audit: type=1400 audit(1780581582.015:713): avc: denied { mount } for pid=7725 comm="syz.5.446" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 201.185204][ T29] audit: type=1400 audit(1780581582.395:714): avc: denied { bind } for pid=7731 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.221132][ T6728] usb 3-1: USB disconnect, device number 28 [ 201.391900][ T6740] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 201.449839][ T6723] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 201.498076][ T29] audit: type=1400 audit(1780581582.705:715): avc: denied { unmount } for pid=6402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 201.577240][ T6740] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 201.602410][ T6740] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.627694][ T6740] usb 1-1: config 0 has no interface number 0 [ 201.634347][ T6740] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 201.645881][ T6740] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 201.657964][ T6740] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.693651][ T29] audit: type=1400 audit(1780581582.905:716): avc: denied { bind } for pid=7746 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.726582][ T6723] usb 5-1: not running at top speed; connect to a high speed hub [ 201.739993][ T6740] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 201.749260][ T6740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.764490][ T6723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 129, changing to 4 [ 201.765492][ T29] audit: type=1400 audit(1780581582.905:717): avc: denied { listen } for pid=7746 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.799627][ T6740] usb 1-1: Product: syz [ 201.804528][ T6740] usb 1-1: Manufacturer: syz [ 201.809854][ T6740] usb 1-1: SerialNumber: syz [ 201.821864][ T6740] usb 1-1: config 0 descriptor?? [ 201.835916][ T29] audit: type=1400 audit(1780581582.905:718): avc: denied { accept } for pid=7746 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.837739][ T6723] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.891869][ T6723] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 201.896496][ T29] audit: type=1400 audit(1780581583.105:719): avc: denied { watch watch_reads } for pid=7748 comm="syz.5.456" path="/45" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 201.925013][ T6723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.937077][ T6723] usb 5-1: Product: 㷢펇ԟॠ㧓晰야㶠왩臞î‹æ²…僊ê„퇿شﳯᶛ潲쟠㊶᯸㿮í—﷥害릉Ąã»á’냶㽌䣪烂ᑦऎ䳚蓻地툢å‚턆ⴵ퓟柠崬뤶ᓦẈЅ⣭둈䣋쬫根ã¡ê—£î®¼é°¶ë‹©áªçŠŒé¹âº‰â†¤å€šâŒ¿æ½‘⬲ꉂⅲå©è’¥ãƒ•íˆƒé±¡è‰™â¶™è’¥ë‚Žá»ªæ”šå–½ê‡¸ì¡„﫲 [ 201.974570][ T6728] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 202.047066][ T6723] usb 5-1: Manufacturer: æ†â ‹ç ‹ã¾« [ 202.067895][ T6723] usb 5-1: SerialNumber: ≠[ 202.120865][ T6728] usb 4-1: device descriptor read/64, error -71 [ 202.313174][ T29] audit: type=1400 audit(1780581583.525:720): avc: denied { ioctl } for pid=7731 comm="syz.4.451" path="socket:[16008]" dev="sockfs" ino=16008 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.341754][ T1557] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 202.343863][ T6723] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.369879][ T6728] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 202.451615][ T6723] usb 5-1: USB disconnect, device number 25 [ 202.475204][ T7730] ip6t_srh: unknown srh match flags 4000 [ 202.499837][ T1557] usb 3-1: Using ep0 maxpacket: 16 [ 202.500194][ T6728] usb 4-1: device descriptor read/64, error -71 [ 202.509037][ T1557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.611042][ T1557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.633613][ T1557] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.659113][ T1557] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.681585][ T1557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.718859][ T1557] usb 3-1: config 0 descriptor?? [ 202.837157][ T6728] usb usb4-port1: attempt power cycle [ 203.307260][ T7776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.389856][ T6728] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 203.402602][ T29] audit: type=1400 audit(1780581584.615:721): avc: denied { accept } for pid=7763 comm="syz.5.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 203.463304][ T6728] usb 4-1: device descriptor read/8, error -71 [ 203.483969][ T1557] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 203.517062][ T1557] microsoft 0003:045E:07DA.0003: no inputs found [ 203.529602][ T1557] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 203.612642][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.663316][ T6741] usb 3-1: USB disconnect, device number 29 [ 203.676501][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.760490][ T6728] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 203.800639][ T6728] usb 4-1: device descriptor read/8, error -71 [ 203.810113][ T1557] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 203.853121][ T5740] usb 6-1: USB disconnect, device number 11 [ 203.920109][ T6728] usb usb4-port1: unable to enumerate USB device [ 203.969835][ T1557] usb 5-1: Using ep0 maxpacket: 32 [ 203.978435][ T1557] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.991325][ T1557] usb 5-1: config 0 has no interface number 0 [ 204.006420][ T1557] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 204.038073][ T1557] usb 5-1: config 0 interface 1 has no altsetting 0 [ 204.049005][ T1557] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 204.060719][ T1557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.077682][ T1557] usb 5-1: Product: syz [ 204.085675][ T1557] usb 5-1: Manufacturer: syz [ 204.108580][ T1557] usb 5-1: SerialNumber: syz [ 204.131662][ T1557] usb 5-1: config 0 descriptor?? [ 204.351258][ T1557] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 204.372868][ T1557] cx231xx 5-1:0.1: Failed to read PCB config [ 204.393796][ T1557] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 204.435531][ T1557] usb 5-1: USB disconnect, device number 26 [ 204.840212][ T1557] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 204.869679][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 204.909651][ T7797] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 204.956196][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 205.029832][ T1557] usb 5-1: Using ep0 maxpacket: 32 [ 205.051433][ T1557] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.065432][ T1557] usb 5-1: config 0 has no interface number 0 [ 205.086992][ T1557] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 205.105258][ T1557] usb 5-1: config 0 interface 1 has no altsetting 0 [ 205.118157][ T1557] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 205.129446][ T1557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.145623][ T1557] usb 5-1: Product: syz [ 205.159846][ T1557] usb 5-1: Manufacturer: syz [ 205.165062][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.176338][ T1557] usb 5-1: SerialNumber: syz [ 205.196535][ T1557] usb 5-1: config 0 descriptor?? [ 205.207806][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.240659][ T29] audit: type=1400 audit(1780581586.455:722): avc: denied { connect } for pid=7800 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 205.270860][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.473'. [ 205.424833][ T1557] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 205.435501][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.450629][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.477317][ T1557] cx231xx 5-1:0.1: bad scenario!!!!! [ 205.477317][ T1557] config_info=0 [ 205.495373][ T1557] cx231xx 5-1:0.1: Failed to read PCB config [ 205.706729][ T6723] usb 5-1: USB disconnect, device number 27 [ 205.740260][ T6741] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 205.901354][ T6741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.915314][ T6741] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 205.927528][ T6741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.935934][ T6741] usb 6-1: Product: syz [ 205.940189][ T6741] usb 6-1: Manufacturer: syz [ 205.944789][ T6741] usb 6-1: SerialNumber: syz [ 205.949947][ T1557] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 205.958756][ T6741] usb 6-1: config 0 descriptor?? [ 205.995595][ T6741] mvusb_mdio 6-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 206.121609][ T1557] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 206.138316][ T1557] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.168960][ T1557] usb 4-1: config 0 has no interface number 0 [ 206.175265][ T1557] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 206.192958][ T1557] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 206.207736][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.211289][ T1557] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.251797][ T1557] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 206.257506][ T6728] usb 6-1: USB disconnect, device number 12 [ 206.266423][ T1557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.285719][ T5740] usb 1-1: USB disconnect, device number 26 [ 206.286472][ T1557] usb 4-1: Product: syz [ 206.308413][ T1557] usb 4-1: Manufacturer: syz [ 206.325783][ T1557] usb 4-1: SerialNumber: syz [ 206.343237][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.352937][ T1557] usb 4-1: config 0 descriptor?? [ 206.448917][ T7826] omfs: Invalid superblock (0) [ 206.846346][ T6741] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 206.991850][ T29] audit: type=1400 audit(1780581588.165:723): avc: denied { append } for pid=7830 comm="syz.5.482" name="nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.243447][ T5740] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 207.266699][ T7812] ip6t_srh: unknown srh match flags 4000 [ 207.358846][ T6741] usb 5-1: device descriptor read/64, error -71 [ 207.783523][ T6741] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 207.794976][ T5740] usb 1-1: not running at top speed; connect to a high speed hub [ 207.832986][ T5740] usb 1-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.857012][ T7839] netlink: 80 bytes leftover after parsing attributes in process `syz.2.484'. [ 207.883898][ T5740] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.928010][ T6741] usb 5-1: device descriptor read/64, error -71 [ 208.934758][ T5740] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.971133][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.011486][ T5740] usb 1-1: Product: syz [ 209.032873][ T5740] usb 1-1: Manufacturer: syz [ 209.050018][ T6741] usb usb5-port1: attempt power cycle [ 209.077615][ T5740] usb 1-1: SerialNumber: syz [ 209.082684][ T29] audit: type=1400 audit(1780581590.285:724): avc: denied { map } for pid=7844 comm="syz.2.486" path="socket:[17366]" dev="sockfs" ino=17366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 209.120345][ T6728] usb 4-1: USB disconnect, device number 34 [ 209.136200][ T7822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.174209][ T1557] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 209.288641][ T5740] usb 1-1: can't set config #1, error -71 [ 209.303027][ T5740] usb 1-1: USB disconnect, device number 27 [ 209.360593][ T1557] usb 6-1: device descriptor read/64, error -71 [ 209.377630][ T29] audit: type=1400 audit(1780581590.585:725): avc: denied { bind } for pid=7850 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.441137][ T6741] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 209.597479][ T29] audit: type=1400 audit(1780581590.805:726): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.659932][ T1557] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 209.682542][ T6741] usb 5-1: device not accepting address 30, error -71 [ 209.753901][ T7861] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 209.811670][ T7861] fuse: Bad value for 'rootmode' [ 209.819815][ T1557] usb 6-1: device descriptor read/64, error -71 [ 209.931827][ T1557] usb usb6-port1: attempt power cycle [ 210.030018][ T6741] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 210.051547][ T6741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 210.063704][ T6741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.074009][ T6741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 210.085154][ T6738] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 210.095718][ T6741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 210.109698][ T6741] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 210.119553][ T6741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.130296][ T6741] usb 5-1: Product: syz [ 210.135497][ T6741] usb 5-1: Manufacturer: syz [ 210.140742][ T6741] usb 5-1: SerialNumber: syz [ 210.178256][ T6741] usb 5-1: config 0 descriptor?? [ 210.239915][ T6738] usb 4-1: Using ep0 maxpacket: 16 [ 210.247800][ T6738] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.258438][ T6738] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.268204][ T6738] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.279866][ T6738] usb 4-1: config 1 interface 1 has no altsetting 0 [ 210.289203][ T6738] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 210.298983][ T1557] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 210.307109][ T6738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.317498][ T6738] usb 4-1: Product: syz [ 210.323830][ T6738] usb 4-1: Manufacturer: syz [ 210.329094][ T6738] usb 4-1: SerialNumber: syz [ 210.334512][ T1557] usb 6-1: device descriptor read/8, error -71 [ 210.388563][ T6741] adutux 5-1:0.0: Could not retrieve serial number [ 210.397641][ T6741] adutux 5-1:0.0: probe with driver adutux failed with error -5 [ 210.556226][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 210.580110][ T1557] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 210.603216][ T7861] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 210.620502][ T1557] usb 6-1: device descriptor read/8, error -71 [ 210.678762][ T7861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.746188][ T6738] usb 4-1: selecting invalid altsetting 0 [ 210.756651][ T1557] usb usb6-port1: unable to enumerate USB device [ 210.792064][ T29] audit: type=1400 audit(1780581592.005:727): avc: denied { mounton } for pid=7867 comm="syz.2.493" path="/105/file0" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 210.792080][ T7868] fuse: Unknown parameter '' [ 210.821524][ T6738] usb 4-1: USB disconnect, device number 35 [ 210.840190][ T6728] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 211.019908][ T6728] usb 1-1: Using ep0 maxpacket: 16 [ 211.036439][ T6728] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 211.059960][ T6728] usb 1-1: config 0 has no interface number 0 [ 211.069818][ T6728] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 211.090726][ T6728] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 65360, setting to 1024 [ 211.112273][ T6728] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 211.141947][ T6728] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 211.159775][ T6728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.169293][ T6728] usb 1-1: Product: syz [ 211.179770][ T6728] usb 1-1: Manufacturer: syz [ 211.189821][ T6728] usb 1-1: SerialNumber: syz [ 211.204631][ T6728] usb 1-1: config 0 descriptor?? [ 211.220596][ T7864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 211.235221][ T7864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 211.452929][ T7864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 211.478733][ T7864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 211.709117][ T6728] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 211.740010][ T6738] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 211.774124][ T6741] usb 5-1: USB disconnect, device number 31 [ 211.880704][ T6738] usb 6-1: device descriptor read/64, error -71 [ 211.890023][ T1557] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 212.028088][ T7883] netlink: 80 bytes leftover after parsing attributes in process `syz.4.498'. [ 212.047413][ T1557] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 212.059057][ T1557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.070906][ T5740] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 212.072014][ T1557] usb 3-1: config 0 has no interface number 0 [ 212.084783][ T1557] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 212.104004][ T1557] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 212.115008][ T1557] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.130804][ T6738] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 212.139147][ T1557] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 212.150716][ T1557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.159883][ T1557] usb 3-1: Product: syz [ 212.164087][ T1557] usb 3-1: Manufacturer: syz [ 212.168661][ T1557] usb 3-1: SerialNumber: syz [ 212.175125][ T1557] usb 3-1: config 0 descriptor?? [ 212.269969][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 212.276884][ T5740] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 212.279862][ T6738] usb 6-1: device descriptor read/64, error -71 [ 212.286475][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.302190][ T5740] usb 4-1: config 0 descriptor?? [ 212.400149][ T6738] usb usb6-port1: attempt power cycle [ 212.409834][ T6723] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 212.511556][ T5740] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 212.522102][ T5740] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.533194][ T5740] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 212.540540][ T5740] usb 4-1: media controller created [ 212.551295][ T6723] usb 5-1: device descriptor read/64, error -71 [ 212.563175][ T5740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.734467][ T6728] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 212.739860][ T6738] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 212.749919][ T6728] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 212.763855][ T6728] asix 1-1:0.34: probe with driver asix failed with error -71 [ 212.772689][ T6738] usb 6-1: device descriptor read/8, error -71 [ 212.775115][ T6728] usb 1-1: USB disconnect, device number 28 [ 212.792719][ T7881] ip6t_srh: unknown srh match flags 4000 [ 212.830903][ T6723] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 212.959930][ T6723] usb 5-1: device descriptor read/64, error -71 [ 213.030890][ T6738] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 213.061336][ T6738] usb 6-1: device descriptor read/8, error -71 [ 213.090292][ T6723] usb usb5-port1: attempt power cycle [ 213.170356][ T6738] usb usb6-port1: unable to enumerate USB device [ 213.352696][ T5740] az6027: usb out operation failed. (-71) [ 213.363461][ T5740] stb0899_attach: Driver disabled by Kconfig [ 213.377531][ T5740] az6027: no front-end attached [ 213.377531][ T5740] [ 213.394799][ T5740] az6027: usb out operation failed. (-71) [ 213.414643][ T5740] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 213.438009][ T5740] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 213.455556][ T6723] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 213.490426][ T5740] dvb-usb: schedule remote query interval to 400 msecs. [ 213.501647][ T6723] usb 5-1: device descriptor read/8, error -71 [ 213.511092][ T5740] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 213.558153][ T5740] usb 4-1: USB disconnect, device number 36 [ 213.673872][ T5740] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 213.769810][ T6723] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 213.811081][ T6723] usb 5-1: device descriptor read/8, error -71 [ 213.930152][ T6723] usb usb5-port1: unable to enumerate USB device [ 215.744982][ T29] audit: type=1400 audit(1780581596.955:728): avc: denied { getopt } for pid=7907 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 216.934719][ T7920] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 216.969360][ T7920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.149827][ T6738] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 217.223787][ T7920] gretap1: entered promiscuous mode [ 217.255842][ T7920] bond2: (slave gretap1): making interface the new active one [ 217.283139][ T7920] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 217.342178][ T6738] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 217.358740][ T6738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.378052][ T6738] usb 6-1: config 0 has no interface number 0 [ 217.384532][ T6738] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 217.397381][ T6738] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 217.407832][ T6738] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.423550][ T6738] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 217.435406][ T6738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.450697][ T6738] usb 6-1: Product: syz [ 217.455178][ T6738] usb 6-1: Manufacturer: syz [ 217.460217][ T6738] usb 6-1: SerialNumber: syz [ 217.471057][ T6738] usb 6-1: config 0 descriptor?? [ 217.509983][ T6723] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 217.614990][ T5740] usb 3-1: USB disconnect, device number 30 [ 217.673020][ T6723] usb 4-1: Using ep0 maxpacket: 32 [ 217.710644][ T6723] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 217.746613][ T6723] usb 4-1: config 0 has no interface number 0 [ 217.799701][ T6723] usb 4-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 217.835475][ T6723] usb 4-1: config 0 interface 89 has no altsetting 0 [ 217.865249][ T6723] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 217.897178][ T6723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.938351][ T6723] usb 4-1: Product: syz [ 217.958954][ T6723] usb 4-1: Manufacturer: syz [ 217.981822][ T6723] usb 4-1: SerialNumber: syz [ 218.146129][ T6723] usb 4-1: config 0 descriptor?? [ 218.206375][ T7926] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.293163][ T6723] hub 4-1:0.89: bad descriptor, ignoring hub [ 218.346502][ T7932] ip6t_srh: unknown srh match flags 4000 [ 218.371946][ T6723] hub 4-1:0.89: probe with driver hub failed with error -5 [ 218.488841][ T6723] option 4-1:0.89: GSM modem (1-port) converter detected [ 218.775440][ T6723] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 219.234478][ T6738] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 219.771266][ T6738] usb 4-1: USB disconnect, device number 37 [ 219.808343][ T6738] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 219.840389][ T6738] option 4-1:0.89: device disconnected [ 220.129947][ T6741] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 220.269941][ T6741] usb 1-1: device descriptor read/64, error -71 [ 220.531279][ T6741] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 220.689999][ T6741] usb 1-1: device descriptor read/64, error -71 [ 220.816996][ T6741] usb usb1-port1: attempt power cycle [ 221.075122][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 221.128286][ T7962] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 221.147936][ T5727] usb 6-1: USB disconnect, device number 21 [ 221.191265][ T6741] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 221.225901][ T1355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.258071][ T6741] usb 1-1: device descriptor read/8, error -71 [ 221.378595][ T1355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.443420][ T7945] [U] ^C [ 221.519851][ T6741] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 221.590294][ T6741] usb 1-1: device descriptor read/8, error -71 [ 221.617638][ T1355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.706765][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.718874][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.720208][ T6741] usb usb1-port1: unable to enumerate USB device [ 221.733557][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.741543][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.752642][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.780698][ T1355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.865387][ T29] audit: type=1400 audit(1780581603.075:729): avc: denied { append } for pid=7976 comm="syz.2.527" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 221.988431][ T29] audit: type=1400 audit(1780581603.185:730): avc: denied { map } for pid=7976 comm="syz.2.527" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 222.089816][ T6741] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 222.102104][ T29] audit: type=1400 audit(1780581603.185:731): avc: denied { execute } for pid=7976 comm="syz.2.527" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 222.140116][ T29] audit: type=1400 audit(1780581603.345:732): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 222.266877][ T6741] usb 5-1: device descriptor read/64, error -71 [ 222.513001][ T1355] bridge_slave_1: left allmulticast mode [ 222.526749][ T1355] bridge_slave_1: left promiscuous mode [ 222.535455][ T1355] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.546765][ T1355] bridge_slave_0: left allmulticast mode [ 222.562615][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 222.584174][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 222.586292][ T1355] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.629872][ T6741] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 222.789833][ T6741] usb 5-1: device descriptor read/64, error -71 [ 222.901078][ T6741] usb usb5-port1: attempt power cycle [ 222.965095][ T29] audit: type=1400 audit(1780581604.175:733): avc: denied { write } for pid=7989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.026158][ T1355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.054557][ T1355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.090560][ T1355] bond0 (unregistering): (slave team0): Releasing backup interface [ 223.102890][ T29] audit: type=1400 audit(1780581604.315:734): avc: denied { write } for pid=8000 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.136993][ T1355] bond0 (unregistering): Released all slaves [ 223.151502][ T1355] bond1 (unregistering): Released all slaves [ 223.173788][ T7977] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 223.233606][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 223.273756][ T6741] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 223.311934][ T1355] tipc: Left network mode [ 223.333625][ T6741] usb 5-1: device descriptor read/8, error -71 [ 223.341934][ T1355] IPVS: stopping master sync thread 7102 ... [ 223.524438][ T6749] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 223.644241][ T1355] hsr_slave_0: left promiscuous mode [ 223.649811][ T6741] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 223.657480][ T1355] hsr_slave_1: left promiscuous mode [ 223.675946][ T1355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.688165][ T1355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.691237][ T6741] usb 5-1: device descriptor read/8, error -71 [ 223.699223][ T6749] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 223.714653][ T1355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.724093][ T1355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.740360][ T6749] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 223.759219][ T6749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.771948][ T6749] usb 3-1: Product: syz [ 223.776538][ T1355] veth1_macvtap: left promiscuous mode [ 223.783326][ T1355] veth0_macvtap: left promiscuous mode [ 223.788837][ T6749] usb 3-1: Manufacturer: syz [ 223.793716][ T6749] usb 3-1: SerialNumber: syz [ 223.798430][ T1355] veth1_vlan: left promiscuous mode [ 223.807125][ T1355] veth0_vlan: left promiscuous mode [ 223.815049][ T6749] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 223.831734][ T6741] usb usb5-port1: unable to enumerate USB device [ 223.882379][ T5623] Bluetooth: hci1: command tx timeout [ 224.046635][ T29] audit: type=1400 audit(1780581605.255:735): avc: denied { accept } for pid=8005 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.193357][ T29] audit: type=1400 audit(1780581605.405:736): avc: denied { write } for pid=8012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.248313][ T1355] team0 (unregistering): Port device team_slave_1 removed [ 224.273789][ T6749] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.293261][ T1355] team0 (unregistering): Port device team_slave_0 removed [ 224.306688][ T6749] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 224.333610][ T6749] usb 3-1: media controller created [ 224.344641][ T8030] o2cb: This node has not been configured. [ 224.344801][ T29] audit: type=1400 audit(1780581605.535:737): avc: denied { write } for pid=8010 comm="syz.0.530" name="/" dev="ocfs2_dlmfs" ino=17852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.396856][ T6749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.409704][ T8030] o2cb: Cluster check failed. Fix errors before retrying. [ 224.423882][ T29] audit: type=1400 audit(1780581605.555:738): avc: denied { add_name } for pid=8010 comm="syz.0.530" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.433350][ T8030] (syz.0.530,8030,1):user_dlm_register:674 ERROR: status = -22 [ 224.521089][ T8030] (syz.0.530,8030,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 224.606897][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 224.737226][ T6749] usb 3-1: USB disconnect, device number 31 [ 225.039940][ T6741] IPVS: starting estimator thread 0... [ 225.162081][ T8051] IPVS: using max 76 ests per chain, 182400 per kthread [ 225.513969][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.535909][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.545199][ T5623] Bluetooth: hci4: Unable to find connection for big 0x00 [ 225.559578][ T7971] bridge_slave_0: entered allmulticast mode [ 225.596353][ T7971] bridge_slave_0: entered promiscuous mode [ 225.623467][ T5727] kernel read not supported for file /cpu/0/msr (pid: 5727 comm: kworker/1:5) [ 225.665062][ T8061] IPVS: sh: FWM 3 0x00000003 - no destination available [ 225.672645][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.710568][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.727886][ T7971] bridge_slave_1: entered allmulticast mode [ 225.740597][ T7971] bridge_slave_1: entered promiscuous mode [ 225.811175][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.857819][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.963660][ T5623] Bluetooth: hci1: command tx timeout [ 225.992138][ T7971] team0: Port device team_slave_0 added [ 226.023463][ T7971] team0: Port device team_slave_1 added [ 226.029899][ T6728] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 226.102970][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.110324][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.149857][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'. [ 226.160737][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.202116][ T6728] usb 5-1: device descriptor read/64, error -71 [ 226.212967][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.220181][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.249111][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.271804][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 226.341421][ T7971] hsr_slave_0: entered promiscuous mode [ 226.348632][ T7971] hsr_slave_1: entered promiscuous mode [ 226.359211][ T7971] debugfs: 'hsr0' already exists in 'hsr' [ 226.365917][ T7971] Cannot create hsr debugfs directory [ 226.460129][ T6728] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 226.610130][ T6728] usb 5-1: device descriptor read/64, error -71 [ 226.720205][ T6728] usb usb5-port1: attempt power cycle [ 226.927733][ T7971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.965091][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.986150][ T7971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.005264][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.022323][ T7971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.046395][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.069936][ T6728] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 227.077892][ T7971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.122016][ T6728] usb 5-1: device descriptor read/8, error -71 [ 227.127420][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 227.127433][ T29] audit: type=1400 audit(1780581608.325:745): avc: denied { write } for pid=8083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.130783][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.349137][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.354002][ T29] audit: type=1400 audit(1780581608.555:746): avc: denied { write } for pid=8117 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.373636][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.394832][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.402031][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.409958][ T6728] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 227.433650][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.440461][ T6728] usb 5-1: device descriptor read/8, error -71 [ 227.440770][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.455915][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 227.551269][ T6728] usb usb5-port1: unable to enumerate USB device [ 227.560349][ T5740] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 227.560838][ T5727] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 227.640081][ T6741] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 227.710357][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 227.717130][ T5740] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 227.726288][ T5740] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 227.735426][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 227.741180][ T5727] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.745729][ T5740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.754275][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.778830][ T5740] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.781887][ T5727] usb 3-1: config 0 descriptor?? [ 227.794706][ T5740] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.808270][ T5740] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 227.811355][ T5727] cp210x 3-1:0.0: cp210x converter detected [ 227.820634][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.823336][ T6741] usb 1-1: Using ep0 maxpacket: 16 [ 227.842325][ T5740] usb 6-1: config 0 descriptor?? [ 227.843292][ T6741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.869828][ T6741] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.878943][ T6741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.891028][ T6741] usb 1-1: config 0 descriptor?? [ 227.906977][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.024848][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.034232][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.043719][ T5623] Bluetooth: hci1: command tx timeout [ 228.099212][ T5740] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 228.136359][ T5740] usb 6-1: USB disconnect, device number 22 [ 228.153479][ T5740] usblp0: removed [ 228.231241][ T7971] veth0_vlan: entered promiscuous mode [ 228.244076][ T7971] veth1_vlan: entered promiscuous mode [ 228.340410][ T8144] lo speed is unknown, defaulting to 1000 [ 228.347246][ T8144] lo speed is unknown, defaulting to 1000 [ 228.365012][ T8144] lo speed is unknown, defaulting to 1000 [ 228.379557][ T8144] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 228.394468][ T8144] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 228.411508][ T8144] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 228.442221][ T8144] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 228.537115][ T8144] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 228.556937][ T29] audit: type=1400 audit(1780581609.765:747): avc: denied { create } for pid=8113 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.572099][ T6741] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 228.593699][ T8144] lo speed is unknown, defaulting to 1000 [ 228.598456][ T7971] veth0_macvtap: entered promiscuous mode [ 228.617014][ T8144] lo speed is unknown, defaulting to 1000 [ 228.618487][ T7971] veth1_macvtap: entered promiscuous mode [ 228.645303][ T8144] lo speed is unknown, defaulting to 1000 [ 228.652607][ T8144] lo speed is unknown, defaulting to 1000 [ 228.671331][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.680894][ T8144] lo speed is unknown, defaulting to 1000 [ 228.695305][ T29] audit: type=1400 audit(1780581609.905:748): avc: denied { bind } for pid=8113 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.719543][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.725286][ T8114] tipc: Failed to remove unknown binding: 66,1,1/4:3772448438/3772448440 [ 228.738378][ T29] audit: type=1400 audit(1780581609.935:749): avc: denied { setopt } for pid=8113 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.745858][ T8119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=8119 comm=syz.0.545 [ 228.821224][ T5727] usb 3-1: cp210x converter now attached to ttyUSB0 [ 228.829227][ T29] audit: type=1400 audit(1780581610.015:750): avc: denied { ioctl } for pid=8118 comm="syz.0.545" path="/dev/usbmon5" dev="devtmpfs" ino=732 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 228.898325][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.937334][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.955058][ T29] audit: type=1400 audit(1780581610.165:751): avc: denied { map } for pid=8150 comm="syz.4.546" path="socket:[18040]" dev="sockfs" ino=18040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 228.988067][ T29] audit: type=1400 audit(1780581610.195:752): avc: denied { ioctl } for pid=8150 comm="syz.4.546" path="socket:[18043]" dev="sockfs" ino=18043 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 229.037777][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.065018][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.635388][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.674515][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.714371][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.723547][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.738454][ T29] audit: type=1400 audit(1780581610.945:753): avc: denied { mounton } for pid=7971 comm="syz-executor" path="/root/syzkaller.WJbi27/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 229.776457][ T29] audit: type=1400 audit(1780581610.985:754): avc: denied { mounton } for pid=7971 comm="syz-executor" path="/root/syzkaller.WJbi27/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 229.885532][ T8162] syzkaller0: entered promiscuous mode [ 229.892924][ T8162] syzkaller0: entered allmulticast mode [ 229.913776][ T8162] tipc: Enabled bearer , priority 0 [ 230.119990][ T50] Bluetooth: hci1: command tx timeout [ 230.907147][ T6741] usb 3-1: USB disconnect, device number 32 [ 231.031487][ T5727] usb 1-1: USB disconnect, device number 33 [ 231.272589][ T6741] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.320989][ T1557] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 231.620319][ T1557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.721146][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 231.728393][ T6741] cp210x 3-1:0.0: device disconnected [ 231.782342][ T1557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.950348][ T1557] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.147444][ T1557] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.445640][ T1557] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.459645][ T1557] usb 7-1: config 0 descriptor?? [ 232.480543][ T8161] tipc: Resetting bearer [ 232.552808][ T8161] tipc: Disabling bearer [ 232.687748][ T8185] vivid-001: ================= START STATUS ================= [ 232.696617][ T8185] vivid-001: RDS Tx I/O Mode: Controls [ 232.705781][ T8185] vivid-001: RDS Program ID: 32904 [ 232.711102][ T8185] vivid-001: RDS Program Type: 3 [ 232.716159][ T8185] vivid-001: RDS PS Name: VIVID-TX [ 232.721649][ T8185] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 232.732249][ T8185] vivid-001: RDS Stereo: true [ 232.737091][ T8185] vivid-001: RDS Artificial Head: false [ 232.790214][ T8185] vivid-001: RDS Compressed: false [ 232.795606][ T8185] vivid-001: RDS Dynamic PTY: false [ 232.801073][ T8185] vivid-001: RDS Traffic Announcement: false [ 232.807261][ T8185] vivid-001: RDS Traffic Program: true [ 232.813237][ T8185] vivid-001: RDS Music: true [ 232.818164][ T8185] vivid-001: ================== END STATUS ================== [ 233.548390][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.585850][ T1557] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 233.749495][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.473481][ T6728] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 234.650473][ T6728] usb 3-1: device descriptor read/64, error -71 [ 234.756516][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 234.756551][ T29] audit: type=1400 audit(1780581615.965:756): avc: denied { connect } for pid=8166 comm="syz.6.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.076208][ T6728] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 235.520694][ T6728] usb 3-1: device descriptor read/64, error -71 [ 235.630256][ T6728] usb usb3-port1: attempt power cycle [ 235.732658][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 235.755417][ T1557] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 235.815352][ T6741] usb 7-1: USB disconnect, device number 2 [ 235.853396][ T8231] veth0_macvtap: Caught tx_queue_len zero misconfig [ 235.869710][ T29] audit: type=1400 audit(1780581617.075:757): avc: denied { write } for pid=8227 comm="syz.5.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.919906][ T1557] usb 5-1: Using ep0 maxpacket: 32 [ 235.927017][ T1557] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 235.945622][ T1557] usb 5-1: config 0 has no interface number 0 [ 235.953140][ T29] audit: type=1400 audit(1780581617.155:758): avc: denied { audit_read } for pid=8232 comm="syz.6.567" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.986125][ T6728] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 235.990078][ T1557] usb 5-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 236.004418][ T1557] usb 5-1: config 0 interface 89 has no altsetting 0 [ 236.032201][ T6728] usb 3-1: device descriptor read/8, error -71 [ 236.033190][ T1557] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 236.059800][ T1557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.069512][ T1557] usb 5-1: Product: syz [ 236.078142][ T1557] usb 5-1: Manufacturer: syz [ 236.096697][ T1557] usb 5-1: SerialNumber: syz [ 236.114334][ T1557] usb 5-1: config 0 descriptor?? [ 236.127315][ T8226] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 236.137077][ T1557] hub 5-1:0.89: bad descriptor, ignoring hub [ 236.165410][ T1557] hub 5-1:0.89: probe with driver hub failed with error -5 [ 236.179674][ T1557] option 5-1:0.89: GSM modem (1-port) converter detected [ 236.224171][ T1557] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 236.290335][ T6728] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 236.408907][ T6728] usb 3-1: device descriptor read/8, error -71 [ 236.560728][ T8244] FAULT_INJECTION: forcing a failure. [ 236.560728][ T8244] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.579869][ T8244] CPU: 1 UID: 0 PID: 8244 Comm: syz.6.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.579898][ T8244] Tainted: [L]=SOFTLOCKUP [ 236.579903][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.579913][ T8244] Call Trace: [ 236.579919][ T8244] [ 236.579925][ T8244] dump_stack_lvl+0x100/0x190 [ 236.579951][ T8244] should_fail_ex.cold+0x5/0xa [ 236.579973][ T8244] _copy_from_user+0x2e/0xd0 [ 236.579995][ T8244] copy_msghdr_from_user+0x9f/0x4f0 [ 236.580017][ T8244] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 236.580048][ T8244] ___sys_sendmsg+0x106/0x1e0 [ 236.580069][ T8244] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.580117][ T8244] __sys_sendmsg+0x170/0x220 [ 236.580143][ T8244] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.580178][ T8244] ? rcu_is_watching+0x12/0xc0 [ 236.580205][ T8244] do_syscall_64+0x115/0x870 [ 236.580226][ T8244] ? clear_bhb_loop+0x40/0x90 [ 236.580246][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.580263][ T8244] RIP: 0033:0x7f054719ce59 [ 236.580278][ T8244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.580293][ T8244] RSP: 002b:00007f0547fd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.580309][ T8244] RAX: ffffffffffffffda RBX: 00007f0547415fa0 RCX: 00007f054719ce59 [ 236.580320][ T8244] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 236.580329][ T8244] RBP: 00007f0547fd0090 R08: 0000000000000000 R09: 0000000000000000 [ 236.580339][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.580348][ T8244] R13: 00007f0547416038 R14: 00007f0547415fa0 R15: 00007fffba68ed88 [ 236.580371][ T8244] [ 236.761979][ T6728] usb usb3-port1: unable to enumerate USB device [ 237.718813][ T6734] usb 5-1: USB disconnect, device number 44 [ 237.849832][ T6734] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 237.859031][ T6734] option 5-1:0.89: device disconnected [ 239.723607][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 239.764339][ T8281] fuseblk: Unknown parameter 'í‘–å' [ 239.905409][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.939329][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.974977][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.986643][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.840577][ T5740] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 240.861957][ T29] audit: type=1400 audit(1780581622.065:759): avc: denied { write } for pid=8264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.929880][ T6728] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 241.050307][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 241.063162][ T5740] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 241.075470][ T29] audit: type=1400 audit(1780581622.285:760): avc: denied { write } for pid=8302 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.103487][ T5740] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 241.136421][ T5740] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.177360][ T5740] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 241.222253][ T5740] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 241.233690][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.242494][ T5740] usb 5-1: Product: syz [ 241.269648][ T5740] usb 5-1: Manufacturer: syz [ 241.291431][ T5740] usb 5-1: SerialNumber: syz [ 241.332166][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 241.412391][ T5740] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input29 [ 241.719878][ T5740] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 241.730645][ T5740] (id 0x00) [ 241.869861][ T5740] rc_core: IR keymap rc-imon-pad not found [ 241.893288][ T5740] Registered IR keymap rc-empty [ 241.913808][ T5740] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 241.939794][ T5740] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 242.001033][ T5740] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 242.029203][ T5740] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input30 [ 242.069054][ T5740] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:45> initialized [ 242.834829][ T29] audit: type=1400 audit(1780581624.045:761): avc: denied { listen } for pid=8316 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.925591][ T5740] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 243.059844][ T5740] usb 3-1: device descriptor read/64, error -71 [ 243.315041][ T5740] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 243.461055][ T5740] usb 3-1: device descriptor read/64, error -71 [ 243.469568][ T6741] usb 5-1: USB disconnect, device number 45 [ 243.581037][ T5740] usb usb3-port1: attempt power cycle [ 243.929947][ T5740] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 244.094870][ T5740] usb 3-1: device descriptor read/8, error -71 [ 244.838767][ T5740] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 244.878398][ T5740] usb 3-1: device descriptor read/8, error -71 [ 245.002412][ T5740] usb usb3-port1: unable to enumerate USB device [ 246.389821][ T6728] usb 6-1: device descriptor read/64, error -110 [ 246.631398][ T6728] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 246.715493][ T8341] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 246.823549][ T8342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.591'. [ 247.613160][ T29] audit: type=1400 audit(1780581627.925:762): avc: denied { relabelfrom } for pid=8338 comm="syz.4.591" name="PPPOL2TP" dev="sockfs" ino=20505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.636483][ T29] audit: type=1400 audit(1780581627.945:763): avc: denied { relabelto } for pid=8338 comm="syz.4.591" name="PPPOL2TP" dev="sockfs" ino=20505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=pppox_socket permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 247.698564][ T6728] usb 6-1: device descriptor read/64, error -32 [ 247.810063][ T6728] usb usb6-port1: attempt power cycle [ 247.865587][ T8341] lo speed is unknown, defaulting to 1000 [ 249.679835][ T6749] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 249.921135][ T6749] usb 1-1: Using ep0 maxpacket: 32 [ 249.945448][ T6749] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 250.167434][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.173886][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.915149][ T6749] usb 1-1: config 0 has no interface number 0 [ 250.926661][ T6749] usb 1-1: config 0 interface 89 altsetting 225 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.947240][ T6749] usb 1-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 0 [ 251.002549][ T29] audit: type=1400 audit(1780581632.205:764): avc: denied { write } for pid=8343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.107268][ T6749] usb 1-1: config 0 interface 89 has no altsetting 0 [ 251.256604][ T6749] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 251.296539][ T6749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.310083][ T6749] usb 1-1: Product: syz [ 251.314427][ T6749] usb 1-1: Manufacturer: syz [ 251.319251][ T6749] usb 1-1: SerialNumber: syz [ 251.346720][ T6749] usb 1-1: config 0 descriptor?? [ 251.361915][ T6749] hub 1-1:0.89: bad descriptor, ignoring hub [ 251.368436][ T6749] hub 1-1:0.89: probe with driver hub failed with error -5 [ 251.387665][ T6749] option 1-1:0.89: GSM modem (1-port) converter detected [ 252.156774][ T8391] syzkaller0: entered promiscuous mode [ 252.182463][ T8391] syzkaller0: entered allmulticast mode [ 252.232947][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.603'. [ 252.314355][ T29] audit: type=1400 audit(1780581633.505:765): avc: denied { write } for pid=8396 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.470031][ T6749] usb 1-1: USB disconnect, device number 34 [ 252.532478][ T6749] option 1-1:0.89: device disconnected [ 252.812815][ T29] audit: type=1400 audit(1780581634.025:766): avc: denied { getopt } for pid=8408 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.871851][ T8409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8409 comm=syz.2.607 [ 253.523433][ T29] audit: type=1400 audit(1780581634.715:767): avc: denied { write } for pid=8405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.943519][ T29] audit: type=1400 audit(1780581635.155:768): avc: denied { write } for pid=8428 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.251971][ T29] audit: type=1400 audit(1780581635.465:769): avc: denied { shutdown } for pid=8414 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.827407][ T8447] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 254.835161][ T8447] UDF-fs: Scanning with blocksize 512 failed [ 254.852955][ T8447] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 254.876752][ T8447] UDF-fs: Scanning with blocksize 1024 failed [ 254.938093][ T8447] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.029944][ T8447] UDF-fs: Scanning with blocksize 2048 failed [ 255.142463][ T8447] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.152177][ T8447] UDF-fs: Scanning with blocksize 4096 failed [ 255.851448][ T29] audit: type=1400 audit(1780581637.065:770): avc: denied { write } for pid=8440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.345645][ T5727] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 256.404435][ T29] audit: type=1400 audit(1780581637.615:771): avc: denied { write } for pid=8470 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.567554][ T5727] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.575687][ T5727] usb 5-1: config 0 has no interface number 0 [ 256.591647][ T5727] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 256.619410][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.654644][ T5727] usb 5-1: Product: syz [ 256.687669][ T5727] usb 5-1: Manufacturer: syz [ 256.716218][ T5727] usb 5-1: SerialNumber: syz [ 256.890016][ T6734] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 257.112476][ T5727] usb 5-1: config 0 descriptor?? [ 257.269812][ T6734] usb 3-1: Using ep0 maxpacket: 32 [ 257.276654][ T6734] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 257.295924][ T6734] usb 3-1: config 0 has no interface number 0 [ 257.388854][ T5727] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 257.401410][ T6734] usb 3-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 257.413980][ T6734] usb 3-1: config 0 interface 89 has no altsetting 0 [ 257.421543][ T5727] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.432411][ T5727] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 257.440653][ T5727] usb 5-1: media controller created [ 257.450319][ T6734] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 257.462645][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.470981][ T6734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.479804][ T6734] usb 3-1: Product: syz [ 257.488175][ T6734] usb 3-1: Manufacturer: syz [ 257.492964][ T6734] usb 3-1: SerialNumber: syz [ 257.503760][ T6734] usb 3-1: config 0 descriptor?? [ 257.509400][ T8481] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.522800][ T6734] hub 3-1:0.89: bad descriptor, ignoring hub [ 257.528945][ T6734] hub 3-1:0.89: probe with driver hub failed with error -5 [ 257.537655][ T6734] option 3-1:0.89: GSM modem (1-port) converter detected [ 257.553808][ T6734] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 257.564549][ T8485] 9p: Bad value for 'rfdno' [ 257.581408][ T8485] input: syz1 as /devices/virtual/input/input32 [ 257.609211][ T29] audit: type=1400 audit(1780581638.815:772): avc: denied { mounton } for pid=8457 comm="syz.4.616" path="/127/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 257.659590][ T5727] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 257.825851][ T5727] usb 5-1: USB disconnect, device number 46 [ 257.890432][ T6734] usb 3-1: USB disconnect, device number 41 [ 257.905823][ T6734] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 258.006739][ T6734] option 3-1:0.89: device disconnected [ 258.973800][ T8500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.625'. [ 259.179830][ T5727] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 259.353667][ T5727] usb 7-1: unable to get BOS descriptor or descriptor too short [ 259.374444][ T5727] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.401667][ T5727] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.425914][ T5727] usb 7-1: string descriptor 0 read error: -22 [ 259.442126][ T5727] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 259.461638][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.486164][ T5727] usb 7-1: selecting invalid altsetting 1 [ 259.498344][ T5727] usb 7-1: unit 6 not found! [ 259.972090][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 260.080317][ T8502] unsupported nlmsg_type 40 [ 260.292406][ T8502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.493086][ T8516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.645032][ T5727] usb 7-1: 2:0: cannot get min/max values for control 1 (id 2) [ 260.764232][ T5727] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 260.778727][ T8205] udevd[8205]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.797967][ T5727] usb 7-1: USB disconnect, device number 3 [ 260.899936][ T6741] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 261.016585][ T8541] netlink: 'syz.5.635': attribute type 1 has an invalid length. [ 261.040226][ T6741] usb 5-1: device descriptor read/64, error -71 [ 261.088586][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.635'. [ 261.110715][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.635'. [ 261.135444][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.635'. [ 261.164444][ T8547] team0: Device xfrm0 is of different type [ 261.291514][ T6741] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 261.490061][ T6741] usb 5-1: device descriptor read/64, error -71 [ 261.522334][ T8552] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 261.620235][ T6741] usb usb5-port1: attempt power cycle [ 261.980933][ T6741] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 262.010325][ T6741] usb 5-1: device descriptor read/8, error -71 [ 262.164487][ T29] audit: type=1800 audit(1780581643.375:773): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.645" name="file0" dev="overlay" ino=123 res=0 errno=0 [ 262.189851][ T6749] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 262.259840][ T6741] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 262.293017][ T6741] usb 5-1: device descriptor read/8, error -71 [ 262.381395][ T6749] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 262.404572][ T6749] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.421717][ T6749] usb 3-1: config 0 has no interface number 0 [ 262.421779][ T6741] usb usb5-port1: unable to enumerate USB device [ 262.440260][ T6749] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 262.465408][ T6749] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 262.489363][ T6749] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.515313][ T6749] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 262.524843][ T6749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.563315][ T6749] usb 3-1: Product: syz [ 262.575185][ T6749] usb 3-1: Manufacturer: syz [ 262.582060][ T6749] usb 3-1: SerialNumber: syz [ 262.669363][ T6749] usb 3-1: config 0 descriptor?? [ 262.793685][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 262.804437][ T8592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=8592 comm=syz.0.647 [ 262.850724][ T29] audit: type=1400 audit(1780581643.995:774): avc: denied { sqpoll } for pid=8580 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 263.199825][ T5740] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 263.371698][ T5740] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 263.390198][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.410905][ T5740] usb 7-1: config 0 descriptor?? [ 263.488594][ T29] audit: type=1400 audit(1780581644.695:775): avc: denied { write } for pid=8594 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.918414][ T8569] ip6t_srh: unknown srh match flags 4000 [ 264.589749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 264.683500][ T5740] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 264.749875][ T6749] usb 3-1: USB disconnect, device number 42 [ 264.964350][ T8587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.099634][ T8607] netlink: 72 bytes leftover after parsing attributes in process `syz.6.648'. [ 265.423966][ T29] audit: type=1400 audit(1780581646.635:776): avc: denied { map } for pid=8601 comm="syz.4.651" path="/proc/458/net/netstat" dev="proc" ino=4026532970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 265.517895][ T29] audit: type=1400 audit(1780581646.665:777): avc: denied { setopt } for pid=8601 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.929871][ T6741] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 266.099805][ T6741] usb 5-1: Using ep0 maxpacket: 16 [ 266.120350][ T6741] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.158172][ T6741] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.205705][ T6741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.233242][ T6741] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.00 [ 266.267438][ T6741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.307235][ T6741] usb 5-1: config 0 descriptor?? [ 266.555214][ T6741] usb 5-1: string descriptor 0 read error: -71 [ 266.596068][ T6741] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 266.606167][ T5740] [drm:udl_init] *ERROR* Selecting channel failed [ 266.656618][ T6741] usb 5-1: USB disconnect, device number 51 [ 267.313687][ T5740] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 267.347511][ T5740] [drm] Initialized udl on minor 2 [ 267.394476][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.6.658'. [ 267.428513][ T5740] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 267.486745][ T5740] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 267.588963][ T5740] usb 7-1: USB disconnect, device number 4 [ 267.607287][ T6749] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 267.642917][ T6749] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 267.699797][ T6729] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 267.883729][ T6729] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 267.915932][ T6729] usb 5-1: config 0 has no interface number 0 [ 267.940850][ T6729] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 267.967454][ T6729] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 268.028199][ T6729] usb 5-1: config 0 interface 49 has no altsetting 0 [ 268.051769][ T6729] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 268.072538][ T6729] usb 5-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 268.086842][ T6729] usb 5-1: Product: syz [ 268.140798][ T6729] usb 5-1: config 0 descriptor?? [ 268.230221][ T6741] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 268.281569][ T29] audit: type=1400 audit(1780581649.485:778): avc: denied { setattr } for pid=8630 comm="syz.5.660" name="NETLINK" dev="sockfs" ino=21511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.901774][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.659'. [ 268.921466][ T6741] usb 3-1: device descriptor read/64, error -71 [ 268.944180][ T29] audit: type=1400 audit(1780581650.085:779): avc: denied { accept } for pid=8628 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.036879][ T6729] ftdi_sio 5-1:0.49: FTDI USB Serial Device converter detected [ 269.050335][ T6729] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 269.068573][ T6729] usb 5-1: USB disconnect, device number 52 [ 269.130217][ T6729] ftdi_sio 5-1:0.49: device disconnected [ 269.169825][ T6741] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 269.339840][ T6741] usb 3-1: device descriptor read/64, error -71 [ 269.469902][ T5740] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 269.503333][ T6741] usb usb3-port1: attempt power cycle [ 270.059859][ T6741] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 270.089907][ T5740] usb 1-1: Using ep0 maxpacket: 8 [ 270.090500][ T29] audit: type=1400 audit(1780581651.305:780): avc: denied { ioctl } for pid=8633 comm="syz.2.656" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.096430][ T5740] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.120041][ T6741] usb 3-1: device descriptor read/8, error -71 [ 270.172751][ T5740] usb 1-1: config 0 interface 0 has no altsetting 0 [ 270.185539][ T5740] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 270.207153][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.286093][ T29] audit: type=1400 audit(1780581651.495:781): avc: denied { read write } for pid=5621 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.288047][ T5740] usb 1-1: config 0 descriptor?? [ 270.393294][ T29] audit: type=1400 audit(1780581651.495:782): avc: denied { open } for pid=5621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.401717][ T6741] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 270.470743][ T6741] usb 3-1: device descriptor read/8, error -71 [ 270.495977][ T29] audit: type=1400 audit(1780581651.495:783): avc: denied { ioctl } for pid=5621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.441713][ T5727] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 271.450721][ T5740] hid_parser_main: 221 callbacks suppressed [ 271.450742][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.453180][ T6741] usb usb3-port1: unable to enumerate USB device [ 271.539691][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.550365][ T29] audit: type=1400 audit(1780581651.595:784): avc: denied { read write } for pid=8662 comm="syz.4.666" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.574463][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.588587][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.619400][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.631916][ T29] audit: type=1400 audit(1780581651.595:785): avc: denied { open } for pid=8662 comm="syz.4.666" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.664388][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.671265][ T5727] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 271.674281][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.698463][ T29] audit: type=1400 audit(1780581651.725:786): avc: denied { watch } for pid=8664 comm="syz.5.667" path="/85/bus" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 271.723482][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.739767][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.754954][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: unknown main item tag 0x0 [ 271.769785][ T29] audit: type=1400 audit(1780581651.725:787): avc: denied { watch_sb watch_reads } for pid=8664 comm="syz.5.667" path="/85/bus" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 271.773628][ T5727] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.799914][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: item fetching failed at offset 38/40 [ 271.805845][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.668'. [ 271.856162][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.668'. [ 271.909647][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: parse failed (reason: -22) [ 271.910098][ T5727] usb 5-1: config 0 has no interface number 0 [ 271.964126][ T5727] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 271.972296][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 271.987737][ T5740] hid-corsair-void 0003:1B1C:0A55.0006: probe with driver hid-corsair-void failed with error -22 [ 272.025128][ T5727] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 272.038658][ T5740] usb 1-1: USB disconnect, device number 35 [ 272.058660][ T5727] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.084572][ T5727] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 272.125244][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.149272][ T5727] usb 5-1: Product: syz [ 272.155228][ T5727] usb 5-1: Manufacturer: syz [ 272.160691][ T5727] usb 5-1: SerialNumber: syz [ 272.179441][ T5727] usb 5-1: config 0 descriptor?? [ 272.200356][ T5623] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 272.211623][ T5623] Bluetooth: hci1: Injecting HCI hardware error event [ 272.219629][ T5623] Bluetooth: hci1: hardware error 0x00 [ 272.245708][ T8676] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 272.284651][ T8676] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 272.493933][ T8677] input: syz1 as /devices/virtual/input/input34 [ 272.527635][ T8676] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 272.863697][ T8676] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 272.925081][ T8663] ip6t_srh: unknown srh match flags 4000 [ 272.965432][ T8683] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 273.470574][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 273.470585][ T29] audit: type=1400 audit(1780581654.685:821): avc: denied { read } for pid=4969 comm="acpid" name="event4" dev="devtmpfs" ino=3363 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.558477][ T29] audit: type=1400 audit(1780581654.685:822): avc: denied { open } for pid=4969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3363 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.600323][ T29] audit: type=1400 audit(1780581654.685:823): avc: denied { ioctl } for pid=4969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3363 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.919790][ T5740] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 274.000074][ T8691] tipc: Started in network mode [ 274.005025][ T8691] tipc: Node identity 4, cluster identity 4711 [ 274.011243][ T8691] tipc: Node number set to 4 [ 274.028150][ T29] audit: type=1400 audit(1780581655.195:824): avc: denied { create } for pid=8688 comm="syz.6.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.401158][ T5623] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 274.455889][ T29] audit: type=1400 audit(1780581655.195:825): avc: denied { setopt } for pid=8688 comm="syz.6.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.518237][ T29] audit: type=1400 audit(1780581655.195:826): avc: denied { perfmon } for pid=8688 comm="syz.6.674" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.541403][ T29] audit: type=1400 audit(1780581655.205:827): avc: denied { create } for pid=8688 comm="syz.6.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.561409][ T29] audit: type=1400 audit(1780581655.205:828): avc: denied { write } for pid=8688 comm="syz.6.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.580735][ T29] audit: type=1400 audit(1780581655.235:829): avc: denied { write } for pid=8688 comm="syz.6.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.690146][ T5740] usb 1-1: device descriptor read/64, error -71 [ 274.754718][ T29] audit: type=1400 audit(1780581655.965:830): avc: denied { create } for pid=8695 comm="syz.6.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.979954][ T5740] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 275.189852][ T5740] usb 1-1: device descriptor read/64, error -71 [ 275.338217][ T6729] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 275.395954][ T5740] usb usb1-port1: attempt power cycle [ 275.553901][ T6729] usb 3-1: Invalid ep0 maxpacket: 64 [ 275.723893][ T6729] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 275.830721][ T5740] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 275.923091][ T5740] usb 1-1: device descriptor read/8, error -71 [ 276.013875][ T6729] usb 3-1: Invalid ep0 maxpacket: 64 [ 276.043048][ T6729] usb usb3-port1: attempt power cycle [ 276.249484][ T8702] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 276.283125][ T6749] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 276.358207][ T5740] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 276.560686][ T6749] usb 7-1: Using ep0 maxpacket: 16 [ 276.575124][ T5740] usb 1-1: device descriptor read/8, error -71 [ 276.589735][ T6729] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 276.662817][ T6749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.676707][ T6729] usb 3-1: Invalid ep0 maxpacket: 64 [ 276.720647][ T5740] usb usb1-port1: unable to enumerate USB device [ 276.732891][ T6749] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.792225][ T6749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.839951][ T6729] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 276.901165][ T6729] usb 3-1: Invalid ep0 maxpacket: 64 [ 276.930144][ T6749] usb 7-1: config 0 descriptor?? [ 276.942739][ T6729] usb usb3-port1: unable to enumerate USB device [ 277.290907][ T5740] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 277.431884][ T6749] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 277.460659][ T6729] usb 5-1: USB disconnect, device number 53 [ 277.491087][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 277.517544][ T5740] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 277.554095][ T5740] usb 6-1: config 0 has no interface number 0 [ 278.557793][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 278.557809][ T29] audit: type=1400 audit(1780581659.765:845): avc: denied { accept } for pid=8704 comm="syz.6.679" laddr=fe80::a8aa:aaff:feaa:aaaa lport=53611 faddr=2001::1 fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 278.651960][ T5740] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.670692][ T6749] usb 7-1: USB disconnect, device number 5 [ 278.680194][ T5740] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.733709][ T5740] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 278.771682][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.803747][ T5740] usb 6-1: Product: syz [ 278.833164][ T5740] usb 6-1: Manufacturer: syz [ 278.865201][ T5740] usb 6-1: SerialNumber: syz [ 278.890438][ T5740] usb 6-1: config 0 descriptor?? [ 278.990726][ T5740] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 279.192357][ T5740] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 279.201194][ T29] audit: type=1400 audit(1780581660.405:846): avc: denied { ioctl } for pid=8720 comm="syz.6.685" path="/dev/video7" dev="devtmpfs" ino=952 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 279.249978][ T5740] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 279.313007][ T29] audit: type=1400 audit(1780581660.525:847): avc: denied { bind } for pid=8722 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.361551][ T29] audit: type=1400 audit(1780581660.525:848): avc: denied { name_bind } for pid=8722 comm="syz.4.686" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 279.361578][ T29] audit: type=1400 audit(1780581660.525:849): avc: denied { node_bind } for pid=8722 comm="syz.4.686" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 279.361599][ T29] audit: type=1400 audit(1780581660.545:850): avc: denied { getopt } for pid=8722 comm="syz.4.686" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.449939][ T5727] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 279.463183][ T29] audit: type=1400 audit(1780581660.665:851): avc: denied { create } for pid=8706 comm="syz.5.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.586223][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.589895][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.678428][ T5727] usb 7-1: Using ep0 maxpacket: 16 [ 279.705347][ T5727] usb 7-1: config 222 has an invalid interface number: 31 but max is 0 [ 279.705368][ T5727] usb 7-1: config 222 has no interface number 0 [ 279.705389][ T5727] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 279.705404][ T5727] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid wMaxPacketSize 0 [ 279.705417][ T5727] usb 7-1: config 222 interface 31 has no altsetting 0 [ 279.709044][ T5727] usb 7-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 279.709064][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.709076][ T5727] usb 7-1: Product: syz [ 279.709085][ T5727] usb 7-1: Manufacturer: syz [ 279.709094][ T5727] usb 7-1: SerialNumber: syz [ 279.976451][ T5727] ldusb 7-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 279.981131][ T5727] usb 7-1: USB disconnect, device number 6 [ 279.984132][ T5727] ldusb 7-1:222.31: LD USB Device #0 now disconnected [ 280.219943][ T5740] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 280.349454][ T29] audit: type=1400 audit(1780581661.555:852): avc: denied { map } for pid=8731 comm="syz.0.681" path="socket:[21303]" dev="sockfs" ino=21303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 280.426071][ T5740] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 280.445894][ T5740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.492686][ T6749] usb 6-1: USB disconnect, device number 26 [ 280.530979][ T5740] usb 3-1: config 0 has no interface number 0 [ 280.554355][ T5740] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 280.608704][ T5740] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 280.632043][ T29] audit: type=1400 audit(1780581661.835:853): avc: denied { write } for pid=8740 comm="syz.4.690" name="wireless" dev="proc" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 281.617464][ T29] audit: type=1400 audit(1780581662.775:854): avc: denied { create } for pid=8737 comm="syz.6.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 282.156447][ T5740] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.690024][ T6741] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 282.924708][ T5740] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 283.208883][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.209802][ T6749] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 283.227340][ T5740] usb 3-1: Product: syz [ 283.263720][ T5740] usb 3-1: Manufacturer: syz [ 283.333469][ T5740] usb 3-1: SerialNumber: syz [ 283.505069][ T5740] usb 3-1: config 0 descriptor?? [ 283.621180][ T6749] usb 1-1: device descriptor read/64, error -71 [ 283.639889][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 283.639960][ T29] audit: type=1400 audit(1780581664.795:863): avc: denied { read } for pid=8759 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.998824][ T5740] usb 3-1: can't set config #0, error -71 [ 284.022324][ T5740] usb 3-1: USB disconnect, device number 51 [ 284.039551][ T6741] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 284.063174][ T8764] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.696'. [ 284.077098][ T6741] usb 7-1: can't read configurations, error -71 [ 284.099201][ T29] audit: type=1400 audit(1780581664.805:864): avc: denied { ioctl } for pid=8759 comm="syz.4.695" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 284.225887][ T29] audit: type=1400 audit(1780581665.305:865): avc: denied { create } for pid=8763 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.328257][ T29] audit: type=1400 audit(1780581665.305:866): avc: denied { bind } for pid=8763 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.533865][ T29] audit: type=1400 audit(1780581665.745:867): avc: denied { read write } for pid=8774 comm="syz.2.701" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 284.612799][ T29] audit: type=1400 audit(1780581665.745:868): avc: denied { open } for pid=8774 comm="syz.2.701" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 284.699803][ T6741] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 284.822052][ T29] audit: type=1400 audit(1780581666.035:869): avc: denied { create } for pid=8780 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 284.872116][ T6741] usb 7-1: Using ep0 maxpacket: 32 [ 284.904972][ T6741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.935865][ T29] audit: type=1400 audit(1780581666.035:870): avc: denied { bind } for pid=8780 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.977442][ T6741] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 285.007750][ T6741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.031094][ T6741] usb 7-1: config 0 descriptor?? [ 285.050864][ T29] audit: type=1400 audit(1780581666.045:871): avc: denied { read write } for pid=8780 comm="syz.2.703" dev="sockfs" ino=21396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 285.130821][ T29] audit: type=1400 audit(1780581666.175:872): avc: denied { ioctl } for pid=8780 comm="syz.2.703" path="socket:[21728]" dev="sockfs" ino=21728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.189819][ T6749] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 285.316130][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.332225][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.935638][ T6749] usb 1-1: Using ep0 maxpacket: 8 [ 285.954954][ T6749] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.562204][ T6749] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 286.635983][ T6741] hid_parser_main: 26 callbacks suppressed [ 286.635996][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.656092][ T6749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.688414][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.689139][ T6749] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 286.710296][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.717710][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.725446][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.735104][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.755461][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.765745][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.773025][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.781348][ T6741] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 286.832572][ T6749] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 286.941296][ T5727] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 287.106478][ T6749] usb 1-1: Product: syz [ 287.121959][ T6749] usb 1-1: Manufacturer: syz [ 287.139959][ T6741] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.05 Device [HID 1e7d:2c2e] on usb-dummy_hcd.6-1/input0 [ 287.176878][ T6741] usb 7-1: USB disconnect, device number 8 [ 287.177856][ T6749] usb 1-1: SerialNumber: syz [ 287.247347][ T8799] fido_id[8799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 287.264398][ T5727] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 287.275120][ T5727] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.313512][ T5727] usb 5-1: config 0 has no interface number 0 [ 287.334039][ T5727] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 287.349123][ T5727] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 287.363099][ T5727] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.382537][ T5727] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 287.382668][ T6749] usb 1-1: config 0 descriptor?? [ 287.421617][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.431413][ T5727] usb 5-1: Product: syz [ 287.436560][ T5727] usb 5-1: Manufacturer: syz [ 287.441599][ T5727] usb 5-1: SerialNumber: syz [ 287.466546][ T5727] usb 5-1: config 0 descriptor?? [ 287.495870][ T6749] imon_raw 1-1:0.0: IR endpoint missing [ 287.739692][ T8779] : renamed from bond_slave_0 (while UP) [ 287.845854][ T6749] usb 1-1: USB disconnect, device number 41 [ 288.346524][ T8795] ip6t_srh: unknown srh match flags 4000 [ 289.027554][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 289.027570][ T29] audit: type=1400 audit(1780581670.235:882): avc: denied { module_request } for pid=8807 comm="syz.5.710" kmod="nft-expr-7-tunnel" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 289.146200][ T29] audit: type=1400 audit(1780581670.355:883): avc: denied { ioctl } for pid=8811 comm="syz.2.711" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 289.306876][ T8817] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 289.354564][ T8817] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 289.390106][ T8817] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 289.418162][ T8817] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 290.098705][ T29] audit: type=1400 audit(1780581670.995:884): avc: denied { unlink } for pid=8822 comm="syz.2.713" name="#e" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 290.210603][ T29] audit: type=1400 audit(1780581671.005:885): avc: denied { mount } for pid=8822 comm="syz.2.713" name="/" dev="overlay" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 290.285524][ T29] audit: type=1400 audit(1780581671.105:886): avc: denied { create } for pid=8822 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 290.329670][ T5727] usb 5-1: USB disconnect, device number 54 [ 290.351213][ T29] audit: type=1400 audit(1780581671.115:887): avc: denied { write } for pid=8822 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 290.429237][ T29] audit: type=1400 audit(1780581671.635:888): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 290.452235][ T29] audit: type=1400 audit(1780581671.635:889): avc: denied { create } for pid=8829 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.108517][ T29] audit: type=1400 audit(1780581672.315:890): avc: denied { listen } for pid=8838 comm="syz.5.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.156869][ T8840] netlink: 'syz.5.719': attribute type 4 has an invalid length. [ 291.288499][ T8847] fuse: Unknown parameter '¤I [ 291.288499][ T8847] %¬•É_ůZ' [ 291.320352][ T6734] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 291.529797][ T6734] usb 1-1: Using ep0 maxpacket: 32 [ 291.540765][ T6734] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 291.550290][ T6734] usb 1-1: config 0 has no interface number 0 [ 291.559475][ T6734] usb 1-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 291.574882][ T6734] usb 1-1: config 0 interface 89 has no altsetting 0 [ 291.591971][ T6734] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 291.602667][ T6734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.612821][ T6734] usb 1-1: Product: syz [ 291.619329][ T6734] usb 1-1: Manufacturer: syz [ 291.624554][ T6734] usb 1-1: SerialNumber: syz [ 291.647794][ T6734] usb 1-1: config 0 descriptor?? [ 291.659615][ T8839] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.670294][ T5740] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 291.680134][ T6734] hub 1-1:0.89: bad descriptor, ignoring hub [ 291.680907][ T6749] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 291.686525][ T6734] hub 1-1:0.89: probe with driver hub failed with error -5 [ 291.703829][ T5727] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 291.742177][ T6734] option 1-1:0.89: GSM modem (1-port) converter detected [ 291.750201][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.722'. [ 291.759090][ T29] audit: type=1400 audit(1780581672.965:891): avc: denied { setopt } for pid=8854 comm="syz.4.722" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.781213][ T6734] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 291.869800][ T5727] usb 7-1: Using ep0 maxpacket: 8 [ 291.889859][ T6749] usb 6-1: Using ep0 maxpacket: 32 [ 291.896207][ T5740] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 291.907050][ T6749] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 291.908247][ T5727] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 291.933407][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.942127][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.975064][ T6749] usb 6-1: config 0 has no interface number 0 [ 291.988375][ T5727] usb 7-1: Product: syz [ 291.991005][ T6749] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.008130][ T5740] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 292.026048][ T5740] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 292.029895][ T5727] usb 7-1: Manufacturer: syz [ 292.045793][ T6749] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 292.054624][ T5727] usb 7-1: SerialNumber: syz [ 292.069551][ T5740] usb 3-1: Manufacturer: syz [ 292.078364][ T6749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.101362][ T5740] usb 3-1: config 0 descriptor?? [ 292.108058][ T5727] usb 7-1: config 0 descriptor?? [ 292.119812][ T6749] usb 6-1: Product: syz [ 292.124395][ T5727] gspca_main: se401-2.14.0 probing 047d:5003 [ 292.139793][ T6749] usb 6-1: Manufacturer: syz [ 292.149924][ T6734] usb 1-1: USB disconnect, device number 42 [ 292.157497][ T6749] usb 6-1: SerialNumber: syz [ 292.193000][ T6734] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 292.194884][ T6749] usb 6-1: config 0 descriptor?? [ 292.243139][ T6749] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 292.245021][ T6734] option 1-1:0.89: device disconnected [ 292.292438][ T6749] em28xx 6-1:0.132: Video interface 132 found: [ 292.314216][ T5740] rc_core: IR keymap rc-hauppauge not found [ 292.329374][ T5740] Registered IR keymap rc-empty [ 292.358446][ T5740] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 292.397742][ T5740] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 292.596973][ T5727] gspca_se401: ExtraFeatures: 255 [ 292.610915][ T5727] gspca_se401: Too many frame sizes [ 292.641293][ T6749] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 292.681590][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 139 [ 292.890798][ T5740] usb 3-1: USB disconnect, device number 52 [ 293.380223][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.396741][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.453478][ T6749] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 293.474512][ T6749] em28xx 6-1:0.132: board has no eeprom [ 293.731495][ T6749] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 293.744711][ T6749] em28xx 6-1:0.132: analog set to bulk mode. [ 293.760765][ T5740] em28xx 6-1:0.132: Registering V4L2 extension [ 293.908685][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.942877][ T8871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'. [ 293.952574][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.961263][ T8871] xt_bpf: check failed: parse error [ 293.999544][ T8852] trusted_key: encrypted_key: insufficient parameters specified [ 294.078187][ T5727] usb 6-1: USB disconnect, device number 27 [ 294.078516][ T5740] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 294.101346][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 294.101362][ T29] audit: type=1400 audit(1780581675.305:893): avc: denied { append } for pid=8873 comm="syz.2.727" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 294.118241][ T5740] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 294.143885][ T5727] em28xx 6-1:0.132: Disconnecting em28xx [ 294.226492][ T5740] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 294.240293][ T5740] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 294.257615][ T5740] em28xx 6-1:0.132: No AC97 audio processor [ 294.328955][ T5740] usb 6-1: Decoder not found [ 294.343936][ T5740] em28xx 6-1:0.132: failed to create media graph [ 294.374252][ T5740] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 294.417796][ T8878] ================================================================== [ 294.425893][ T8878] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 294.433071][ T8878] Read of size 4 at addr ffff88802c314860 by task v4l_id/8878 [ 294.440493][ T8878] [ 294.442790][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 294.442806][ T8878] Tainted: [L]=SOFTLOCKUP [ 294.442810][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.442816][ T8878] Call Trace: [ 294.442820][ T8878] [ 294.442825][ T8878] dump_stack_lvl+0x100/0x190 [ 294.442840][ T8878] print_report+0x13d/0x4b0 [ 294.442855][ T8878] ? __virt_addr_valid+0x239/0x430 [ 294.442867][ T8878] ? v4l2_open+0x351/0x490 [ 294.442881][ T8878] kasan_report+0xdf/0x1d0 [ 294.442893][ T8878] ? v4l2_open+0x351/0x490 [ 294.442908][ T8878] v4l2_open+0x351/0x490 [ 294.442921][ T8878] ? __pfx_v4l2_open+0x10/0x10 [ 294.442935][ T8878] chrdev_open+0x234/0x6a0 [ 294.442949][ T8878] ? __pfx_chrdev_open+0x10/0x10 [ 294.442962][ T8878] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 294.442978][ T8878] do_dentry_open+0x6ab/0x14d0 [ 294.442990][ T8878] ? __pfx_chrdev_open+0x10/0x10 [ 294.443004][ T8878] vfs_open+0x82/0x3f0 [ 294.443019][ T8878] path_openat+0x208c/0x31a0 [ 294.443035][ T8878] ? __pfx_path_openat+0x10/0x10 [ 294.443050][ T8878] do_file_open+0x20e/0x430 [ 294.443064][ T8878] ? __pfx_do_file_open+0x10/0x10 [ 294.443081][ T8878] ? alloc_fd+0x476/0x790 [ 294.443095][ T8878] ? do_getname+0x191/0x390 [ 294.443110][ T8878] do_sys_openat2+0x10d/0x1e0 [ 294.443129][ T8878] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.443146][ T8878] __x64_sys_openat+0x12d/0x210 [ 294.443162][ T8878] ? __pfx___x64_sys_openat+0x10/0x10 [ 294.443178][ T8878] ? rcu_is_watching+0x12/0xc0 [ 294.443194][ T8878] do_syscall_64+0x115/0x870 [ 294.443209][ T8878] ? clear_bhb_loop+0x40/0x90 [ 294.443221][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.443231][ T8878] RIP: 0033:0x7f80594a7407 [ 294.443240][ T8878] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 294.443251][ T8878] RSP: 002b:00007fffd1784ed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 294.443262][ T8878] RAX: ffffffffffffffda RBX: 00007f8059c6e880 RCX: 00007f80594a7407 [ 294.443271][ T8878] RDX: 0000000000000000 RSI: 00007fffd1786f1b RDI: ffffffffffffff9c [ 294.443281][ T8878] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 294.443291][ T8878] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 294.443301][ T8878] R13: 00007fffd1785120 R14: 00007f8059dd5000 R15: 000056517056b4d8 [ 294.443319][ T8878] [ 294.443324][ T8878] [ 294.684790][ T8878] Allocated by task 5740: [ 294.689092][ T8878] kasan_save_stack+0x30/0x50 [ 294.693752][ T8878] kasan_save_track+0x14/0x30 [ 294.698402][ T8878] __kasan_kmalloc+0xaa/0xb0 [ 294.702964][ T8878] em28xx_v4l2_init.cold+0x94/0x3a40 [ 294.708240][ T8878] em28xx_init_extension+0x13a/0x200 [ 294.713511][ T8878] request_module_async+0x61/0x80 [ 294.718518][ T8878] process_one_work+0xa0e/0x1980 [ 294.723433][ T8878] worker_thread+0x5ef/0xe50 [ 294.728007][ T8878] kthread+0x370/0x450 [ 294.732065][ T8878] ret_from_fork+0x72b/0xd50 [ 294.736634][ T8878] ret_from_fork_asm+0x1a/0x30 [ 294.741389][ T8878] [ 294.743689][ T8878] Freed by task 5740: [ 294.747641][ T8878] kasan_save_stack+0x30/0x50 [ 294.752293][ T8878] kasan_save_track+0x14/0x30 [ 294.756945][ T8878] kasan_save_free_info+0x3b/0x70 [ 294.761948][ T8878] __kasan_slab_free+0x5f/0x80 [ 294.766690][ T8878] kfree+0x223/0x6c0 [ 294.770564][ T8878] kref_put.isra.0+0x53/0x75 [ 294.775140][ T8878] em28xx_v4l2_init.cold+0x280/0x3a40 [ 294.780489][ T8878] em28xx_init_extension+0x13a/0x200 [ 294.785768][ T8878] request_module_async+0x61/0x80 [ 294.790774][ T8878] process_one_work+0xa0e/0x1980 [ 294.795696][ T8878] worker_thread+0x5ef/0xe50 [ 294.800263][ T8878] kthread+0x370/0x450 [ 294.804311][ T8878] ret_from_fork+0x72b/0xd50 [ 294.808881][ T8878] ret_from_fork_asm+0x1a/0x30 [ 294.813625][ T8878] [ 294.815923][ T8878] The buggy address belongs to the object at ffff88802c314000 [ 294.815923][ T8878] which belongs to the cache kmalloc-8k of size 8192 [ 294.829949][ T8878] The buggy address is located 2144 bytes inside of [ 294.829949][ T8878] freed 8192-byte region [ffff88802c314000, ffff88802c316000) [ 294.843903][ T8878] [ 294.846202][ T8878] The buggy address belongs to the physical page: [ 294.852587][ T8878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c310 [ 294.861320][ T8878] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 294.869791][ T8878] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 294.877309][ T8878] page_type: f5(slab) [ 294.881267][ T8878] raw: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 294.889824][ T8878] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 294.898383][ T8878] head: 00fff00000000040 ffff88813fe2f280 dead000000000100 dead000000000122 [ 294.907040][ T8878] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 294.915690][ T8878] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 294.924337][ T8878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 294.932977][ T8878] page dumped because: kasan: bad access detected [ 294.939534][ T8878] page_owner tracks the page as allocated [ 294.945222][ T8878] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8548, tgid 8546 (syz.2.637), ts 261329846453, free_ts 261319435529 [ 294.966468][ T8878] post_alloc_hook+0xfd/0x120 [ 294.971127][ T8878] get_page_from_freelist+0x11a6/0x3410 [ 294.976718][ T8878] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 294.982591][ T8878] new_slab+0xa6/0x6c0 [ 294.986640][ T8878] refill_objects+0x277/0x420 [ 294.991309][ T8878] __pcs_replace_empty_main+0x375/0x650 [ 294.996835][ T8878] __kmalloc_noprof+0x688/0x850 [ 295.001665][ T8878] bitmap_ipmac_create+0x498/0x920 [ 295.006763][ T8878] ip_set_create+0x6b8/0x14f0 [ 295.011415][ T8878] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 295.016423][ T8878] netlink_rcv_skb+0x159/0x420 [ 295.021167][ T8878] nfnetlink_rcv+0x1b3/0x440 [ 295.025739][ T8878] netlink_unicast+0x585/0x850 [ 295.030481][ T8878] netlink_sendmsg+0x8b0/0xda0 [ 295.035221][ T8878] ____sys_sendmsg+0x9e1/0xb70 [ 295.039963][ T8878] ___sys_sendmsg+0x190/0x1e0 [ 295.044619][ T8878] page last free pid 7971 tgid 7971 stack trace: [ 295.050917][ T8878] __free_frozen_pages+0x794/0x10a0 [ 295.056096][ T8878] qlist_free_all+0x47/0xf0 [ 295.060581][ T8878] kasan_quarantine_reduce+0x1a0/0x1f0 [ 295.066023][ T8878] __kasan_slab_alloc+0x69/0x90 [ 295.070847][ T8878] kmem_cache_alloc_noprof+0x241/0x6e0 [ 295.076286][ T8878] do_getname+0x35/0x390 [ 295.080511][ T8878] user_path_at+0x26/0x60 [ 295.084815][ T8878] __x64_sys_umount+0x10a/0x1a0 [ 295.089647][ T8878] do_syscall_64+0x115/0x870 [ 295.094220][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.100101][ T8878] [ 295.102401][ T8878] Memory state around the buggy address: [ 295.108004][ T8878] ffff88802c314700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.116041][ T8878] ffff88802c314780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.124078][ T8878] >ffff88802c314800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.132125][ T8878] ^ [ 295.139289][ T8878] ffff88802c314880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.147330][ T8878] ffff88802c314900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.155363][ T8878] ================================================================== [ 295.167833][ T5740] em28xx 6-1:0.132: Remote control support is not available for this card. [ 295.235393][ T5727] em28xx 6-1:0.132: Closing input extension [ 295.244897][ T29] audit: type=1400 audit(1780581676.395:894): avc: denied { read write } for pid=8879 comm="syz.2.728" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 295.278327][ T29] audit: type=1400 audit(1780581676.395:895): avc: denied { open } for pid=8879 comm="syz.2.728" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 295.360452][ T29] audit: type=1400 audit(1780581676.575:896): avc: denied { sys_module } for pid=8879 comm="syz.2.728" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 295.360616][ T8878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 295.360632][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 295.360659][ T8878] Tainted: [L]=SOFTLOCKUP [ 295.360665][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.360674][ T8878] Call Trace: [ 295.360679][ T8878] [ 295.360686][ T8878] dump_stack_lvl+0x100/0x190 [ 295.360707][ T8878] vpanic+0x552/0x970 [ 295.360722][ T8878] ? __pfx_vpanic+0x10/0x10 [ 295.360738][ T8878] ? v4l2_open+0x351/0x490 [ 295.360757][ T8878] panic+0xd1/0xe0 [ 295.360771][ T8878] ? __pfx_panic+0x10/0x10 [ 295.360786][ T8878] ? v4l2_open+0x351/0x490 [ 295.360804][ T8878] ? preempt_schedule_common+0x42/0xc0 [ 295.360824][ T8878] ? check_panic_on_warn+0x1f/0x90 [ 295.360842][ T8878] check_panic_on_warn.cold+0x19/0x34 [ 295.360858][ T8878] end_report.part.0+0x3a/0x90 [ 295.360879][ T8878] kasan_report.cold+0xe/0x18 [ 295.360899][ T8878] ? v4l2_open+0x351/0x490 [ 295.360921][ T8878] v4l2_open+0x351/0x490 [ 295.360940][ T8878] ? __pfx_v4l2_open+0x10/0x10 [ 295.360959][ T8878] chrdev_open+0x234/0x6a0 [ 295.360978][ T8878] ? __pfx_chrdev_open+0x10/0x10 [ 295.360996][ T8878] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 295.361020][ T8878] do_dentry_open+0x6ab/0x14d0 [ 295.361037][ T8878] ? __pfx_chrdev_open+0x10/0x10 [ 295.361057][ T8878] vfs_open+0x82/0x3f0 [ 295.361078][ T8878] path_openat+0x208c/0x31a0 [ 295.361100][ T8878] ? __pfx_path_openat+0x10/0x10 [ 295.361122][ T8878] do_file_open+0x20e/0x430 [ 295.361141][ T8878] ? __pfx_do_file_open+0x10/0x10 [ 295.361167][ T8878] ? alloc_fd+0x476/0x790 [ 295.361187][ T8878] ? do_getname+0x191/0x390 [ 295.361209][ T8878] do_sys_openat2+0x10d/0x1e0 [ 295.361229][ T8878] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.361254][ T8878] __x64_sys_openat+0x12d/0x210 [ 295.361277][ T8878] ? __pfx___x64_sys_openat+0x10/0x10 [ 295.361300][ T8878] ? rcu_is_watching+0x12/0xc0 [ 295.361323][ T8878] do_syscall_64+0x115/0x870 [ 295.361341][ T8878] ? clear_bhb_loop+0x40/0x90 [ 295.361357][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.361372][ T8878] RIP: 0033:0x7f80594a7407 [ 295.361386][ T8878] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 295.361400][ T8878] RSP: 002b:00007fffd1784ed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 295.361415][ T8878] RAX: ffffffffffffffda RBX: 00007f8059c6e880 RCX: 00007f80594a7407 [ 295.361425][ T8878] RDX: 0000000000000000 RSI: 00007fffd1786f1b RDI: ffffffffffffff9c [ 295.361434][ T8878] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 295.361443][ T8878] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 295.361452][ T8878] R13: 00007fffd1785120 R14: 00007f8059dd5000 R15: 000056517056b4d8 [ 295.361467][ T8878] [ 295.381569][ T8878] Kernel Offset: disabled