last executing test programs: 9.639295257s ago: executing program 1 (id=763): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbb00000100450000300068000000019078ac1e0001ac1414aa03059078000003a345f500090067001c0833000800000000ac1414bb"], 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x8, "c1cd642c16499bbc2e635be5d7a6b48dfa2e9db776367bd98e36c63aec187258"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ftruncate(r1, 0xc17a) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="11d6cb557c", 0x5}], 0x1}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fcntl$dupfd(r2, 0x0, r3) write$sndseq(r6, 0x0, 0x0) 7.016740677s ago: executing program 0 (id=766): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000c0320b20000000000000bc29834d2ef54bdb6a31f4000000000000", @ANYRES32, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000c0320b20000000000000bc29834d2ef54bdb6a31f4000000000000", @ANYRES32, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) (async) 6.852134069s ago: executing program 0 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 6.831718518s ago: executing program 1 (id=768): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="204906"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000200)={0x40, 0x16, 0x1, "8b"}, 0x0, 0x0}) 5.755796846s ago: executing program 0 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmmsg$alg(r2, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="4a895703cd17bc", 0x7}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="91") 5.526695657s ago: executing program 3 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r0, &(0x7f00000004c0)=""/384, 0x180) r1 = getuid() ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0xb, 0x401, 0x7}) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r1}) 5.379468881s ago: executing program 3 (id=780): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', '', [], 0xa, "013cf66734da3bd098de5a30417189d548ca2a71def6c3865738647fc55cee88c4a9b2e52c807e89671850bc5953f175"}, 0x34) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r3], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb59f", 0xc9}, {&(0x7f0000000700)="f80ec2e2badd0335f68d70715f3cbda9183845a4995f9a80f409315c1c0dbfbd19ea9d44961f3b8fdf64cbdbd4d6965145aa3989c8cbb335ba7af3ab70c7256b9989f911460ef51a6171eb99fb702d61693cd6faf7ab3037525f2f7ef05e6c179ba03199bb8c50ee531d3f84d5622c272b4047179710c2a3fa3e7cc1d8424df15cfefcc32c2b75", 0x87}], 0x2, 0x0, 0x0, 0x2663}, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x9) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0x0, 0x0) 4.662588941s ago: executing program 3 (id=783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/13, 0x200000, 0x800, 0x3fa, 0x3}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @loopback, 0x80000000}}, 0x0, 0x0, 0x34, 0x0, "0cc6c315886d7d074af33294827a1a64dee82ed60a500a9927b0f011235d3e8ad8f4f1f0f07e00c82b7a6fd6d6b28b8a2dbaf6d2cca48fac3901fd04364a564a94d9fe3f388a02c9ec03aa68a48e7ac9"}, 0xd8) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e08337b0c06c85a13a0505491af95e3e1000500"], 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4.305784446s ago: executing program 1 (id=784): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e24, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x0, @rand_addr=0x64010100}, 'vlan0\x00'}) 4.210662092s ago: executing program 1 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xfffffe53}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x68001}, 0x8000002) 4.19445554s ago: executing program 1 (id=786): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000400)=""/112, 0x70) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x2, 0x7f, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="03fa030000"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}}], 0x2, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x20000000, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 4.065356926s ago: executing program 3 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_newroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@RTA_PREF={0x5, 0x14, 0x80}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000a00)=""/102400, 0x19000) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x0, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6}, 0x18) sendfile(r5, r4, 0x0, 0x10000000000008) 3.816863064s ago: executing program 0 (id=788): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) 3.524457073s ago: executing program 0 (id=789): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xe64}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x110001, 0x0, {[0x4, 0x2, 0x6, 0x9a47, 0x7, 0x80000000, 0x80, 0xe02]}}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0x4, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x70, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.513330769s ago: executing program 4 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e5, 0x1c410, 0x4, 0x19c}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="6869f43e0eec0000000000000000e0f328ce8aec69bdbb00710df5904865f01a45a7ff9d21e779f52d3e5a2a8a8ccbfa426d8c72e24abf922c09bbe0e38a303e30e02b42", 0xfffffffffffffefc, 0x4000, 0x0, 0x0) 3.468063799s ago: executing program 4 (id=791): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd34b243a, 0x6, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x10, 0x8001}}, 0x50) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x212040, 0x8, 0x2d}, 0x18) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r2, 0xf5f) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x6, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)={r4, 0x7fc, 0x2, r4}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xae64, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) 3.064569071s ago: executing program 4 (id=792): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000002240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="2224c8bcb38d9532a5edf985dfdb5ee515836cea3a07bf7d32a5b8c9c868bc73d7f0775533b9663bc6008111eeede2815340a00cd16e9224bac6cf740e72acb698e2363f24ac1497888763ea3e44973be89dc36eda090988a40d24480c2adb717fb0edf287af0e626833e09c8b8f7fcc87311596dbd6a8d2", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x5608, 0x1) (async) ioctl$KDSETMODE(r4, 0x5608, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) (async) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214000228bd7000fcdbdf2518004400", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) (async) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002380)={0x0}, 0x1, 0x0, 0x0, 0x44894}, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000002340)=0x8001) syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) (async) r10 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r10, 0xc0405665, &(0x7f0000000440)={0x80, 0x5, 0x1, 0x10, 0x7ff, 0x0, 0x4}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.756961592s ago: executing program 4 (id=793): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', '', [], 0xa, "013cf66734da3bd098de5a30417189d548ca2a71def6c3865738647fc55cee88c4a9b2e52c807e89671850bc5953f175"}, 0x34) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r5], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb59f", 0xc9}, {&(0x7f0000000700)="f80ec2e2badd0335f68d70715f3cbda9183845a4995f9a80f409315c1c0dbfbd19ea9d44961f3b8fdf64cbdbd4d6965145aa3989c8cbb335ba7af3ab70c7256b9989f911460ef51a6171eb99fb702d61693cd6faf7ab3037525f2f7ef05e6c179ba03199bb8c50ee531d3f84d5622c272b4047179710c2a3fa3e7cc1d8424df15cfefcc32c2b75", 0x87}], 0x2, 0x0, 0x0, 0x2663}, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x9) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0) 2.163355422s ago: executing program 4 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000400000000000100eb009500008dc206034d"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r5, 0x25, 0x8, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x80000) recvmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000480)=""/177, 0xe7}], 0x2}, 0x12000) writev(r8, &(0x7f0000000040)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8e73eda5a8caf70487e", 0x139}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r9, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), r9) 1.964405395s ago: executing program 2 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000160005020000"], 0x20}}, 0x0) 1.950948566s ago: executing program 2 (id=796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "feff98"}]}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) (rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'fuse\x00'}}]}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x540a, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0xff) (async, rerun: 32) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) (rerun: 32) write$tcp_congestion(r11, 0x0, 0x0) (async) dup2(r11, r6) 1.88666929s ago: executing program 2 (id=797): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/13, 0x200000, 0x800, 0x3fa, 0x3}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @loopback, 0x80000000}}, 0x0, 0x0, 0x34, 0x0, "0cc6c315886d7d074af33294827a1a64dee82ed60a500a9927b0f011235d3e8ad8f4f1f0f07e00c82b7a6fd6d6b28b8a2dbaf6d2cca48fac3901fd04364a564a94d9fe3f388a02c9ec03aa68a48e7ac9"}, 0xd8) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e08337b0c06c85a13a0505491af95e3e1000500"], 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 1.262531377s ago: executing program 2 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'virt_wifi0\x00', {}, {}, 0x88}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0xffffffffffff1d74}], 0x2, 0xd7a53920a61f3096}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84d, 0xfffffffb, 0x18, 0x40}, {0x7800}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x6, 0x1}, {0x4, 0x5}, 0x4, 0x7fff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xf7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'wg0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="91") 1.091205598s ago: executing program 4 (id=799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r7, 0x8, &(0x7f00000002c0)=0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r8, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r9, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000840)={0x0, 0xcd76, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000003c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f0000000200)={r11, r12, r13, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) 987.363697ms ago: executing program 3 (id=800): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) inotify_init1(0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000080)={&(0x7f0000000000)=[{0xe, 0xa, 0x1}], 0x1, 0x10, 0x4, 0x7ac82ddb}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xc75e, 0x3, 0x3}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 830.611163ms ago: executing program 3 (id=801): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) shutdown(r2, 0x0) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 414.885449ms ago: executing program 2 (id=802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=@newtfilter={0x3c1c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x3bec, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x3bd8, 0x9, 0x0, 0x1, [@m_pedit={0x3bd4, 0x0, 0x0, 0x0, {{0xa}, {0x3af4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x9, 0x10, 0x4, 0xc0, 0x80000001}, 0x2, 0x64, [{0xfffffff9, 0x3, 0x7, 0xffffffff, 0xff, 0x1}, {0x4, 0x6, 0x0, 0x4, 0x8, 0x3ca07c1a}, {0x2, 0x1, 0xfffffffa, 0x3, 0xe37, 0xffffff81}, {0x7, 0x8, 0x1, 0x8001, 0x6, 0x8}, {0x4, 0x4, 0x8, 0x0, 0x2, 0xc8f3ad2}, {0xf, 0x0, 0xfffffff8, 0x0, 0x3, 0xd37c}, {0x7fff, 0xc00, 0x4, 0xd3, 0x5, 0x79e22e9e}]}, [{0x8001, 0x8, 0x5, 0x8, 0x7, 0x9}, {0x0, 0xc257, 0x2, 0x2, 0x4, 0x7}, {0x8, 0x8000, 0xfffff801, 0xffffff2d, 0x0, 0x7ff}, {0x4, 0xfffffeff, 0x0, 0x9, 0x9, 0x3}, {0x3, 0xda, 0x8000, 0x9, 0x1c, 0x9}, {0x7fffffff, 0x8, 0x5, 0xfffffff9, 0x0, 0x5}, {0xf, 0x4b, 0xff, 0x7, 0x9, 0x4d0f}, {0x6, 0x8dad00, 0xdabb293, 0x572, 0xa5, 0xf}, {0x8, 0x2, 0x3, 0x0, 0x3, 0x61bef1cd}, {0x13, 0x6, 0xffffffff, 0x7, 0xd1c, 0x6}, {0x6, 0x3, 0x1000, 0x6, 0x3, 0x9}, {0xa, 0xdb9, 0x4, 0x10000, 0x6, 0x8}, {0x9, 0x8, 0x5, 0xbb, 0x7fffffff, 0x4}, {0x8, 0x200, 0x2, 0x88}, {0x101, 0x101, 0x7fff, 0x0, 0x7fff, 0xaebc}, {0x10, 0x7, 0x80, 0x0, 0x401, 0x7}, {0xf, 0xffffffff, 0x206, 0x101, 0x451f1962, 0x3}, {0x19df, 0x0, 0x1, 0xfe16, 0x6, 0x8}, {0x7, 0x8, 0xeaa6, 0xfffffffd, 0x3, 0x1}, {0x8, 0x8001, 0x100, 0x4, 0x80000000, 0x4}, {0x8, 0x800, 0x7ff, 0x1, 0x7, 0x5}, {0x8, 0x0, 0x80000001, 0xffff, 0x1, 0x5}, {0x2, 0x7, 0x9, 0xe, 0x9, 0x10000}, {0x3, 0x3, 0x4, 0x68bd, 0x4, 0x6}, {0xe3, 0x3, 0x6, 0x5, 0xb802, 0xffff5a66}, {0x1, 0x0, 0x1, 0x8, 0x8, 0x63}, {0x1, 0x7, 0x2, 0x4, 0x6, 0x6}, {0xa, 0x4, 0xfffffa26, 0xb, 0x5, 0x4}, {0x3, 0x10001, 0x3, 0x4, 0x2, 0x80}, {0x0, 0x6, 0x800, 0x3, 0xd611, 0x7}, {0x6, 0xf, 0x9, 0x0, 0xc13, 0xe70d}, {0xfff, 0x4, 0x8, 0x2, 0x9, 0x7}, {0x9af7, 0x0, 0xffffffff, 0x40, 0x7, 0x100}, {0x49, 0x4, 0xffffffae, 0x6, 0x7, 0x8}, {0xfffff8e3, 0x1d, 0xe2, 0x101, 0xa6, 0x1}, {0x4, 0x3, 0x8, 0x80000000, 0x6, 0x7}, {0x8, 0x6c9, 0xd, 0x1, 0x9e, 0x71}, {0xffff12bf, 0x3c, 0xdf2c, 0xffff, 0x5, 0x401}, {0x2, 0x7f, 0x4, 0x7, 0x1, 0x7}, {0x7f, 0x4593, 0x8, 0x6, 0x7, 0x3ff}, {0x6, 0x7, 0x5, 0xf, 0x2, 0x3}, {0x1, 0x9e, 0x6, 0x23c, 0xd, 0x7}, {0xff, 0xda61, 0x3, 0xeaf, 0x5, 0x9}, {0xffff, 0x0, 0xffffffff, 0xa, 0x3, 0x7fffffff}, {0xfffffffc, 0x9b48, 0x8001, 0x5, 0x6, 0x4}, {0xfc, 0xffffff09, 0x0, 0x6, 0x8, 0x9fb}, {0x5, 0x1000, 0x101, 0xa, 0x2c, 0x5}, {0x6, 0x0, 0x6, 0x800, 0x0, 0x1}, {0x1, 0xe6c2, 0x8, 0x7, 0x8, 0x7fff}, {0x2, 0xff, 0x5, 0xffff, 0xffffff01, 0x9}, {0x2, 0x9, 0x2, 0x81, 0x3, 0xa8}, {0x4, 0x86, 0x8000, 0x6, 0x3, 0xedd}, {0x6, 0x7fffffff, 0x101, 0x6, 0x8, 0x3}, {0x7, 0x8, 0x5, 0xdc, 0x4, 0x4}, {0x1, 0x3, 0x1, 0xfc, 0x8, 0xc59f}, {0x1, 0xcc9, 0x10001, 0x7, 0x7ff, 0xfffffc00}, {0x3, 0x5, 0x4, 0x6, 0x8, 0x7}, {0x400, 0xa, 0x100, 0x4, 0x1, 0x2}, {0x5, 0x7, 0x7fffffff, 0x9, 0x7, 0xfff}, {0x5, 0x4, 0x5, 0x5, 0xfea, 0x6}, {0xd, 0x7, 0x98, 0x1000, 0x9, 0x3}, {0x45, 0xffff28d3, 0x2d1a, 0x1, 0xa28a, 0x6}, {0x5, 0x0, 0x3, 0x4752}, {0xffff696d, 0xd17, 0x5, 0xc, 0x2, 0x3}, {0xe, 0xb6d00000, 0x7, 0x9, 0x9, 0xe98f}, {0x5, 0x0, 0x5, 0x7, 0x2c, 0x4}, {0x400, 0x0, 0x8, 0x3, 0x80000001, 0x100}, {0xff, 0x8, 0x2d, 0x9, 0x1, 0x5}, {0x1, 0xfffffffb, 0x72, 0xfffffffd, 0xfffffff9, 0x9}, {0x4, 0x0, 0x2, 0x401, 0x8, 0xfffffffd}, {0x4, 0x81, 0x5, 0x3, 0x7, 0x4}, {0x200, 0x46, 0x5, 0xc278, 0x2, 0x3}, {0x220000, 0x7fffffff, 0x44, 0x9, 0x6}, {0x7, 0x9, 0x0, 0xfffffff7, 0x800, 0x7817694d}, {0x14, 0x2, 0x0, 0xd550, 0x3, 0x2}, {0x946f, 0x5, 0x8, 0x9, 0x7fffffff, 0x1}, {0x2, 0xfff00000, 0x7, 0x2, 0x3, 0x8}, {0x5, 0x2, 0x7, 0x3, 0x3, 0x80000001}, {0x1, 0xf, 0x6, 0x5, 0x9, 0xff}, {0x8000, 0x5, 0xfffffff9, 0x9, 0x17, 0x9}, {0x5, 0x6, 0x3, 0x6, 0x1, 0x4}, {0xec8, 0x1ff, 0x4600, 0xfff, 0x52bf3f40, 0x4}, {0x80000000, 0x2, 0x4046, 0x200, 0x0, 0x800}, {0xf074, 0x7, 0x11f2553a, 0x20000000, 0x40, 0x4}, {0xffffffff, 0x1ff, 0x4, 0x7, 0x6, 0x8}, {0x474, 0x6, 0xc2, 0x5b2f, 0x6, 0x2}, {0x1, 0x2, 0x6, 0x7971, 0xfffffffe, 0x3}, {0x2, 0x40, 0x3, 0x9, 0x0, 0x5}, {0x4, 0x2, 0x4, 0x8a, 0xa5d, 0x3}, {0x5b, 0x4, 0x2, 0x8, 0xad91, 0x9}, {0x7, 0x1, 0x7, 0x80000001, 0x9, 0x2}, {0x2, 0x10000, 0xffff521b, 0x1ff, 0x3ff, 0x5}, {0x7fffffff, 0xa472, 0x0, 0x8, 0x6, 0xfff}, {0xffffffff, 0x2, 0x1, 0xfffffffb, 0x1, 0x7abe}, {0x3, 0x2, 0xd41f00, 0x4, 0x6, 0x9}, {0x577, 0x2e, 0x2, 0x400, 0x1, 0x8000}, {0xfb8f, 0x401, 0xf2, 0x2, 0x0, 0x6}, {0x9, 0xfffffffe, 0x1a6677c4, 0x9, 0xa1f1}, {0x100, 0xc, 0x8bff, 0x2, 0x0, 0x80}, {0x32, 0xff800000, 0x46c, 0x4, 0x7, 0x4}, {0xffff, 0x101, 0x7fff, 0x4, 0xf185b42, 0x4}, {0x4, 0x800, 0x400, 0x5, 0xfffffffe, 0x6}, {0x6, 0x800, 0x6, 0xe2, 0x3b60, 0x2}, {0x7, 0x2, 0x8, 0xe, 0x7, 0x6}, {0x800, 0x196, 0x8, 0x8, 0x800, 0x977}, {0x8, 0x6, 0x80, 0xec0b, 0x6}, {0x800, 0xffffffff, 0x5, 0x3, 0x1, 0x10000}, {0x9, 0x7, 0x80000001, 0x9, 0x9, 0xb2}, {0xfffffffc, 0x2, 0x9, 0xffff, 0x1, 0x4}, {0x56ded556, 0x3, 0x8000, 0x4, 0x8, 0x5}, {0x401, 0x8000, 0xffffffff, 0x5, 0xfffffff7, 0x5}, {0x7, 0x7, 0x9, 0xb, 0xfffffff1, 0x2}, {0x9, 0xff, 0x4, 0x7, 0x4, 0x9}, {0x1, 0x7, 0x0, 0x9, 0x1, 0x20}, {0x2, 0x69c8, 0x4, 0x80, 0x80000000, 0xe}, {0x0, 0x3, 0x6, 0x0, 0x2, 0x9}, {0x5, 0x0, 0x101, 0x7ff, 0x401, 0x10}, {0x2, 0x4, 0x597, 0x7, 0x7388000, 0x9}, {0x5a, 0x0, 0x5, 0x400, 0x3, 0x4}, {0x4e7, 0x1a54, 0x1, 0x4, 0x9, 0xfffffffc}, {0x80000000, 0xd, 0x3, 0x7, 0x7, 0x3}, {0x9bd, 0x8001, 0x6, 0xef, 0x12}, {0x8001, 0x3, 0x101, 0xfffffff7, 0x3, 0xa78a}, {0x9, 0xfffffffd, 0x8001, 0xc, 0x5, 0x4}, {0x80, 0x1b, 0x1000, 0x9, 0xd, 0x7}, {0x8, 0x645f9086, 0x7, 0xfffffffd, 0x400, 0xcd}, {0x0, 0x1000, 0xe, 0x3a, 0xf, 0x7}, {0x0, 0x6, 0x3, 0x9, 0xffffffff, 0x7}], [{0x5}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x2}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x5}, {0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3}, {0xcd00d5023a31b6db, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x4}, {0x1, 0x1}, {0x1}, {0xe2314f95188d51e5, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x6, 0x9, 0x1, 0x5, 0x81}, 0x92, 0xb6, [{0x1a76, 0x3, 0x2, 0x69, 0x56, 0x7fff}, {0x6, 0x8000, 0x5, 0x4, 0xfffffff0, 0x7fffffff}, {0x2, 0x57, 0x9, 0x40, 0x8001, 0x8}, {0xb, 0x8, 0x800, 0x4, 0x2, 0x9}, {0x4f9, 0x4, 0x3281752, 0x80, 0x1, 0x4}]}, [{0x12000000, 0xfffffeff, 0xd, 0x7fffffff, 0xcd, 0x2deaf8bf}, {0x6, 0x4, 0x0, 0x7, 0x2, 0x2}, {0x7ff, 0xffffff01, 0x4, 0x10001, 0xf, 0xff}, {0x3, 0xfff, 0xfffff038, 0x2, 0xd, 0xde1}, {0x400, 0x4, 0x8, 0x1, 0x8000, 0x3}, {0x8b7, 0xe, 0x1000, 0x5, 0x9, 0x5ca6}, {0x6, 0x8, 0xfff, 0x9, 0x7fff, 0x80000001}, {0x5, 0xb12c, 0x1ff, 0x2, 0x8db, 0x2}, {0x0, 0x4, 0x7fff, 0x1, 0x4}, {0x1000, 0x7, 0x9, 0x9, 0x2, 0x8}, {0xffffffff, 0xaafb, 0xf, 0x0, 0x7fff, 0xffffffff}, {0x42, 0x9, 0x8, 0xaf, 0xff, 0x153}, {0x1, 0x40000000, 0x7, 0x7, 0x9, 0x7}, {0x7, 0x2, 0x1, 0x8, 0x8, 0x80000000}, {0x1c9, 0x7, 0x0, 0xda09, 0x5, 0xd890}, {0xf2, 0xb, 0xded, 0x8, 0x4, 0xd}, {0x2, 0xfffffffc, 0xe, 0x5, 0x100, 0xfffffbff}, {0xc, 0x9, 0x6e9, 0x8, 0x8, 0x7}, {0x7, 0x9, 0x3ff, 0x5, 0x6, 0x2}, {0x8001, 0x5, 0x5, 0x5, 0xaf9e}, {0x23d, 0xffffffff, 0x8, 0xea, 0x3, 0xffff}, {0x7, 0xa0, 0x8, 0x7f, 0xf, 0x3d8}, {0x0, 0x2, 0x8, 0x100, 0xffffffff, 0x5}, {0x1, 0xfff, 0x3ff, 0x7, 0x6, 0x1ff}, {0x6, 0x5, 0x7, 0x9, 0xcb, 0x489b}, {0x7fffffff, 0x3, 0x4, 0x39, 0xc23, 0x1328}, {0x7f, 0x0, 0x3, 0x1, 0xfffffffa, 0xd}, {0x4f6, 0x0, 0x9, 0x9, 0xef1a, 0x6}, {0x0, 0x101, 0x9, 0x9, 0x7f, 0x6}, {0x6, 0xfff, 0x2, 0x7, 0x4, 0xd}, {0xfffffffa, 0xffffffff, 0xe, 0x3, 0x4, 0x6}, {0x7, 0xf, 0x40000000, 0x2, 0x7, 0x4}, {0x0, 0xd7b, 0x51cb4861, 0x7, 0xffff0000, 0x4}, {0x6e48, 0x10000, 0x2, 0xfc, 0x8, 0x5}, {0x2c55, 0x5, 0x6, 0xfffffff7, 0x2, 0x7}, {0x9, 0x3, 0x3, 0x8, 0xffff, 0x6}, {0x0, 0x8a, 0x6, 0x0, 0x40, 0xc6f1}, {0x1, 0x9, 0x1, 0x3ff, 0x9, 0x10000}, {0x1, 0x6, 0x80, 0x3, 0x0, 0xe}, {0xb7b, 0xe, 0x5, 0x4, 0x4209, 0x4}, {0x6, 0x2, 0x5, 0x6, 0xfffff46c, 0x9}, {0x5, 0x9, 0x4c, 0xffff76d1, 0xa, 0x6}, {0x3e, 0x1c, 0x7, 0x6, 0x10001, 0x4}, {0x6, 0xffa8, 0x7fffffff, 0x6, 0x7ff, 0x2}, {0xfffffff7, 0xfffffafa, 0x7, 0x8, 0x5, 0x3}, {0x1, 0x6, 0xe7, 0x8, 0x7f, 0x9}, {0xc, 0xc, 0x1, 0xa99, 0x3, 0x1}, {0x7, 0x5, 0x7, 0x7f, 0xffffffff, 0x2}, {0x9, 0x5, 0xffff, 0x1, 0x80000000, 0xffffffff}, {0x86, 0x0, 0x4, 0x2, 0x9, 0x1}, {0x0, 0x47, 0xfffffffe, 0x9, 0x29, 0x14}, {0x1, 0x0, 0x9, 0x4, 0x6, 0x166000}, {0x2, 0x3, 0x2, 0xbd, 0x0, 0x8}, {0x10, 0x3, 0x8000, 0x6, 0x2d7}, {0x3, 0x3, 0x3ff, 0x7, 0x3, 0x1}, {0x4, 0x2, 0x5, 0x1, 0x1, 0x8}, {0x19cae56f, 0x796, 0x8, 0x1, 0x1, 0x7}, {0x6, 0xf2, 0x100, 0x80000001, 0x2, 0x8}, {0x6, 0x8, 0xfffffff8, 0x3, 0x4, 0xd09}, {0xfffffffe, 0x30, 0x9, 0xc39, 0x8, 0x1}, {0xfffffff9, 0x100, 0x7f, 0x6, 0xb208, 0x6}, {0xfffffffc, 0x65, 0xf9da, 0x7fff, 0x72ff80e1, 0x1}, {0xffff, 0x3, 0x7, 0x200, 0x400, 0x4}, {0x81, 0x7, 0x78, 0x5, 0x0, 0x70}, {0x4, 0x4, 0x4, 0x0, 0x8, 0xfffe0000}, {0x405, 0x0, 0x1000, 0x1, 0x6, 0xfffffff9}, {0x0, 0x2, 0x1, 0x8001, 0xe05, 0x8}, {0x2, 0x5, 0x8, 0x78cd, 0x7ad, 0x6}, {0x8, 0x2, 0x0, 0xa4, 0x7d82, 0x7f}, {0x109, 0x945, 0x7, 0x7, 0xfffffff7, 0x81}, {0x5, 0xa00, 0x1783, 0x1, 0x2, 0x507fbef1}, {0x8, 0xc, 0xfffffffb, 0xc, 0x3, 0xffffffff}, {0xfffffffb, 0x7, 0x5, 0x8, 0x5, 0x3ff}, {0x10000, 0x15d7, 0xdbb8, 0xc, 0x3605f7ee, 0x7}, {0x7, 0xd, 0x3, 0x3, 0x5, 0x7}, {0xe6d, 0x1, 0x0, 0x40, 0x2, 0x3}, {0x9, 0x1, 0x4, 0x4, 0x0, 0x101}, {0xfffffff7, 0x6e, 0xd, 0xb, 0x3, 0x1}, {0x0, 0x6, 0x254, 0x2, 0xfffffe00, 0x11}, {0xb, 0xa7, 0x7ff, 0x8, 0x1, 0x6}, {0x2, 0x2, 0x9, 0x6, 0x200, 0x2}, {0xf, 0xffff8000, 0xa99, 0x8, 0x4, 0x3}, {0x5, 0x6, 0xc, 0x0, 0xffffffff, 0x8}, {0x5, 0x7, 0x7, 0xf8000000, 0x4, 0x4}, {0x9, 0x3, 0x9, 0x10000, 0x1c, 0x1}, {0x6, 0xfffffff7, 0x5, 0x1, 0x8, 0x2}, {0x8, 0x5, 0x0, 0x7, 0x9f7, 0xfffffff7}, {0x5, 0x8, 0x10000, 0x9, 0x8000, 0x7fffffff}, {0xffff, 0x3ef, 0x3, 0x8, 0x8}, {0x2, 0x2, 0x400, 0x400, 0x7fff, 0x2}, {0x7fff, 0xffffffff, 0x9, 0x0, 0x1, 0x35}, {0x315, 0x9, 0x9, 0x3843, 0x7fffffff, 0xfff}, {0x1, 0x6, 0x6, 0x5, 0x3, 0x8}, {0x5, 0xa, 0x1000, 0x40, 0x101, 0xc20}, {0x31, 0xb5a, 0x70d, 0x4, 0x1, 0x800}, {0x0, 0x6, 0x9, 0x188e, 0x0, 0xf}, {0xefe8, 0xb7f, 0xfffffaec, 0x8, 0x5, 0x2}, {0x300000, 0x3, 0xffffffff, 0x10000, 0xffff5298, 0xfff}, {0x1, 0x100, 0x7f, 0xc, 0xa8, 0xa9}, {0x8, 0x3, 0x2, 0x59, 0x8, 0x80000001}, {0x1, 0x3, 0xeb5, 0x18000000, 0x93, 0x2}, {0x3, 0xfffffffe, 0x2, 0x4e, 0x7, 0x2}, {0x5, 0x200, 0x6, 0x1, 0x6, 0x100}, {0xf, 0x80000000, 0x4, 0x3, 0x9, 0x5}, {0x3, 0x3, 0x7, 0xcf2, 0xe3, 0x3}, {0x9, 0x9, 0xfffff4d8, 0x7, 0x3, 0x80}, {0xd, 0x8, 0x0, 0x6, 0xc, 0x91}, {0x3f, 0x3, 0x7, 0xd, 0x3de7da54}, {0x4, 0x7d2d, 0x1, 0x3, 0xe8}, {0x1d48, 0x1, 0x33e3, 0x80000000, 0x2, 0x7ff}, {0x5, 0x7, 0x3, 0x5, 0x2, 0x10000}, {0x371a, 0x2, 0x7, 0x9, 0x5, 0x40}, {0x7fffffff, 0x86, 0x2, 0xddf, 0x3, 0x85b9}, {0x24, 0x3, 0x3, 0x38, 0x1, 0x7f}, {0x0, 0x5, 0x80000001, 0x800, 0x0, 0x3}, {0x0, 0x7, 0x4, 0x2, 0x7ff}, {0x27, 0x3, 0x1, 0x4, 0x1c, 0x38}, {0x3, 0x65c, 0x1, 0x0, 0xff, 0x2}, {0x4, 0x3c24, 0x6, 0xffff, 0x6, 0xff}, {0x9, 0x3c, 0x0, 0x2, 0xffffffff, 0x9}, {0x7, 0x5, 0x1, 0x8, 0x7, 0xf}, {0xfffffff9, 0x9, 0x3, 0x10000, 0x2, 0x3}, {0x7, 0xb4c, 0x4, 0x0, 0xe, 0x1000}, {0x100, 0x0, 0x63d, 0x5, 0x4, 0x68c}, {0x2, 0x7f, 0x80000001, 0x781d, 0x5, 0x1}, {0xffffffff, 0x6, 0xffffffff, 0x7, 0x200, 0x8}, {0xc, 0x5, 0xffffffff, 0xffffffff, 0x6, 0xe}, {0x0, 0x8, 0x80000001, 0x4, 0x7ff, 0xc6}], [{0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x8510b75253eae6f}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x14f58933c8258c70}, {}, {0x3}, {0x3}, {0x4, 0x1}, {}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x16e8462fb9a7103c}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x2}, {0x3}, {0x0, 0x3}, {0x51ac46a149c11bc7, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x2}, {}, {0x3}, {0x2}, {0x1}, {}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x3e0ef46845c0e226}, {0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x4, 0x8000, 0xffffffffffffffff, 0xa9, 0x2ea1}, 0x50, 0x7, [{0x200, 0x3, 0x4, 0x9, 0x2, 0x7fffffff}, {0x200, 0x85, 0x4, 0x2, 0x4, 0x7ff}]}, [{0x67, 0x4, 0x6, 0xfffffffa, 0x5, 0xfffffffb}, {0x2, 0x0, 0x5, 0x6, 0x9}, {0x3, 0x9, 0xe2, 0x7, 0x9, 0x2}, {0xfffffffa, 0x8, 0x1, 0x57bf, 0x5, 0x7}, {0x8, 0x6, 0x80000001, 0x7, 0x4, 0x2}, {0x8, 0x60, 0x0, 0x9, 0x8, 0x80000000}, {0xff, 0x4, 0x6, 0x7, 0xa6, 0x1}, {0x7, 0x243, 0x1, 0x9, 0x10, 0x72f}, {0xb0, 0x7, 0x9, 0xed3, 0x9, 0x47ca00}, {0x10001, 0x10, 0x8, 0x6, 0x7f, 0x9}, {0x4, 0x2, 0x100, 0x7, 0x7, 0x6}, {0x1ff, 0x58db, 0x1, 0xb, 0x1ff, 0xfffffff9}, {0xfff, 0xffffffff, 0x5, 0xf44, 0x7}, {0x7, 0xfffffff7, 0x1, 0x9, 0x40, 0x1000}, {0x7, 0x0, 0x7, 0x1c62, 0x9, 0x4}, {0x3, 0x6, 0x401, 0x800, 0x1ff, 0x8}, {0x5, 0x7, 0x400, 0x2, 0x7, 0xb6b}, {0xa000000, 0x6, 0xf, 0x8001, 0x401, 0xbd2b}, {0x1000, 0x10, 0xfff, 0x4, 0x33f}, {0x7, 0x400, 0x8, 0x3, 0x2, 0x1}, {0x9, 0x17, 0x6, 0x9, 0x7d0, 0x9}, {0x7, 0xd, 0x7, 0x0, 0x8001, 0x800000}, {0x3, 0x7, 0x8001, 0x2878, 0x6, 0x9}, {0x80000000, 0xb28, 0x5d, 0x4, 0x5}, {0x9, 0x3, 0x0, 0x6, 0x0, 0x346e}, {0x1ff, 0x3, 0x470, 0x656, 0x4, 0x4}, {0x8, 0x4, 0x7758, 0x3ff, 0x44, 0xc5}, {0x47b, 0x6, 0x401, 0x8, 0x0, 0x5}, {0x2, 0x0, 0x4, 0x2, 0x5, 0x2}, {0x8, 0xff, 0xfffffffd, 0x7, 0x8, 0x6}, {0x82, 0xfffffffb, 0xffff01b6, 0xb2, 0xc, 0x7}, {0xd, 0x5, 0x5, 0x1, 0xfffffff8, 0x8}, {0x6, 0x7ff, 0x2, 0x5, 0x86, 0x400}, {0x8, 0x1, 0x7, 0x7ff, 0xca2, 0x7}, {0x243, 0x5, 0x100, 0x8ba6, 0x7ff, 0x6}, {0x1, 0xe, 0x9, 0x3, 0x0, 0x3}, {0x0, 0x10000, 0x10000, 0x1, 0x4, 0x5}, {0x4, 0x4, 0x800, 0x4, 0xfff, 0x5}, {0x6, 0x7, 0x10000, 0x8, 0x9, 0x8}, {0x81, 0x74, 0x8, 0x2, 0x1, 0x8001}, {0x6a3f1fc4, 0xc, 0x2, 0x9, 0x7, 0x2e}, {0x5, 0x4, 0x78b2, 0x1ff, 0xffff, 0x80}, {0xe1d7, 0x100, 0x8000, 0x6, 0x8001, 0xcec0}, {0x5, 0x1, 0x7e7b, 0x8, 0x4099, 0x5}, {0x9, 0x2, 0x8, 0x10001, 0x3, 0x4}, {0x4, 0x7, 0x8, 0x4, 0x80000001, 0x5}, {0x7, 0x0, 0x4, 0xfffffffa, 0x3, 0xe}, {0x7, 0xffff7fff, 0x2, 0xa, 0x0, 0xffffffff}, {0x9, 0x81, 0x9, 0x5, 0x1, 0x1}, {0x3, 0x7, 0x8, 0xa6, 0x7, 0xff}, {0x6, 0x2e3, 0x1, 0x75214a82, 0x9}, {0x1, 0x6, 0x1000, 0x7, 0x1ff, 0x80000000}, {0x80000000, 0x80, 0x5, 0x1, 0xc0000000}, {0x4, 0x39, 0x0, 0x0, 0x4, 0x10}, {0x9, 0xd, 0x7, 0x8, 0x6, 0x5}, {0x7fffffff, 0x3, 0x4, 0x9, 0x0, 0x7}, {0x6, 0xfffff001, 0x401, 0x5, 0x2, 0x9}, {0x8, 0x6, 0x7fff, 0x2, 0x5, 0x9}, {0x8be, 0x0, 0x3, 0x3, 0x6c8, 0xc73d}, {0xfffffffb, 0xd, 0x6, 0x2, 0x3, 0x938a}, {0xd798, 0x4, 0x2, 0x0, 0x81}, {0x1623, 0x9e4, 0x3, 0x1, 0xd}, {0x4c642c7d, 0x1000, 0x2, 0x4, 0x1, 0x80}, {0x0, 0x9, 0x5, 0x1, 0xe88, 0x9}, {0x8000, 0x3, 0x200, 0x81, 0x400, 0x1}, {0x401, 0x4, 0x800, 0xfffffbff, 0x9, 0x3ff}, {0xb1, 0x9, 0x81b, 0x3, 0x1, 0x7}, {0x2, 0xfb, 0x800, 0x8001, 0x50c, 0x7}, {0x7fff, 0x4e3, 0x2cde574a, 0x10, 0x7, 0x3}, {0x9, 0x1, 0x0, 0x1400000, 0x2ba, 0x3}, {0x5, 0xb5ac, 0x1, 0x5, 0x0, 0xa}, {0x6, 0x5, 0x1, 0x0, 0x9, 0x9}, {0xfffffff4, 0x2, 0x2, 0x7fffffff, 0x0, 0x1800}, {0x8, 0x23, 0x5, 0x7, 0x2, 0x4}, {0x400, 0x1, 0x1, 0x7, 0xdb, 0x2d73}, {0x8000, 0x0, 0x5, 0x5, 0x5, 0x9}, {0xe, 0x86e, 0x7, 0xffff31ad, 0x10, 0x40}, {0x10001, 0x0, 0xfffffffa, 0x90, 0x400, 0x7f}, {0x6, 0xaa, 0x5, 0x0, 0x6, 0xd6b}, {0x4, 0x80000001, 0x1, 0x2, 0x400, 0x2}, {0x9, 0x8001, 0x7, 0x6, 0x9, 0xffffffff}, {0x9, 0xd10, 0x2, 0x7fffffff, 0x4, 0x6}, {0xffffffff, 0xde1, 0x0, 0x400, 0x0, 0x1}, {0xb46, 0x800, 0x81, 0x211, 0x6, 0x1}, {0x2, 0xa, 0xffff0000, 0x9, 0x6, 0x85c}, {0x7, 0x0, 0x9, 0x7, 0xca, 0x3}, {0x3e7, 0xffffffff, 0x8, 0x6, 0xd, 0xa029}, {0x8, 0x8, 0x9, 0x3, 0x80000001, 0x5f}, {0x1, 0x7, 0x3a47, 0x5, 0xfe, 0x4}, {0xa0df, 0x9, 0x3e4, 0x5, 0x9, 0x7}, {0x5, 0x7, 0x3, 0x6, 0x8, 0x1}, {0x8, 0x1, 0xfffffffb, 0x7, 0xe5, 0xc3}, {0x3f, 0x1, 0x2, 0xf, 0x6, 0x7}, {0xb00, 0x401, 0x3, 0x9, 0x9, 0x696f}, {0x9, 0xc7a2, 0x4, 0x1ff, 0xffffff81, 0x9}, {0x8, 0x7, 0x8, 0xffffde97, 0x9}, {0x9c, 0x56a, 0x0, 0x5, 0x80000001, 0xb09}, {0x9, 0x4, 0xffff369e, 0xd16, 0x80000001, 0x5}, {0x4, 0x1, 0x80000001, 0x5, 0x3ff, 0xffffc454}, {0x1, 0x4, 0x0, 0x8, 0x1, 0x1}, {0x3ff, 0xfffff411, 0x0, 0x8, 0x3fa, 0x8}, {0x7dda, 0x5, 0x3, 0x8, 0xde, 0xf7d5}, {0x10000, 0x7, 0x100, 0x5, 0x1, 0x4}, {0x4, 0xde, 0x2, 0x8, 0x3, 0x1}, {0x0, 0x8000, 0x5, 0x0, 0x1, 0x9}, {0x1, 0x3, 0x6, 0x7, 0x2, 0x7}, {0x2, 0x3, 0x401, 0x1, 0x0, 0x8ae4b357}, {0xb, 0x8, 0xb4, 0xa, 0xfff, 0x5}, {0x9, 0x6, 0xff, 0xe791, 0x107, 0xc}, {0x0, 0x5, 0x9, 0xfffffffe, 0x9, 0x6}, {0x0, 0x6, 0xb, 0x80, 0x7, 0x9}, {0xffff20ec, 0x800, 0x157f, 0x7fff, 0x400, 0x8}, {0xffffffff, 0x8, 0xf78, 0x0, 0xfff, 0x1800}, {0x1, 0x7, 0xbfe, 0xfef, 0x7}, {0x0, 0x4, 0x3, 0xffffffff, 0x738, 0x7a6d9867}, {0x5, 0x7fff, 0x1, 0x7, 0x800000, 0x7}, {0x1000, 0xfffffff6, 0x2, 0x2, 0x2, 0x1}, {0x9, 0x715, 0x870d, 0xaa, 0x5a3, 0xfffffffe}, {0x1527, 0x101, 0x7, 0x5, 0x0, 0x1ff}, {0x1c000, 0x9, 0x3ff, 0x56, 0xf1e, 0x8}, {0x8001, 0x2, 0xe, 0x3, 0x3, 0x2}, {0x3, 0x5, 0x0, 0x1ff, 0x0, 0xfffffffc}, {0xb, 0x7f, 0x3, 0x8, 0x1, 0x3}, {0xffffffff, 0x9, 0x7fffffff, 0x6, 0x8, 0x8}, {0x457d, 0x1, 0x3, 0x5, 0x1, 0x5}, {0x9, 0x7, 0x1, 0x1, 0x80000000, 0x5}, {0x101, 0x2, 0x1, 0x7, 0x9, 0x80}, {0x7, 0x2, 0x4, 0x8001, 0x3, 0x4}], [{0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x3e2115e7b8647ad3}, {0x4}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0xe0a018750f87aaee}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x3}, {0xb}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2}, {0x3}, {0x1}, {0x1}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x6}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0x4}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3, 0x8f, 0x1, 0x2, 0xda0}, 0x10, 0x8, [{0x4, 0x6, 0x7, 0xfffffffa, 0x0, 0x9}]}, [{0x0, 0x2, 0x6, 0x6f, 0x2, 0x1}, {0x72, 0x5, 0xfffffe00, 0x400, 0x7fffffff, 0x6}, {0xa, 0xffff, 0x6, 0x4, 0x1}, {0x5, 0x9, 0x7, 0x3, 0xec, 0x400}, {0xe, 0x101, 0x9, 0x1, 0x10000, 0x4}, {0x7f, 0x9, 0xfbf0, 0x9, 0x0, 0xb6}, {0x7, 0x3, 0x0, 0x5311, 0xe, 0x2}, {0x4, 0x0, 0x78, 0x5, 0x4, 0x4000000}, {0x10000, 0x8ea9, 0x0, 0x7ff, 0x2, 0x750b}, {0x7ff, 0xb, 0xc, 0x39, 0x6, 0x9405}, {0xf0b, 0x0, 0x2000, 0x0, 0x9, 0x7}, {0x7fff, 0x4, 0x61, 0x7fff, 0x7, 0x1000}, {0x62, 0x2, 0x38f, 0x8, 0x7, 0xe021}, {0xd163, 0x7, 0x3, 0x75b, 0xd, 0x1}, {0x4, 0xffff, 0x3826b32b, 0x5, 0x7, 0xd}, {0xf6, 0x7fffffff, 0x7f, 0x70}, {0x3, 0x5, 0x2, 0x6, 0x1, 0x7}, {0x4, 0x9, 0x2, 0x7, 0x2, 0x4}, {0x6, 0x8, 0xe3c, 0x8, 0x1810, 0x3}, {0x2, 0x2, 0x9, 0x2, 0x10, 0xad8}, {0x9, 0x9, 0xb983, 0x4, 0x3}, {0x3, 0x2, 0x101, 0xcb2, 0x4, 0x8000}, {0x3, 0x6, 0x4, 0x5, 0x9, 0xfffffffb}, {0x6, 0x5, 0x3, 0x8, 0x761d, 0x8}, {0x3, 0x0, 0x0, 0x5, 0x7, 0xe90e}, {0x7, 0x1, 0x8000, 0x9, 0x63, 0x6}, {0x9, 0x9, 0x800, 0x54c, 0xfff, 0x6}, {0x1, 0x9d950d2, 0x3, 0x400000, 0x3, 0xfffffffb}, {0xc34, 0xf, 0x7, 0x3, 0x8, 0x3000000}, {0x2, 0xffffffff, 0x1, 0x2, 0x7, 0x4}, {0xffff, 0xf, 0x200, 0x5, 0xfd4, 0x7}, {0x40, 0x79, 0x1000, 0x2, 0x6bc422be, 0x81}, {0x2, 0x7, 0x5, 0xfffffffa, 0xe2b, 0x9}, {0x5, 0x1, 0xffff, 0xfffffff7, 0x5, 0x8001}, {0x6, 0x1, 0x1ff, 0x10, 0x700, 0x1}, {0x8, 0x5, 0x352, 0x4, 0xfe91, 0xb51}, {0x7, 0x9, 0x5, 0xfffffff7, 0x5, 0x1}, {0x100, 0x4, 0xfffffffb, 0xbb24, 0x1, 0x8}, {0x29, 0x0, 0xfffffffa, 0xd353, 0x627, 0x8}, {0xffffffff, 0x5, 0x6, 0x4, 0x8, 0x600000}, {0x20aa, 0x3, 0x140, 0xfff, 0xd, 0x31}, {0x2, 0x5, 0xfffffe00, 0x0, 0x3, 0xbb0}, {0x9, 0x81, 0xfffff99e, 0x3, 0xffffff17, 0x5}, {0xc280, 0x6, 0x6, 0x401, 0x3, 0x2}, {0x3, 0x5, 0x40, 0x5, 0x646e, 0x1}, {0x9e, 0x6, 0x5, 0x68e708f2, 0x2, 0x5}, {0x80000001, 0x4, 0xd4, 0x0, 0xd, 0x4}, {0x9, 0x5, 0xc6d3, 0xd9c, 0x10000, 0x7}, {0x9, 0x6e, 0x8001, 0x4, 0x2, 0x7}, {0x40, 0x4, 0x34, 0x1, 0x6ed9e0c2, 0x400}, {0x7, 0xac0, 0x9, 0x101, 0xa, 0x8}, {0x2, 0xc27, 0x8, 0x0, 0x8, 0x4}, {0x800, 0x200, 0x3, 0x5, 0x7ff, 0x5}, {0x6, 0xa, 0xfffffff9, 0x9, 0x7fff, 0x9}, {0x0, 0x81, 0x1, 0x6, 0x1, 0x6}, {0x6, 0xfffffc00, 0x4, 0x9, 0x5, 0x1}, {0x4, 0x7, 0x3, 0x9, 0x7, 0x7fffffff}, {0x9, 0x1, 0x385aba69, 0x5735, 0x7b1, 0x5}, {0x6, 0xb, 0xfff, 0x1, 0x1}, {0x2, 0xd4, 0x2, 0xe8f, 0x6dd, 0xd}, {0xffffffff, 0x401, 0x50, 0x800, 0x7, 0x3}, {0x80000000, 0xa, 0x5, 0x7, 0x8000, 0x8001}, {0x1, 0x8, 0x8c7a, 0x14000000, 0x81, 0x4}, {0x1, 0x0, 0x5, 0x5, 0xfffffff9, 0x4000}, {0xa, 0x3, 0xfffffffe, 0xfff, 0x9af, 0x3}, {0x73a, 0x3, 0xe, 0xaa, 0x3, 0x6}, {0x3, 0x0, 0x27f36aa9, 0x7df, 0x173}, {0x800, 0x2, 0xfffffff8, 0x1, 0x8, 0x40}, {0xff, 0x101, 0x1c9c, 0x7fffffff, 0x3d13, 0x3}, {0x200, 0x7, 0x9, 0xea3, 0x8, 0x8}, {0x1, 0xfffffffc, 0x100, 0x8001, 0x6, 0x9}, {0x2, 0x1, 0x8, 0x3, 0x2, 0x1}, {0xd, 0x7ff, 0xb, 0x5, 0x4}, {0xe550, 0x0, 0x1f1d, 0x0, 0x1, 0x2}, {0x19b, 0x3, 0x0, 0x9, 0x4, 0x3ff}, {0x9, 0x800, 0x3, 0x4, 0xd7e, 0xd64a}, {0xf, 0xffffff00, 0x7, 0x5, 0x3, 0x5}, {0x2, 0xfffff707, 0xffffffff, 0x87, 0x6, 0x9}, {0x3ff, 0x9, 0x1800000, 0xdf, 0x3, 0x9}, {0x0, 0x6, 0x7ff, 0x80000000, 0x6, 0x6}, {0x0, 0x4, 0xfffffff7, 0x5, 0xc, 0xf98}, {0x400, 0x7, 0xa, 0xc69, 0x7, 0x6}, {0xfffffff9, 0xfffffffa, 0x2, 0x7ff, 0x2, 0x6}, {0x4133, 0xffff4b0a, 0x4, 0x0, 0xff, 0x7}, {0x4, 0x87e, 0x51a00f8f, 0x401, 0x1000, 0xbc9}, {0xffffffff, 0x8, 0x2, 0x7, 0x40, 0x5}, {0x2, 0x4, 0x7, 0xf, 0x0, 0x6}, {0x3, 0x80000001, 0x5, 0x1ff, 0x2, 0x7}, {0x0, 0x3, 0x200, 0x10000, 0xf, 0x7}, {0x5, 0x8, 0x8, 0x0, 0x6, 0x7}, {0x8, 0x5, 0x6, 0x400, 0xfffffffc, 0x3}, {0x5, 0x2, 0x8000, 0x7, 0x8, 0x8}, {0x7f, 0x7, 0x8, 0x9, 0x6, 0xcc}, {0x80000001, 0x6, 0x7, 0x2, 0xe, 0x9}, {0x0, 0x8, 0x3, 0xbaaf, 0x2, 0x84f}, {0xb, 0x9, 0xff, 0x401, 0xe, 0xe87}, {0x84c, 0x30, 0x4, 0x5, 0x7f9e, 0x200}, {0x76, 0x9, 0x6, 0x7, 0x5, 0x2}, {0x0, 0x5, 0x4, 0x1000, 0x0, 0x5}, {0x1ff, 0x10000, 0x59c10be0, 0x10001, 0x0, 0x4871}, {0x5, 0x8, 0x800, 0x10001, 0xe}, {0x5, 0x6, 0x2, 0x6, 0x6, 0xffff}, {0x200, 0x98, 0x9, 0x8001, 0x3, 0x2}, {0x6, 0x42a, 0xd8bc, 0x6, 0x6c, 0x5}, {0x1, 0x9, 0x5, 0x3, 0xeaf6, 0x5}, {0x3, 0x2, 0x5, 0x7, 0x1, 0x5a8}, {0x0, 0x5, 0x2, 0x3c4, 0x127c, 0x2}, {0x1, 0x4, 0x80, 0x3, 0x1, 0x6}, {0x8, 0x9, 0x2, 0x5, 0x7f0c, 0x5ec}, {0x588, 0x5, 0x3, 0x0, 0x800, 0x1}, {0x8, 0xc74, 0x6, 0x2, 0x7c20ed61, 0x290}, {0x3, 0x7, 0x1, 0x0, 0xfffffff3, 0xa}, {0x5, 0xffff, 0x4, 0x1ff, 0x5, 0x325}, {0x5b000, 0xffffffff, 0xa9d, 0x1000, 0x1, 0x5}, {0x4, 0x1, 0x6, 0xfffffffb, 0xfffff656, 0xdaf}, {0x9, 0x2, 0x8, 0x6, 0xc3, 0x9}, {0xb, 0x6, 0x9, 0x8, 0x1, 0x9}, {0x9, 0x2c, 0x6e, 0x40, 0x4, 0x272}, {0x5400000, 0x80000000, 0x9, 0x6, 0xb2, 0x2}, {0x1, 0xffffffff, 0x4a, 0x7, 0x6, 0x4}, {0x6, 0x1, 0x4, 0x7fffffff, 0x3, 0x494}, {0x7fff800, 0x4, 0x4, 0xfffffffc, 0x81}, {0x1, 0x80, 0x7, 0x100, 0x80000000, 0xfffffffe}, {0xc, 0x7fffffff, 0xfffffff7, 0xa5, 0x101, 0xf7}, {0x8000, 0x400, 0x197, 0x401, 0x2, 0x3}, {0xe8, 0x6, 0x4, 0xfff, 0x10000, 0x400}, {0x4, 0x3, 0xfffffffb, 0x10, 0x1, 0x2}, {0x101, 0x2, 0xf, 0x10, 0x4, 0x80}], [{0x3}, {0x1}, {}, {0x6019e4019ac09182, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x5}, {0x4}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x5}, {0x2}, {0x5}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}], 0x1}}]}, {0xb5, 0x6, "7b46329c238c053e9ee5f26308192dd88c5cf4b9fd59b517833a700789963874d99e4b1288d33a06914b35209384bf33df0b725bd56c35519fc0e7d9c7b61d9cf34c8f7045d05585b7da788d4a4d8461b9b81ec60890e68d5493defa7fc85e5a7e051b7484e7e606a9675b5dff3b8a9979c5d7179c6a655b6482d0356d94e9dbcef783ce2d6160a0f01855e40ff43eee1e3d1d496f02a4fb1eaa0054719859f40212373b8d8b41b5c1855c217169e77ae8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x3c1c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xca1}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777d", 0xb2}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="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", 0x130}], 0x5}, 0x8bb3a321efc09a) 101.96584ms ago: executing program 0 (id=803): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000240)={0x0, 0x6109, 0x800, 0x0, 0x1a2}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000400)=0xfffffff8, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_io_uring_setup(0x3005, &(0x7f0000000180)={0x0, 0x200089b7, 0x0, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r5, 0x0, 0x0, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r7 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 790.762µs ago: executing program 1 (id=804): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', '', [], 0xa, "013cf66734da3bd098de5a30417189d548ca2a71def6c3865738647fc55cee88c4a9b2e52c807e89671850bc5953f175"}, 0x34) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r5], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb59f", 0xc9}, {&(0x7f0000000700)="f80ec2e2badd0335f68d70715f3cbda9183845a4995f9a80f409315c1c0dbfbd19ea9d44961f3b8fdf64cbdbd4d6965145aa3989c8cbb335ba7af3ab70c7256b9989f911460ef51a6171eb99fb702d61693cd6faf7ab3037525f2f7ef05e6c179ba03199bb8c50ee531d3f84d5622c272b4047179710c2a3fa3e7cc1d8424df15cfefcc32c2b75", 0x87}], 0x2, 0x0, 0x0, 0x2663}, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x9) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=805): rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) kernel console output (not intermixed with test programs): 4.879920][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 154.910118][ T5948] usb 5-1: config 3 has an invalid interface number: 211 but max is 0 [ 154.928523][ T5948] usb 5-1: config 3 has no interface number 0 [ 154.938440][ T5948] usb 5-1: config 3 interface 211 has no altsetting 0 [ 154.952213][ T5948] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=f8.84 [ 154.963035][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.971383][ T5948] usb 5-1: Product: syz [ 154.976377][ T5948] usb 5-1: Manufacturer: syz [ 154.982111][ T30] audit: type=1400 audit(1773514211.427:379): avc: denied { read } for pid=7140 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.985495][ T5948] usb 5-1: SerialNumber: syz [ 155.012232][ T7141] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.270'. [ 155.089920][ T5869] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 155.344054][ T5948] usb 5-1: selecting invalid altsetting 1 [ 155.351608][ T5948] comedi comedi5: could not switch to alternate setting 1 [ 155.358746][ T5948] usbduxfast 5-1:3.211: driver 'usbduxfast' failed to auto-configure device. [ 155.371593][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 155.402583][ T5948] usb 5-1: USB disconnect, device number 20 [ 155.886662][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.896875][ T5869] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 155.906072][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.925563][ T5869] usb 3-1: config 0 descriptor?? [ 155.945127][ T30] audit: type=1400 audit(1773514212.387:380): avc: denied { create } for pid=7158 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.096984][ T30] audit: type=1400 audit(1773514212.387:381): avc: denied { ioctl } for pid=7158 comm="syz.0.274" path="socket:[14428]" dev="sockfs" ino=14428 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.127306][ T5869] usb 3-1: bad CDC descriptors [ 156.133778][ T5869] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 156.237770][ T7191] netlink: 'syz.0.274': attribute type 9 has an invalid length. [ 156.245809][ T7191] netlink: 'syz.0.274': attribute type 7 has an invalid length. [ 156.253650][ T7191] netlink: 'syz.0.274': attribute type 8 has an invalid length. [ 157.308813][ T5869] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 157.316114][ T5869] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 157.381225][ T30] audit: type=1400 audit(1773514213.797:382): avc: denied { mounton } for pid=7132 comm="syz.2.269" path="/66/file0" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.466111][ T7133] FAT-fs (loop5): unable to read boot sector [ 157.600038][ T978] usb 3-1: USB disconnect, device number 20 [ 157.892251][ T7202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.278'. [ 159.231675][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 159.256102][ T5884] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 159.419943][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 159.504702][ T5884] usb 5-1: config 8 has an invalid interface number: 140 but max is 0 [ 159.582467][ T5884] usb 5-1: config 8 has no interface number 0 [ 159.596946][ T5884] usb 5-1: config 8 interface 140 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 159.616620][ T5884] usb 5-1: config 8 interface 140 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.635146][ T5884] usb 5-1: New USB device found, idVendor=0403, idProduct=e80f, bcdDevice= 1.4c [ 159.645271][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.653672][ T5884] usb 5-1: Product: 挮縻ⵡǻ쁙반❿﹊グ롓ҕ骃ິᥢ붱젖☾骢ﺠ뉚䤕閒ꑘ蚟Ź澧覮⾚䬯坨᳼塽▖뽙ᑎﯘ溭ꨶ㒫翌쫹閗䙠Ɠ漖示恈㆖ꨮ蝤▼‼ኽΰ艒㷗룓磇曀鵭릆ꍰ㚋﹀嫠鰡癔㛕ď캾呹箃歙✨ꕟ便沟逩뵷둣饠⒩鉦ሣ谒㍒鑵ᠢ⡙㝢ǩ⁹襁麤↛勣ｧ䑇彖䩭䞬鎨ꐮ麋ꢜﴡᑐ郓쫀 [ 159.722600][ T5884] usb 5-1: Manufacturer:   [ 159.727268][ T5884] usb 5-1: SerialNumber: ̔ꚓ퍕鄙颓֘ᡕ栞ޯᬭጝْᯑ틯鬯嗹溯鏉녗ⅆ륞ᵤꝓ쥼豱꘩䱕涨瞞扫ဏ鸭ⳟ闳꣆㍤샘ꣲⴡ⹓㵇䬶ױ⫢䫰✭삂ᒞ騊ꉡ敭䢷욕綠뀨타냆㲙삚롟㨌ꎞ荭鿺翰ﰟ性걦溺ሙ埫ﮞ䟌冀㺊영俍诲࣬闧쯧曓羴㝡西洙ᆖᚡ뎱ᒓ픙荴餣챫퉦殲敯꬜ힲ靌蝥쇚턷脛ᲀῂ⠩ [ 159.841481][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.285'. [ 159.897800][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 160.905125][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.982606][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.361241][ T5884] ftdi_sio 5-1:8.140: FTDI USB Serial Device converter detected [ 161.436421][ T5884] usb 5-1: Detected SIO [ 161.547502][ T30] audit: type=1400 audit(1773514217.897:383): avc: denied { connect } for pid=7276 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.580361][ T5884] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.027852][ T30] audit: type=1400 audit(1773514218.087:384): avc: denied { bind } for pid=7276 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.097194][ T5884] usb 5-1: USB disconnect, device number 21 [ 162.174598][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.209521][ T5884] ftdi_sio 5-1:8.140: device disconnected [ 162.323583][ T30] audit: type=1400 audit(1773514218.087:385): avc: denied { node_bind } for pid=7276 comm="syz.2.287" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 162.908669][ T30] audit: type=1400 audit(1773514219.347:386): avc: denied { setopt } for pid=7282 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.930721][ T7287] : Can't lookup blockdev [ 163.186562][ T7293] syzkaller0: entered promiscuous mode [ 163.202202][ T7293] syzkaller0: entered allmulticast mode [ 163.260749][ T7293] tipc: Started in network mode [ 163.265694][ T7293] tipc: Node identity f6a5b528f4c4, cluster identity 4711 [ 163.275741][ T7293] tipc: Enabled bearer , priority 0 [ 163.574038][ T7297] bond1: entered promiscuous mode [ 163.579796][ T7292] tipc: Resetting bearer [ 163.639146][ T7292] tipc: Disabling bearer [ 163.680727][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd64400: rx timeout, send abort [ 164.059536][ T30] audit: type=1326 audit(1773514220.337:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.4.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602999c799 code=0x0 [ 164.188953][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd64400: abort rx timeout. Force session deactivation [ 165.176974][ T30] audit: type=1400 audit(1773514220.807:388): avc: denied { connect } for pid=7304 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.099558][ T978] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 166.692327][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 166.804374][ T978] usb 3-1: config 8 has an invalid interface number: 140 but max is 0 [ 166.863572][ T7352] can: request_module (can-proto-3) failed. [ 166.952443][ T978] usb 3-1: config 8 has no interface number 0 [ 166.977751][ T978] usb 3-1: config 8 interface 140 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 167.013883][ T978] usb 3-1: config 8 interface 140 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.124700][ T978] usb 3-1: New USB device found, idVendor=0403, idProduct=e80f, bcdDevice= 1.4c [ 167.144132][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.156913][ T978] usb 3-1: Product: 挮縻ⵡǻ쁙반❿﹊グ롓ҕ骃ິᥢ붱젖☾骢ﺠ뉚䤕閒ꑘ蚟Ź澧覮⾚䬯坨᳼塽▖뽙ᑎﯘ溭ꨶ㒫翌쫹閗䙠Ɠ漖示恈㆖ꨮ蝤▼‼ኽΰ艒㷗룓磇曀鵭릆ꍰ㚋﹀嫠鰡癔㛕ď캾呹箃歙✨ꕟ便沟逩뵷둣饠⒩鉦ሣ谒㍒鑵ᠢ⡙㝢ǩ⁹襁麤↛勣ｧ䑇彖䩭䞬鎨ꐮ麋ꢜﴡᑐ郓쫀 [ 167.277338][ T978] usb 3-1: Manufacturer:   [ 167.290693][ T30] audit: type=1400 audit(1773514223.727:389): avc: denied { read } for pid=7358 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.323157][ T978] usb 3-1: SerialNumber: ̔ꚓ퍕鄙颓֘ᡕ栞ޯᬭጝْᯑ틯鬯嗹溯鏉녗ⅆ륞ᵤꝓ쥼豱꘩䱕涨瞞扫ဏ鸭ⳟ闳꣆㍤샘ꣲⴡ⹓㵇䬶ױ⫢䫰✭삂ᒞ騊ꉡ敭䢷욕綠뀨타냆㲙삚롟㨌ꎞ荭鿺翰ﰟ性걦溺ሙ埫ﮞ䟌冀㺊영俍诲࣬闧쯧曓羴㝡西洙ᆖᚡ뎱ᒓ픙荴餣챫퉦殲敯꬜ힲ靌蝥쇚턷脛ᲀῂ⠩ [ 167.398787][ T30] audit: type=1400 audit(1773514223.837:390): avc: denied { bind } for pid=7367 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.547060][ T30] audit: type=1400 audit(1773514223.987:391): avc: denied { bind } for pid=7376 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.813908][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.849714][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.991282][ T978] ftdi_sio 3-1:8.140: FTDI USB Serial Device converter detected [ 168.005389][ T978] usb 3-1: Detected SIO [ 168.012779][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 168.022058][ T978] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.478152][ T978] usb 3-1: USB disconnect, device number 21 [ 168.500149][ T978] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.519785][ T978] ftdi_sio 3-1:8.140: device disconnected [ 168.847088][ T30] audit: type=1400 audit(1773514225.287:392): avc: denied { connect } for pid=7392 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.879818][ T30] audit: type=1400 audit(1773514225.287:393): avc: denied { name_connect } for pid=7392 comm="syz.4.309" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 168.983483][ T978] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.149894][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 171.249715][ T978] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 171.258016][ T978] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 171.266430][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.276788][ T978] usb 1-1: config 0 has no interface number 0 [ 171.377675][ T978] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 171.387092][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.398001][ T978] usb 1-1: Product: syz [ 171.740884][ T978] usb 1-1: Manufacturer: syz [ 171.745485][ T978] usb 1-1: SerialNumber: syz [ 171.765594][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 171.799524][ T978] usb 1-1: config 0 descriptor?? [ 171.827591][ T978] usb 1-1: can't set config #0, error -71 [ 171.841972][ T978] usb 1-1: USB disconnect, device number 9 [ 171.925319][ T7410] macvtap1: entered promiscuous mode [ 171.997744][ T7419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.005170][ T7419] IPv6: NLM_F_CREATE should be set when creating new route [ 172.012451][ T7419] IPv6: NLM_F_CREATE should be set when creating new route [ 172.019645][ T7419] IPv6: NLM_F_CREATE should be set when creating new route [ 172.336073][ T7410] macvtap1: entered allmulticast mode [ 172.360350][ T7410] dummy0: entered promiscuous mode [ 172.365648][ T7410] dummy0: entered allmulticast mode [ 172.377676][ T7410] team0: Device macvtap1 failed to register rx_handler [ 172.429985][ T7410] dummy0: left allmulticast mode [ 172.441242][ T7410] dummy0: left promiscuous mode [ 172.770504][ T7425] 9p: Bad value for 'rfdno' [ 172.787720][ T30] audit: type=1400 audit(1773514229.207:394): avc: denied { ioctl } for pid=7421 comm="syz.0.316" path="/dev/sg0" dev="devtmpfs" ino=725 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.888413][ T30] audit: type=1400 audit(1773514229.227:395): avc: denied { ioctl } for pid=7421 comm="syz.0.316" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 173.638146][ T30] audit: type=1400 audit(1773514229.877:396): avc: denied { watch_mount } for pid=7426 comm="syz.2.317" path="/76" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.678444][ T30] audit: type=1400 audit(1773514229.887:397): avc: denied { watch watch_reads } for pid=7426 comm="syz.2.317" path="/76" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.380125][ T29] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 174.419777][ T7448] netlink: 208 bytes leftover after parsing attributes in process `syz.2.321'. [ 174.444401][ T7448] netlink: 48 bytes leftover after parsing attributes in process `syz.2.321'. [ 174.473474][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 174.549891][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 174.567109][ T29] usb 5-1: config 0 interface 0 altsetting 88 bulk endpoint 0x85 has invalid maxpacket 1024 [ 174.592818][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.618748][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ea.79 [ 174.629949][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=0 [ 174.658873][ T29] usb 5-1: Product: syz [ 174.668982][ T29] usb 5-1: Manufacturer: syz [ 174.681949][ T29] usb 5-1: config 0 descriptor?? [ 174.691278][ T7440] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.899372][ T30] audit: type=1400 audit(1773514231.337:398): avc: denied { setopt } for pid=7457 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.315327][ T978] usb 5-1: USB disconnect, device number 22 [ 176.428353][ T30] audit: type=1400 audit(1773514232.867:399): avc: denied { read write } for pid=7468 comm="syz.1.326" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 176.495791][ T30] audit: type=1400 audit(1773514232.867:400): avc: denied { open } for pid=7468 comm="syz.1.326" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 176.546577][ T30] audit: type=1400 audit(1773514232.897:401): avc: denied { ioctl } for pid=7468 comm="syz.1.326" path="mnt:[4026533948]" dev="nsfs" ino=4026533948 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.626047][ T30] audit: type=1400 audit(1773514232.897:402): avc: denied { ioctl } for pid=7468 comm="syz.1.326" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 177.204702][ T7481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.329'. [ 177.343799][ T7483] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.493470][ T7485] evm: overlay not supported [ 178.108138][ T30] audit: type=1400 audit(1773514233.907:403): avc: denied { mount } for pid=7480 comm="syz.4.329" name="/" dev="overlay" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.130736][ T30] audit: type=1400 audit(1773514233.947:404): avc: denied { watch } for pid=7480 comm="syz.4.329" path="/59/bus/file1" dev="overlay" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.154818][ T30] audit: type=1400 audit(1773514233.947:405): avc: denied { watch_sb watch_reads } for pid=7480 comm="syz.4.329" path="/59/bus/file1" dev="overlay" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.175386][ T5816] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 178.223987][ T5816] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 178.231548][ T5816] Bluetooth: hci3: Dropping invalid advertising data [ 178.246327][ T5816] Bluetooth: hci3: Malformed LE Event: 0x02 [ 178.252667][ T30] audit: type=1400 audit(1773514234.607:406): avc: denied { write } for pid=7470 comm="syz.3.327" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.277583][ T30] audit: type=1400 audit(1773514234.667:407): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.328956][ T7489] FAULT_INJECTION: forcing a failure. [ 178.328956][ T7489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.343185][ T7489] CPU: 0 UID: 0 PID: 7489 Comm: syz.2.330 Not tainted syzkaller #0 PREEMPT(full) [ 178.343210][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.343221][ T7489] Call Trace: [ 178.343227][ T7489] [ 178.343234][ T7489] dump_stack_lvl+0x100/0x190 [ 178.343267][ T7489] should_fail_ex.cold+0x5/0xa [ 178.343290][ T7489] _copy_from_user+0x2e/0xd0 [ 178.343319][ T7489] video_usercopy+0xe71/0x1740 [ 178.343345][ T7489] ? __pfx___video_do_ioctl+0x10/0x10 [ 178.343367][ T7489] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.343394][ T7489] ? __pfx_video_usercopy+0x10/0x10 [ 178.343432][ T7489] v4l2_ioctl+0x1bd/0x250 [ 178.343454][ T7489] ? __pfx_v4l2_ioctl+0x10/0x10 [ 178.343478][ T7489] __x64_sys_ioctl+0x18e/0x210 [ 178.343505][ T7489] do_syscall_64+0x106/0xf80 [ 178.343527][ T7489] ? clear_bhb_loop+0x40/0x90 [ 178.343549][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.343567][ T7489] RIP: 0033:0x7fe5ad19c799 [ 178.343582][ T7489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.343599][ T7489] RSP: 002b:00007fe5adf75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.343616][ T7489] RAX: ffffffffffffffda RBX: 00007fe5ad415fa0 RCX: 00007fe5ad19c799 [ 178.343627][ T7489] RDX: 0000200000000300 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 178.343638][ T7489] RBP: 00007fe5adf75090 R08: 0000000000000000 R09: 0000000000000000 [ 178.343648][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.343658][ T7489] R13: 00007fe5ad416038 R14: 00007fe5ad415fa0 R15: 00007ffe11c415a8 [ 178.343682][ T7489] [ 179.029953][ T5884] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 179.077136][ T7501] netlink: 208 bytes leftover after parsing attributes in process `syz.4.334'. [ 179.102127][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 179.231731][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.252485][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.285686][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.294123][ T7503] cgroup2: Unknown parameter 'fO۸javordynmods' [ 179.328731][ T5884] usb 3-1: Product: syz [ 179.337370][ T5884] usb 3-1: Manufacturer: syz [ 179.347500][ T5884] usb 3-1: SerialNumber: syz [ 179.430307][ T5884] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 179.884100][ T5884] cdc_ncm 3-1:1.0: bind() failure [ 179.910022][ T5884] usb 3-1: USB disconnect, device number 22 [ 180.149923][ T978] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.345750][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 180.354762][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.365978][ T978] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 180.375570][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.384636][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 180.384649][ T30] audit: type=1400 audit(1773514236.837:409): avc: denied { connect } for pid=7514 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.853434][ T978] usb 1-1: config 0 descriptor?? [ 181.202984][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 181.249601][ T7523] macvtap1: entered promiscuous mode [ 181.272255][ T7523] macvtap1: entered allmulticast mode [ 181.278133][ T7523] dummy0: entered promiscuous mode [ 181.285004][ T7523] dummy0: entered allmulticast mode [ 181.319440][ T7523] team0: Device macvtap1 failed to register rx_handler [ 181.570010][ T5883] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 181.774575][ T7523] dummy0: left allmulticast mode [ 181.791433][ T7523] dummy0: left promiscuous mode [ 181.959268][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 181.974990][ T5883] usb 3-1: config 64 has an invalid interface number: 19 but max is 0 [ 181.975017][ T5883] usb 3-1: config 64 has no interface number 0 [ 181.975053][ T5883] usb 3-1: config 64 interface 19 altsetting 0 endpoint 0x3 has invalid maxpacket 39713, setting to 1024 [ 181.975078][ T5883] usb 3-1: config 64 interface 19 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 181.975112][ T5883] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 181.975132][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.981594][ T7527] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.983541][ T5883] usb 3-1: probing VID:PID(2201:012C) [ 181.984891][ T5883] usb 3-1: vub300 testing BULK OUT EndPoint(0) 03 [ 181.984912][ T5883] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 181.984968][ T5883] vub300 3-1:64.19: probe with driver vub300 failed with error -22 [ 182.209262][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.209604][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.224845][ T978] usbhid 1-1:0.0: can't add hid device: -71 [ 182.224931][ T978] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 182.226599][ T978] usb 1-1: USB disconnect, device number 10 [ 182.259513][ T5884] usb 3-1: USB disconnect, device number 23 [ 182.333576][ T7547] netlink: 208 bytes leftover after parsing attributes in process `syz.2.345'. [ 182.343532][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 182.825406][ T7566] 9p: Bad value for 'rfdno' [ 182.849917][ T5948] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 182.917414][ T30] audit: type=1400 audit(1773514239.357:410): avc: denied { create } for pid=7569 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 182.937969][ T5869] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 183.067982][ T30] audit: type=1400 audit(1773514239.507:411): avc: denied { getopt } for pid=7569 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.110365][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 183.112673][ T5948] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 183.124734][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.135658][ T5869] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 183.139889][ T5948] usb 4-1: Product: syz [ 183.148867][ T5948] usb 4-1: Manufacturer: syz [ 183.179023][ T5948] usb 4-1: SerialNumber: syz [ 183.196352][ T5948] usb 4-1: config 0 descriptor?? [ 183.401459][ T978] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 183.483523][ T5948] usb 4-1: ignoring: probably an ADSL modem [ 183.547069][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.560139][ T5869] usb 5-1: config 0 descriptor?? [ 183.647492][ T30] audit: type=1400 audit(1773514240.087:412): avc: denied { ioctl } for pid=7585 comm="syz.0.355" path="/dev/input/event3" dev="devtmpfs" ino=924 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.676682][ T978] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 183.694286][ T978] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.718089][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.727735][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.736212][ T978] usb 2-1: Product: syz [ 183.780200][ T978] usb 2-1: Manufacturer: syz [ 184.040369][ T5948] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 184.109373][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.117300][ T978] usb 2-1: SerialNumber: syz [ 184.134958][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.144749][ T5869] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 184.172239][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.190572][ T5869] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 184.202876][ T5869] usb 5-1: media controller created [ 184.225183][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.294032][ T5948] usb 4-1: USB disconnect, device number 10 [ 184.348823][ T5869] az6027: usb out operation failed. (-71) [ 184.349948][ T978] usb 2-1: 0:2 : does not exist [ 184.364125][ T5869] az6027: usb out operation failed. (-71) [ 184.373458][ T5869] stb0899_attach: Driver disabled by Kconfig [ 184.379479][ T5869] az6027: no front-end attached [ 184.379479][ T5869] [ 184.387435][ T5869] az6027: usb out operation failed. (-71) [ 184.387687][ T978] hub 2-1:1.1: Invalid hub with more than one config or interface [ 184.394946][ T5869] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 184.404963][ T978] hub 2-1:1.1: probe with driver hub failed with error -22 [ 184.416080][ T5869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 184.431081][ T978] usb 2-1: USB disconnect, device number 20 [ 184.440941][ T5869] dvb-usb: schedule remote query interval to 400 msecs. [ 184.447893][ T5869] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 184.460111][ T792] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 184.474018][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.505902][ T5869] usb 5-1: USB disconnect, device number 23 [ 184.536982][ T5869] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.651379][ T792] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.659393][ T792] usb 3-1: config 0 has no interface number 0 [ 184.681742][ T792] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 184.690828][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.698819][ T792] usb 3-1: Product: syz [ 184.709873][ T792] usb 3-1: Manufacturer: syz [ 184.714465][ T792] usb 3-1: SerialNumber: syz [ 184.740536][ T792] usb 3-1: config 0 descriptor?? [ 184.864202][ T7603] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 184.917641][ T7603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.948380][ T792] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 184.960425][ T792] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.971531][ T792] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 184.979540][ T792] usb 3-1: media controller created [ 184.999808][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.004100][ T7603] bond2: (slave veth3): Enslaving as an active interface with a down link [ 185.017622][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 185.052191][ T7603] bond2: (slave dummy0): making interface the new active one [ 185.063410][ T7603] dummy0: entered promiscuous mode [ 185.072581][ T7603] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 185.105294][ T978] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 185.106569][ T7603] netlink: 14 bytes leftover after parsing attributes in process `syz.0.359'. [ 185.373604][ T7603] bond2: (slave dummy0): Releasing active interface [ 185.373897][ T7603] dummy0 (unregistering): left promiscuous mode [ 185.425479][ T792] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 185.489923][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 185.491387][ T978] usb 4-1: config 2 has an invalid interface number: 152 but max is 0 [ 185.491411][ T978] usb 4-1: config 2 has no interface number 0 [ 185.491437][ T978] usb 4-1: config 2 interface 152 has no altsetting 0 [ 185.493172][ T978] usb 4-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 185.493199][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.493217][ T978] usb 4-1: Product: syz [ 185.493231][ T978] usb 4-1: Manufacturer: syz [ 185.493246][ T978] usb 4-1: SerialNumber: syz [ 185.496734][ T978] r8152-cfgselector 4-1: Unknown version 0x0000 [ 186.062054][ T978] r8152 4-1:2.152: Expected endpoints are not found [ 186.063611][ T978] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 186.279934][ T5948] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.001848][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.012949][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.023233][ T5948] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 187.032449][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.042864][ T5948] usb 1-1: config 0 descriptor?? [ 187.283396][ T5884] usb 3-1: USB disconnect, device number 24 [ 187.480039][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.537104][ T7635] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 187.599679][ T5948] itetech 0003:06CB:73F5.0008: unknown main item tag 0x0 [ 187.612287][ T5948] itetech 0003:06CB:73F5.0008: unknown main item tag 0x0 [ 187.619353][ T5948] itetech 0003:06CB:73F5.0008: unknown main item tag 0x0 [ 187.622856][ T7628] netlink: 80 bytes leftover after parsing attributes in process `syz.4.367'. [ 187.653140][ T5948] itetech 0003:06CB:73F5.0008: unknown main item tag 0x0 [ 187.685521][ T5948] itetech 0003:06CB:73F5.0008: unknown main item tag 0x0 [ 187.700264][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 187.706618][ T5948] itetech 0003:06CB:73F5.0008: unknown main item tag 0x0 [ 187.723112][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.736689][ T5948] itetech 0003:06CB:73F5.0008: unknown main item tag 0x0 [ 187.744220][ T29] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.759995][ T5948] itetech 0003:06CB:73F5.0008: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 187.761703][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.795498][ T29] usb 4-1: config 0 descriptor?? [ 187.803618][ T5948] usb 1-1: USB disconnect, device number 11 [ 187.854129][ T7642] fido_id[7642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 188.030077][ T792] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 188.193511][ T792] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 188.202977][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.203001][ T792] usb 5-1: Product: syz [ 188.203016][ T792] usb 5-1: Manufacturer: syz [ 188.203030][ T792] usb 5-1: SerialNumber: syz [ 188.211071][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 188.212731][ T5948] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 188.221593][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 188.270246][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 188.278129][ T29] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 188.412926][ T5948] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.429884][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.437889][ T5948] usb 3-1: Product: syz [ 188.459879][ T5948] usb 3-1: Manufacturer: syz [ 188.464493][ T5948] usb 3-1: SerialNumber: syz [ 188.473642][ T5948] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.584864][ T30] audit: type=1400 audit(1773514245.027:413): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 188.648774][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.658502][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.661604][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 188.678105][ T5884] usb 4-1: USB disconnect, device number 12 [ 188.697690][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.021855][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 189.033002][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 189.044868][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 189.054843][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 189.080632][ T792] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 189.090103][ T978] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.093177][ T792] usb 5-1: USB disconnect, device number 24 [ 189.332090][ T978] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 190.157924][ T7668] capability: warning: `syz.3.379' uses 32-bit capabilities (legacy support in use) [ 190.296813][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 190.303819][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.314372][ T9] ath9k_htc: Failed to initialize the device [ 190.325905][ T978] usb 1-1: config 0 has no interface number 0 [ 190.332308][ T978] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 190.342360][ T978] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 190.511319][ T978] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 190.520460][ T792] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 190.529387][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.549983][ T978] usb 1-1: Product: syz [ 190.570062][ T978] usb 1-1: Manufacturer: syz [ 190.576234][ T978] usb 1-1: SerialNumber: syz [ 190.727961][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 190.739866][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 190.746784][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 190.749904][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 190.753256][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 190.862907][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 190.875140][ T978] usb 1-1: config 0 descriptor?? [ 190.885235][ T5869] usb 3-1: USB disconnect, device number 25 [ 190.922424][ T792] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 190.940035][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.972416][ T792] usb 4-1: config 0 descriptor?? [ 190.986195][ T792] rndis_host 4-1:0.0: skipping garbage [ 191.000133][ T792] usb 4-1: bad CDC descriptors [ 191.284466][ T792] usb 4-1: USB disconnect, device number 13 [ 191.320369][ T5869] IPVS: starting estimator thread 0... [ 191.380253][ T7695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.387498][ T7695] IPv6: NLM_F_CREATE should be set when creating new route [ 191.394781][ T7695] IPv6: NLM_F_CREATE should be set when creating new route [ 191.402007][ T7695] IPv6: NLM_F_CREATE should be set when creating new route [ 191.727421][ T30] audit: type=1400 audit(1773514248.167:414): avc: denied { read } for pid=7683 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.789510][ T30] audit: type=1400 audit(1773514248.227:415): avc: denied { ioctl } for pid=7683 comm="syz.1.384" path="socket:[16640]" dev="sockfs" ino=16640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.827059][ T7694] IPVS: using max 46 ests per chain, 110400 per kthread [ 192.051265][ T30] audit: type=1400 audit(1773514248.497:416): avc: denied { write } for pid=7700 comm="syz.3.387" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.148283][ T792] usb 1-1: USB disconnect, device number 12 [ 193.694728][ T30] audit: type=1400 audit(1773514250.127:417): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 194.503686][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 194.513524][ T7732] netlink: 56 bytes leftover after parsing attributes in process `syz.2.395'. [ 194.709902][ T978] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 194.979115][ T9] IPVS: starting estimator thread 0... [ 195.209056][ T30] audit: type=1400 audit(1773514251.337:418): avc: denied { append } for pid=7740 comm="syz.2.397" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 195.244353][ T978] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.496726][ T7752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.398'. [ 195.559872][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.579629][ T978] usb 4-1: config 0 descriptor?? [ 195.589941][ T7750] IPVS: using max 45 ests per chain, 108000 per kthread [ 195.597951][ T978] cp210x 4-1:0.0: cp210x converter detected [ 195.855209][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.870217][ T978] usb 4-1: cp210x converter now attached to ttyUSB0 [ 195.892324][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.871724][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b8d0000: rx timeout, send abort [ 196.960735][ T30] audit: type=1400 audit(1773514253.407:419): avc: denied { name_bind } for pid=7766 comm="syz.0.404" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 196.989389][ T7767] syzkaller0: entered promiscuous mode [ 196.996203][ T7767] syzkaller0: entered allmulticast mode [ 197.295957][ T7772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.303200][ T7772] IPv6: NLM_F_CREATE should be set when creating new route [ 197.310447][ T7772] IPv6: NLM_F_CREATE should be set when creating new route [ 197.317640][ T7772] IPv6: NLM_F_CREATE should be set when creating new route [ 197.379974][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b8d0000: abort rx timeout. Force session deactivation [ 197.627220][ T29] usb 4-1: USB disconnect, device number 14 [ 197.646002][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.662996][ T29] cp210x 4-1:0.0: device disconnected [ 197.975937][ T7792] netlink: 'syz.2.409': attribute type 21 has an invalid length. [ 197.985770][ T7792] netlink: 128 bytes leftover after parsing attributes in process `syz.2.409'. [ 197.994971][ T7792] netlink: 'syz.2.409': attribute type 4 has an invalid length. [ 198.002773][ T7792] netlink: 3 bytes leftover after parsing attributes in process `syz.2.409'. [ 198.045863][ T7792] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 198.063775][ T7792] netlink: 224 bytes leftover after parsing attributes in process `syz.2.409'. [ 198.183578][ T7796] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.195603][ T5814] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 198.195636][ T5814] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 198.220131][ T5814] Bluetooth: hci3: Dropping invalid advertising data [ 198.234131][ T5814] Bluetooth: hci3: Malformed LE Event: 0x02 [ 198.250051][ T7799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.257283][ T7799] IPv6: NLM_F_CREATE should be set when creating new route [ 198.264518][ T7799] IPv6: NLM_F_CREATE should be set when creating new route [ 198.271729][ T7799] IPv6: NLM_F_CREATE should be set when creating new route [ 198.823068][ T30] audit: type=1400 audit(1773514255.267:420): avc: denied { getopt } for pid=7805 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.859925][ T5884] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 199.480102][ T30] audit: type=1400 audit(1773514255.567:421): avc: denied { connect } for pid=7807 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.499882][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 199.508241][ T5884] usb 2-1: config 8 has an invalid interface number: 140 but max is 0 [ 199.517018][ T5884] usb 2-1: config 8 has no interface number 0 [ 199.519673][ T30] audit: type=1400 audit(1773514255.567:422): avc: denied { ioctl } for pid=7807 comm="syz.2.415" path="socket:[17070]" dev="sockfs" ino=17070 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.523684][ T5884] usb 2-1: config 8 interface 140 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 199.560505][ T5884] usb 2-1: config 8 interface 140 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.575246][ T5884] usb 2-1: New USB device found, idVendor=0403, idProduct=e80f, bcdDevice= 1.4c [ 199.592801][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.601339][ T5884] usb 2-1: Product: 挮縻ⵡǻ쁙반❿﹊グ롓ҕ骃ິᥢ붱젖☾骢ﺠ뉚䤕閒ꑘ蚟Ź澧覮⾚䬯坨᳼塽▖뽙ᑎﯘ溭ꨶ㒫翌쫹閗䙠Ɠ漖示恈㆖ꨮ蝤▼‼ኽΰ艒㷗룓磇曀鵭릆ꍰ㚋﹀嫠鰡癔㛕ď캾呹箃歙✨ꕟ便沟逩뵷둣饠⒩鉦ሣ谒㍒鑵ᠢ⡙㝢ǩ⁹襁麤↛勣ｧ䑇彖䩭䞬鎨ꐮ麋ꢜﴡᑐ郓쫀 [ 199.613431][ T7812] syzkaller0: entered promiscuous mode [ 199.636874][ T5884] usb 2-1: Manufacturer:   [ 199.641920][ T7812] syzkaller0: entered allmulticast mode [ 199.646620][ T5884] usb 2-1: SerialNumber: ̔ꚓ퍕鄙颓֘ᡕ栞ޯᬭጝْᯑ틯鬯嗹溯鏉녗ⅆ륞ᵤꝓ쥼豱꘩䱕涨瞞扫ဏ鸭ⳟ闳꣆㍤샘ꣲⴡ⹓㵇䬶ױ⫢䫰✭삂ᒞ騊ꉡ敭䢷욕綠뀨타냆㲙삚롟㨌ꎞ荭鿺翰ﰟ性걦溺ሙ埫ﮞ䟌冀㺊영俍诲࣬闧쯧曓羴㝡西洙ᆖᚡ뎱ᒓ픙荴餣챫퉦殲敯꬜ힲ靌蝥쇚턷脛ᲀῂ⠩ [ 199.701447][ T7812] tipc: Enabled bearer , priority 0 [ 199.709064][ T7811] tipc: Resetting bearer [ 199.721748][ T7811] tipc: Disabling bearer [ 199.953625][ T30] audit: type=1400 audit(1773514256.397:423): avc: denied { setopt } for pid=7813 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 199.985162][ T5884] ftdi_sio 2-1:8.140: FTDI USB Serial Device converter detected [ 200.002533][ T5884] usb 2-1: Detected SIO [ 200.020657][ T5884] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 200.168662][ T5884] usb 2-1: USB disconnect, device number 21 [ 200.192751][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 200.348270][ T5884] ftdi_sio 2-1:8.140: device disconnected [ 200.629902][ T978] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.780237][ T978] usb 4-1: device descriptor read/64, error -71 [ 201.073537][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.084532][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.457067][ T30] audit: type=1400 audit(1773514257.897:424): avc: denied { mounton } for pid=7843 comm="syz.4.426" path="/proc/306/cgroup" dev="proc" ino=16381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 201.479948][ T978] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 201.819774][ T978] usb 4-1: device descriptor read/64, error -71 [ 201.930116][ T978] usb usb4-port1: attempt power cycle [ 202.263543][ T5884] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 202.329978][ T978] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 202.376066][ T7860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.402442][ T978] usb 4-1: device descriptor read/8, error -71 [ 202.429957][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 202.717992][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.737224][ T5884] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.757033][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.768266][ T5884] usb 1-1: config 0 descriptor?? [ 202.960134][ T978] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 202.980596][ T978] usb 4-1: device descriptor read/8, error -71 [ 203.090131][ T978] usb usb4-port1: unable to enumerate USB device [ 203.109945][ T29] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 203.332052][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 203.362073][ T29] usb 5-1: config 8 has an invalid interface number: 140 but max is 0 [ 203.416113][ T29] usb 5-1: config 8 has no interface number 0 [ 203.448039][ T29] usb 5-1: config 8 interface 140 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 203.512584][ T29] usb 5-1: config 8 interface 140 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.691346][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.922544][ T5884] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 204.113034][ T29] usb 5-1: New USB device found, idVendor=0403, idProduct=e80f, bcdDevice= 1.4c [ 204.182308][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.177675][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.186763][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.249950][ T29] usb 5-1: Product: 挮縻ⵡǻ쁙반❿﹊グ롓ҕ骃ິᥢ붱젖☾骢ﺠ뉚䤕閒ꑘ蚟Ź澧覮⾚䬯坨᳼塽▖뽙ᑎﯘ溭ꨶ㒫翌쫹閗䙠Ɠ漖示恈㆖ꨮ蝤▼‼ኽΰ艒㷗룓磇曀鵭릆ꍰ㚋﹀嫠鰡癔㛕ď캾呹箃歙✨ꕟ便沟逩뵷둣饠⒩鉦ሣ谒㍒鑵ᠢ⡙㝢ǩ⁹襁麤↛勣ｧ䑇彖䩭䞬鎨ꐮ麋ꢜﴡᑐ郓쫀 [ 205.285240][ T29] usb 5-1: Manufacturer:   [ 205.290055][ T29] usb 5-1: SerialNumber: ̔ꚓ퍕鄙颓֘ᡕ栞ޯᬭጝْᯑ틯鬯嗹溯鏉녗ⅆ륞ᵤꝓ쥼豱꘩䱕涨瞞扫ဏ鸭ⳟ闳꣆㍤샘ꣲⴡ⹓㵇䬶ױ⫢䫰✭삂ᒞ騊ꉡ敭䢷욕綠뀨타냆㲙삚롟㨌ꎞ荭鿺翰ﰟ性걦溺ሙ埫ﮞ䟌冀㺊영俍诲࣬闧쯧曓羴㝡西洙ᆖᚡ뎱ᒓ픙荴餣챫퉦殲敯꬜ힲ靌蝥쇚턷脛ᲀῂ⠩ [ 205.359993][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.553171][ T9] usb 2-1: SerialNumber: syz [ 205.612310][ T29] ftdi_sio 5-1:8.140: FTDI USB Serial Device converter detected [ 205.660019][ T29] usb 5-1: Detected SIO [ 205.670926][ T29] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 205.706521][ T29] usb 5-1: USB disconnect, device number 25 [ 205.751323][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 205.756369][ T7874] can: request_module (can-proto-0) failed. [ 205.761058][ T5883] usb 1-1: USB disconnect, device number 13 [ 205.801524][ T29] ftdi_sio 5-1:8.140: device disconnected [ 206.012801][ T7881] netlink: 208 bytes leftover after parsing attributes in process `syz.3.437'. [ 206.031960][ T7881] netlink: 'syz.3.437': attribute type 10 has an invalid length. [ 206.039706][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 206.071195][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 206.250119][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 206.458344][ T30] audit: type=1400 audit(1773514262.897:425): avc: denied { name_connect } for pid=7886 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 206.900074][ T5883] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 207.090019][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 207.110966][ T5883] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 207.120707][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.128812][ T5883] usb 5-1: Product: syz [ 207.134022][ T5883] usb 5-1: Manufacturer: syz [ 207.141197][ T5883] usb 5-1: SerialNumber: syz [ 207.224466][ T5883] usb 5-1: config 0 descriptor?? [ 207.517157][ T29] usb 2-1: USB disconnect, device number 22 [ 207.531453][ T5883] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.536592][ T30] audit: type=1400 audit(1773514263.977:426): avc: denied { listen } for pid=7886 comm="syz.3.439" lport=41591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.547692][ T30] audit: type=1400 audit(1773514263.987:427): avc: denied { accept } for pid=7886 comm="syz.3.439" lport=41591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.555005][ T30] audit: type=1400 audit(1773514263.997:428): avc: denied { read } for pid=7886 comm="syz.3.439" lport=41591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 207.748311][ T30] audit: type=1400 audit(1773514264.187:429): avc: denied { setopt } for pid=7886 comm="syz.3.439" lport=41591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 207.980230][ T30] audit: type=1400 audit(1773514264.397:430): avc: denied { write } for pid=7886 comm="syz.3.439" lport=41591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 208.065319][ T7915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.533705][ T5883] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 208.537983][ T5883] usb 5-1: USB disconnect, device number 26 [ 208.584174][ T7907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.586710][ T51] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 208.586760][ T51] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 208.586778][ T51] Bluetooth: hci4: Dropping invalid advertising data [ 208.586789][ T51] Bluetooth: hci4: Malformed LE Event: 0x02 [ 209.830596][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 209.951688][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 209.986141][ T7949] macvtap1: entered promiscuous mode [ 209.991598][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 209.996835][ T7949] macvtap1: entered allmulticast mode [ 210.004974][ T7949] dummy0: entered promiscuous mode [ 210.011018][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.022061][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 210.129332][ T7949] dummy0: entered allmulticast mode [ 210.146166][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.159174][ T7949] team0: Device macvtap1 failed to register rx_handler [ 210.166206][ T5883] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 210.178050][ T9] usb 3-1: config 0 descriptor?? [ 210.192746][ T7949] dummy0: left allmulticast mode [ 210.210461][ T7949] dummy0: left promiscuous mode [ 210.310123][ T5883] usb 5-1: device descriptor read/64, error -71 [ 210.602380][ T5883] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 210.667307][ T9] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 210.750131][ T5883] usb 5-1: device descriptor read/64, error -71 [ 211.047034][ T5883] usb usb5-port1: attempt power cycle [ 211.579597][ T5883] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 211.607953][ T7961] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 211.616250][ T5883] usb 5-1: device descriptor read/8, error -71 [ 211.782187][ T792] usb 3-1: USB disconnect, device number 26 [ 212.347097][ T5883] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 212.380336][ T5883] usb 5-1: device descriptor read/8, error -71 [ 212.421484][ T7968] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65528 sclass=netlink_xfrm_socket pid=7968 comm=syz.1.459 [ 212.452241][ T7968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.459'. [ 212.503087][ T5883] usb usb5-port1: unable to enumerate USB device [ 213.051956][ T5883] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 213.218206][ T7992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.230406][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 213.257910][ T51] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 213.257940][ T51] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 213.264172][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.265263][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 213.273507][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.288744][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 213.414160][ T5883] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 213.547635][ T8001] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 213.717366][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.762621][ T5883] usb 4-1: Product: syz [ 213.770978][ T5883] usb 4-1: Manufacturer: syz [ 213.775598][ T5883] usb 4-1: SerialNumber: syz [ 213.802091][ T5883] usb 4-1: config 0 descriptor?? [ 214.120944][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.144368][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.334156][ T5883] usb 4-1: USB disconnect, device number 19 [ 214.392614][ T792] libceph: connect (1)[c::]:6789 error -101 [ 214.398668][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 214.407842][ T8018] ceph: No mds server is up or the cluster is laggy [ 214.700327][ T792] libceph: connect (1)[c::]:6789 error -101 [ 214.706414][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 215.034333][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 215.050008][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 215.088057][ T8052] macvtap1: entered promiscuous mode [ 215.109192][ T8052] macvtap1: entered allmulticast mode [ 215.117829][ T8052] dummy0: entered promiscuous mode [ 215.139953][ T792] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 215.242680][ T8052] dummy0: entered allmulticast mode [ 215.249408][ T8052] team0: Device macvtap1 failed to register rx_handler [ 215.296546][ T8052] dummy0: left allmulticast mode [ 215.299915][ T792] usb 2-1: device descriptor read/64, error -71 [ 215.315113][ T8052] dummy0: left promiscuous mode [ 215.950009][ T792] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 216.079876][ T792] usb 2-1: device descriptor read/64, error -71 [ 216.129276][ T8068] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 216.129401][ T8068] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 216.192276][ T792] usb usb2-port1: attempt power cycle [ 216.209758][ T30] audit: type=1400 audit(1773514272.647:431): avc: denied { append } for pid=8075 comm="syz.2.484" name="pfkey" dev="proc" ino=4026533190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 216.497148][ T30] audit: type=1400 audit(1773514272.927:432): avc: denied { getopt } for pid=8082 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 216.529993][ T792] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 216.591204][ T792] usb 2-1: device descriptor read/8, error -71 [ 217.329946][ T792] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 217.370571][ T792] usb 2-1: device descriptor read/8, error -71 [ 217.512145][ T792] usb usb2-port1: unable to enumerate USB device [ 218.391968][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 219.337204][ T8109] macvtap1: entered promiscuous mode [ 219.379732][ T8109] macvtap1: entered allmulticast mode [ 219.515577][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.868674][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.859273][ T792] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 221.176733][ T792] usb 1-1: config 0 has no interfaces? [ 221.182811][ T792] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 221.182828][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.182839][ T792] usb 1-1: Product: syz [ 221.182847][ T792] usb 1-1: Manufacturer: syz [ 221.182856][ T792] usb 1-1: SerialNumber: syz [ 221.184318][ T792] usb 1-1: config 0 descriptor?? [ 221.387961][ T5883] usb 1-1: USB disconnect, device number 14 [ 221.970757][ T5948] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 222.099989][ T5948] usb 4-1: device descriptor read/64, error -71 [ 222.359965][ T5948] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 222.581619][ T5948] usb 4-1: device descriptor read/64, error -71 [ 222.695814][ T8164] input: syz1 as /devices/virtual/input/input20 [ 222.702924][ T5948] usb usb4-port1: attempt power cycle [ 222.827083][ T30] audit: type=1400 audit(1773514279.247:433): avc: denied { append } for pid=8158 comm="syz.0.507" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 222.886631][ T30] audit: type=1400 audit(1773514279.307:434): avc: denied { shutdown } for pid=8158 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.933940][ T8164] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 222.990300][ T8164] netlink: 152 bytes leftover after parsing attributes in process `syz.1.509'. [ 223.041222][ T8164] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 223.219887][ T5948] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 223.260742][ T5948] usb 4-1: device descriptor read/8, error -71 [ 223.959921][ T5948] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 223.990369][ T5948] usb 4-1: device descriptor read/8, error -71 [ 224.022122][ T8178] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 224.089922][ T8178] netlink: 17 bytes leftover after parsing attributes in process `syz.0.511'. [ 224.257325][ T5948] usb usb4-port1: unable to enumerate USB device [ 224.660437][ T29] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 224.820043][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 224.827890][ T29] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 225.024192][ T29] usb 1-1: config 0 has no interface number 0 [ 225.030614][ T29] usb 1-1: config 0 interface 170 has no altsetting 0 [ 225.126956][ T29] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=51.d5 [ 225.141735][ T8197] fuse: Unknown parameter '' [ 225.147588][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.164160][ T8197] fuse: Unknown parameter '' [ 225.168881][ T29] usb 1-1: Product: syz [ 225.189418][ T29] usb 1-1: Manufacturer: syz [ 225.196921][ T29] usb 1-1: SerialNumber: syz [ 225.248588][ T29] usb 1-1: config 0 descriptor?? [ 225.459447][ T8181] GUP no longer grows the stack in syz.0.511 (8181): 200000006000-200000009000 (200000004000) [ 225.470077][ T8181] CPU: 0 UID: 0 PID: 8181 Comm: syz.0.511 Not tainted syzkaller #0 PREEMPT(full) [ 225.470101][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.470113][ T8181] Call Trace: [ 225.470119][ T8181] [ 225.470123][ T8181] dump_stack_lvl+0x100/0x190 [ 225.470146][ T8181] gup_vma_lookup.cold+0x83/0x96 [ 225.470164][ T8181] fixup_user_fault+0x253/0x510 [ 225.470178][ T8181] fault_in_user_writeable+0x70/0xe0 [ 225.470206][ T8181] futex_lock_pi+0x682/0x7b0 [ 225.470230][ T8181] ? __pfx_futex_lock_pi+0x10/0x10 [ 225.470251][ T8181] ? __pfx___futex_wait+0x10/0x10 [ 225.470268][ T8181] ? lockdep_hardirqs_on+0x78/0x100 [ 225.470294][ T8181] ? __pfx_futex_wake_mark+0x10/0x10 [ 225.470315][ T8181] do_futex+0x18a/0x350 [ 225.470327][ T8181] ? __pfx_do_futex+0x10/0x10 [ 225.470344][ T8181] ? __vm_munmap+0x1d2/0x390 [ 225.470377][ T8181] __x64_sys_futex+0x34f/0x4d0 [ 225.470399][ T8181] ? __pfx___x64_sys_futex+0x10/0x10 [ 225.470419][ T8181] do_syscall_64+0x106/0xf80 [ 225.470432][ T8181] ? clear_bhb_loop+0x40/0x90 [ 225.470445][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.470456][ T8181] RIP: 0033:0x7f14e119c799 [ 225.470467][ T8181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.470486][ T8181] RSP: 002b:00007f14e204b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.470503][ T8181] RAX: ffffffffffffffda RBX: 00007f14e1416180 RCX: 00007f14e119c799 [ 225.470514][ T8181] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 225.470525][ T8181] RBP: 00007f14e1232c99 R08: 0000000000000000 R09: 0000000000000082 [ 225.470535][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.470545][ T8181] R13: 00007f14e1416218 R14: 00007f14e1416180 R15: 00007ffde38790d8 [ 225.470561][ T8181] [ 225.475434][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 225.967898][ T8205] binder: 8202:8205 ioctl c0306201 200000000040 returned -14 [ 225.978327][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 226.859899][ T30] audit: type=1400 audit(1773514283.287:435): avc: denied { watch } for pid=8210 comm="syz.2.521" path="/127/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 226.964826][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 226.998442][ T8213] dvmrp9: entered allmulticast mode [ 227.089920][ T978] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 227.257732][ T29] kvaser_usb 1-1:0.170: error -ENODEV: Cannot get usb endpoint(s) [ 227.270261][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 227.289225][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.295193][ T29] usb 1-1: USB disconnect, device number 15 [ 227.352110][ T978] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 227.380329][ T978] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.412683][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 227.442883][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 227.518175][ T978] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 228.112579][ T978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.121980][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.130197][ T978] usb 2-1: SerialNumber: syz [ 228.160496][ T8209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.171926][ T8209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.232258][ T8225] syzkaller0: entered promiscuous mode [ 228.286292][ T8225] syzkaller0: entered allmulticast mode [ 228.317247][ T8225] tipc: Started in network mode [ 228.329375][ T8225] tipc: Node identity 564488810064, cluster identity 4711 [ 228.361010][ T8225] tipc: Enabled bearer , priority 0 [ 228.430144][ T30] audit: type=1400 audit(1773514284.877:436): avc: denied { read } for pid=8229 comm="syz.3.527" lport=58610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.460226][ T8224] tipc: Resetting bearer [ 228.486928][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.511484][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.550138][ T5948] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 228.558668][ T8224] tipc: Disabling bearer [ 228.564063][ T978] usb 2-1: USB disconnect, device number 27 [ 228.690110][ T5948] usb 5-1: device descriptor read/64, error -71 [ 229.059935][ T5948] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 229.085458][ T8246] netlink: 208 bytes leftover after parsing attributes in process `syz.0.531'. [ 229.202277][ T5948] usb 5-1: device descriptor read/64, error -71 [ 229.320145][ T5948] usb usb5-port1: attempt power cycle [ 229.449936][ T8256] sctp: [Deprecated]: syz.3.534 (pid 8256) Use of int in maxseg socket option. [ 229.449936][ T8256] Use struct sctp_assoc_value instead [ 229.700024][ T5948] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 229.722431][ T5948] usb 5-1: device descriptor read/8, error -71 [ 229.979876][ T5948] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 230.290396][ T5948] usb 5-1: device descriptor read/8, error -71 [ 230.400215][ T5948] usb usb5-port1: unable to enumerate USB device [ 230.448405][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075760400: rx timeout, send abort [ 230.956650][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075760400: abort rx timeout. Force session deactivation [ 231.938143][ T8293] syz.4.544 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 232.006120][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 232.096988][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 233.387802][ T8311] vivid-000: kernel_thread() failed [ 233.396640][ T8315] netlink: 'syz.2.546': attribute type 20 has an invalid length. [ 233.697230][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.748449][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.899891][ T792] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 233.980008][ T978] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 233.987617][ T5948] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 234.059916][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 234.072786][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.087947][ T792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 234.096551][ T792] usb 2-1: can't read configurations, error -61 [ 234.250041][ T792] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 234.411383][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 234.424056][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.437118][ T792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 234.451501][ T792] usb 2-1: can't read configurations, error -61 [ 234.462988][ T792] usb usb2-port1: attempt power cycle [ 235.900176][ T792] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 235.912147][ T30] audit: type=1400 audit(1773514292.357:437): avc: denied { name_bind } for pid=8350 comm="syz.3.557" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 235.930621][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 235.937110][ T5948] usb 1-1: device descriptor read/64, error -71 [ 235.945833][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.954955][ T792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 235.962693][ T792] usb 2-1: can't read configurations, error -61 [ 236.100080][ T792] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 236.147885][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 236.153339][ T5883] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 236.174175][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.186514][ T792] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 236.189879][ T5948] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 236.194586][ T792] usb 2-1: can't read configurations, error -61 [ 236.233225][ T792] usb usb2-port1: unable to enumerate USB device [ 236.314594][ T5883] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 236.316864][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 236.322990][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.339508][ T978] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 236.348565][ T978] usb 3-1: config 139 has no interface number 0 [ 236.356163][ T978] usb 3-1: config 139 interface 49 has no altsetting 0 [ 236.368839][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 236.378010][ T978] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 236.389023][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.399579][ T978] usb 3-1: Product: syz [ 236.406122][ T978] usb 3-1: Manufacturer: syz [ 236.410943][ T978] usb 3-1: SerialNumber: syz [ 236.432037][ T5883] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 236.444296][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.449927][ T5948] usb 1-1: device descriptor read/64, error -71 [ 236.472632][ T5883] usb 4-1: Product: syz [ 236.476812][ T5883] usb 4-1: Manufacturer: syz [ 236.489906][ T5883] usb 4-1: SerialNumber: syz [ 236.502061][ T5883] usb 4-1: config 0 descriptor?? [ 236.512728][ T5883] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 236.561539][ T5948] usb usb1-port1: attempt power cycle [ 236.628915][ T978] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 236.663376][ T978] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 236.703164][ T978] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 236.727840][ T8355] dlm: non-version read from control device 8224 [ 236.732332][ T30] audit: type=1400 audit(1773514293.167:438): avc: denied { ioctl } for pid=8353 comm="syz.2.560" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 236.760849][ T8355] dlm: non-version read from control device 8224 [ 236.767187][ T8355] dlm: non-version read from control device 8224 [ 236.780596][ T978] usb 3-1: USB disconnect, device number 27 [ 236.796085][ T5883] usb 4-1: USB disconnect, device number 24 [ 238.071117][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 238.110069][ T30] audit: type=1400 audit(1773514294.507:439): avc: denied { listen } for pid=8377 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.154951][ T30] audit: type=1400 audit(1773514294.507:440): avc: denied { write } for pid=8377 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 238.330267][ T30] audit: type=1400 audit(1773514294.527:441): avc: denied { accept } for pid=8377 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.425707][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 238.445509][ T9] usb 3-1: config 8 has an invalid interface number: 140 but max is 0 [ 238.453744][ T9] usb 3-1: config 8 has no interface number 0 [ 238.469203][ T9] usb 3-1: config 8 interface 140 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 238.499561][ T9] usb 3-1: config 8 interface 140 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.600156][ T30] audit: type=1400 audit(1773514295.037:442): avc: denied { connect } for pid=8381 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.640285][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=e80f, bcdDevice= 1.4c [ 239.045297][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.388613][ T9] usb 3-1: Product: 挮縻ⵡǻ쁙반❿﹊グ롓ҕ骃ິᥢ붱젖☾骢ﺠ뉚䤕閒ꑘ蚟Ź澧覮⾚䬯坨᳼塽▖뽙ᑎﯘ溭ꨶ㒫翌쫹閗䙠Ɠ漖示恈㆖ꨮ蝤▼‼ኽΰ艒㷗룓磇曀鵭릆ꍰ㚋﹀嫠鰡癔㛕ď캾呹箃歙✨ꕟ便沟逩뵷둣饠⒩鉦ሣ谒㍒鑵ᠢ⡙㝢ǩ⁹襁麤↛勣ｧ䑇彖䩭䞬鎨ꐮ麋ꢜﴡᑐ郓쫀 [ 239.524802][ T9] usb 3-1: Manufacturer:   [ 239.539876][ T9] usb 3-1: SerialNumber: ̔ꚓ퍕鄙颓֘ᡕ栞ޯᬭጝْᯑ틯鬯嗹溯鏉녗ⅆ륞ᵤꝓ쥼豱꘩䱕涨瞞扫ဏ鸭ⳟ闳꣆㍤샘ꣲⴡ⹓㵇䬶ױ⫢䫰✭삂ᒞ騊ꉡ敭䢷욕綠뀨타냆㲙삚롟㨌ꎞ荭鿺翰ﰟ性걦溺ሙ埫ﮞ䟌冀㺊영俍诲࣬闧쯧曓羴㝡西洙ᆖᚡ뎱ᒓ픙荴餣챫퉦殲敯꬜ힲ靌蝥쇚턷脛ᲀῂ⠩ [ 239.879081][ T9] ftdi_sio 3-1:8.140: FTDI USB Serial Device converter detected [ 239.905617][ T9] usb 3-1: Detected SIO [ 239.925514][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 239.961750][ T9] usb 3-1: USB disconnect, device number 28 [ 240.011330][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 240.038154][ T9] ftdi_sio 3-1:8.140: device disconnected [ 240.621458][ T30] audit: type=1400 audit(1773514297.067:443): avc: denied { map } for pid=8403 comm="syz.2.569" path="socket:[19536]" dev="sockfs" ino=19536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.721314][ T30] audit: type=1400 audit(1773514297.067:444): avc: denied { read accept } for pid=8403 comm="syz.2.569" path="socket:[19536]" dev="sockfs" ino=19536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.856845][ T8406] netlink: 35 bytes leftover after parsing attributes in process `syz.2.569'. [ 240.876849][ T30] audit: type=1400 audit(1773514297.307:445): avc: denied { listen } for pid=8403 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.385895][ T30] audit: type=1400 audit(1773514297.827:446): avc: denied { create } for pid=8407 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 241.459179][ T30] audit: type=1400 audit(1773514297.857:447): avc: denied { ioctl } for pid=8407 comm="syz.0.570" path="socket:[20594]" dev="sockfs" ino=20594 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 241.735413][ T8416] syzkaller0: entered promiscuous mode [ 241.749893][ T8416] syzkaller0: entered allmulticast mode [ 241.779940][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 241.822409][ T8416] tipc: Started in network mode [ 241.827290][ T8416] tipc: Node identity 3255a29139eb, cluster identity 4711 [ 241.865828][ T8416] tipc: Enabled bearer , priority 10 [ 241.895670][ T8415] tipc: Resetting bearer [ 241.920867][ T9] usb 4-1: device descriptor read/64, error -71 [ 241.950746][ T8415] tipc: Disabling bearer [ 242.160518][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 242.707004][ T8428] fuse: Bad value for 'fd' [ 242.739966][ T9] usb 4-1: device descriptor read/64, error -71 [ 242.850161][ T9] usb usb4-port1: attempt power cycle [ 243.271665][ T8427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.574'. [ 243.290137][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 243.369124][ T8440] misc userio: No port type given on /dev/userio [ 243.559957][ T9] usb 4-1: device descriptor read/8, error -71 [ 243.812999][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 243.850389][ T9] usb 4-1: device descriptor read/8, error -71 [ 243.967650][ T9] usb usb4-port1: unable to enumerate USB device [ 244.078449][ T8455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.145045][ T978] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 244.299887][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 244.306559][ T978] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 244.310789][ T30] audit: type=1400 audit(1773514300.747:448): avc: denied { connect } for pid=8461 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.315292][ T978] usb 2-1: config 1 has no interface number 0 [ 244.408318][ T978] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 244.419778][ T978] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 244.468179][ T978] usb 2-1: config 1 interface 105 has no altsetting 0 [ 244.493012][ T30] audit: type=1400 audit(1773514300.877:449): avc: denied { ioctl } for pid=8461 comm="syz.2.585" path="socket:[20726]" dev="sockfs" ino=20726 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.536353][ T978] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 244.545514][ T978] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 244.553790][ T978] usb 2-1: Product: syz [ 244.558034][ T978] usb 2-1: Manufacturer: syz [ 244.563465][ T978] usb 2-1: SerialNumber: syz [ 244.636926][ T8451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 244.645576][ T8451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.656682][ T30] audit: type=1400 audit(1773514301.987:450): avc: denied { create } for pid=8477 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 245.694898][ T8451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.706808][ T8451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.717478][ T30] audit: type=1400 audit(1773514302.167:451): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 245.857766][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.593'. [ 245.943112][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 245.952026][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 246.126155][ T978] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 246.151872][ T978] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 246.199566][ T978] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 246.321566][ T978] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 22:9f:c7:40:8a:7f [ 246.337570][ T978] usb 2-1: USB disconnect, device number 32 [ 246.345365][ T978] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 247.361442][ T978] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 247.371221][ T978] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 247.386319][ T978] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 247.669067][ T8521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.824911][ T8526] netlink: 208 bytes leftover after parsing attributes in process `syz.1.601'. [ 247.849994][ T8526] netlink: 'syz.1.601': attribute type 10 has an invalid length. [ 247.857821][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 247.900000][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 248.319594][ T29] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.357780][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.379405][ T8536] loop2: detected capacity change from 0 to 7 [ 248.390780][ T8530] syz.1.603 (8530) used greatest stack depth: 19360 bytes left [ 248.408874][ T29] usb 4-1: Product: syz [ 248.429999][ T8536] Dev loop2: unable to read RDB block 7 [ 248.435707][ T29] usb 4-1: Manufacturer: syz [ 248.440929][ T8536] loop2: unable to read partition table [ 248.446657][ T8536] loop2: partition table beyond EOD, truncated [ 248.479950][ T29] usb 4-1: SerialNumber: syz [ 248.489890][ T30] audit: type=1400 audit(1773514304.927:452): avc: denied { ioctl } for pid=8533 comm="syz.4.604" path="socket:[20081]" dev="sockfs" ino=20081 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 248.514900][ T8536] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 248.520740][ T29] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.637712][ T792] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 249.674892][ T792] usb 4-1: ath9k_htc: USB layer deinitialized [ 249.789996][ T9] usb 4-1: USB disconnect, device number 29 [ 250.235008][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.167080][ T8567] binder: 8560:8567 ioctl c0306201 200000000040 returned -14 [ 251.179721][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 254.748075][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 254.762148][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 254.856139][ T8614] trusted_key: encrypted_key: insufficient parameters specified [ 254.867305][ T8614] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 254.875238][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.625'. [ 254.893424][ T8614] batman_adv: batadv0: Adding interface: vlan1 [ 254.910647][ T8614] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.938579][ T8614] batman_adv: batadv0: Interface activated: vlan1 [ 254.968000][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 255.122123][ T9] usb 5-1: device descriptor read/64, error -71 [ 255.235656][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805be93c00: rx timeout, send abort [ 255.379904][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 255.529888][ T9] usb 5-1: device descriptor read/64, error -71 [ 255.648983][ T8624] netlink: 'syz.3.628': attribute type 3 has an invalid length. [ 255.650994][ T9] usb usb5-port1: attempt power cycle [ 255.743997][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805be93c00: abort rx timeout. Force session deactivation [ 256.159775][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 256.402200][ T9] usb 5-1: device descriptor read/8, error -71 [ 257.029294][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805be90c00: rx timeout, send abort [ 257.057318][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 257.082278][ T9] usb 5-1: device descriptor read/8, error -71 [ 257.195708][ T9] usb usb5-port1: unable to enumerate USB device [ 257.209632][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 257.225879][ T30] audit: type=1400 audit(1773514313.667:453): avc: denied { write } for pid=8650 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.364536][ T8661] syzkaller0: entered promiscuous mode [ 257.377217][ T8661] syzkaller0: entered allmulticast mode [ 257.406089][ T8661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.638'. [ 257.460139][ T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 257.625609][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.636134][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.647644][ T29] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.657107][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.665817][ T29] usb 1-1: Product: syz [ 257.673352][ T29] usb 1-1: Manufacturer: syz [ 257.678182][ T29] usb 1-1: SerialNumber: syz [ 257.690580][ T30] audit: type=1400 audit(1773514314.137:454): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 257.938389][ T29] usb 1-1: USB disconnect, device number 19 [ 258.020012][ T8679] netlink: 208 bytes leftover after parsing attributes in process `syz.3.643'. [ 258.029071][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.643'. [ 258.041361][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 259.389474][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 259.534562][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880329e9000: rx timeout, send abort [ 259.612607][ T9] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 259.669893][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 259.709475][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 259.722850][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.741069][ T9] usb 2-1: Product: syz [ 259.750822][ T9] usb 2-1: Manufacturer: syz [ 259.759838][ T9] usb 2-1: SerialNumber: syz [ 259.781390][ T9] usb 2-1: config 0 descriptor?? [ 259.802263][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 260.042769][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880329e9000: abort rx timeout. Force session deactivation [ 260.346490][ T9] gspca_sunplus: reg_r err -110 [ 260.359904][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 260.753963][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'. [ 260.774458][ T8749] macvtap1: entered promiscuous mode [ 260.779787][ T8749] macvtap1: entered allmulticast mode [ 260.785517][ T8749] dummy0: entered promiscuous mode [ 260.798222][ T8749] dummy0: entered allmulticast mode [ 260.809712][ T8749] team0: Device macvtap1 failed to register rx_handler [ 260.828303][ T8749] dummy0: left allmulticast mode [ 260.828403][ T8749] dummy0: left promiscuous mode [ 260.920510][ T8750] hub 9-0:1.0: USB hub found [ 260.949985][ T8750] hub 9-0:1.0: 1 port detected [ 261.237263][ T8755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.657'. [ 261.665580][ T10] usb 2-1: USB disconnect, device number 33 [ 261.750134][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 261.962489][ T8783] netlink: 80 bytes leftover after parsing attributes in process `syz.1.665'. [ 262.001693][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.013655][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.024521][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.039765][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.052511][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.067585][ T9] usb 1-1: config 0 descriptor?? [ 262.299893][ T5883] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 262.449916][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 262.704470][ T9] hid_parser_main: 2 callbacks suppressed [ 262.704485][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.718223][ T8767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.661'. [ 262.728638][ T5883] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 262.738290][ T5883] usb 3-1: config 1 has no interface number 0 [ 262.738557][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.749871][ T5883] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 262.793936][ T5883] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 262.808543][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.821737][ T5883] usb 3-1: config 1 interface 105 has no altsetting 0 [ 262.824384][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.842665][ T5883] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 262.861370][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.870921][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 262.883567][ T30] audit: type=1400 audit(1773514319.317:455): avc: denied { create } for pid=8766 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 262.884848][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.913943][ T5883] usb 3-1: Product: syz [ 262.915849][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.928364][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.947503][ T5883] usb 3-1: Manufacturer: syz [ 262.949585][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.959745][ T5883] usb 3-1: SerialNumber: syz [ 262.970511][ T30] audit: type=1400 audit(1773514319.317:456): avc: denied { connect } for pid=8766 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 262.971941][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 262.997825][ T8787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.007861][ T8787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.036275][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 263.047014][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 263.122228][ T30] audit: type=1400 audit(1773514319.327:457): avc: denied { bind } for pid=8766 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 263.208708][ T9] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 263.252299][ T9] usb 1-1: USB disconnect, device number 20 [ 263.284413][ T30] audit: type=1400 audit(1773514319.727:458): avc: denied { setopt } for pid=8794 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.315220][ T8793] fido_id[8793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 263.428458][ T8799] macvtap1: entered promiscuous mode [ 263.434207][ T8799] macvtap1: entered allmulticast mode [ 263.440660][ T8787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.448145][ T8787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.455953][ T8799] dummy0: entered promiscuous mode [ 263.461090][ T8799] dummy0: entered allmulticast mode [ 263.467335][ T8799] team0: Device macvtap1 failed to register rx_handler [ 263.475009][ T8799] dummy0: left allmulticast mode [ 263.480531][ T8799] dummy0: left promiscuous mode [ 263.856944][ T5883] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 264.057432][ T5883] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 264.078765][ T5883] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 264.097347][ T5883] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:c3:18:2b:d6:9e [ 264.124374][ T5883] usb 3-1: USB disconnect, device number 29 [ 264.146074][ T5883] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 264.220899][ T5883] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.236032][ T5883] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.246537][ T5883] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 264.710758][ T8829] netlink: 104 bytes leftover after parsing attributes in process `syz.4.679'. [ 264.728464][ T30] audit: type=1400 audit(1773514321.157:459): avc: denied { nlmsg_read } for pid=8824 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.083779][ T30] audit: type=1400 audit(1773514321.527:460): avc: denied { ioctl } for pid=8831 comm="syz.0.680" path="socket:[21581]" dev="sockfs" ino=21581 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 265.311133][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 265.325844][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 265.340365][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 265.365082][ T8841] syz.0.680 uses old SIOCAX25GETINFO [ 265.769916][ T30] audit: type=1326 audit(1773514321.807:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e119c799 code=0x7ffc0000 [ 265.857465][ T8837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=529 sclass=netlink_route_socket pid=8837 comm=syz.2.682 [ 265.888880][ T8840] infiniband syz2: set active [ 265.891689][ T8837] ptrace attach of "./syz-executor exec"[8838] was attempted by "./syz-executor exec"[8837] [ 265.894011][ T8840] infiniband syz2: added vxcan1 [ 265.915573][ T8840] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 265.918413][ T8840] infiniband syz2: Couldn't open port 1 [ 265.954551][ T8840] RDS/IB: syz2: added [ 265.958728][ T8840] smc: adding ib device syz2 with port count 1 [ 265.964973][ T8840] smc: ib device syz2 port 1 has no pnetid [ 265.972596][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 265.983331][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 267.020925][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 267.079663][ T30] audit: type=1326 audit(1773514321.807:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e119c799 code=0x7ffc0000 [ 267.169869][ T30] audit: type=1326 audit(1773514321.807:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f14e119c799 code=0x7ffc0000 [ 267.234410][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 267.319517][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 267.405611][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 267.489775][ T8840] vxcan1 speed is unknown, defaulting to 1000 [ 267.722999][ T30] audit: type=1326 audit(1773514321.807:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e119c799 code=0x7ffc0000 [ 267.802165][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 268.491995][ T8859] ubi31: attaching mtd0 [ 268.497422][ T8859] ubi31: scanning is finished [ 268.502111][ T8859] ubi31: empty MTD device detected [ 269.135110][ T8859] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 269.634046][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 270.127162][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 270.160282][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.191311][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.228394][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 270.259869][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.287535][ T10] usb 2-1: config 0 descriptor?? [ 271.071774][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 271.071786][ T30] audit: type=1400 audit(1773514327.507:485): avc: denied { bind } for pid=8899 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.113144][ T30] audit: type=1400 audit(1773514328.557:486): avc: denied { ioctl } for pid=8924 comm="syz.0.701" path="socket:[21676]" dev="sockfs" ino=21676 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 272.140487][ T8923] loop5: detected capacity change from 0 to 7 [ 272.529983][ T792] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 272.749115][ T792] usb 4-1: config 0 has no interfaces? [ 272.825476][ T792] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.864724][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.916522][ T792] usb 4-1: Product: syz [ 272.948821][ T792] usb 4-1: Manufacturer: syz [ 272.981974][ T792] usb 4-1: SerialNumber: syz [ 272.993679][ T5869] usb 2-1: USB disconnect, device number 34 [ 272.996916][ T8923] Dev loop5: unable to read RDB block 7 [ 273.007296][ T8923] loop5: unable to read partition table [ 273.016407][ T8923] loop5: partition table beyond EOD, truncated [ 273.024865][ T8923] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 273.055693][ T792] usb 4-1: config 0 descriptor?? [ 273.090927][ T8934] fuse: Unknown parameter 'euid<00000000000000000000' [ 273.185432][ T8937] netlink: 208 bytes leftover after parsing attributes in process `syz.4.702'. [ 273.692426][ T5948] usb 4-1: USB disconnect, device number 30 [ 273.693458][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 273.708434][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 273.816719][ T8945] IPVS: length: 24 != 24159191448 [ 273.904801][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.702'. [ 274.427576][ T8949] batman_adv: batadv0: Adding interface: dummy0 [ 274.434408][ T8949] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.459729][ T8949] batman_adv: batadv0: Interface activated: dummy0 [ 274.486282][ T30] audit: type=1400 audit(1773514330.927:487): avc: denied { append } for pid=8946 comm="syz.2.705" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 274.747349][ T8955] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 274.747349][ T8955] program syz.1.707 not setting count and/or reply_len properly [ 274.972761][ T8960] xt_hashlimit: size too large, truncated to 1048576 [ 275.061983][ T30] audit: type=1400 audit(1773514331.497:488): avc: denied { append } for pid=8957 comm="syz.3.710" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 275.220013][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 275.380898][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 275.391323][ T9] usb 2-1: config 8 has an invalid interface number: 140 but max is 0 [ 275.399866][ T9] usb 2-1: config 8 has no interface number 0 [ 275.412635][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=e80f, bcdDevice= 1.4c [ 275.421903][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.434723][ T9] usb 2-1: Product: 挮縻ⵡǻ쁙반❿﹊グ롓ҕ骃ິᥢ붱젖☾骢ﺠ뉚䤕閒ꑘ蚟Ź澧覮⾚䬯坨᳼塽▖뽙ᑎﯘ溭ꨶ㒫翌쫹閗䙠Ɠ漖示恈㆖ꨮ蝤▼‼ኽΰ艒㷗룓磇曀鵭릆ꍰ㚋﹀嫠鰡癔㛕ď캾呹箃歙✨ꕟ便沟逩뵷둣饠⒩鉦ሣ谒㍒鑵ᠢ⡙㝢ǩ⁹襁麤↛勣ｧ䑇彖䩭䞬鎨ꐮ麋ꢜﴡᑐ郓쫀 [ 275.776408][ T9] usb 2-1: Manufacturer:   [ 275.786448][ T9] usb 2-1: SerialNumber: ̔ꚓ퍕鄙颓֘ᡕ栞ޯᬭጝْᯑ틯鬯嗹溯鏉녗ⅆ륞ᵤꝓ쥼豱꘩䱕涨瞞扫ဏ鸭ⳟ闳꣆㍤샘ꣲⴡ⹓㵇䬶ױ⫢䫰✭삂ᒞ騊ꉡ敭䢷욕綠뀨타냆㲙삚롟㨌ꎞ荭鿺翰ﰟ性걦溺ሙ埫ﮞ䟌冀㺊영俍诲࣬闧쯧曓羴㝡西洙ᆖᚡ뎱ᒓ픙荴餣챫퉦殲敯꬜ힲ靌蝥쇚턷脛ᲀῂ⠩ [ 275.829347][ T8963] orangefs_mount: mount request failed with -4 [ 275.892124][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c5b3000: rx timeout, send abort [ 276.058402][ T9] ftdi_sio 2-1:8.140: FTDI USB Serial Device converter detected [ 276.066946][ T9] usb 2-1: Detected SIO [ 276.079376][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.115613][ T9] usb 2-1: USB disconnect, device number 35 [ 276.140525][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 276.160845][ T9] ftdi_sio 2-1:8.140: device disconnected [ 276.400446][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c5b3000: abort rx timeout. Force session deactivation [ 276.709943][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 276.797567][ T8991] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 276.891810][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.718'. [ 276.903361][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 276.930790][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.941032][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.960786][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.996141][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.024068][ T30] audit: type=1400 audit(1773514333.467:489): avc: denied { getopt } for pid=9004 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.081396][ T9] usb 4-1: config 0 descriptor?? [ 277.459883][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 277.636913][ T9015] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 277.645862][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 277.656903][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 277.667871][ T9015] ip6t_REJECT: ECHOREPLY is not supported [ 277.675352][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.684767][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.693459][ T9] usb 3-1: Product: syz [ 277.698386][ T9] usb 3-1: Manufacturer: syz [ 277.747750][ T9] usb 3-1: SerialNumber: syz [ 277.981303][ T9] usb 3-1: 0:2 : does not exist [ 278.184469][ T9] hub 3-1:1.1: Invalid hub with more than one config or interface [ 278.207378][ T9] hub 3-1:1.1: probe with driver hub failed with error -22 [ 278.291022][ T9] usb 3-1: USB disconnect, device number 30 [ 278.526357][ T9032] syzkaller0: entered promiscuous mode [ 278.532679][ T9032] syzkaller0: entered allmulticast mode [ 278.588705][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.622362][ T9032] tipc: Enabled bearer , priority 0 [ 278.642806][ T9031] tipc: Resetting bearer [ 279.038785][ T9031] tipc: Disabling bearer [ 279.165441][ T9046] sctp: [Deprecated]: syz.0.731 (pid 9046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.165441][ T9046] Use struct sctp_sack_info instead [ 279.364255][ T9049] loop5: detected capacity change from 0 to 7 [ 280.065160][ T9049] Dev loop5: unable to read RDB block 7 [ 280.070819][ T9049] loop5: unable to read partition table [ 280.076610][ T9049] loop5: partition table beyond EOD, truncated [ 280.082859][ T9049] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 280.218315][ T9] usb 4-1: USB disconnect, device number 31 [ 280.278000][ T5948] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 280.355411][ T30] audit: type=1400 audit(1773514336.797:490): avc: denied { append } for pid=9063 comm="syz.3.736" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 280.380806][ T9064] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 280.540668][ T5948] usb 1-1: device descriptor read/64, error -71 [ 280.547005][ T978] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 280.740350][ T978] usb 2-1: device descriptor read/64, error -71 [ 280.866489][ T5948] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 280.916759][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.944258][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.954700][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.973771][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.983741][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.994559][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.010020][ T978] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 281.012344][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.017670][ T5948] usb 1-1: device descriptor read/64, error -71 [ 281.028082][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.058586][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.076144][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.130278][ T5948] usb usb1-port1: attempt power cycle [ 281.149861][ T978] usb 2-1: device descriptor read/64, error -71 [ 281.150053][ T792] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 281.280376][ T978] usb usb2-port1: attempt power cycle [ 281.316784][ T30] audit: type=1400 audit(1773514337.757:491): avc: denied { mount } for pid=9081 comm="syz.2.741" name="/" dev="ramfs" ino=22975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 281.317325][ T792] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.350708][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.362533][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 281.373349][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.389367][ T792] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.398545][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.460265][ T792] usb 5-1: config 0 descriptor?? [ 281.499969][ T5948] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 281.540578][ T5948] usb 1-1: device descriptor read/8, error -71 [ 281.640008][ T978] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 281.662942][ T978] usb 2-1: device descriptor read/8, error -71 [ 281.692686][ T792] usbhid 5-1:0.0: can't add hid device: -71 [ 281.698640][ T792] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 281.735458][ T792] usb 5-1: USB disconnect, device number 40 [ 281.875566][ T5948] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 281.903505][ T5948] usb 1-1: device descriptor read/8, error -71 [ 282.011419][ T978] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 282.019650][ T5948] usb usb1-port1: unable to enumerate USB device [ 282.030478][ T978] usb 2-1: device descriptor read/8, error -71 [ 282.150214][ T978] usb usb2-port1: unable to enumerate USB device [ 282.549881][ T5948] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 282.701554][ T5948] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.715979][ T5948] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 282.729086][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.740608][ T5948] usb 5-1: config 0 descriptor?? [ 283.483229][ T9117] syz.0.748 (9117): drop_caches: 2 [ 283.492969][ T9] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 283.512709][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.542317][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.591689][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.621984][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.634277][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.667995][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.733600][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.833453][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.855193][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.866661][ T9] usb 4-1: string descriptor 0 read error: -22 [ 283.873243][ T9] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f2.d0 [ 283.880993][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.882761][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.902620][ T9] usb 4-1: config 0 descriptor?? [ 283.916276][ T9] empeg 4-1:0.0: empeg converter detected [ 283.923773][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.939672][ T9] usb 4-1: active config #0 != 1 ?? [ 284.126574][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.152147][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.660705][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.685450][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.695547][ T5948] usbhid 5-1:0.0: can't add hid device: -71 [ 284.714697][ T5948] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 284.735349][ T5948] usb 5-1: USB disconnect, device number 41 [ 284.877536][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.055855][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.426690][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.466158][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.478391][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.488662][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.515669][ T5948] usb 4-1: USB disconnect, device number 32 [ 285.957274][ T30] audit: type=1400 audit(1773514341.405:492): avc: denied { setopt } for pid=9145 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.424251][ T30] audit: type=1400 audit(1773514341.425:493): avc: denied { getopt } for pid=9145 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.515732][ T30] audit: type=1400 audit(1773514341.965:494): avc: denied { mounton } for pid=9150 comm="syz.0.759" path="/proc/578/task" dev="proc" ino=23193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 286.563661][ T9154] netlink: 'syz.3.758': attribute type 7 has an invalid length. [ 286.639924][ T30] audit: type=1400 audit(1773514342.075:495): avc: denied { associate } for pid=9155 comm="syz.1.760" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.706630][ T9158] macvtap1: entered promiscuous mode [ 286.780129][ T9158] macvtap1: entered allmulticast mode [ 286.830459][ T9158] dummy0: entered promiscuous mode [ 286.835900][ T9158] dummy0: entered allmulticast mode [ 287.325669][ T9158] team0: Device macvtap1 failed to register rx_handler [ 287.355732][ T9158] dummy0: left allmulticast mode [ 287.380137][ T9158] dummy0: left promiscuous mode [ 287.386415][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 287.398987][ T9175] binder: 9162:9175 ioctl c0306201 200000000040 returned -14 [ 287.466415][ T9171] vxcan1 speed is unknown, defaulting to 1000 [ 289.743929][ T30] audit: type=1400 audit(1773514345.195:496): avc: denied { map } for pid=9198 comm="syz.3.772" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.801782][ T30] audit: type=1400 audit(1773514345.215:497): avc: denied { execute } for pid=9198 comm="syz.3.772" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.912789][ T9206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9206 comm=syz.2.775 [ 289.975490][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 290.169866][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 290.186334][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 290.200113][ T5869] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 290.203953][ T9] usb 2-1: config 1 has no interface number 0 [ 290.236389][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 290.257399][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 290.278316][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 290.295492][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 290.305738][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 290.322576][ T9] usb 2-1: Product: syz [ 290.329913][ T5869] usb 5-1: device descriptor read/64, error -71 [ 290.331279][ T9] usb 2-1: Manufacturer: syz [ 290.350997][ T9] usb 2-1: SerialNumber: syz [ 290.366127][ T9192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.373701][ T9192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.579859][ T5869] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 290.720317][ T5869] usb 5-1: device descriptor read/64, error -71 [ 290.797956][ T9192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.805929][ T9192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.841391][ T792] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 290.849583][ T5869] usb usb5-port1: attempt power cycle [ 290.999928][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 291.006630][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.017813][ T792] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 291.027008][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.040929][ T792] usb 1-1: config 0 descriptor?? [ 291.200756][ T5869] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 291.220386][ T5869] usb 5-1: device descriptor read/8, error -71 [ 291.469853][ T5869] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 291.478051][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 291.489253][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 291.490260][ T5869] usb 5-1: device descriptor read/8, error -71 [ 291.514592][ T9] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 06:bf:4a:e2:2c:d9 [ 291.530726][ T9] usb 2-1: USB disconnect, device number 40 [ 291.538427][ T9] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 291.581443][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 291.590993][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 291.600488][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 291.663896][ T5869] usb usb5-port1: unable to enumerate USB device [ 291.789317][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 291.801368][ T9236] binder: 9233:9236 ioctl c0306201 200000000040 returned -11 [ 291.856943][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 291.870771][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 291.890067][ T792] usb 1-1: USB disconnect, device number 25 [ 292.519878][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 292.689844][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 292.701156][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.715395][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.733210][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 292.742739][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.768298][ T9] usb 2-1: config 0 descriptor?? [ 292.799421][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 292.891821][ T30] audit: type=1400 audit(1773514348.345:498): avc: denied { listen } for pid=9253 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 293.089972][ T792] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 293.262399][ T792] usb 1-1: Using ep0 maxpacket: 32 [ 293.538199][ T5883] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 293.550851][ T792] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 293.565551][ T792] usb 1-1: config 0 has no interface number 0 [ 293.575712][ T792] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.585714][ T792] usb 1-1: config 0 interface 89 has no altsetting 0 [ 293.594338][ T792] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 293.603777][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.603812][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033c37c00: rx timeout, send abort [ 293.622339][ T792] usb 1-1: Product: syz [ 293.626554][ T792] usb 1-1: Manufacturer: syz [ 293.631439][ T792] usb 1-1: SerialNumber: syz [ 293.637497][ T9263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.648124][ T792] usb 1-1: config 0 descriptor?? [ 293.657480][ T792] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 293.667258][ T792] em28xx 1-1:0.89: Video interface 89 found: [ 294.103850][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033c37c00: abort rx timeout. Force session deactivation [ 294.295141][ T792] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 294.355999][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 294.398646][ T9275] fuse: blksize only supported for fuseblk [ 294.404707][ T30] audit: type=1400 audit(1773514349.855:499): avc: denied { bind } for pid=9269 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 294.579924][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 295.333714][ T9289] bond0: entered promiscuous mode [ 295.349894][ T9289] bond_slave_0: entered promiscuous mode [ 295.381012][ T9289] bond_slave_1: entered promiscuous mode [ 295.386936][ T9289] team0: entered promiscuous mode [ 295.392150][ T9289] team_slave_0: entered promiscuous mode [ 295.402424][ T9289] team_slave_1: entered promiscuous mode [ 295.419080][ T9289] batadv0: entered promiscuous mode [ 295.430682][ T9289] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 295.462991][ T9289] bond0: left promiscuous mode [ 295.480539][ T9289] bond_slave_0: left promiscuous mode [ 295.881780][ T792] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 295.890768][ T792] em28xx 1-1:0.89: board has no eeprom [ 295.915421][ T9289] bond_slave_1: left promiscuous mode [ 295.941086][ T9289] team0: left promiscuous mode [ 295.955790][ T9289] team_slave_0: left promiscuous mode [ 295.961436][ T792] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 295.974414][ T792] em28xx 1-1:0.89: analog set to bulk mode. [ 296.069342][ T5869] em28xx 1-1:0.89: Registering V4L2 extension [ 296.083910][ T9289] team_slave_1: left promiscuous mode [ 296.158416][ T9289] batadv0: left promiscuous mode [ 296.223078][ T9] usb 1-1: USB disconnect, device number 26 [ 296.233010][ T9] em28xx 1-1:0.89: Disconnecting em28xx [ 296.251633][ T5869] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 296.283591][ T5948] usb 2-1: USB disconnect, device number 41 [ 296.310063][ T5869] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 296.317114][ T5869] em28xx 1-1:0.89: No AC97 audio processor [ 296.501110][ T5869] usb 1-1: Decoder not found [ 296.505735][ T5869] em28xx 1-1:0.89: failed to create media graph [ 296.513285][ T30] audit: type=1400 audit(1773514351.925:500): avc: denied { setopt } for pid=9312 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.541639][ T9315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.548846][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 296.556078][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 296.563269][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 297.031915][ T5869] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 297.053292][ T5869] em28xx 1-1:0.89: Registering snapshot button... [ 297.067757][ T9318] ================================================================== [ 297.075808][ T9318] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 297.083255][ T9318] Read of size 8 at addr ffff888034f80748 by task v4l_id/9318 [ 297.090689][ T9318] [ 297.093002][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 297.093020][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.093028][ T9318] Call Trace: [ 297.093033][ T9318] [ 297.093039][ T9318] dump_stack_lvl+0x100/0x190 [ 297.093064][ T9318] print_report+0x156/0x4c9 [ 297.093083][ T9318] ? __virt_addr_valid+0x81/0x620 [ 297.093104][ T9318] ? __phys_addr+0xe8/0x180 [ 297.093123][ T9318] ? v4l2_fh_init+0x27d/0x2c0 [ 297.093140][ T9318] kasan_report+0xdf/0x1e0 [ 297.093154][ T9318] ? v4l2_fh_init+0x27d/0x2c0 [ 297.093173][ T9318] v4l2_fh_init+0x27d/0x2c0 [ 297.093190][ T9318] v4l2_fh_open+0x64/0xa0 [ 297.093207][ T9318] em28xx_v4l2_open+0x11e/0x570 [ 297.093226][ T9318] v4l2_open+0x1d2/0x490 [ 297.093249][ T9318] ? __pfx_v4l2_open+0x10/0x10 [ 297.093267][ T9318] chrdev_open+0x234/0x6a0 [ 297.093281][ T9318] ? __pfx_chrdev_open+0x10/0x10 [ 297.093295][ T9318] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 297.093311][ T9318] ? security_file_open+0x2e/0x1e0 [ 297.093333][ T9318] do_dentry_open+0x6d8/0x1660 [ 297.093354][ T9318] ? __pfx_chrdev_open+0x10/0x10 [ 297.093369][ T9318] vfs_open+0x82/0x3f0 [ 297.093386][ T9318] path_openat+0x208c/0x31a0 [ 297.093402][ T9318] ? rcu_is_watching+0x12/0xc0 [ 297.093417][ T9318] ? trace_sched_exit_tp+0x13a/0x180 [ 297.093438][ T9318] ? __pfx_path_openat+0x10/0x10 [ 297.093454][ T9318] do_file_open+0x20e/0x430 [ 297.093469][ T9318] ? __pfx_do_file_open+0x10/0x10 [ 297.093483][ T9318] ? __pfx___schedule+0x10/0x10 [ 297.093504][ T9318] ? alloc_fd+0x476/0x790 [ 297.093519][ T9318] ? do_getname+0x191/0x390 [ 297.093537][ T9318] do_sys_openat2+0x10d/0x1e0 [ 297.093553][ T9318] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.093572][ T9318] __x64_sys_openat+0x12d/0x210 [ 297.093589][ T9318] ? __pfx___x64_sys_openat+0x10/0x10 [ 297.093605][ T9318] ? __pfx___schedule+0x10/0x10 [ 297.093621][ T9318] ? do_user_addr_fault+0x8d6/0x12f0 [ 297.093637][ T9318] do_syscall_64+0x106/0xf80 [ 297.093654][ T9318] ? clear_bhb_loop+0x40/0x90 [ 297.093670][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.093684][ T9318] RIP: 0033:0x7f8c758a7407 [ 297.093695][ T9318] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 297.093709][ T9318] RSP: 002b:00007fffafeadb40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 297.093723][ T9318] RAX: ffffffffffffffda RBX: 00007f8c7600e880 RCX: 00007f8c758a7407 [ 297.093733][ T9318] RDX: 0000000000000000 RSI: 00007fffafeaef1c RDI: ffffffffffffff9c [ 297.093742][ T9318] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 297.093750][ T9318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 297.093758][ T9318] R13: 00007fffafeadd90 R14: 00007f8c76175000 R15: 000055b555c2a4d8 [ 297.093771][ T9318] [ 297.093776][ T9318] [ 297.372739][ T9318] Allocated by task 5869: [ 297.377054][ T9318] kasan_save_stack+0x30/0x50 [ 297.381729][ T9318] kasan_save_track+0x14/0x30 [ 297.386394][ T9318] __kasan_kmalloc+0xaa/0xb0 [ 297.390990][ T9318] em28xx_v4l2_init.cold+0x94/0x3503 [ 297.396264][ T9318] em28xx_init_extension+0x13a/0x200 [ 297.401535][ T9318] request_module_async+0x61/0x80 [ 297.406545][ T9318] process_one_work+0xa23/0x19a0 [ 297.411458][ T9318] worker_thread+0x5ef/0xe50 [ 297.416042][ T9318] kthread+0x370/0x450 [ 297.420090][ T9318] ret_from_fork+0x754/0xd80 [ 297.424656][ T9318] ret_from_fork_asm+0x1a/0x30 [ 297.429400][ T9318] [ 297.431699][ T9318] Freed by task 5869: [ 297.435651][ T9318] kasan_save_stack+0x30/0x50 [ 297.440311][ T9318] kasan_save_track+0x14/0x30 [ 297.444969][ T9318] kasan_save_free_info+0x3b/0x70 [ 297.449973][ T9318] __kasan_slab_free+0x5f/0x80 [ 297.454719][ T9318] kfree+0x1f6/0x6b0 [ 297.458596][ T9318] kref_put.isra.0+0x56/0x90 [ 297.463169][ T9318] em28xx_v4l2_init.cold+0x280/0x3503 [ 297.468523][ T9318] em28xx_init_extension+0x13a/0x200 [ 297.473790][ T9318] request_module_async+0x61/0x80 [ 297.478797][ T9318] process_one_work+0xa23/0x19a0 [ 297.483712][ T9318] worker_thread+0x5ef/0xe50 [ 297.488278][ T9318] kthread+0x370/0x450 [ 297.492320][ T9318] ret_from_fork+0x754/0xd80 [ 297.496886][ T9318] ret_from_fork_asm+0x1a/0x30 [ 297.501634][ T9318] [ 297.503943][ T9318] The buggy address belongs to the object at ffff888034f80000 [ 297.503943][ T9318] which belongs to the cache kmalloc-8k of size 8192 [ 297.517974][ T9318] The buggy address is located 1864 bytes inside of [ 297.517974][ T9318] freed 8192-byte region [ffff888034f80000, ffff888034f82000) [ 297.531926][ T9318] [ 297.534236][ T9318] The buggy address belongs to the physical page: [ 297.540637][ T9318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34f80 [ 297.549375][ T9318] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 297.557846][ T9318] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 297.565364][ T9318] page_type: f5(slab) [ 297.569326][ T9318] raw: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 297.577898][ T9318] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 297.586457][ T9318] head: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 297.595104][ T9318] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 297.603749][ T9318] head: 00fff00000000003 ffffea0000d3e001 00000000ffffffff 00000000ffffffff [ 297.612409][ T9318] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 297.621050][ T9318] page dumped because: kasan: bad access detected [ 297.627451][ T9318] page_owner tracks the page as allocated [ 297.633138][ T9318] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5792, tgid 5792 (syz-executor), ts 62540227268, free_ts 56033981665 [ 297.654471][ T9318] post_alloc_hook+0x153/0x170 [ 297.659221][ T9318] get_page_from_freelist+0x111d/0x3140 [ 297.664748][ T9318] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 297.670623][ T9318] new_slab+0xa6/0x6b0 [ 297.674670][ T9318] refill_objects+0x26b/0x400 [ 297.679326][ T9318] __pcs_replace_empty_main+0x43f/0x660 [ 297.684852][ T9318] __kmalloc_cache_noprof+0x493/0x6f0 [ 297.690205][ T9318] cgroup1_get_tree+0xd96/0x1620 [ 297.695122][ T9318] vfs_get_tree+0x92/0x320 [ 297.699528][ T9318] path_mount+0x7d0/0x23d0 [ 297.703925][ T9318] __x64_sys_mount+0x293/0x310 [ 297.708668][ T9318] do_syscall_64+0x106/0xf80 [ 297.713238][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.719134][ T9318] page last free pid 5782 tgid 5782 stack trace: [ 297.725432][ T9318] __free_frozen_pages+0x7e1/0x10d0 [ 297.730609][ T9318] qlist_free_all+0x47/0xe0 [ 297.735094][ T9318] kasan_quarantine_reduce+0x1a0/0x1f0 [ 297.740534][ T9318] __kasan_slab_alloc+0x69/0x90 [ 297.745382][ T9318] kmem_cache_alloc_noprof+0x241/0x6e0 [ 297.750821][ T9318] mas_alloc_nodes+0x280/0x390 [ 297.755562][ T9318] mas_preallocate+0x39c/0xf10 [ 297.760308][ T9318] commit_merge+0x3e3/0xbd0 [ 297.764790][ T9318] vma_expand+0x7df/0xcf0 [ 297.769097][ T9318] vma_merge_new_range+0x2ce/0xa30 [ 297.774188][ T9318] __mmap_region+0x900/0x29e0 [ 297.778844][ T9318] mmap_region+0x180/0x3e0 [ 297.783240][ T9318] do_mmap+0xc63/0x12f0 [ 297.787374][ T9318] vm_mmap_pgoff+0x29e/0x470 [ 297.791942][ T9318] ksys_mmap_pgoff+0x3c8/0x650 [ 297.796680][ T9318] __x64_sys_mmap+0x125/0x190 [ 297.801333][ T9318] [ 297.803631][ T9318] Memory state around the buggy address: [ 297.809234][ T9318] ffff888034f80600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.817275][ T9318] ffff888034f80680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.825309][ T9318] >ffff888034f80700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.833342][ T9318] ^ [ 297.839725][ T9318] ffff888034f80780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.847760][ T9318] ffff888034f80800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.855793][ T9318] ================================================================== [ 297.880501][ T5869] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input26 [ 297.963298][ T5869] em28xx 1-1:0.89: Remote control support is not available for this card. [ 298.000181][ T9] em28xx 1-1:0.89: Closing input extension [ 298.015892][ T9] em28xx 1-1:0.89: Deregistering snapshot button [ 298.111327][ T9318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 298.118536][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 298.127462][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.137497][ T9318] Call Trace: [ 298.140759][ T9318] [ 298.143669][ T9318] dump_stack_lvl+0x100/0x190 [ 298.148335][ T9318] vpanic+0x552/0x970 [ 298.152296][ T9318] ? __pfx_vpanic+0x10/0x10 [ 298.156779][ T9318] ? v4l2_fh_init+0x27d/0x2c0 [ 298.161438][ T9318] panic+0xd1/0xe0 [ 298.165137][ T9318] ? __pfx_panic+0x10/0x10 [ 298.169531][ T9318] ? v4l2_fh_init+0x27d/0x2c0 [ 298.174194][ T9318] ? preempt_schedule_common+0x42/0xc0 [ 298.179635][ T9318] ? check_panic_on_warn+0x1f/0x90 [ 298.184733][ T9318] check_panic_on_warn.cold+0x19/0x34 [ 298.190086][ T9318] end_report.part.0+0x3a/0x90 [ 298.194833][ T9318] kasan_report.cold+0xe/0x18 [ 298.199496][ T9318] ? v4l2_fh_init+0x27d/0x2c0 [ 298.204158][ T9318] v4l2_fh_init+0x27d/0x2c0 [ 298.208644][ T9318] v4l2_fh_open+0x64/0xa0 [ 298.212964][ T9318] em28xx_v4l2_open+0x11e/0x570 [ 298.217797][ T9318] v4l2_open+0x1d2/0x490 [ 298.222022][ T9318] ? __pfx_v4l2_open+0x10/0x10 [ 298.226768][ T9318] chrdev_open+0x234/0x6a0 [ 298.231170][ T9318] ? __pfx_chrdev_open+0x10/0x10 [ 298.236085][ T9318] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 298.242394][ T9318] ? security_file_open+0x2e/0x1e0 [ 298.247491][ T9318] do_dentry_open+0x6d8/0x1660 [ 298.252241][ T9318] ? __pfx_chrdev_open+0x10/0x10 [ 298.257162][ T9318] vfs_open+0x82/0x3f0 [ 298.261212][ T9318] path_openat+0x208c/0x31a0 [ 298.265783][ T9318] ? rcu_is_watching+0x12/0xc0 [ 298.270527][ T9318] ? trace_sched_exit_tp+0x13a/0x180 [ 298.275797][ T9318] ? __pfx_path_openat+0x10/0x10 [ 298.280715][ T9318] do_file_open+0x20e/0x430 [ 298.285196][ T9318] ? __pfx_do_file_open+0x10/0x10 [ 298.290198][ T9318] ? __pfx___schedule+0x10/0x10 [ 298.295035][ T9318] ? alloc_fd+0x476/0x790 [ 298.299345][ T9318] ? do_getname+0x191/0x390 [ 298.303832][ T9318] do_sys_openat2+0x10d/0x1e0 [ 298.308489][ T9318] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.313670][ T9318] __x64_sys_openat+0x12d/0x210 [ 298.318515][ T9318] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.323883][ T9318] ? __pfx___schedule+0x10/0x10 [ 298.328890][ T9318] ? do_user_addr_fault+0x8d6/0x12f0 [ 298.334176][ T9318] do_syscall_64+0x106/0xf80 [ 298.338761][ T9318] ? clear_bhb_loop+0x40/0x90 [ 298.343428][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.349316][ T9318] RIP: 0033:0x7f8c758a7407 [ 298.353721][ T9318] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 298.373314][ T9318] RSP: 002b:00007fffafeadb40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 298.381712][ T9318] RAX: ffffffffffffffda RBX: 00007f8c7600e880 RCX: 00007f8c758a7407 [ 298.389662][ T9318] RDX: 0000000000000000 RSI: 00007fffafeaef1c RDI: ffffffffffffff9c [ 298.397618][ T9318] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 298.405577][ T9318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 298.413529][ T9318] R13: 00007fffafeadd90 R14: 00007f8c76175000 R15: 000055b555c2a4d8 [ 298.421486][ T9318] [ 298.424705][ T9318] Kernel Offset: disabled [ 298.429005][ T9318] Rebooting in 86400 seconds..