last executing test programs: 2m29.181782414s ago: executing program 2 (id=1621): socket$kcm(0x11, 0x20000000000000a, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x8, 0x2, 0x7, 0x10, 0x7, 0x7, 0x7, 0x7ff, 0x3, 0x1f, 0xc, 0x1b, 0x6, 0xffffffff, 0x5}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) 2m25.918551794s ago: executing program 2 (id=1641): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1, &(0x7f0000000100)=""/58, 0x3a}, 0x2) accept$unix(r0, &(0x7f0000000300), &(0x7f0000000380)=0x6e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d000100006000090400800203000000092108040001220500090581032000090807090502"], 0x0) syz_usb_ep_read(r2, 0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000dc0), r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01052bbd7000ffdbdf2502"], 0x5c}, 0x1, 0x0, 0x0, 0x860}, 0x0) 2m24.559994708s ago: executing program 2 (id=1646): r0 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r0, 0x200000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r5 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x9, 0x0) r6 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xb) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000700)={0x34, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x2}, @free_buffer={0x40086303, r6}, @increfs_done={0x40106308, 0x1}], 0x71, 0x0, &(0x7f0000000680)="1133fef3bbb5ca5998071190f9cae7f62b36f8cd5988b9bf7817f303b95fba38715dda3cc1b7222d5762fe8f13701cd652311c11f4a5afc01f4afe85b44cbeb75e37d779e663f997edfb194cb349b2ef68a2d0b4e34e5d5c927df8a38509476480d455cdc3a0467b91a3b7b05c4a29e2f9"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000240), 0x5fa, 0x10200) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r9 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xb, 0x4}, {0x0, 0xfff1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x5ab95eec, 0x0, 0x7ff, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x6e, 0x18, 0xd, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) ioctl$DVB_DEMUX_DMX_GET_STC(r7, 0xc0106f32, &(0x7f0000000280)={0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00000032c0)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x1fffff, 0x9) 2m23.683890562s ago: executing program 2 (id=1651): socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5f, 0xc9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0x9}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 2m21.475237668s ago: executing program 2 (id=1656): r0 = socket$inet(0x2, 0x1, 0x6) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000380)=0x4) (async) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_vlan\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, r3, 0xc}, 0x10) (async, rerun: 64) r4 = socket(0xf, 0x2, 0x200003) (rerun: 64) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) r5 = syz_clone(0x104000, &(0x7f0000000440)="e02bcd51e5f9d927967143abb0cf0a0bbfed2fecff637d83bec66b09e13ac4ef2529a45da78c9cff50b5c1", 0x2b, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="e986e83de528a70adecde3e0a0f7935265f16e432a0215274acc49080e89ea310dbd112b374ed0b7f967b027542c313a0b3039cf4eabfd7dd1f0bfb105cf5121fbeb0d6d4fcd66f7f87d25a49322f7923592bafa8f6d6fe041c39e331fdd66a1858a36445605189e5f4a999dd1c40241817d13a78c7397fb4b966244043e3b7d1266b84af34866c154f48c7ed57402be44fa00c84cc20959aac70cdb3a4e42f1bdf91cde33b07bb34d7c7b9d7282a8902fa9a604578b7aa40e699c869e509107206a67b144c24f85e1d1017b012c517916747864c8d307185f57f691263dbd6ce29279352b4cde23a1") prlimit64(r5, 0xf, &(0x7f0000000600)={0x7, 0x8}, &(0x7f0000000640)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) r8 = syz_open_dev$dri(0x0, 0x8, 0x7012c1) (async, rerun: 64) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$sock_linger(r9, 0x1, 0x50, &(0x7f0000000100)={0x1, 0x57}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x21, 0xffffffffffffff39}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @broadcast}}) 2m21.01313246s ago: executing program 2 (id=1657): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x8000000, 0x2, 0x6}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2m20.713457168s ago: executing program 32 (id=1657): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x8000000, 0x2, 0x6}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 9.494533869s ago: executing program 4 (id=2194): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) r1 = fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x100, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x99f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x100}}, 0x20000000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'c6xdigio\x00', [0xfd, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x7, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x8000001, 0x9, 0x8, 0xfe9, 0x401, 0x0, 0x6, 0x4, 0x9, 0x48, 0x6, 0x7, 0x6a77, 0x5, 0x20007, 0x8]}) 6.906916555s ago: executing program 1 (id=2197): syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) write$binfmt_aout(r1, &(0x7f0000000ec0)={{0xcc, 0xf7, 0x5, 0x19d, 0x4d, 0x2, 0x79, 0x3ff}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1, 0x294460) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000380)=[{0x2, 0x80, 0x14, 0x6fce}, {0xf46a, 0x1, 0x9, 0x3ff}, {0x0, 0x40, 0x7, 0x5}, {0x8, 0x1, 0x1, 0x10}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 6.792192347s ago: executing program 4 (id=2199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff07) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x541040, 0x0) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000340)) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x130, 0x130, 0x0, 0x228, 0x2f8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xffffffff, 0x5, 0x1}}, @common=@frag={{0x30}, {[0xfffffffe, 0x3], 0x8001, 0x6, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xfc}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010101}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3800) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x197}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0xc, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000280)={0x6, 'veth1_vlan\x00', {}, 0xb3}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) r13 = dup(r12) ioctl$TCSETAF(r13, 0x5408, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) write$UHID_INPUT(r13, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) 5.090283882s ago: executing program 5 (id=2204): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x4}, 0x2, 0xb1f1, &(0x7f0000000040)={{0x0, 0x5, 0x402}}, 0x0, 0x0}}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202", @ANYRES8], 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x5e) fchmodat(r3, &(0x7f00000001c0)='./file0\x00', 0x40) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4008af04, &(0x7f0000000080)=0x1) 5.0789597s ago: executing program 1 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 4.977307092s ago: executing program 3 (id=2207): r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x2, 0xb, 0x1) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000006ac0)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)="d02b785a7c6a11206431df95f9ac6035af8c873a7b61ac9c9dcc5dc659c4f52cdbec7e63f9985d94faa5ee0ab1d65164f763931060cc", 0x36}], 0x1, &(0x7f0000002980)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r5, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x48, 0x48004}}, {{&(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002a80)="24cf551c7c1335833b3c02ce39b07a831eca0e68c3fcd937906660e9f468f7c522087dc7f28a3254ab3328d20bee2f5eaf2cce561a45e0c24c8a79844ad4a9eaeaebd9a1d7831275450a163aee1d3fae44e483340d276d0a6dfd37bce0a5329007b05cb80869e3d1", 0x68}, {&(0x7f0000002b00)="aacb820f829006a3171598149ca1db8a6b243554b7dca36d85ce75d34010ddeac5ee9f53ac4c1dda827637efcaa30a59d5e454561cd0e9849c0aa2cc84856c26df20f5f042775025fafd40fb4d596eccf5dd9dac36bf6dedc3c2c9ea3f9eb02e4f8a5694bf0c50e7cab468a7dc31e42eae99402262adb7807c17e99902d98d0fb7ef2221b313779ac62ed6ba773812c636555c040a521ad5b5add3e86c3fd1bcf23a07430ba92aa1f4", 0xa9}, {&(0x7f0000002bc0)="3ade6f88f0202c04fdda1996d24afcc4c8fafd7aea505c44baf80a3be1f89d2cf863cbe2fbc3ec8e816ea5368757fa8e4728f42df9744067ceafc3c538f3144445c84b35106d1f543d87e3ef2db087ac4a6e97490a6fff70e5f728dc106c59d5ced269cf4ff305c9ca2de0d06112d8cb9d", 0x71}], 0x3, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002c80)="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", 0x1000}], 0x1, &(0x7f0000003d80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="00000000140000000000000001003c23e3ef0000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x20000040}}, {{&(0x7f0000003e00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000004340)=[{&(0x7f0000003e80)="1c57c4484f1aeae2b52d340ab351d6da8b13deabe23f4a1332694596ceb443d075245657a1ba872819b9601461b396f12fa34bd3f8c5306ecb4d4bf09e90c088f2cbfbaffdc526a0fcd0c7868956a128836f0eb0e5d3598216fb3cb232ee490bd744b4cd78cfd438ba51463331f263c635d86a392c046c45aa71a5a4d75d859fdd7acdc037b24d8c5dbb5996318b491bca1f036fe3fa1ab375cb34378d64", 0x9e}, {&(0x7f0000003f40)="997f5976386b628727ef0366f22e6a68dab2c479905a45cdece92985896be543855f7911ae42efc1df3404d66c0988a6444fdb5ce41c500d0f0f37b400bc92b67beeb193e464eb13f5e95b97a206bb9ef3a7bb606e36064ff29e9573cb7ae1568151eaa7019b57dd767f93f0c3c994fcb655d92200cb9fe49cf6e4046d8a0adb8bd97865d657b7ec12d6cbb9ccb02929bacf7569faaaadff0eb45a3fee63005afb91d528f008e439cbfc56146fe5214c07bfa3ac33696c2741b50ec41656ae7e34de6272fc4fd8b274714cefd1c888c8f2f73a224fc37c94b47fce774c", 0xdd}, {&(0x7f0000004040)="7917dc4d91f67a555d697dd295ceeb30e2d186b9a539", 0x16}, {&(0x7f0000004080)="941e823359524015bef9f7a2705f72c96a8a53db749937136eecb8239b7f493bfcfdffaedb9a9b71f19016d9f888b6081e3113c0b796d06d026139bef01dabe9fd49106820f2405d0f5bd4d3cf3ac350e03ea4e92d8c68831ad8e8b9cdfe341b1f80125f64b6271a98ce50388b18ac274d6c267feabc71ea6369b3fc6e88fc88af2b2c6e04fd56ac71d1ea1075f9f3ff", 0x90}, {&(0x7f0000004140)="1c0b595a0b5361befd1d1c24c8715dc294aa9296dd7ead27958f111c629521bbe1f26b5f42529f5eca182f6ad289f911fa0d0278104f0fbd96151f9a5c4c695f9af1e1c25ddfc0a1bc0f8242f70a3f0133a13dad1f4998f4a977dc35f5c8e0810d3ee7eb624d10a17e00c1", 0x6b}, {&(0x7f00000041c0)="080d931dc0b72b91ce4bdf45365bab171e75235bdcc24fc5a3cc5124875aaf7b9d789ce64cddebe0e7bc8d5b55d1906f2eef6375107306aa1d95831fa2f95cadf58e996095109e2d3a14874a4ed8", 0x4e}, {&(0x7f0000004240)="d45a84ea1143ccf355ee874506f7886ea30af10b25e7dc9111541c5425231e867240cacd90d9de125eab7e58049550", 0x2f}, {&(0x7f0000004280)="642e41d1637417f5ec3067318d869835f7ab41a587ceb6066083090236a49f28aec2d548bce74623e831110e230800c94f48863d98df1b5d9bdf04baf809ec36c349edb12df9a1f921f5a6ea667abdda8e0ab9ceea720f8836fabb904050d7eaa4cd6d9cd54597f973fc9518c3c40cb15ccaf77c95b2939f5777ebea4f07cfe50e99e27c377600aa62398cc3f76378f3b46a", 0x92}], 0x8, &(0x7f00000043c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r5, r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r0]}}], 0x90, 0x4000}}, {{&(0x7f0000004480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006640)=[{&(0x7f0000004500)="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", 0x1000}, {&(0x7f0000005500)="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", 0x1000}, {&(0x7f0000006500)="b29eb2c1b9135a933c37c3f844ac453161ea86541d0387bbe4832c52b98bb306d2c3296866b2683ca344f501ab5ae9b9fa2917e857b1fc8947a1350b62a9", 0x3e}, {&(0x7f0000006540)="b626224faa1ffa211a7e800c5fd5c6aea5bd8fd0", 0x14}, {&(0x7f0000006580)="73e1b6e5bd13d6422aeaa418d08a3e6733f7dc181239b0be3758507746c5b738ba8a80e9b70c8e860d7950f7f18d526ebf4d3d9482627af5c6e1baed44c1aa280dc65dab51990837caedcdf81a2c4c496f5b452218f4b0ae79242762b1752cb55fc2e6781775a08d9aa745d62941de9e7d99b395516383b204b0c5269f8dbc16001fb07d9651da6a591b68f2ea75975446382d1863feb4c16c8bb05f4ccfb695e1e841dec9a3da9f49daaa5a7343", 0xae}], 0x5, &(0x7f0000006780)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}, {{&(0x7f0000006900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006a80)=[{&(0x7f0000006980)="055d1871fcf9cb1a2ef58c0d087ee203bea31c53af32c1f9ba67da26c3e326b0a5a1e97deee264cbb38d54f565588060ff349a789f8de8c811b6b8dd3dcc672d7e09c50336a2d6d0797b0632804f282b7695f850b3970bd39768a44e11085a4ba08356a77b87482116db0304160cb3d40f173e1de6930e027f96c0cba58ccc82fd1532641c0816a09a0d4a7916fdd103", 0x90}, {&(0x7f0000006a40)="dd8adeeb2380a5", 0x7}], 0x2, 0x0, 0x0, 0xc000}}], 0x6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000ff, 0x0, 0x81}]}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r6, 0xc10c3000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000010000009547f4e8597deaae972d5f7eeed1343700000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180049473341bd1fade0c21e61d02f000000000000000000000000000000d2b0981973c3ed73a475f1794c9dff2e82ec21b9f5dcb49b5b321cf0c6b40000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @val=@perf_event={0x8}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r9, 0x89f0, &(0x7f0000000100)={0x3, 0xfffffff8, 0x0, 0x401, 0x7, "bb40af00008000"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000f8ffffff185200000c0000000000000000000000184a0000f8ffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0xd0, 0x9f, &(0x7f0000000780)=""/159, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x1, 0x80000000, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r0], &(0x7f0000000680)=[{0x0, 0x5, 0x3, 0x1}], 0x10, 0x75d1}, 0x94) 4.928768573s ago: executing program 1 (id=2208): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x20000084) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 4.728444058s ago: executing program 0 (id=2210): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_clone3(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'macsec0\x00', 0x0}) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0xa, 0x109000) ioctl$SG_BLKSECTGET(r3, 0x1267, &(0x7f0000000100)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYRESHEX=r2], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa968e86598777a32, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r2, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x84, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="8000260b0a0002000180c2"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x75032df31efb40f6) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x234) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000030000000000001907864010101ac1414aa0b0090780300000045000000000000000032000000000000ac1414aa74ed47060b36a62d0c79bc9606a067ed3bab5f2a0a5cdc00a66636be1ec9ce174e34b63269accf2e870f66bc1f9eb7578f8a019097fd5ad96742ff732ed66d8f2d1a8780cacf34f00f8ca75f3d3ad08913b2944cf18185828129"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYRES16=r4, @ANYBLOB="92e0477a3b74ef63b37a5a735bdf1478eb9d87a601e0f5017ec478a4e603f08f70507628c98cb139e00c7447c00300fdff0000000082044881be5aedf3c976ff18389bb88dd69b671d94662338a19c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) pread64(r11, 0x0, 0x0, 0x3) recvmmsg(r10, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x22, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x50) 4.430874558s ago: executing program 0 (id=2211): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x27, r1, 0x1, 0x4, 0x9, 0x8, "e5ec5b7ae8f229c86b128ded38b5ef61cca5722ccc92c69fab091b0f7e4690af20dd40263effdbf6f8147d5793d25a05ac3829afdc353e0c4d0c329d0fe789", 0x1b}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000140)}, {&(0x7f0000000180)}, {&(0x7f0000000200)="c6dbafee149bb7d2a18359cfbc892352138fd0a1983aceb086ec8a5c9f645df17f90ddfdf29233793be137004d25ff73484dcc2fe2e1c254507bb7c54893ee768f27833dec099782a191aab747b94808ffdd31304238cd82bb81b567e39f541385f437d1acbe19d1ab7261c8ff80daf8a0a6c79a0ab2e69394f13d71ffbf5ae44a3bf1173ca13ac7fc71d3523dad55986eb029bb61d1f6c99303a63b02c9563f", 0xa0}, {&(0x7f00000002c0)="9d91d0c580e316cec950c0142120861b57277238d5f1e9cd2956f58bc2ae6664a8dfb6ec0806c9527895dc5e3f93319b34af0e60aa279829770c3a53afb8f4bafece6b06e390e56e4ed493f580130ce7aea8aadab60ceedd3210", 0x5a}], 0x4, &(0x7f0000000380)={0x80, 0x11, 0x7, "1bd9350b126781b6f70ba3c58f1f05852b624117ef9d79dffd53ab0e14d5732bec9f17c39aead86999af55938aee5a768d8b730713f533c35e70f09d14ad745d794bf51a280e35b6b4c759ed742e5989074296d9b96df89249b4de9f8c2f335ab685e9c9ef45b07676a5fbf8df23"}, 0x80, 0x40011}, 0x40000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x6fef8000) r3 = fanotify_init(0x8, 0x101000) fanotify_mark(r3, 0x49, 0x8, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000011f7ff000000053e3e71ed07348ace0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000140)) 4.37525313s ago: executing program 0 (id=2212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, 0x0, r5}, 0x0, 0x0, &(0x7f0000000180)={0x0}) r6 = fanotify_init(0x68, 0x0) fanotify_mark(r6, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r10 = syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x880) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r14, 0x0, 0x0, 0xfecc) 3.978054946s ago: executing program 3 (id=2213): socket$kcm(0x11, 0x20000000000000a, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x8, 0x2, 0x7, 0x10, 0x7, 0x7, 0x7, 0x7ff, 0x3, 0x1f, 0xc, 0x1b, 0x6, 0xffffffff, 0x5}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.775847888s ago: executing program 3 (id=2214): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x7ffffffffffffefe, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket(0x0, 0x2, 0xa) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x17, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000080039f"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019300)=ANY=[@ANYBLOB="0000000000000000000000ab2c10602e693824f764eda6cd3555862f9d0b3bf62ff629de7cf8c50597cc9f483bce025053496ca88c67bd678e5f2fbc6251cb1d1d9fe6b5d15771f148d22ed76bd847b5", @ANYRES32=0x0, @ANYBLOB="5d58000014100000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dd, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.626625804s ago: executing program 4 (id=2215): socket$kcm(0x2, 0x0, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800ff0010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3.459793312s ago: executing program 4 (id=2216): socket$kcm(0x11, 0x20000000000000a, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x8, 0x2, 0x7, 0x10, 0x7, 0x7, 0x7, 0x7ff, 0x3, 0x1f, 0xc, 0x1b, 0x6, 0xffffffff, 0x5}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 3.38855825s ago: executing program 4 (id=2217): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r2 = getegid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@debug={'debug', 0x3d, 0x24}}, {@posixacl}, {@uname={'uname', 0x3d, 'vlan0\x00'}}, {@access_client}], [{@seclabel}]}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'vlan0\x00', {0x1}, 0x9}) 3.363313487s ago: executing program 4 (id=2218): socket(0x10, 0x803, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, 0x0, 0x40040) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) write(r1, &(0x7f0000000000)='\"', 0x1) (fail_nth: 4) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000b33000/0x13000)=nil, 0x13000, 0x1}) 3.266777292s ago: executing program 5 (id=2219): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c0400000000001c0012800b0001006d616373656300000c000280050006000100000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 3.142917548s ago: executing program 5 (id=2220): r0 = syz_usb_connect$hid(0x0, 0xb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400f32415000000000000109022400010000e80b0904000501030002000921fd7f080122610309058103"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001a80)={0xe, {"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", 0xfffffffffffffd8d}}, 0x1006) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ce0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{}, {0x2, 0x6, 0x2000}], 0x2) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0xd) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x9, 0x40000) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.044828997s ago: executing program 1 (id=2221): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'vlan0\x00', {0x1}, 0x9}) (fail_nth: 4) 2.708813081s ago: executing program 1 (id=2222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x13, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}]}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 2.705031588s ago: executing program 3 (id=2223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0xf5, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x2000810) 2.651496224s ago: executing program 3 (id=2224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010001000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x1}, 0x94) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) fchdir(r2) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r6, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r6, 0x200d3) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000780)={r8, &(0x7f0000000540), &(0x7f0000000740)=@udp6, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) bind$can_raw(r7, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r7, &(0x7f0000000080), 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) 2.474385051s ago: executing program 1 (id=2225): syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x8101) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000f8ff10000100000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="5d5b00000000000008002300f9ffffff08000a00", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaa6c9acfbd80c20000038e539b0000000009486f01fe80000000000000f3000000000000bbfe800000000000005000000000000000000000000000000000000021f4cdc39c785d5c248046abeb91b96187c3301deec8ca13a4580bf63943117ff7c06c0f5ef153cd5d84f79ad2d0"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x77d0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00010000010a8103000000000000000008000001de00060054578d8d9c43a288ae7d57c4ff39babad77ac99f0c6f9b0cdd253b0c9fb52282b2f374f3e4dda9db3030508c2701e0ef884846519203732adee95ccb69c3f3dd50e59b71b09cfd92d013cfe0f0ddd1668d12cc2aece1bf0997233dfc69ccece7a02ebe4f2b5e50f33ed0d5b35bd4ac1e332793d471fa56f20838fff135dc4aaa21bf75a101840d59253b466e016d5c89677b49d0d3b119cb7512a7b42d2a0a86ff6a2e3743ea4c6b5986eac8bfa736f2c91112be4b15651812caa25a4749027fcc0ad468b3a6371781c342e646aadf26e12f7a1f50bdc6ea98a5c8291e347349acdfc21688000009"], 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00') r4 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r4) openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa000000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c02"]) 2.111303932s ago: executing program 3 (id=2226): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, 0x0, r5}, 0x0, 0x0, &(0x7f0000000180)={0x0}) r6 = fanotify_init(0x68, 0x0) fanotify_mark(r6, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r8, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r10 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x100595f, 0x10000, 0x0, 0x4f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x880) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r14, 0x0, 0x0, 0xfecc) 1.231712858s ago: executing program 0 (id=2227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff5, 0x7ffe, 0x4, 0x1, 0x2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0xfffffffe, 0x0, 0x0, 0x0, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b84d000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 782.151277ms ago: executing program 0 (id=2228): syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904000001e7ff01000905010220"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd28, 0x11, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x69b, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) socket$inet(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 630.875371ms ago: executing program 5 (id=2229): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRES64=r1], 0x40}}, 0x800) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000300)={0x1, &(0x7f0000000240)=[{0x7fa, 0xf8, 0x1, 0x2}]}) pread64(r1, 0x0, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r2, 0x0, 0x24001844) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x740, 0x370, 0x440, 0x0, 0x288, 0x288, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2, 0x9}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x0, [0x2], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) msgctl$IPC_RMID(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='qnx6\x00', 0x294044, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000900)={"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"}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000004000280"], 0x14}], 0x1}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 484.560448ms ago: executing program 5 (id=2230): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = getpgrp(0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x80) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x34, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "00000dffff000000040000019100"}, @sack_perm={0x4, 0x2}, @eol, @exp_smc={0xfe, 0x6}, @generic={0x13, 0x2}]}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000002c0)=0x40b, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 389.952277ms ago: executing program 5 (id=2231): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@link_local, @link_local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x734}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x0, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 0s ago: executing program 0 (id=2232): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18028000fcba49ff000000000000000000000000000000000000000000e14000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x16f802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="e00100000a06010400000000000000000100000098000880300007802a001a002f70726f632f7379732f6e65742f697076342f76732f6c626c635f65787069726174696f6e000000100007800c0018400000008009001a00277d2f21000000000c00078008000b4080000001100007800c00028008000140ffffffff100007800c00184000000000000000040c00078008000b40000000090c0007800800094000000005100007800900130073797a31000000000900020073797a3400000000080009400000a526050001000700000068000880100007800c00028008000140ac1414aa0c00078005000700000000000c00078005001a00000000000c00078008000640000080010c000780060004404e2300000c00078008000940000000640c000780060004404e2100000c0007800500150004000000840008800c000780050015000d0000000c0007800800084000000000100007800900120073797a3100000000100007800c0019400000a30000000005100007800c00148008000140ac1e01010c000780060005404e2200001c000780180002801400024000000000000000000000000000000001100007800c00148008000140e0000002050001000700000005000100070000000900020073797a3200"/480], 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x5f45, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x80000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/ipc\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ocal tt entry: 01:00:5e:00:00:01 [ 539.423913][ T5713] kye 0003:0458:0087.0013: unknown main item tag 0x2 [ 539.431490][ T5713] kye 0003:0458:0087.0013: item fetching failed at offset 18/40 [ 539.440893][ T5713] kye 0003:0458:0087.0013: parse failed [ 539.446943][ T5713] kye 0003:0458:0087.0013: probe with driver kye failed with error -22 [ 539.641320][T10314] usb 2-1: USB disconnect, device number 75 [ 539.686470][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.693648][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.702751][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.709954][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.748457][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.757383][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.775727][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.785618][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.796061][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.820707][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.836048][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.847641][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.864356][ T29] audit: type=1400 audit(2000000053.542:1551): avc: denied { nlmsg_write } for pid=12271 comm="syz.5.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 539.900739][ T29] audit: type=1107 audit(2000000053.542:1552): pid=12271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 539.961864][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 540.070592][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 540.614457][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 540.629674][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 541.259242][T12291] ÿ: renamed from dummy0 (while UP) [ 541.278926][ T29] audit: type=1400 audit(2000000054.953:1553): avc: denied { read write } for pid=12292 comm="syz.4.1730" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 541.332382][ T29] audit: type=1400 audit(2000000054.953:1554): avc: denied { open } for pid=12292 comm="syz.4.1730" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 541.363434][ T29] audit: type=1400 audit(2000000054.963:1555): avc: denied { ioctl } for pid=12292 comm="syz.4.1730" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 543.713847][ T6112] net_ratelimit: 9 callbacks suppressed [ 543.713865][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 543.734326][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 544.455556][ T5614] IPVS: starting estimator thread 0... [ 544.549861][T12337] IPVS: using max 32 ests per chain, 76800 per kthread [ 544.689618][ T5713] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 544.830647][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 544.840410][T10314] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 544.845786][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 544.870454][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 545.000438][T10314] usb 2-1: Using ep0 maxpacket: 32 [ 545.009329][T10314] usb 2-1: config 0 has no interfaces? [ 545.022593][T10314] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 545.040999][T10314] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 545.057619][T12341] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.059745][T10314] usb 2-1: Product: syz [ 545.065104][T12341] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.075497][T10314] usb 2-1: Manufacturer: syz [ 545.086730][T10314] usb 2-1: SerialNumber: syz [ 545.125273][T10314] usb 2-1: config 0 descriptor?? [ 545.405181][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 545.420462][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 545.938003][T12341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.960320][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 545.976612][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 546.009244][T12341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.140256][ T803] usb 2-1: USB disconnect, device number 76 [ 546.410907][T12364] overlayfs: failed to clone upperpath [ 546.472134][T12366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.548964][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 546.970717][T12341] gretap1: left promiscuous mode [ 547.147618][ T5803] lo speed is unknown, defaulting to 1000 [ 547.154513][ T5803] syz2: Port: 1 Link DOWN [ 547.353838][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 547.472017][T12395] overlayfs: missing 'lowerdir' [ 547.940128][ T6103] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.985369][ T6103] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.026660][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 548.034380][ T6103] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.034414][ T6103] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.142354][T12400] batadv_slave_0: entered promiscuous mode [ 548.162277][ T5713] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 548.171553][ T5713] usb 5-1: can't read configurations, error -71 [ 548.184137][ T6103] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.248087][T12401] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 548.262223][ T6103] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.008082][T12399] batadv_slave_0: left promiscuous mode [ 549.020510][ T6097] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.030399][ T6112] net_ratelimit: 5 callbacks suppressed [ 549.030418][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 549.051099][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.070284][T12386] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 549.080019][ T6097] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.223610][T12386] usb 2-1: unable to get BOS descriptor or descriptor too short [ 549.245078][T12386] usb 2-1: not running at top speed; connect to a high speed hub [ 549.253358][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 549.277689][T12386] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 549.288727][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 549.310665][T12386] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 549.316256][T12423] random: crng reseeded on system resumption [ 549.353876][T12386] usb 2-1: config 5 has no interface number 0 [ 549.383949][T12386] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 549.422763][T12386] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 549.479580][T12386] usb 2-1: config 5 interface 246 has no altsetting 0 [ 549.501712][T12386] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 549.530355][T12386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.556232][T12386] usb 2-1: Product: syz [ 549.570916][T12386] usb 2-1: Manufacturer: syz [ 549.586802][T12386] usb 2-1: SerialNumber: syz [ 549.620072][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 549.635322][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.696783][ T29] audit: type=1400 audit(2000000063.363:1556): avc: denied { write } for pid=12405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.782465][T12432] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1759'. [ 549.793811][T12432] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1759'. [ 549.803685][T12432] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1759'. [ 550.191424][T12374] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 550.225754][T12386] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 550.252204][ T6103] usb 2-1: Failed to submit usb control message: -71 [ 550.310736][ T6103] usb 2-1: unable to send the bmi data to the device: -71 [ 550.330143][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 550.344532][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 550.347298][ T6103] usb 2-1: unable to get target info from device [ 550.362597][T12386] usb 2-1: USB disconnect, device number 77 [ 550.383722][T12374] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.431782][T12374] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.446608][ T29] audit: type=1400 audit(2000000064.123:1557): avc: denied { write } for pid=12436 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.456497][ T6103] usb 2-1: could not get target info (-71) [ 550.485581][T12374] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.637847][T12374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.651855][T12423] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 550.665690][ T6103] usb 2-1: could not probe fw (-71) [ 550.666998][T12374] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.957906][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 550.973325][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 551.446682][T12374] usb 6-1: USB disconnect, device number 2 [ 551.693443][T12462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.706012][T12386] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 551.789339][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 551.989677][T12386] usb 2-1: Using ep0 maxpacket: 32 [ 552.094597][T12386] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 552.241967][T12386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.307977][T12386] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 552.351773][T12386] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 552.403825][T12472] syzkaller0: entered promiscuous mode [ 552.422628][T12472] syzkaller0: entered allmulticast mode [ 552.445420][T12386] usb 2-1: Product: syz [ 552.455828][T12386] usb 2-1: Manufacturer: syz [ 552.465927][T12386] usb 2-1: SerialNumber: syz [ 552.485388][T12386] usb 2-1: config 0 descriptor?? [ 552.514852][T12386] ldusb 2-1:0.0: Interrupt in endpoint not found [ 552.545995][ T29] audit: type=1400 audit(2000000066.223:1558): avc: denied { write } for pid=12441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.580887][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 552.642238][T12487] hsr_slave_0: left promiscuous mode [ 552.653910][T12487] hsr_slave_1: left promiscuous mode [ 552.668150][ T29] audit: type=1400 audit(2000000066.343:1559): avc: denied { write } for pid=12490 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.800930][T12374] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 552.819993][T12386] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 552.979999][T12386] usb 5-1: Using ep0 maxpacket: 16 [ 552.988473][T12374] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 552.990877][T12386] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 553.006862][T12374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.032704][T12374] usb 6-1: config 0 descriptor?? [ 553.033756][T12386] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 553.068081][T12386] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.101409][T12386] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.103521][T12375] usb 2-1: USB disconnect, device number 78 [ 553.113478][T12386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.135418][T12386] usb 5-1: Product: syz [ 553.148801][T12509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53294 sclass=netlink_route_socket pid=12509 comm=syz.0.1770 [ 553.162676][T12386] usb 5-1: Manufacturer: syz [ 553.168736][T12386] usb 5-1: SerialNumber: syz [ 553.187637][T12386] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 553.203844][T12510] batadv_slave_1: entered promiscuous mode [ 553.213136][T12386] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 553.229991][T12386] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 553.280942][ T29] audit: type=1400 audit(2000000066.953:1560): avc: denied { write } for pid=12493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.282201][T12374] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 553.323152][T12374] hackrf 6-1:0.0: Could not detect board [ 553.333791][T12374] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 553.361896][T12374] usb 6-1: USB disconnect, device number 3 [ 553.387242][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.403118][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.463072][ T29] audit: type=1400 audit(2000000067.143:1561): avc: denied { write } for pid=12515 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.504079][T12386] usb 5-1: USB disconnect, device number 96 [ 553.891538][ T29] audit: type=1400 audit(2000000067.573:1562): avc: denied { write } for pid=12518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.106054][ T29] audit: type=1400 audit(2000000067.783:1563): avc: denied { write } for pid=12538 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.149926][ T6103] net_ratelimit: 7 callbacks suppressed [ 554.149944][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 554.170700][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 554.307072][T12559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.530850][T12374] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 554.607286][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'. [ 554.689827][T12374] usb 6-1: Using ep0 maxpacket: 16 [ 554.696746][T12374] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 554.709698][T12374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.724351][T12374] usb 6-1: config 0 descriptor?? [ 554.764091][T12374] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 554.780340][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 554.795607][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 554.870621][T12386] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 554.939430][T12573] /dev/nullb0: Can't lookup blockdev [ 555.031650][T12386] usb 2-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 555.049808][T12375] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 555.060514][T12386] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 555.081019][T12386] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 555.089846][T12386] usb 2-1: Manufacturer: syz [ 555.099395][T12386] usb 2-1: SerialNumber: syz [ 555.199755][T12375] usb 5-1: Using ep0 maxpacket: 32 [ 555.211871][T12375] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 555.228935][T12375] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.252781][T12375] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 555.305986][T12375] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 555.315861][T12375] usb 5-1: Product: syz [ 555.321470][T12375] usb 5-1: Manufacturer: syz [ 555.326327][T12375] usb 5-1: SerialNumber: syz [ 555.331989][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 555.347574][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 555.384562][T12375] usb 5-1: config 0 descriptor?? [ 555.396021][T12375] ldusb 5-1:0.0: Interrupt in endpoint not found [ 555.619374][T12579] lo speed is unknown, defaulting to 1000 [ 555.749803][T12386] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 555.773342][T12386] usb 2-1: USB disconnect, device number 79 [ 555.870898][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 555.886301][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 556.036371][T12376] usb 5-1: USB disconnect, device number 97 [ 556.119845][ T29] audit: type=1400 audit(2000000069.803:1564): avc: denied { getattr } for pid=12598 comm="syz.3.1791" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 556.213546][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.236241][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.419548][T12609] lo speed is unknown, defaulting to 1000 [ 556.463425][ T29] audit: type=1400 audit(2000000070.143:1565): avc: denied { read append } for pid=12555 comm="syz.5.1780" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 556.490649][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 556.532954][ T29] audit: type=1400 audit(2000000070.143:1566): avc: denied { open } for pid=12555 comm="syz.5.1780" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 556.551034][T12374] gspca_sonixj: i2c_w8 err -71 [ 556.612845][T12374] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 556.649663][T12374] usb 6-1: USB disconnect, device number 4 [ 556.948188][T12386] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 557.170577][T12386] usb 2-1: Using ep0 maxpacket: 8 [ 557.196819][T12386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.263429][T12386] usb 2-1: config 0 has no interfaces? [ 557.363855][T12386] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 557.431803][T12386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.484067][T12386] usb 2-1: config 0 descriptor?? [ 557.811550][T12386] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 557.834208][T12374] usb 2-1: USB disconnect, device number 80 [ 557.992660][T12386] usb 6-1: Using ep0 maxpacket: 8 [ 558.004385][T12386] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.031791][T12386] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 558.051084][T12386] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 558.077528][T12386] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 558.110263][T12386] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 558.141399][T12386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.173156][T12386] hub 6-1:1.0: bad descriptor, ignoring hub [ 558.187056][T12386] hub 6-1:1.0: probe with driver hub failed with error -5 [ 558.197668][T12386] cdc_wdm 6-1:1.0: skipping garbage [ 558.209600][T12386] cdc_wdm 6-1:1.0: skipping garbage [ 558.248509][T12386] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 558.266806][T12386] cdc_wdm 6-1:1.0: Unknown control protocol [ 558.405824][ T29] audit: type=1400 audit(2000000072.084:1567): avc: denied { write } for pid=12640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.506588][T12667] tc_dump_action: action bad kind [ 558.576605][T12631] binder: 12630:12631 ioctl c0306201 2000000004c0 returned -22 [ 558.602227][ T29] audit: type=1400 audit(2000000072.284:1568): avc: denied { write } for pid=12669 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.653955][T12662] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 558.673374][T12662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.689060][T12374] usb 6-1: USB disconnect, device number 5 [ 558.745868][T12662] team0: Port device netdevsim1 added [ 558.995815][T12676] ipt_rpfilter: unknown options [ 559.659281][ T35] net_ratelimit: 12 callbacks suppressed [ 559.659301][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 559.679830][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 559.806211][T12689] netlink: zone id is out of range [ 559.812741][T12689] netlink: zone id is out of range [ 559.818111][T12689] netlink: zone id is out of range [ 559.862451][T12689] netlink: zone id is out of range [ 559.995934][T12689] netlink: zone id is out of range [ 560.179470][T12689] netlink: zone id is out of range [ 560.221455][T12689] netlink: zone id is out of range [ 560.279634][T12689] netlink: zone id is out of range [ 561.718595][ T29] audit: type=1400 audit(2000000075.304:1569): avc: denied { write } for pid=12677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.928943][ T29] audit: type=1400 audit(2000000075.474:1570): avc: denied { write } for pid=12706 comm="syz.4.1813" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 561.942203][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 561.996894][ T29] audit: type=1400 audit(2000000075.564:1571): avc: denied { write } for pid=12708 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.024985][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 562.669106][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.675560][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.689036][ T6103] sl0: compressed packet ignored [ 562.794736][ T29] audit: type=1326 audit(2000000076.404:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed659de59 code=0x7ffc0000 [ 562.925588][ T29] audit: type=1326 audit(2000000076.404:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7faed659de59 code=0x7ffc0000 [ 562.999168][ T29] audit: type=1326 audit(2000000076.404:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed659de59 code=0x7ffc0000 [ 563.151499][ T29] audit: type=1326 audit(2000000076.414:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7faed659de59 code=0x7ffc0000 [ 563.247811][ T29] audit: type=1326 audit(2000000076.414:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed659de59 code=0x7ffc0000 [ 563.264551][T12730] syzkaller0: entered promiscuous mode [ 563.311796][ T29] audit: type=1326 audit(2000000076.414:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faed659de59 code=0x7ffc0000 [ 563.356536][ T29] audit: type=1326 audit(2000000076.414:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1812" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed659de59 code=0x7ffc0000 [ 563.411536][T12730] syzkaller0: entered allmulticast mode [ 563.679455][T12386] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 563.719488][T12375] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 563.891466][T12375] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 563.915749][T12375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.971622][T12386] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 563.975887][T12375] usb 6-1: config 0 descriptor?? [ 563.987092][T12386] usb 5-1: config 0 has no interface number 0 [ 564.014451][T12386] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 564.054653][T12386] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 564.098289][T12386] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 564.278682][T12386] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 564.318825][T12386] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 564.459984][T12375] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 564.467498][T12375] hackrf 6-1:0.0: Could not detect board [ 564.476273][T12375] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 564.512418][T12376] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 564.539058][T12386] usb 5-1: Product: syz [ 564.554756][T12375] usb 6-1: USB disconnect, device number 6 [ 564.564423][T12386] usb 5-1: SerialNumber: syz [ 564.596942][T12386] usb 5-1: config 0 descriptor?? [ 564.613273][T12386] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 564.624162][T12386] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input32 [ 564.719933][T12376] usb 2-1: Using ep0 maxpacket: 32 [ 564.731391][T12376] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 564.753949][T12376] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 564.775935][T12376] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 564.788026][T12376] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 564.802809][T12376] usb 2-1: config 0 interface 0 has no altsetting 0 [ 564.816920][T12376] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 564.837144][T12376] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 564.846717][T12376] usb 2-1: Product: syz [ 564.852112][T12376] usb 2-1: Manufacturer: syz [ 564.862043][T12376] usb 2-1: SerialNumber: syz [ 564.884452][T12376] usb 2-1: config 0 descriptor?? [ 564.913732][T12376] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 564.957086][T12376] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 565.085346][T12748] random: crng reseeded on system resumption [ 565.130869][ T35] net_ratelimit: 31 callbacks suppressed [ 565.130884][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 565.151725][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 565.886285][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 565.901643][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 566.854864][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 566.870056][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 566.949140][T12375] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 567.160731][T12375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.187837][ T5713] usb 2-1: USB disconnect, device number 81 [ 567.206920][ T5713] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 567.217798][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.228619][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.235833][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.236916][T12375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.243894][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.244123][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.268209][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.275348][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.282920][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.290030][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.297138][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 567.304769][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 567.318400][T12386] usb 5-1: USB disconnect, device number 98 [ 567.363313][T12386] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 567.376050][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 567.376067][ T29] audit: type=1400 audit(2000000081.054:1592): avc: denied { watch } for pid=12762 comm="syz.3.1827" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 567.429630][T12375] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 567.455362][T12375] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 567.480824][T12375] usb 6-1: Manufacturer: syz [ 567.489073][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 567.503849][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 567.533030][T12375] usb 6-1: config 0 descriptor?? [ 567.631738][ T29] audit: type=1400 audit(2000000081.294:1593): avc: denied { append } for pid=12766 comm="syz.4.1829" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 567.823773][ T29] audit: type=1400 audit(2000000081.294:1594): avc: denied { open } for pid=12766 comm="syz.4.1829" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 568.123590][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 568.139314][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 568.166111][ T29] audit: type=1400 audit(2000000081.314:1595): avc: denied { ioctl } for pid=12766 comm="syz.4.1829" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 568.263984][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.342587][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.461530][ T5615] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 568.809251][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.887543][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.881355][T12375] usbhid 6-1:0.0: can't add hid device: -71 [ 569.887412][T12375] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 569.942305][T12375] usb 6-1: USB disconnect, device number 7 [ 570.479268][ T6106] net_ratelimit: 6 callbacks suppressed [ 570.479287][ T6106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 570.500809][ T6106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 571.269064][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 571.284186][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 571.400843][T12812] xt_ecn: cannot match TCP bits for non-tcp packets [ 571.522799][T12816] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 571.689158][T12375] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 571.841358][T12375] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 571.850465][T12375] usb 6-1: config 0 has no interface number 0 [ 571.881155][T12375] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 571.895884][T12375] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 571.898958][ T6106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 571.921763][ T6106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 571.937483][T12375] usb 6-1: Product: syz [ 571.942547][T12375] usb 6-1: SerialNumber: syz [ 571.950083][T12375] usb 6-1: config 0 descriptor?? [ 571.959064][T12375] hso 6-1:0.16: Not our interface [ 572.102286][ T29] audit: type=1400 audit(2000000085.784:1596): avc: denied { name_bind } for pid=12824 comm="syz.3.1847" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 572.222119][ T29] audit: type=1400 audit(2000000085.904:1597): avc: denied { read } for pid=12813 comm="syz.5.1843" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 572.266095][T12814] lo speed is unknown, defaulting to 1000 [ 572.428489][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.458121][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.489302][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 572.504126][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 572.881015][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 572.897661][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1844'. [ 572.920873][T12821] netlink: 'syz.4.1844': attribute type 14 has an invalid length. [ 573.129987][T12839] cgroup: Invalid name [ 573.318911][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 573.705640][T12374] usb 6-1: USB disconnect, device number 8 [ 573.958797][T12376] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 574.137883][T12857] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 575.478236][T12376] usb 2-1: Using ep0 maxpacket: 32 [ 575.486465][T12376] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 575.503658][T12376] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.515973][T12376] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 575.528160][T12376] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 575.596241][T12376] usb 2-1: config 0 interface 0 has no altsetting 0 [ 575.626479][T12376] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 575.656028][T12376] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 575.667263][ T29] audit: type=1400 audit(2000000089.335:1598): avc: denied { write } for pid=12840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.711119][T12376] usb 2-1: Product: syz [ 575.736076][T12376] usb 2-1: Manufacturer: syz [ 575.747094][T12376] usb 2-1: SerialNumber: syz [ 575.768344][T12386] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 575.772450][T12376] usb 2-1: config 0 descriptor?? [ 575.794831][T12376] ldusb 2-1:0.0: Interrupt in endpoint not found [ 575.859692][ T29] audit: type=1400 audit(2000000089.545:1599): avc: denied { write } for pid=12871 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.932540][T12386] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 575.962166][T12386] usb 6-1: config 0 has no interface number 0 [ 575.978744][ T6097] net_ratelimit: 7 callbacks suppressed [ 575.978761][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 575.999738][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 576.027855][T12386] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 576.062825][T12386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.101883][T12386] usb 6-1: Product: syz [ 576.129334][T12386] usb 6-1: Manufacturer: syz [ 576.152351][T12386] usb 6-1: SerialNumber: syz [ 576.183610][T12386] usb 6-1: config 0 descriptor?? [ 576.424245][T12866] program syz.5.1856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.471158][T12880] bond0: (slave netdevsim1): Releasing backup interface [ 576.501293][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1856'. [ 576.594069][ T1221] usb 2-1: USB disconnect, device number 82 [ 576.637031][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 576.640025][T12882] bridge_slave_1: left allmulticast mode [ 576.652755][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 576.716898][T12882] bridge_slave_1: left promiscuous mode [ 576.730848][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.758448][T12882] bridge_slave_0: left allmulticast mode [ 576.764408][T12882] bridge_slave_0: left promiscuous mode [ 576.772991][T12882] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.198112][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 577.212830][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 577.497855][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 578.242273][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 578.257481][ T1103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 578.354195][T12906] fuse: fd is not a fuse device [ 578.878616][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 578.893563][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 579.026337][T12385] usb 6-1: USB disconnect, device number 9 [ 579.179736][ T29] audit: type=1400 audit(2000000092.865:1600): avc: denied { write } for pid=12915 comm="syz.5.1869" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 579.476235][T12920] /dev/nullb0: Can't lookup blockdev [ 580.961783][ T29] audit: type=1326 audit(2000000094.645:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.1.1874" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493d9de59 code=0x7fc00000 [ 581.007083][ T29] audit: type=1326 audit(2000000094.685:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.1.1874" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa493d9de59 code=0x7fc00000 [ 581.161515][T12937] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 581.219913][ T57] net_ratelimit: 4 callbacks suppressed [ 581.219929][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 581.241002][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 581.410740][T12376] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 581.571317][T12376] usb 6-1: unable to get BOS descriptor or descriptor too short [ 581.584379][T12376] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 581.593172][T12376] usb 6-1: can't read configurations, error -61 [ 581.731032][T12961] netlink: 'syz.1.1881': attribute type 10 has an invalid length. [ 581.749871][T12376] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 581.768963][T12961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.778758][T12961] team0: Port device netdevsim1 added [ 581.798531][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 581.812917][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 581.997928][T12963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.018051][T12963] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.212641][T12376] usb 6-1: unable to get BOS descriptor or descriptor too short [ 582.223517][T12376] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 582.232074][T12376] usb 6-1: can't read configurations, error -61 [ 582.245257][T12376] usb usb6-port1: attempt power cycle [ 582.286999][T12963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.325676][T12957] netlink: 'syz.1.1881': attribute type 10 has an invalid length. [ 582.463337][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 582.478321][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.038983][T12376] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 583.071613][T12376] usb 6-1: unable to get BOS descriptor or descriptor too short [ 583.089848][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20410 ms [ 583.097895][ C1] sl0: transmit timed out, driver error? [ 583.104778][T12376] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 583.113084][T12376] usb 6-1: can't read configurations, error -61 [ 583.165237][T12963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.198499][T12963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.232813][T12963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 583.248076][T12376] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 583.262979][ T29] audit: type=1326 audit(2000000096.945:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12974 comm="syz.3.1886" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faed659de59 code=0x0 [ 583.300811][T12963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.305861][T12376] usb 6-1: unable to get BOS descriptor or descriptor too short [ 583.321932][T12376] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 583.331162][T12376] usb 6-1: can't read configurations, error -61 [ 583.338790][T12376] usb usb6-port1: unable to enumerate USB device [ 583.359259][T12963] veth1_vlan: left promiscuous mode [ 583.366892][T12963] veth0_vlan: left promiscuous mode [ 583.374734][T12963] veth0_vlan: entered promiscuous mode [ 583.384374][T12963] veth1_vlan: entered promiscuous mode [ 583.397961][T12963] veth1_macvtap: left promiscuous mode [ 583.414147][T12963] veth0_macvtap: left promiscuous mode [ 583.423815][T12963] veth0_macvtap: entered promiscuous mode [ 583.438749][T12963] veth1_macvtap: entered promiscuous mode [ 583.454070][T12963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.470333][T12963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.487026][T12963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 583.495296][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 583.510168][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.547940][T12963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.619846][T12963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.634483][T12963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.648578][T12963] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 583.656755][T12963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.669641][T12963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.684692][T12386] gretap1: entered promiscuous mode [ 583.686009][T12374] lo speed is unknown, defaulting to 1000 [ 583.693162][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.703562][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.730853][T12374] syz2: Port: 1 Link ACTIVE [ 583.731909][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.742561][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.822044][T12957] team0: Port device netdevsim1 removed [ 583.829466][T12957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.838914][T12957] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 583.849115][ T6103] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.861530][ T6103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.875061][ T6103] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.885260][ T6103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.908227][ T6103] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.918108][ T6103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.927436][ T6103] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.939423][ T6103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.048731][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 584.064120][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 584.094473][ T29] audit: type=1400 audit(2000000097.765:1604): avc: denied { lock } for pid=12980 comm="syz.1.1888" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 584.128671][T12374] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 584.371154][T12374] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 584.393735][T12374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.472769][T12374] usb 5-1: Product: syz [ 584.514328][T12374] usb 5-1: Manufacturer: syz [ 584.572186][T12374] usb 5-1: SerialNumber: syz [ 584.714793][T12374] usb 5-1: config 0 descriptor?? [ 585.313417][ T29] audit: type=1400 audit(2000000098.995:1605): avc: denied { mounton } for pid=13004 comm="syz.5.1894" path="/24/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 585.544906][T13019] Invalid ELF header len 16 [ 585.789445][T12374] usb 5-1: Firmware version (0.0) predates our first public release. [ 585.799471][T12374] usb 5-1: Please update to version 0.2 or newer [ 585.872818][T12374] usb 5-1: USB disconnect, device number 99 [ 586.268359][ T6103] net_ratelimit: 6 callbacks suppressed [ 586.268379][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 586.288729][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 587.130695][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 587.145047][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 587.707979][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 587.723147][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 588.248362][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 588.262785][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 588.422313][T13061] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.1912'. [ 588.453274][T13061] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.1912'. [ 588.641109][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 588.656935][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 588.670391][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 588.670624][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 588.786789][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 588.809093][T13077] xt_hashlimit: size too large, truncated to 1048576 [ 588.818332][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 588.849465][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 588.863842][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 589.058369][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 589.070093][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 589.088883][T12376] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 589.361645][T12376] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 589.375266][T12376] usb 5-1: config 0 has no interface number 0 [ 589.385580][T12376] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 589.396691][T12376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.406857][T12376] usb 5-1: Product: syz [ 589.412877][T12376] usb 5-1: Manufacturer: syz [ 589.419039][T12376] usb 5-1: SerialNumber: syz [ 589.448599][T12376] usb 5-1: config 0 descriptor?? [ 589.641856][T12376] usb 5-1: selecting invalid altsetting 1 [ 589.666667][T12376] dvb_ttusb_budget: ttusb_init_controller: error [ 589.682043][T12376] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 589.886028][T12376] DVB: Unable to find symbol stv0299_attach() [ 589.935004][T13105] netlink: 'syz.3.1922': attribute type 7 has an invalid length. [ 590.061986][T12376] DVB: Unable to find symbol tda8083_attach() [ 590.073597][T12376] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 590.205905][T13115] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 590.346959][T12385] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 590.487587][T12376] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 591.237817][T12376] usb 2-1: Using ep0 maxpacket: 8 [ 591.281532][T12376] usb 2-1: config 4 has an invalid interface number: 150 but max is 0 [ 591.329484][T12376] usb 2-1: config 4 has no interface number 0 [ 591.368313][T12376] usb 2-1: config 4 interface 150 has no altsetting 0 [ 591.421694][T12376] usb 2-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=6b.50 [ 591.452242][ T6102] net_ratelimit: 4 callbacks suppressed [ 591.452259][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 591.458519][T12385] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.458572][T12385] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 591.458599][T12385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.460982][T12385] usb 6-1: config 0 descriptor?? [ 591.473953][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 591.478235][T12376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.494775][T12385] pwc: Askey VC010 type 2 USB webcam detected. [ 591.525715][T12376] usb 2-1: Product: syz [ 591.617984][T12376] usb 2-1: Manufacturer: syz [ 591.623430][T12376] usb 2-1: SerialNumber: syz [ 591.865093][T12378] usb 5-1: USB disconnect, device number 100 [ 591.953639][T12376] uvcvideo 2-1:4.150: Found multiple Units with ID 1 [ 591.978629][T12376] uvcvideo 2-1:4.150: Found UVC 0.00 device syz (05ac:8600) [ 591.998940][T12376] uvcvideo 2-1:4.150: No valid video chain found. [ 592.028321][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 592.043544][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.069126][T12376] usb 2-1: USB disconnect, device number 83 [ 592.139285][T12385] pwc: recv_control_msg error -32 req 02 val 2b00 [ 592.146550][T12385] pwc: recv_control_msg error -32 req 02 val 2700 [ 592.153901][T12385] pwc: recv_control_msg error -32 req 02 val 2c00 [ 592.161117][T12385] pwc: recv_control_msg error -32 req 04 val 1000 [ 592.172742][T12385] pwc: recv_control_msg error -32 req 04 val 1300 [ 592.179993][T12385] pwc: recv_control_msg error -32 req 04 val 1400 [ 592.187217][T12385] pwc: recv_control_msg error -32 req 02 val 2000 [ 592.194652][T12385] pwc: recv_control_msg error -32 req 02 val 2100 [ 592.202929][T12385] pwc: recv_control_msg error -32 req 04 val 1500 [ 592.347768][T12378] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 592.410975][T12385] pwc: recv_control_msg error -71 req 02 val 2400 [ 592.418961][T12385] pwc: recv_control_msg error -71 req 02 val 2600 [ 592.425777][T12385] pwc: recv_control_msg error -71 req 02 val 2900 [ 592.432657][T12385] pwc: recv_control_msg error -71 req 02 val 2800 [ 592.439800][T12385] pwc: recv_control_msg error -71 req 04 val 1100 [ 592.446695][T12385] pwc: recv_control_msg error -71 req 04 val 1200 [ 592.459412][T12385] pwc: Registered as video103. [ 592.466075][T12385] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 592.493141][T12385] usb 6-1: USB disconnect, device number 14 [ 592.498245][T12378] usb 5-1: Using ep0 maxpacket: 8 [ 592.514975][T12378] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 592.545297][T12378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.572717][T12378] usb 5-1: Product: syz [ 592.579967][T12378] usb 5-1: Manufacturer: syz [ 592.590126][T12378] usb 5-1: SerialNumber: syz [ 592.613058][T12378] usb 5-1: config 0 descriptor?? [ 592.627715][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 592.642633][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.658955][T12378] gspca_main: se401-2.14.0 probing 047d:5003 [ 592.860680][T12374] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 592.955085][ T29] audit: type=1326 audit(2000000106.635:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cab19de59 code=0x0 [ 593.020585][T12374] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.032713][T12374] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.043102][T12374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.053685][T12374] usb 2-1: config 0 descriptor?? [ 593.062804][T12374] pwc: Askey VC010 type 2 USB webcam detected. [ 593.167788][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 593.180518][T13156] Invalid logical block size (4) [ 593.182319][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 593.247350][ T29] audit: type=1400 audit(2000000106.935:1607): avc: denied { write } for pid=13155 comm="syz.5.1941" path="socket:[37014]" dev="sockfs" ino=37014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 593.476337][T12374] pwc: recv_control_msg error -32 req 02 val 2b00 [ 593.485184][T12374] pwc: recv_control_msg error -32 req 02 val 2700 [ 593.493754][T12374] pwc: recv_control_msg error -32 req 02 val 2c00 [ 593.501275][ T29] audit: type=1400 audit(2000000107.176:1608): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 593.522451][T12376] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 593.531801][T12374] pwc: recv_control_msg error -32 req 04 val 1000 [ 593.540956][T12374] pwc: recv_control_msg error -32 req 04 val 1300 [ 593.549247][T12374] pwc: recv_control_msg error -32 req 04 val 1400 [ 593.557884][T12374] pwc: recv_control_msg error -32 req 02 val 2000 [ 593.707862][T12376] usb 6-1: unable to get BOS descriptor or descriptor too short [ 593.722218][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 593.738647][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 593.774610][T12378] gspca_se401: read req failed req 0x06 error -19 [ 593.785785][T12376] usb 6-1: not running at top speed; connect to a high speed hub [ 593.805007][T12378] usb 5-1: USB disconnect, device number 101 [ 593.815701][T12376] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.831258][T12376] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 593.852173][T12376] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x42, changing to 0x2 [ 593.871796][T12376] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 593.899723][T12376] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 593.921253][T12376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.050455][ T29] audit: type=1400 audit(2000000107.616:1609): avc: denied { append } for pid=13169 comm="syz.4.1946" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 594.075013][T12376] usb 6-1: Product: syz [ 594.079684][T12376] usb 6-1: Manufacturer: syz [ 594.084681][T12376] usb 6-1: SerialNumber: syz [ 594.386250][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 594.428066][T12376] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 594.435092][T12376] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 594.451476][T12376] usb 6-1: USB disconnect, device number 15 [ 594.479408][T12106] udevd[12106]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.097934][T12386] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 595.184910][T13197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.403095][T12386] usb 5-1: Using ep0 maxpacket: 32 [ 595.518860][T12386] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 595.594027][T12386] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 595.655809][T12386] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 595.821015][T12386] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 595.973889][T12386] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 596.020681][T12374] pwc: recv_control_msg error -71 req 02 val 2100 [ 596.128459][T12386] usb 5-1: config 0 interface 0 has no altsetting 0 [ 596.166115][T12374] pwc: recv_control_msg error -71 req 04 val 1500 [ 596.173747][T12374] pwc: recv_control_msg error -71 req 02 val 2500 [ 596.181574][T12374] pwc: recv_control_msg error -71 req 02 val 2400 [ 596.190989][T12374] pwc: recv_control_msg error -71 req 02 val 2600 [ 596.202600][T12374] pwc: recv_control_msg error -71 req 02 val 2900 [ 596.210658][T12374] pwc: recv_control_msg error -71 req 02 val 2800 [ 596.262702][T12386] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 596.386748][T12386] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 596.522315][T12386] usb 5-1: Product: syz [ 596.636033][T12386] usb 5-1: Manufacturer: syz [ 596.786750][T12386] usb 5-1: SerialNumber: syz [ 596.796700][ T6099] net_ratelimit: 8 callbacks suppressed [ 596.796718][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 596.817809][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.955456][T12374] pwc: recv_control_msg error -71 req 04 val 1100 [ 596.964876][T12374] pwc: recv_control_msg error -71 req 04 val 1200 [ 597.007627][T12374] pwc: Registered as video103. [ 597.053718][T12374] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 597.059605][T12386] usb 5-1: config 0 descriptor?? [ 597.071356][T12374] usb 2-1: USB disconnect, device number 84 [ 597.134320][T12386] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 597.340686][T12386] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 597.785095][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 597.799484][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 598.020309][T13224] netlink: 'syz.0.1960': attribute type 10 has an invalid length. [ 598.131355][T13231] /dev/nullb0: Can't open blockdev [ 598.284328][T12374] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 598.474604][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 598.489459][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 598.565773][T12386] usb 5-1: USB disconnect, device number 102 [ 598.574316][T12386] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 598.658350][T12374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.681375][T12374] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.760805][T12374] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 598.770863][T12374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.780638][T12374] usb 6-1: Product: syz [ 598.785415][T12374] usb 6-1: Manufacturer: syz [ 598.794331][T12374] usb 6-1: SerialNumber: syz [ 599.017549][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 599.032316][ T6098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.048546][T13246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 599.265505][T12374] usb 6-1: USB disconnect, device number 16 [ 599.345901][T12106] udevd[12106]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 599.667555][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 599.682602][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 600.498751][T13266] syzkaller0: entered promiscuous mode [ 600.523254][T13266] syzkaller0: entered allmulticast mode [ 600.634162][T13272] misc userio: Invalid payload size [ 602.013782][T13283] /dev/nullb0: Can't open blockdev [ 602.387554][ T57] net_ratelimit: 4 callbacks suppressed [ 602.387570][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 602.408265][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 603.211912][ T29] audit: type=1400 audit(2000000116.716:1610): avc: denied { ioctl } for pid=13287 comm="syz.1.1978" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 603.356373][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 603.370698][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.009735][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 604.024541][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.254338][T13316] netlink: 'syz.1.1982': attribute type 2 has an invalid length. [ 604.262281][T13316] __nla_validate_parse: 1 callbacks suppressed [ 604.262316][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 604.547142][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 604.561552][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.772782][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1985'. [ 604.827471][T13326] macvlan2: entered allmulticast mode [ 604.835239][T13326] dummy0: entered allmulticast mode [ 604.861498][T13326] dummy0: entered promiscuous mode [ 604.918600][ T29] audit: type=1400 audit(2000000118.606:1611): avc: denied { write } for pid=13295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.006318][T12386] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 605.171319][ T29] audit: type=1400 audit(2000000118.856:1612): avc: denied { write } for pid=13345 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.201817][T12386] usb 5-1: unable to get BOS descriptor or descriptor too short [ 605.212599][T12386] usb 5-1: not running at top speed; connect to a high speed hub [ 605.221819][T12386] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.233126][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 605.247790][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 605.359238][T12386] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.851439][T12386] usb 5-1: string descriptor 0 read error: -22 [ 605.857927][T12386] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.867034][T12386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.888103][T12386] usb 5-1: 0:1 : does not exist [ 605.899119][T12386] usb 5-1: 0:2 : does not exist [ 605.979464][T13357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1993'. [ 606.148349][T12386] usb 5-1: 6:0: failed to get current value for ch 1 (-22) [ 606.219524][T12386] usb 5-1: 6:0: failed to get current value for ch 0 (-22) [ 606.294463][ T29] audit: type=1400 audit(2000000119.976:1613): avc: denied { bind } for pid=13365 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 606.380941][ T29] audit: type=1400 audit(2000000119.976:1614): avc: denied { connect } for pid=13365 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 606.548745][T12386] usb 5-1: USB disconnect, device number 103 [ 607.097723][ T29] audit: type=1400 audit(2000000120.776:1615): avc: denied { write } for pid=13355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.317377][T12386] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 607.600765][ T57] net_ratelimit: 4 callbacks suppressed [ 607.600780][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.621381][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.626774][T12374] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 607.662917][T13385] fuse: fd is not a fuse device [ 607.671395][T13385] trusted_key: encrypted_key: insufficient parameters specified [ 607.817410][T12386] usb 5-1: Using ep0 maxpacket: 32 [ 607.824785][T12386] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 607.839844][T12386] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 607.880007][T12386] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 607.904724][T12374] usb 2-1: unable to get BOS descriptor or descriptor too short [ 607.922821][T12374] usb 2-1: config 16 has an invalid interface number: 3 but max is 2 [ 607.941480][T12386] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 607.949148][T12374] usb 2-1: config 16 has an invalid interface number: 107 but max is 2 [ 607.988610][T12374] usb 2-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 608.002089][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 608.009849][ T29] audit: type=1400 audit(2000000121.696:1616): avc: denied { write } for pid=13400 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.041155][T12374] usb 2-1: config 16 has no interface number 0 [ 608.041150][T12386] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 608.041186][T12386] usb 5-1: config 0 interface 0 has no altsetting 0 [ 608.052090][T12374] usb 2-1: config 16 has no interface number 1 [ 608.087448][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'. [ 608.123909][T12374] usb 2-1: config 16 interface 3 has no altsetting 0 [ 608.155630][T12374] usb 2-1: config 16 interface 107 has no altsetting 0 [ 608.175844][T12386] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 608.187314][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 608.202097][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.221139][T12374] usb 2-1: string descriptor 0 read error: -22 [ 608.228372][T12374] usb 2-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 608.254073][T12386] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 608.254615][T12374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.267162][T12386] usb 5-1: Product: syz [ 608.312329][T12386] usb 5-1: Manufacturer: syz [ 608.331620][T12386] usb 5-1: SerialNumber: syz [ 608.356209][T12386] usb 5-1: config 0 descriptor?? [ 608.402346][T12386] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 608.447850][T12386] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 608.478711][T12374] usb 2-1: unknown number of interfaces: 2 [ 608.524030][T12386] usb 2-1: USB disconnect, device number 85 [ 608.683699][T13419] FAULT_INJECTION: forcing a failure. [ 608.683699][T13419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.697827][T13419] CPU: 1 UID: 0 PID: 13419 Comm: syz.5.2005 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.697855][T13419] Tainted: [L]=SOFTLOCKUP [ 608.697862][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 608.697874][T13419] Call Trace: [ 608.697881][T13419] [ 608.697889][T13419] dump_stack_lvl+0x100/0x190 [ 608.697922][T13419] should_fail_ex.cold+0x5/0xa [ 608.697948][T13419] _copy_to_user+0x32/0xd0 [ 608.697976][T13419] old_deviceless+0x4ae/0x700 [ 608.698004][T13419] ? __pfx_old_deviceless+0x10/0x10 [ 608.698032][T13419] ? trace_contention_end+0x126/0x160 [ 608.698061][T13419] ? __mutex_lock+0x26d/0x1bd0 [ 608.698097][T13419] br_ioctl_stub+0x12b/0x4d0 [ 608.698122][T13419] ? __pfx_br_ioctl_stub+0x10/0x10 [ 608.698155][T13419] ? do_vfs_ioctl+0x226/0x13e0 [ 608.698190][T13419] ? __pfx_br_ioctl_stub+0x10/0x10 [ 608.698214][T13419] br_ioctl_call+0x53/0xa0 [ 608.698243][T13419] sock_ioctl+0x616/0x6b0 [ 608.698272][T13419] ? __pfx_sock_ioctl+0x10/0x10 [ 608.698297][T13419] ? hook_file_ioctl_common+0x140/0x440 [ 608.698328][T13419] ? selinux_file_ioctl+0x13b/0x290 [ 608.698357][T13419] ? selinux_file_ioctl+0xb6/0x290 [ 608.698393][T13419] ? __pfx_sock_ioctl+0x10/0x10 [ 608.698422][T13419] __x64_sys_ioctl+0x18e/0x210 [ 608.698454][T13419] do_syscall_64+0x115/0x870 [ 608.698482][T13419] ? clear_bhb_loop+0x40/0x90 [ 608.698507][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.698530][T13419] RIP: 0033:0x7ff60c59de59 [ 608.698548][T13419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.698568][T13419] RSP: 002b:00007ff60d3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.698589][T13419] RAX: ffffffffffffffda RBX: 00007ff60c826180 RCX: 00007ff60c59de59 [ 608.698604][T13419] RDX: 0000200000000340 RSI: 0000000000008940 RDI: 0000000000000005 [ 608.698617][T13419] RBP: 00007ff60d3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 608.698630][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.698642][T13419] R13: 00007ff60c826218 R14: 00007ff60c826180 R15: 00007ffe3e32f858 [ 608.698673][T13419] [ 609.104563][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.119792][ T6112] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.565054][T13387] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 609.575569][T12386] usb 5-1: USB disconnect, device number 104 [ 609.592769][T12386] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 609.646462][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 609.661758][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.740882][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 611.043637][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 611.058421][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.512128][ T5713] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 612.829110][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.844106][ T6103] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.011568][ T29] audit: type=1400 audit(2000000126.697:1617): avc: denied { read } for pid=13446 comm="syz.3.2015" path="socket:[37436]" dev="sockfs" ino=37436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 613.036626][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 613.091849][T13451] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2015'. [ 613.561632][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.576981][ T6099] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.859954][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2019'. [ 614.058679][T13468] Bluetooth: MGMT ver 1.23 [ 614.456822][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.471969][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.197062][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 615.211439][ T6102] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.392284][ T5713] usb 2-1: device descriptor read/all, error -71 [ 615.734138][T13498] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 616.304291][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 616.319647][ T6097] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.338499][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.346091][T13508] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.398800][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2031'. [ 617.427603][T13508] batman_adv: batadv0: Interface deactivated: dummy0 [ 617.527106][ T5713] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 617.554239][T13508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.591353][T13508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.668503][ T5713] usb 2-1: device descriptor read/64, error -71 [ 617.941352][ T5713] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 617.961837][T13508] dummy0: left allmulticast mode [ 618.432638][ T6103] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.452950][ T6103] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.464849][ T6103] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.475131][ T6103] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.532964][T13537] MTD: Couldn't look up '/dev/nullb0': -15 [ 618.545414][ T5713] usb 2-1: device descriptor read/64, error -71 [ 618.611165][T13539] overlayfs: missing 'lowerdir' [ 619.019774][ T5713] usb usb2-port1: attempt power cycle [ 619.344681][T13545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 619.351967][T13545] IPv6: NLM_F_CREATE should be set when creating new route [ 619.962866][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.994630][T13545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.214318][T13567] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 620.570898][ T6098] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.614449][ T6098] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.772111][ T6098] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.795054][ T6098] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.851791][T13592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.018418][T13625] syzkaller0: entered promiscuous mode [ 623.026830][T13625] syzkaller0: entered allmulticast mode [ 623.156093][T12386] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 623.265841][T12374] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 623.329512][T12386] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 623.361449][T12386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.384463][T12386] usb 5-1: config 0 descriptor?? [ 623.396161][T12386] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 623.441736][T12374] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 623.488431][T12374] usb 2-1: config 0 has no interface number 0 [ 623.516130][T12374] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 623.568239][T12374] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 14332, setting to 64 [ 623.637624][T12374] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 623.744729][T12374] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 623.789111][T12374] usb 2-1: Product: syz [ 623.814289][T12374] usb 2-1: SerialNumber: syz [ 623.863653][T12374] usb 2-1: config 0 descriptor?? [ 623.902026][T13636] 9p: Bad value for 'wfdno' [ 623.933351][T12374] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 623.987805][T13639] fuse: fd is not a fuse device [ 624.056022][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.063065][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.110635][T13642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.246387][ T6098] sl0: compressed packet ignored [ 624.561852][T12386] gspca_cpia1: usb_control_msg 05, error -110 [ 624.581445][T12374] usb 2-1: USB disconnect, device number 91 [ 624.582564][T12386] gspca_cpia1: usb_control_msg 01, error -32 [ 624.606705][T12386] gspca_cpia1: usb_control_msg 01, error -32 [ 624.613253][T12386] gspca_cpia1: usb_control_msg 01, error -32 [ 624.620026][T12386] gspca_cpia1: usb_control_msg 01, error -32 [ 624.628400][T12386] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 625.014354][T13646] lo speed is unknown, defaulting to 1000 [ 625.603993][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'. [ 625.775761][T12386] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 625.956728][T12374] usb 5-1: USB disconnect, device number 105 [ 626.007320][T12386] usb 6-1: Using ep0 maxpacket: 8 [ 626.220260][ T29] audit: type=1326 audit(2000000139.907:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 626.306250][ T29] audit: type=1326 audit(2000000139.907:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 626.402406][ T29] audit: type=1326 audit(2000000139.937:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 626.875024][ T29] audit: type=1326 audit(2000000139.947:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 627.474095][ T29] audit: type=1326 audit(2000000139.947:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 627.501880][ T29] audit: type=1326 audit(2000000139.947:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 627.581145][ T29] audit: type=1326 audit(2000000139.947:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 627.712825][T13685] /dev/nullb0: Can't open blockdev [ 628.545093][ T29] audit: type=1326 audit(2000000139.947:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff60c59f6c7 code=0x7ffc0000 [ 628.572557][ T29] audit: type=1326 audit(2000000139.947:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60c59de59 code=0x7ffc0000 [ 628.601424][ T29] audit: type=1326 audit(2000000139.947:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.5.2075" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff60c55e68e code=0x7ffc0000 [ 628.735597][T13695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.528424][T12386] usb 6-1: unable to get BOS descriptor or descriptor too short [ 629.568730][T13710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.581006][T12386] usb 6-1: too many configurations: 169, using maximum allowed: 8 [ 629.622419][T12386] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 629.638481][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.650404][T12386] usb 6-1: can't read configurations, error -71 [ 629.680925][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.362096][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 631.424925][T12386] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 631.573365][T12374] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x2 [ 631.598874][T12374] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x1 [ 631.613198][T12374] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 631.622963][T13758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.635578][T12374] hid-generic 00A0:0006:0003.0014: unknown main item tag 0x0 [ 631.643532][T12386] usb 6-1: Using ep0 maxpacket: 8 [ 631.643724][T12374] hid-generic 00A0:0006:0003.0014: item fetching failed at offset 14/15 [ 631.660248][T12374] hid-generic 00A0:0006:0003.0014: probe with driver hid-generic failed with error -22 [ 631.718224][T12386] usb 6-1: unable to get BOS descriptor or descriptor too short [ 631.730986][T12386] usb 6-1: config 2 has an invalid interface number: 78 but max is 1 [ 631.740011][T12386] usb 6-1: config 2 has an invalid interface number: 141 but max is 1 [ 631.749089][T12386] usb 6-1: config 2 has no interface number 0 [ 631.755437][T12386] usb 6-1: config 2 has no interface number 1 [ 631.761629][T12386] usb 6-1: config 2 interface 141 has no altsetting 0 [ 631.772524][T12386] usb 6-1: string descriptor 0 read error: -22 [ 631.778900][T12386] usb 6-1: New USB device found, idVendor=0424, idProduct=9907, bcdDevice=77.cf [ 631.788116][T12386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.807769][T12386] usb 6-1: Interface #141 referenced by multiple IADs [ 631.861152][T12386] smsc95xx 6-1:2.78 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 631.905444][T12386] smsc95xx 6-1:2.78: probe with driver smsc95xx failed with error -22 [ 631.945469][T12386] smsc95xx 6-1:2.141 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 631.976763][T12386] smsc95xx 6-1:2.141: probe with driver smsc95xx failed with error -22 [ 631.997294][T12386] usbhid 6-1:2.141: couldn't find an input interrupt endpoint [ 632.125350][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2098'. [ 632.137274][ T1221] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 632.297283][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.317993][ T1221] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 632.339116][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.369002][ T1221] usb 5-1: config 0 descriptor?? [ 632.590732][ T1221] usbhid 5-1:0.0: can't add hid device: -71 [ 632.608553][ T1221] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 632.636577][ T1221] usb 5-1: USB disconnect, device number 106 [ 633.055255][T13779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.264655][ T1221] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 633.477003][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.497685][ T1221] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 633.520266][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.570382][ T1221] usb 5-1: config 0 descriptor?? [ 633.621999][T12374] usb 6-1: USB disconnect, device number 18 [ 634.156003][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.189895][T13796] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 634.226668][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.166083][T13762] kAFS: unable to lookup cell '.' [ 635.626501][T13815] netlink: zone id is out of range [ 635.647714][T13815] netlink: zone id is out of range [ 635.672063][T13815] netlink: zone id is out of range [ 635.691217][T13815] netlink: zone id is out of range [ 635.710360][T13815] netlink: zone id is out of range [ 635.738529][T13815] netlink: zone id is out of range [ 635.746934][T13815] netlink: zone id is out of range [ 635.755712][T13815] netlink: zone id is out of range [ 635.773475][T13815] netlink: zone id is out of range [ 635.792394][T13815] netlink: zone id is out of range [ 636.171519][ T6098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.186325][ T6098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.363243][T13829] xt_ecn: cannot match TCP bits for non-tcp packets [ 636.519564][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2118'. [ 636.841363][T13829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.919770][ T1221] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 636.940357][ T1221] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 637.066916][ T1221] usb 5-1: USB disconnect, device number 107 [ 637.066982][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 637.225129][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 637.225175][ T29] audit: type=1400 audit(2000000150.918:1690): avc: denied { setopt } for pid=13841 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 637.961539][T13853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 638.146966][T13853] netlink: 'syz.4.2120': attribute type 10 has an invalid length. [ 638.368533][T13853] team0 (unregistering): Port device team_slave_0 removed [ 638.468191][T13853] team0 (unregistering): Port device team_slave_1 removed [ 638.568009][T13853] team0 (unregistering): Port device netdevsim1 removed [ 638.763430][ T29] audit: type=1400 audit(2000000152.448:1691): avc: denied { mounton } for pid=13871 comm="syz.5.2127" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.763456][T13872] binder: Bad value for 'max' [ 639.810008][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'. [ 639.820492][T13889] bridge_slave_1: left allmulticast mode [ 639.827181][T13889] bridge_slave_1: left promiscuous mode [ 639.833993][T13889] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.924018][T13889] bridge_slave_0: left allmulticast mode [ 639.931420][T13889] bridge_slave_0: left promiscuous mode [ 639.939118][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.137028][ T1221] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 640.609756][T13892] overlayfs: failed to clone lowerpath [ 641.011467][ T1221] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 641.233001][ T1221] usb 5-1: config 0 has no interface number 0 [ 641.247492][ T1221] usb 5-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 641.363531][ T1221] usb 5-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 641.404052][ T1221] usb 5-1: config 0 interface 13 has no altsetting 0 [ 642.336310][ T1221] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 642.347063][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.402514][ T1221] usb 5-1: Product: syz [ 642.432823][ T1221] usb 5-1: Manufacturer: syz [ 642.453244][ T1221] usb 5-1: SerialNumber: syz [ 642.456612][T13924] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2142'. [ 642.468415][T13924] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2142'. [ 642.486475][ T1221] usb 5-1: config 0 descriptor?? [ 642.513644][ T1221] usb 5-1: can't set config #0, error -71 [ 642.537615][ T1221] usb 5-1: USB disconnect, device number 108 [ 642.645163][T13926] lo speed is unknown, defaulting to 1000 [ 644.523882][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 644.531912][ C1] sl0: transmit timed out, driver error? [ 644.944101][T12385] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 645.087311][ T1221] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 645.117397][T13963] netlink: 'syz.0.2153': attribute type 1 has an invalid length. [ 645.184576][T12385] usb 6-1: Using ep0 maxpacket: 32 [ 645.209432][T12385] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 645.218741][T12385] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 645.231153][T12385] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 645.245251][T13963] bond5: entered promiscuous mode [ 645.250955][T13963] bond5: entered allmulticast mode [ 645.256657][T12385] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 645.271290][T13963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.284223][ T1221] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 645.310766][ T1221] usb 2-1: config 0 has no interface number 0 [ 645.318717][T12385] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.339619][ T1221] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 645.354667][T13965] erspan1: entered allmulticast mode [ 645.367538][T12385] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 645.384339][T12385] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 645.395078][ T1221] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 14332, setting to 64 [ 645.407983][T13965] bond5: (slave erspan1): making interface the new active one [ 645.419318][T12385] usb 6-1: Product: syz [ 645.426706][T12385] usb 6-1: Manufacturer: syz [ 645.435256][ T1221] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 645.444682][T13965] erspan1: entered promiscuous mode [ 645.445944][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 645.458820][T12385] usb 6-1: SerialNumber: syz [ 645.480769][T12385] usb 6-1: config 0 descriptor?? [ 645.488652][ T1221] usb 2-1: Product: syz [ 645.503121][T12385] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 645.513581][ T1221] usb 2-1: SerialNumber: syz [ 645.524739][ T1221] usb 2-1: config 0 descriptor?? [ 645.546407][T13965] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 645.555207][T12385] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 645.558777][ T1221] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 645.605591][T13972] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2154'. [ 645.833615][T12376] usb 2-1: USB disconnect, device number 92 [ 647.290800][T12376] usb 6-1: USB disconnect, device number 19 [ 647.302858][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2164'. [ 647.338161][T12376] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 648.535168][T14039] overlayfs: failed to resolve './cgroup': -2 [ 648.823796][T12387] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 648.856387][T14049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 648.984282][T12387] usb 6-1: Using ep0 maxpacket: 32 [ 649.069071][T12387] usb 6-1: config 10 has an invalid interface number: 251 but max is 0 [ 649.077923][T12387] usb 6-1: config 10 has no interface number 0 [ 649.085404][T12387] usb 6-1: config 10 interface 251 has no altsetting 0 [ 649.095226][T12387] usb 6-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 649.104566][T12387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.112588][T12387] usb 6-1: Product: syz [ 649.123266][ T1221] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 649.134003][T12387] usb 6-1: Manufacturer: syz [ 649.565943][T12387] usb 6-1: SerialNumber: syz [ 649.716035][ T1221] usb 5-1: unable to get BOS descriptor or descriptor too short [ 649.748618][ T1221] usb 5-1: config index 0 descriptor too short (expected 198, got 134) [ 649.769740][ T1221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.786199][ T1221] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.957667][ T1221] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 649.967180][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.995858][ T1221] usb 5-1: Product: syz [ 650.465433][T14063] fuse: fd is not a fuse device [ 650.474592][ T1221] usb 5-1: Manufacturer: syz [ 650.499154][ T1221] usb 5-1: SerialNumber: syz [ 650.533671][ T1221] usb 5-1: 0:1 : does not exist [ 650.712174][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 650.733437][ T1221] usb 5-1: unit 0 not found! [ 650.791731][ T29] audit: type=1400 audit(2000000164.479:1692): avc: denied { lock } for pid=14072 comm="syz.3.2180" path="socket:[39532]" dev="sockfs" ino=39532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 650.833236][ T1221] usb 5-1: USB disconnect, device number 109 [ 650.950388][T13760] udevd[13760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.307388][T14088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2184'. [ 651.318340][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2184'. [ 651.335065][T14088] netlink: 6716 bytes leftover after parsing attributes in process `syz.0.2184'. [ 651.461264][T14093] fuse: fd is not a fuse device [ 651.662998][T12387] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 651.697172][T12387] gspca_sunplus: reg_r err -71 [ 651.719371][T12387] sunplus 6-1:10.251: probe with driver sunplus failed with error -71 [ 651.780048][T12387] usb 6-1: USB disconnect, device number 20 [ 652.271083][T14104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2190'. [ 652.290654][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'. [ 652.333646][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 652.386843][T12387] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 652.655189][T12387] usb 6-1: Using ep0 maxpacket: 32 [ 652.668036][T12387] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 652.686736][T12387] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 652.698575][T12387] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 652.720762][T12387] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 652.741139][T12387] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 652.773513][T12387] usb 6-1: config 0 interface 0 has no altsetting 0 [ 652.869726][T12387] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 653.067563][T14124] lo speed is unknown, defaulting to 1000 [ 653.501405][T14125] lo speed is unknown, defaulting to 1000 [ 653.868179][T12387] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 653.876909][T12387] usb 6-1: Product: syz [ 653.881146][T12387] usb 6-1: Manufacturer: syz [ 653.886212][T12387] usb 6-1: SerialNumber: syz [ 653.893712][T12387] usb 6-1: config 0 descriptor?? [ 654.503709][T12387] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 654.523455][T12387] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 655.224421][T12387] usb 6-1: USB disconnect, device number 21 [ 655.297417][T12387] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 655.585433][T14135] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 656.360366][T14142] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 656.677510][ T29] audit: type=1400 audit(2000000170.369:1693): avc: denied { write } for pid=14148 comm="syz.5.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 657.355097][ T29] audit: type=1326 audit(2000000171.049:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.388957][ T29] audit: type=1326 audit(2000000171.049:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.438083][ T29] audit: type=1326 audit(2000000171.079:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.469069][ T29] audit: type=1326 audit(2000000171.079:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.496921][T12374] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 657.505947][ T29] audit: type=1326 audit(2000000171.079:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.535742][ T29] audit: type=1326 audit(2000000171.079:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.566024][ T29] audit: type=1326 audit(2000000171.079:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.596600][ T29] audit: type=1326 audit(2000000171.109:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.618074][ T1221] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 657.630558][ T29] audit: type=1326 audit(2000000171.109:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.0.2210" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cab19de59 code=0x7ffc0000 [ 657.704864][T12374] usb 2-1: Using ep0 maxpacket: 32 [ 657.712972][T12374] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 657.725171][T12374] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 657.738443][T12374] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 657.751545][T12374] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 657.762361][T12374] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 657.776836][T12374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 657.786404][T12374] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 657.796590][T12374] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 657.806079][T12374] usb 2-1: Product: syz [ 657.810414][T12374] usb 2-1: Manufacturer: syz [ 657.816171][T12374] usb 2-1: SerialNumber: syz [ 657.825402][T12374] usb 2-1: config 0 descriptor?? [ 657.836843][T12374] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 657.852947][T12374] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 657.934329][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 657.941121][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 657.952372][ T1221] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 657.962388][ T1221] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 657.977296][ T1221] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 657.986512][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.995063][ T1221] usb 6-1: Product: syz [ 657.999363][ T1221] usb 6-1: Manufacturer: syz [ 658.005738][ T1221] usb 6-1: SerialNumber: syz [ 658.019129][ T1221] usb 6-1: config 0 descriptor?? [ 658.035714][T14157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 658.044362][T14157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 658.060242][ C0] port100 6-1:0.0: NFC: Urb failure (status -71) [ 658.070148][ C0] port100 6-1:0.0: NFC: Urb failure (status -71) [ 658.083237][ T1221] port100 6-1:0.0: NFC: Could not get supported command types [ 658.273366][ T1221] usb 6-1: USB disconnect, device number 22 [ 658.347895][T14166] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 658.357528][T12387] usb 2-1: USB disconnect, device number 93 [ 658.371230][T12387] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 658.560946][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 659.095898][T14210] FAULT_INJECTION: forcing a failure. [ 659.095898][T14210] name failslab, interval 1, probability 0, space 0, times 0 [ 659.110731][T14210] CPU: 0 UID: 0 PID: 14210 Comm: syz.1.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.110765][T14210] Tainted: [L]=SOFTLOCKUP [ 659.110773][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.110786][T14210] Call Trace: [ 659.110793][T14210] [ 659.110802][T14210] dump_stack_lvl+0x100/0x190 [ 659.110836][T14210] should_fail_ex.cold+0x5/0xa [ 659.110873][T14210] should_failslab+0xc2/0x120 [ 659.110904][T14210] __kmalloc_cache_noprof+0x91/0x6c0 [ 659.110938][T14210] ? vlan_dev_set_egress_priority+0x22d/0x6e0 [ 659.110975][T14210] vlan_dev_set_egress_priority+0x22d/0x6e0 [ 659.111010][T14210] vlan_ioctl_handler+0x41d/0xa70 [ 659.111035][T14210] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 659.111067][T14210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 659.111102][T14210] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 659.111125][T14210] sock_ioctl+0x5e9/0x6b0 [ 659.111155][T14210] ? __pfx_sock_ioctl+0x10/0x10 [ 659.111181][T14210] ? hook_file_ioctl_common+0x140/0x440 [ 659.111214][T14210] ? selinux_file_ioctl+0x13b/0x290 [ 659.111243][T14210] ? selinux_file_ioctl+0xb6/0x290 [ 659.111274][T14210] ? __pfx_sock_ioctl+0x10/0x10 [ 659.111304][T14210] __x64_sys_ioctl+0x18e/0x210 [ 659.111336][T14210] do_syscall_64+0x115/0x870 [ 659.111365][T14210] ? clear_bhb_loop+0x40/0x90 [ 659.111391][T14210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.111414][T14210] RIP: 0033:0x7fa493d9de59 [ 659.111432][T14210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.111452][T14210] RSP: 002b:00007fa494d01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.111473][T14210] RAX: ffffffffffffffda RBX: 00007fa494025fa0 RCX: 00007fa493d9de59 [ 659.111488][T14210] RDX: 00002000000000c0 RSI: 0000000000008982 RDI: 0000000000000003 [ 659.111501][T14210] RBP: 00007fa494d01090 R08: 0000000000000000 R09: 0000000000000000 [ 659.111514][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.111526][T14210] R13: 00007fa494026038 R14: 00007fa494025fa0 R15: 00007ffd08c988e8 [ 659.111555][T14210] [ 659.454050][T12387] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 659.510808][T14216] netlink: 'syz.3.2224': attribute type 10 has an invalid length. [ 659.599535][T14199] FAULT_INJECTION: forcing a failure. [ 659.599535][T14199] name fail_futex, interval 1, probability 0, space 0, times 1 [ 659.612776][T14199] CPU: 0 UID: 0 PID: 14199 Comm: syz.4.2218 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.612809][T14199] Tainted: [L]=SOFTLOCKUP [ 659.612816][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.612836][T14199] Call Trace: [ 659.612842][T14199] [ 659.612849][T14199] dump_stack_lvl+0x100/0x190 [ 659.612884][T14199] should_fail_ex.cold+0x5/0xa [ 659.612914][T14199] get_futex_key+0x1d2/0x14f0 [ 659.612945][T14199] ? __pfx_get_futex_key+0x10/0x10 [ 659.612970][T14199] ? lock_acquire+0x1b9/0x370 [ 659.612998][T14199] futex_wake+0xf4/0x5e0 [ 659.613022][T14199] ? __pfx_futex_wake+0x10/0x10 [ 659.613044][T14199] ? find_held_lock+0x2b/0x80 [ 659.613065][T14199] ? exit_mm_release+0x19/0x30 [ 659.613102][T14199] do_futex+0x2b2/0x440 [ 659.613132][T14199] ? __pfx_do_futex+0x10/0x10 [ 659.613160][T14199] ? __might_fault+0xc5/0x140 [ 659.613189][T14199] mm_release+0x24a/0x2f0 [ 659.613215][T14199] do_exit+0x707/0x2ae0 [ 659.613240][T14199] ? __pfx_do_exit+0x10/0x10 [ 659.613260][T14199] ? do_raw_spin_lock+0x128/0x260 [ 659.613289][T14199] ? find_held_lock+0x2b/0x80 [ 659.613308][T14199] ? get_signal+0x7e0/0x21e0 [ 659.613337][T14199] do_group_exit+0xd5/0x2a0 [ 659.613360][T14199] get_signal+0x1ec7/0x21e0 [ 659.613387][T14199] ? security_file_permission+0x76/0x210 [ 659.613428][T14199] ? __pfx_get_signal+0x10/0x10 [ 659.613457][T14199] ? __pfx_vfs_write+0x10/0x10 [ 659.613487][T14199] ? find_held_lock+0x2b/0x80 [ 659.613510][T14199] arch_do_signal_or_restart+0x91/0x7e0 [ 659.613536][T14199] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 659.613569][T14199] ? fput+0x79/0x100 [ 659.613599][T14199] exit_to_user_mode_loop+0x139/0x6f0 [ 659.613627][T14199] ? rcu_is_watching+0x12/0xc0 [ 659.613661][T14199] do_syscall_64+0x666/0x870 [ 659.613690][T14199] ? clear_bhb_loop+0x40/0x90 [ 659.613717][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.613739][T14199] RIP: 0033:0x7f163cb9de59 [ 659.613757][T14199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.613777][T14199] RSP: 002b:00007f163dabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.613799][T14199] RAX: fffffffffffffe00 RBX: 00007f163ce25fa0 RCX: 00007f163cb9de59 [ 659.613813][T14199] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 659.613830][T14199] RBP: 00007f163dabe090 R08: 0000000000000000 R09: 0000000000000000 [ 659.613843][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.613855][T14199] R13: 00007f163ce26038 R14: 00007f163ce25fa0 R15: 00007ffce0db97e8 [ 659.613882][T14199] [ 659.889446][T12387] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.902042][T12387] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.912392][T12387] usb 6-1: config 0 interface 0 has no altsetting 0 [ 659.919140][T12387] usb 6-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 659.930116][T12387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.947279][T12387] usb 6-1: config 0 descriptor?? [ 660.233008][ T1221] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 660.397344][ T1221] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 660.410080][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 660.421847][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 660.435026][ T1221] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 660.446599][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.456121][ T1221] usb 2-1: Product: syz [ 660.460576][ T1221] usb 2-1: Manufacturer: syz [ 660.465694][ T1221] usb 2-1: SerialNumber: syz [ 660.493244][ T1221] usb 2-1: config 0 descriptor?? [ 660.499405][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.509594][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.521323][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.531527][ T1221] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 660.547812][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.556328][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.564600][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.571933][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.579504][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.587106][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.596079][T12387] evision 0003:320F:5041.0015: unknown main item tag 0x0 [ 660.616742][T12387] evision 0003:320F:5041.0015: hidraw0: USB HID v7f.fd Device [HID 320f:5041] on usb-dummy_hcd.5-1/input0 [ 660.711619][T12387] usb 6-1: USB disconnect, device number 23 [ 660.947397][T14232] fuse: fd is not a fuse device [ 661.389789][T14236] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2228'. [ 661.407175][T14236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.418946][T14236] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 661.430475][T14236] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 661.440755][T14236] veth1_vlan: left allmulticast mode [ 661.455763][T14236] bond0 (unregistering): Released all slaves [ 661.538963][T14239] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2229'. [ 661.551355][T14239] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 661.564452][T14239] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 661.588638][T14239] overlayfs: overlapping lowerdir path [ 661.597226][T14239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14239 comm=syz.5.2229 [ 662.307420][ T35] [ 662.309755][ T35] ============================================ [ 662.315878][ T35] WARNING: possible recursive locking detected [ 662.321998][ T35] syzkaller #0 Tainted: G L [ 662.327943][ T35] -------------------------------------------- [ 662.334060][ T35] kworker/u8:2/35 is trying to acquire lock: [ 662.340014][ T35] ffff88802a256958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 662.349856][ T35] [ 662.349856][ T35] but task is already holding lock: [ 662.357193][ T35] ffff888054c97158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 662.366996][ T35] [ 662.366996][ T35] other info that might help us debug this: [ 662.375038][ T35] Possible unsafe locking scenario: [ 662.375038][ T35] [ 662.382543][ T35] CPU0 [ 662.385799][ T35] ---- [ 662.389069][ T35] lock(&qdisc_xmit_lock_key#4); [ 662.394075][ T35] lock(&qdisc_xmit_lock_key#4); [ 662.399085][ T35] [ 662.399085][ T35] *** DEADLOCK *** [ 662.399085][ T35] [ 662.407208][ T35] May be due to missing lock nesting notation [ 662.407208][ T35] [ 662.415498][ T35] 10 locks held by kworker/u8:2/35: [ 662.420665][ T35] #0: ffff88807ef5a140 ((wq_completion)bond5){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 662.430986][ T35] #1: ffffc90000ab7d08 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 662.443225][ T35] #2: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xec/0x16f0 [ 662.452769][ T35] #3: ffffffff8e9e6060 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4940 [ 662.462664][ T35] #4: ffff88807511a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x24e2/0x4940 [ 662.475253][ T35] #5: ffff888054c97158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc70 [ 662.485492][ T35] #6: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xc10 [ 662.494342][ T35] #7: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x2400 [ 662.504056][ T35] #8: ffffffff8e9e6060 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4940 [ 662.513946][ T35] #9: ffff88802a32d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x24e2/0x4940 [ 662.526549][ T35] [ 662.526549][ T35] stack backtrace: [ 662.532415][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.532432][ T35] Tainted: [L]=SOFTLOCKUP [ 662.532436][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.532454][ T35] Workqueue: bond5 bond_alb_monitor [ 662.532471][ T35] Call Trace: [ 662.532476][ T35] [ 662.532482][ T35] dump_stack_lvl+0x100/0x190 [ 662.532499][ T35] print_deadlock_bug.cold+0xbd/0xca [ 662.532517][ T35] __lock_acquire+0x1256/0x1a40 [ 662.532534][ T35] lock_acquire+0x1b9/0x370 [ 662.532546][ T35] ? sch_direct_xmit+0x3b5/0xc70 [ 662.532562][ T35] _raw_spin_lock+0x2e/0x40 [ 662.532576][ T35] ? sch_direct_xmit+0x3b5/0xc70 [ 662.532588][ T35] sch_direct_xmit+0x3b5/0xc70 [ 662.532601][ T35] ? lock_acquire+0x1b9/0x370 [ 662.532614][ T35] ? __pfx_sch_direct_xmit+0x10/0x10 [ 662.532629][ T35] ? do_raw_spin_lock+0x1c0/0x260 [ 662.532646][ T35] __dev_queue_xmit+0x278a/0x4940 [ 662.532673][ T35] ? add_lock_to_list+0x99/0x110 [ 662.532693][ T35] ? __pfx___dev_queue_xmit+0x10/0x10 [ 662.532722][ T35] ? lockdep_unlock+0x5a/0xc0 [ 662.532732][ T35] ? __lock_acquire+0xd5b/0x1a40 [ 662.532749][ T35] ? __asan_memcpy+0x3c/0x60 [ 662.532761][ T35] ? eth_header+0x120/0x1f0 [ 662.532775][ T35] neigh_resolve_output+0x51f/0x8f0 [ 662.532792][ T35] ip_finish_output2+0x851/0x2400 [ 662.532811][ T35] ? __pfx_ip_finish_output2+0x10/0x10 [ 662.532836][ T35] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 662.532862][ T35] ? nf_nat_ipv4_out+0xb2/0x510 [ 662.532875][ T35] ? find_held_lock+0x2b/0x80 [ 662.532886][ T35] __ip_finish_output.part.0+0x444/0x6f0 [ 662.532903][ T35] ip_output+0x39b/0xc10 [ 662.532919][ T35] ? __pfx_ip_output+0x10/0x10 [ 662.532934][ T35] ? __pfx_get_random_u32+0x10/0x10 [ 662.532950][ T35] ? __pfx_ip_finish_output+0x10/0x10 [ 662.532967][ T35] ? __pfx_ip_output+0x10/0x10 [ 662.532982][ T35] ip_local_out+0x193/0x1f0 [ 662.532999][ T35] iptunnel_xmit+0x722/0xd20 [ 662.533013][ T35] ip_tunnel_xmit+0x1b91/0x3210 [ 662.533032][ T35] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 662.533048][ T35] ? do_raw_spin_lock+0x128/0x260 [ 662.533065][ T35] ? do_raw_spin_unlock+0x145/0x1e0 [ 662.533080][ T35] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 662.533096][ T35] __gre_xmit+0x820/0xb20 [ 662.533111][ T35] ? __pfx___gre_xmit+0x10/0x10 [ 662.533131][ T35] ? netif_skb_features+0x9cf/0x13f0 [ 662.533147][ T35] erspan_xmit+0x55a/0x1ec0 [ 662.533162][ T35] ? rcu_is_watching+0x12/0xc0 [ 662.533179][ T35] ? __pfx_erspan_xmit+0x10/0x10 [ 662.533195][ T35] dev_hard_start_xmit+0x121/0x760 [ 662.533212][ T35] sch_direct_xmit+0x1b2/0xc70 [ 662.533225][ T35] ? lock_acquire+0x1b9/0x370 [ 662.533238][ T35] ? __pfx_sch_direct_xmit+0x10/0x10 [ 662.533251][ T35] ? do_raw_spin_lock+0x1c0/0x260 [ 662.533265][ T35] ? __dev_queue_xmit+0x82d/0x4940 [ 662.533282][ T35] __dev_queue_xmit+0x278a/0x4940 [ 662.533299][ T35] ? trace_kmem_cache_alloc+0xdd/0x100 [ 662.533313][ T35] ? __pfx___dev_queue_xmit+0x10/0x10 [ 662.533328][ T35] ? kmem_cache_alloc_node_noprof+0x2e6/0x6b0 [ 662.533343][ T35] ? kmalloc_reserve+0xf9/0x350 [ 662.533358][ T35] ? __asan_memset+0x23/0x50 [ 662.533368][ T35] ? __alloc_skb+0x4e9/0x710 [ 662.533381][ T35] ? __netdev_alloc_skb+0x10d/0x960 [ 662.533393][ T35] alb_send_lp_vid+0x31e/0x540 [ 662.533406][ T35] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 662.533419][ T35] ? __lock_acquire+0x49f/0x1a40 [ 662.533432][ T35] ? rcu_is_watching+0x12/0xc0 [ 662.533449][ T35] alb_send_learning_packets+0xe0/0x2f0 [ 662.533462][ T35] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 662.533478][ T35] bond_alb_monitor+0x997/0x16f0 [ 662.533493][ T35] ? __pfx_bond_alb_monitor+0x10/0x10 [ 662.533506][ T35] ? preempt_schedule_thunk+0x16/0x40 [ 662.533521][ T35] process_one_work+0xa23/0x1940 [ 662.533537][ T35] ? __pfx_process_one_work+0x10/0x10 [ 662.533551][ T35] ? __pfx_bond_alb_monitor+0x10/0x10 [ 662.533564][ T35] worker_thread+0x5ef/0xe50 [ 662.533578][ T35] ? __pfx_worker_thread+0x10/0x10 [ 662.533590][ T35] ? kthread+0x13a/0x450 [ 662.533601][ T35] ? __pfx_worker_thread+0x10/0x10 [ 662.533612][ T35] kthread+0x370/0x450 [ 662.533624][ T35] ? __pfx_kthread+0x10/0x10 [ 662.533636][ T35] ret_from_fork+0x72b/0xd50 [ 662.533652][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 662.533667][ T35] ? __switch_to+0x800/0x10f0 [ 662.533679][ T35] ? __pfx_kthread+0x10/0x10 [ 662.533690][ T35] ret_from_fork_asm+0x1a/0x30 [ 662.533713][ T35] [ 663.085534][T14248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1546 sclass=netlink_tcpdiag_socket pid=14248 comm=syz.0.2232 [ 663.242116][T12374] usb 2-1: USB disconnect, device number 94