last executing test programs: 4m36.948199744s ago: executing program 0 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) 4m35.442234012s ago: executing program 1 (id=712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r1, 0x0, &(0x7f0000001b40)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000840)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/206, 0xce, 0x1, 0x2b}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, 0x0, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}}, 0x20004800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000940)={0x344, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_TESTDATA={0xd1, 0x45, "b4bc2fad26d61346a3e0ca49a0241dc33a80c7cae19fe4565471258b69a846825555f0792a64b7d2bf1edfa99bb9591e9f2065524747626f9689b7830d47a8122a909ef97f27a0a8b02e6dde74745883443982f4fe34247c592d39666416957a6ed7976ad9d2b7d9957dab6f5b6d7adcea9d20e0dfbc5dbef394b647196a81cba7d609a3309538b2a42d0353016e64879c9e32b1712f104119798581118552cd1872434c1b4383c8ea0f9e601a9de42be55c51a75dc370a6b5ab7fa23690853e22a5474692253854811502a8a1"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x9f, 0x45, "b35fbf8ca2b1dd4180b9b146a197182c028b53cc24044762d83a27088fa3c6033910b3130da4dbd9a5051ab69404e6a3e30c35aec73ccabe14b937aee1e41a301246c0f881bd3a18cb19588a7d09c8105724310c7cd851444bd2a9828f05b2854be35b1e8a7400fae07128d08b4b19557504260eb98f2db147593e6997670fd7ba82a75381227a384b8e9bc2e20656bd09c6739ad1fff0d7081d1d"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "62908e9978c2d1a384f7389af194f2bf13e1590fe257aced6b4c5e167f051b267e55408f58207c2e3fa2bbfdac42c408b14ad8f8a2eb271071d4c411d4e9144cd80a703554e93f2a57922a4c4c4ca4ef1307a7057d04fc4a477392a71142c85833d23e811bab996012bba3a08899f4a3549165a6094e5ef71ab067a1d73d1bf80c60cfa0a4e88b94b72d2dd43d111104e978d5fc83fe693a21ea160d8fb985411359f7aae2119de76de848722afc12f59b56f89f84354b3bbc16d34eb1449320eef70e3df9738c94dfaf0db92df73745581e20c5065b384941e2ce1756b8437ffd7df3a694"}, @NL80211_ATTR_TESTDATA={0x93, 0x45, "827476bd511982c305ef25ad33918727c2c1aba4d66e0bb0a270a0d1f42295e1320a89111678b28aad7e485dc47133309c98897f69ad63cf02250c974f2ede9b8b06653b27cb6140dbb1eb90d113bbba9e2b417ced1642ddbcf728297a3d2cbf8d010ff60c8b9229c9462ab97b33445de92bc4bba47ed949db94a636c8e19211f8dee16cad7237c2b7b6c795e72a95"}, @NL80211_ATTR_TESTDATA={0x23, 0x45, "9ca3989774fb211256d93d0952b57e9bb2bda67137bc158d200afa52d88474"}]}, 0x344}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200000000000000c4010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a00010071756575650000001400028006000340000100000600014000170000140000001100010000000000000000000000000a1de2fa39eb403a7bf74a2240a55dbfcff62ca5ea6555"], 0xd8}}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r7, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) 4m35.111256777s ago: executing program 1 (id=714): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x3, 0x200, 0x8, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) r1 = userfaultfd(0x801) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4m34.395536479s ago: executing program 1 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r0], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x3, r3}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="0802b74b4f0f25347a88ebbcedf9ce946547885c3faa6070229c975d149e761654de845e248213c7b15e43c6ce423337747fe0ac5e96e326abbf82622efbce1f4044157cc094a1672110e425a6e0ab1c4158d659bc3980ce1d79318e87064571e5a9aefec17d6f3127bd0c380f921fdce6af70562446bf2c711155de72a9de886687ba1cc6734cf324da8aafa3dc09e8c6e129c4035c3586749d3a695c4deef5282034b5f72875838c0d5e87ab6d0f3a61fc15b6b534aa3dcaf678174f9c3a80c77f3487fb075ad8061e68d4"], 0x1c}}, 0x2000040) 4m33.964302955s ago: executing program 2 (id=717): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x20000) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x28, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000680)={0x2, @raw_data="9af041a9fe681cf2477226f2729bae5ed2c4838c40c2474c6f04a97fa8ccb701a98f78e13d0900c8e726e505ea13b6746ec7a0cdec10d881f87be3159d71757a4ece5377af1dddff01b52657969aea504ce0b9905f2f62e0ca388b1c2585cf468f95a7c7825d9d9169bc9056e3fb04bca4c54a354a332bdd52a75fe1bd5f69d14f32d30a60226d95122fd8103597c7cf13fa9978f4db34c8dab7fa1503181b944fd917832669a3acef9b66055d1b2f374c26b4b9216f4890ad885802cda200"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000940)=0x343) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffdaa, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1b000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="3620d72ee2355dbab6f2a1388e863a3becb431cb57663e8d54008eb2a98b00f74e05ff205105de29dbb23015464d885792864b94dcc175154b64ea1e"], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3c, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaa60ba4e9b00062bfffc010000000000000000000000000001fc02000000000000000005000000000085a8d28d7fc800"/60], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000540), 0x800) geteuid() accept4(r0, 0x0, 0x0, 0x800) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 4m32.226473174s ago: executing program 0 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, 0x0, 0x4000800) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r9 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$FBIOBLANK(r9, 0x4611, 0x4) 4m32.225890772s ago: executing program 2 (id=719): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000054000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x308000, 0x1000, 0xf400}, 0x20) 4m32.039404488s ago: executing program 3 (id=720): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000000c0)) fcntl$lock(r2, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@can_delroute={0x44, 0x19, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "76ec84d2ea4efa21"}}}, @CGW_DST_IF={0x8, 0xa, r6}, @CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 4m31.922122352s ago: executing program 3 (id=721): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0xfffffffffffffecf}], 0x1}}], 0x2, 0x4000) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRESOCT, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0xc844) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) r18 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r18, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x2, '\x00', @p_u32=&(0x7f00000000c0)=0x42}}) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r19], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB="080025bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRESDEC=r11, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="1f644209257d324c2512d78e2e636ad861e580882bfdf1c362058707e765512fa443ad764f329c96b507cf56"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x48080) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x7}, 0x8) 4m31.542032298s ago: executing program 3 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a1800000e604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 4m30.119879109s ago: executing program 1 (id=723): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0xfffbff7f, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 4m30.118028169s ago: executing program 3 (id=724): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mlockall(0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe3b}}, './file0\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r2], 0x1000000000000002, 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[r2, r3, r4, r5, r6, r7, r8], 0x7}) 4m29.801640707s ago: executing program 1 (id=725): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="9019dddf66ee7df3e21542bdc3bff997b275919ff00ba87cb0ca3c786c8e84c173b798fce9bc3bc37c336ee71fea3fdc71bff0"], 0x34}}, 0x20000400) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r3, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) r4 = syz_open_procfs(r1, &(0x7f0000000040)='auxv\x00') r5 = getpgid(r1) getpgid(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgid(r5) fcntl$setownex(r6, 0xf, &(0x7f0000000440)={0x1, r7}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x4}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007451c32730dbd603dde45b618470eb22dfd336ed4f3db283b3b3dd988df43ae39e7a51200e1ca06d77a5d3ac6d7c2f2a8827ba78d89e175a015f83cf137393de3f7ce099f2e93f18f9251201aa19ec3526967eae8a6abeb8933e45b34e2cf4f70fe40a250ba52e3fa6424dc429c134a05c738408c202ea4c4d4353a9aaae5c3ba12621398bf63df5eb892eef87be467e27435de8ae"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r9, &(0x7f0000000300), 0x0}, 0x20) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf08000000000800030014111f86c1357e587c04096f52714eac36319b8033d10c805fda11fd94e54b153204a6fa5cab6d85c07db02d3bbf47550bc1058a50218faf9b8e98abbf5d246e2c9e8042be4eedbddffff6aff55250605637", @ANYRES32=0x0, @ANYBLOB="0c00990003000000760000000a001a0008021100000100000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x40010d1) r11 = dup(r0) sync_file_range(r11, 0x10006, 0x4, 0x2) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, r5}) syz_clone(0x80000, &(0x7f0000000180)="bdb3d73a85b45d7fb08ba1fbcd3bad5b8c97f8deb05ad7898d0642c97d18c3eec53a336dcd91b58b639228d06a5d0bbcf156430b3afaf4c0f4b946", 0x3b, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)="629af393d1d46f43e02700e9201238b6e43341cbecf6fb") syz_pidfd_open(r1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4m29.722400804s ago: executing program 2 (id=726): pipe2(&(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c600280100004800c000100ff010000f9ffffff0600010000000000100003800c000100010000004903000008000500", @ANYRES32=r0, @ANYBLOB="140003"], 0x78}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 4m29.559543227s ago: executing program 2 (id=727): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x20000) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x28, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000680)={0x2, @raw_data="9af041a9fe681cf2477226f2729bae5ed2c4838c40c2474c6f04a97fa8ccb701a98f78e13d0900c8e726e505ea13b6746ec7a0cdec10d881f87be3159d71757a4ece5377af1dddff01b52657969aea504ce0b9905f2f62e0ca388b1c2585cf468f95a7c7825d9d9169bc9056e3fb04bca4c54a354a332bdd52a75fe1bd5f69d14f32d30a60226d95122fd8103597c7cf13fa9978f4db34c8dab7fa1503181b944fd917832669a3acef9b66055d1b2f374c26b4b9216f4890ad885802cda200"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000940)=0x343) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffdaa, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1b000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="3620d72ee2355dbab6f2a1388e863a3becb431cb57663e8d54008eb2a98b00f74e05ff205105de29dbb23015464d885792864b94dcc175154b64ea1e"], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3c, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaa60ba4e9b00062bfffc010000000000000000000000000001fc02000000000000000005000000000085a8d28d7fc800"/60], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000540), 0x800) geteuid() accept4(r0, 0x0, 0x0, 0x800) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 4m29.484448698s ago: executing program 3 (id=728): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x6, 0xa0082) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r7, &(0x7f00000000c0)={0x27, r9, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) close(r8) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x8001, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r12 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_CONNECTINFO(r12, 0x40085511, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000180)='vfat\x00', 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x148) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r14, 0x0) write(r13, &(0x7f0000000380)='8', 0x1) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r10) sendmsg$TIPC_CMD_SET_NETID(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r15, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6c8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000440}, 0x2000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYRES32=r10], 0x3c}, 0x1, 0x2}, 0x0) 4m29.412390518s ago: executing program 0 (id=729): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000054000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x308000, 0x1000}, 0x20) (fail_nth: 28) 4m29.307689232s ago: executing program 1 (id=730): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f00000021c0)={0xf, {"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", 0x1000}}, 0x576) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f0000000640)="000a18000000604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r13, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 4m28.377606385s ago: executing program 2 (id=731): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000500), 0x1039000, 0xc3096c5ecf2e3329, 0x1fffff, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x1000000004, 0x82880) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000000)={0x36, &(0x7f00000001c0)=[{0x14, '\x00', @data=0x2, 0x8}]}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000500)=0x1332f69, 0x2) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000040)={@multicast2, @rand_addr=0x64010101, @remote}, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="0a0006000800021100a2c8187a35fa4cc4adf0ce3243c030860500020002000000090001007ee5d52f", @ANYRESOCT=r7, @ANYRESHEX=r5, @ANYRESHEX], 0x4c}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r9, 0x0, 0x0, 0x80800) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r11, 0x40045436, 0xd) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="0800000011008188040f8362a6a73ca7885385be03fc46ecdb4cb9cca7480e1211000000e3bd012a128748b42902", 0x2e}, {&(0x7f0000000840)="cdb93c68d2c7462132ea397d9e236daff1d47db3bea34a614d4d8f60ee4ced02b5ed7912792ab8e2be5075c90dfa22c8d90a92a021759e33bbd7e8d17e010000002874987b6067", 0x47}, {&(0x7f00000002c0)="b7c95a2b9fc695c080f596d67e0896a59fc40ec2ba75cb8b4dfbdc6721615198563c3f9ad757a2ca69d1c0bc7d5cc8737ef50b6702453ba59708c0bec87734866fd0e2a259b34be0d1aff3ab0c31aee971028be48a23530927c6a4e91c25208a997b2888447cf332ceb29afb37fe0d837ba26cff941951df0230f7da46e7f135e6d964743edaae7c21360be9ef112644da127794ca813dd38f50249c9734a3b26e8840372eb7371d85f4479d", 0xac}, {&(0x7f0000000540)="7d055725be609703bfb7c68d7d19d8a311e5d972f12bdcebd6f824ce4d004fd45afa111091b190023cf3f648002aaaa97d29f0c770a479bd2f7dfd1dbc781e57bf6b6f35267cdabf7d6fad29c40f8ba10088f732d99a2a10495f1aafa91ba80e1fbe8f48292c20ba38437aa46227421800d2fc8b57c3786aff193bf83ce5ace4e659c0d2178377f0712aaf1610b1c0a5ac89929a5138f363cdedefa8011b9e90cc7416d279744b4a82f60dad6a271dc3069d3afdc6383a3e6540f929ccfaf9e286", 0xc1}, {&(0x7f0000000640)="b8691beff4e953efd95787b0db2260e8c34d7d434eb09296efdc42821013e3c9c5d85108e5b71591fe6cb2b4d6051d86fe91c1076a7c60bab3c7f5eb4d6ca82bd9e8110839cffed5b4009bd810d169492bf2bd8db877d8a66cc8dd41170f4f551913bd851faf8981e63114f27555a69bccaf71197cb9a23054d7d79e8da6996c9b44628d0737d3a2dd4e736b9c79e2db5de25cbcaa6ffb18d4c0b1c7f7fe2c0d77907d241861e5ed66e85c6d86f8efc915e36888c43d0fcd12e8e7cf00efc3b17cec412c28a3639c458a850d5ab067baf4df5d8183114c24b5446d988e", 0xdd}], 0x5}, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000008ce32b73bdc263cbabfdb83b04c58b611d614b2e4c9138c2ec57b50f0ce658c6aa0f6c361ffb2fd02ec8ea098822da5770505f6711c8f1e0f58523792332d994abc19e2f1a9b25d990011021e4cb2f302049d7d8e87f85c994316f56dc43d6eb6af90db30d1e54b23d68dd44439d90e96f", @ANYRES16=r13, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x20000800) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r14 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x4240c2, 0x0) ioctl$TCSETSF2(r14, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x1, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) 4m28.148151729s ago: executing program 0 (id=732): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) close(0x3) 4m27.841764793s ago: executing program 2 (id=733): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(0x0, 0x22) wait4(r1, 0x0, 0x8, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='romfs\x00', 0x2800080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x2}}, './sys/power/state\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000340)=0xff21, 0x800) r4 = openat(r2, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x63de83606fc3d12f, 0x8) write(r4, &(0x7f00000000c0)='N\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r6, &(0x7f00000001c0)='disk\n', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r7, &(0x7f0000000240)='core\n', 0x5) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, 0x0, 0xc, 0x1, 0x7, 0x4ed77b1c7c28e2c9}, 0x28) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) 4m27.756738208s ago: executing program 0 (id=734): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0xbf, 0x1, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640)='\x00\x00\x00\x00', &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)='abcdefghij', 0xa, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000800)='0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789', 0x64, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xa, 0x2, 0x4}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000663000/0xa000)=nil, 0xa000}, 0x1}) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.567650081s ago: executing program 0 (id=735): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) close(0x3) (fail_nth: 2) 4m16.969098869s ago: executing program 3 (id=736): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)='*i', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_TENBIT(r3, 0x704, 0x1) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x4000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) close(0x3) 4m11.558839287s ago: executing program 32 (id=730): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f00000021c0)={0xf, {"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", 0x1000}}, 0x576) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r10, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f0000000640)="000a18000000604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r13, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 4m1.165725179s ago: executing program 33 (id=735): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) close(0x3) (fail_nth: 2) 3m51.933849184s ago: executing program 34 (id=733): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(0x0, 0x22) wait4(r1, 0x0, 0x8, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='romfs\x00', 0x2800080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x2}}, './sys/power/state\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000340)=0xff21, 0x800) r4 = openat(r2, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x63de83606fc3d12f, 0x8) write(r4, &(0x7f00000000c0)='N\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r6, &(0x7f00000001c0)='disk\n', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r7, &(0x7f0000000240)='core\n', 0x5) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, 0x0, 0xc, 0x1, 0x7, 0x4ed77b1c7c28e2c9}, 0x28) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) 3m39.499505269s ago: executing program 35 (id=736): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)='*i', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_TENBIT(r3, 0x704, 0x1) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x4000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) close(0x3) 2m19.481095778s ago: executing program 6 (id=1099): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m19.151006112s ago: executing program 6 (id=1103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x6, 0x0, 0x4}) 2m19.029086307s ago: executing program 6 (id=1106): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x6a83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) close(0x3) 2m19.028572995s ago: executing program 6 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000700)="01", 0x1, 0x400) 2m18.971273874s ago: executing program 6 (id=1110): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}}, 0xf0}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 2m18.506992634s ago: executing program 6 (id=1114): socket$kcm(0xa, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) set_mempolicy(0x0, &(0x7f0000000180), 0x7fff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000540)={0xf0f024}) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x800, {0xa, 0x0, 0x46, 0xfe, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0xf4, 0x6, 0x80000000}}]}, 0x40}}, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x6, 0xa, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000007c0)={0x2, @win={{0x5, 0x5, 0x8, 0x3}, 0x6, 0x180, &(0x7f0000000280)={{0x3, 0x5, 0x1, 0x5}, &(0x7f0000000140)={{0xe48, 0xf, 0x2, 0xfffffff9}, &(0x7f0000000100)={{0x0, 0x2, 0x7, 0x2bec}}}}, 0x80000000, &(0x7f00000002c0)="b0df98d99909d1d495e984d7c1f2db9e012de1c117e976e2ee4ddc2e437c396b2d76695c32a61d0312bd295021036ab0c97a66810f2599ca732ae1866871d8123162b78cdcaf1718dbfce4033da648d8121acb0dcd3357d2c945d9040d99f4e957b9622c510fcb6d5d35ad02b24e2d734c2be80c8ea56568b9d200b7c5bbc5161487ff23985c3940dde88c3f871bfc468d1fea51411282f7dfb1c81b68ebe639a3d20f9c4841f117e0eca0cda7bf40a42ffddf08fa6f694114d10014c087fb050c8e6a4e770b57e6e9e8bcb1ed031b95caadfc92754b6a187289178400a22dc3b8c88dc055caf4e24bd08fe3b0166ee2238557", 0x2}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='+--+\x00') 2m3.322505784s ago: executing program 36 (id=1114): socket$kcm(0xa, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) set_mempolicy(0x0, &(0x7f0000000180), 0x7fff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000540)={0xf0f024}) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x800, {0xa, 0x0, 0x46, 0xfe, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0xf4, 0x6, 0x80000000}}]}, 0x40}}, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x6, 0xa, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000007c0)={0x2, @win={{0x5, 0x5, 0x8, 0x3}, 0x6, 0x180, &(0x7f0000000280)={{0x3, 0x5, 0x1, 0x5}, &(0x7f0000000140)={{0xe48, 0xf, 0x2, 0xfffffff9}, &(0x7f0000000100)={{0x0, 0x2, 0x7, 0x2bec}}}}, 0x80000000, &(0x7f00000002c0)="b0df98d99909d1d495e984d7c1f2db9e012de1c117e976e2ee4ddc2e437c396b2d76695c32a61d0312bd295021036ab0c97a66810f2599ca732ae1866871d8123162b78cdcaf1718dbfce4033da648d8121acb0dcd3357d2c945d9040d99f4e957b9622c510fcb6d5d35ad02b24e2d734c2be80c8ea56568b9d200b7c5bbc5161487ff23985c3940dde88c3f871bfc468d1fea51411282f7dfb1c81b68ebe639a3d20f9c4841f117e0eca0cda7bf40a42ffddf08fa6f694114d10014c087fb050c8e6a4e770b57e6e9e8bcb1ed031b95caadfc92754b6a187289178400a22dc3b8c88dc055caf4e24bd08fe3b0166ee2238557", 0x2}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='+--+\x00') 2.210870458s ago: executing program 7 (id=2691): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfb, 0x60006000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50) 2.210508082s ago: executing program 7 (id=2692): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) 1.520823471s ago: executing program 8 (id=2699): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d", 0xa6}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306", 0x77}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.440885017s ago: executing program 8 (id=2700): r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xb) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x5, 0x0, 0x0, @adapter={0x7, 0xffffffffffffffff, 0x8000000000000001, 0x27, 0x7fffffff}}]}) r6 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$eventfd(r6, &(0x7f0000000080)=0x430f, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.330703186s ago: executing program 5 (id=2702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) 1.330220071s ago: executing program 5 (id=2703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.279489712s ago: executing program 8 (id=2704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008840}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4) connect$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) 1.279053167s ago: executing program 7 (id=2705): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='ep', 0x2) 1.170468915s ago: executing program 7 (id=2706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x7, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0xfffffffd, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x401, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x401, 0x5, 0x7, 0x2, 0x5, 0x5a3, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0xa, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x8, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0xffffff6a, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x9, 0x8, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x2, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3fc, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0x4, 0x7, 0x25ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) 1.120612353s ago: executing program 5 (id=2707): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000900)=""/140, 0x8c}, {&(0x7f00000001c0)=""/107, 0x6b}, {0x0}, {&(0x7f00000043c0)=""/4098, 0x1002}, {&(0x7f0000000100)=""/161, 0xa1}, {0x0}, {0x0}], 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x20002800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x68}}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept$inet(r0, 0x0, &(0x7f0000000800)) 999.22821ms ago: executing program 7 (id=2708): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0), 0x0) 998.966237ms ago: executing program 7 (id=2709): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="b67b", 0x2}, {0x0}], 0x2) 400.952837ms ago: executing program 8 (id=2714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xffff}, {0xffff}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 298.970559ms ago: executing program 4 (id=2717): prctl$PR_SET_THP_DISABLE(0x29, 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bae000/0x400000)=nil) 225.358111ms ago: executing program 5 (id=2718): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x3554000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 225.106017ms ago: executing program 4 (id=2719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfb, 0x60006000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50) 153.341341ms ago: executing program 4 (id=2720): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8, 0x890}, 0x50) 152.791146ms ago: executing program 8 (id=2721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed", 0x3}], 0x1}}], 0x1, 0x0) 135.889542ms ago: executing program 5 (id=2722): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) close(r1) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r2, &(0x7f00000005c0)='3', 0x1) 70.38067ms ago: executing program 8 (id=2723): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 70.249927ms ago: executing program 4 (id=2724): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 69.704523ms ago: executing program 5 (id=2725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x16}, @empty, 0x80, 0x20, 0x4, 0x1}}) gettid() r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x1c, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) pread64(r4, 0x0, 0x0, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 545.079µs ago: executing program 4 (id=2726): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 0s ago: executing program 4 (id=2727): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) unshare(0x26020480) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x2) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.6.869'. [ 272.091199][ T8789] syz_tun: entered allmulticast mode [ 272.241770][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 272.450734][ T8807] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 273.258718][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.261133][ T8816] bridge0: port 2(bridge_slave_1) entered listening state [ 273.263758][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.266118][ T8816] bridge0: port 1(bridge_slave_0) entered listening state [ 274.748372][ T8828] netlink: 'syz.6.884': attribute type 1 has an invalid length. [ 275.071408][ T8828] veth3: entered allmulticast mode [ 275.117542][ T8828] bond1: (slave veth3): Enslaving as an active interface with a down link [ 275.168156][ T8836] bond1: (slave veth0_to_bond): making interface the new active one [ 275.174901][ T8836] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 275.426830][ T42] audit: type=1400 audit(1785982099.543:632): avc: denied { create } for pid=8839 comm="syz.7.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 276.374137][ T8872] jffs2: notice: (8872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 276.383847][ T42] audit: type=1400 audit(1785982100.311:633): avc: denied { write } for pid=8871 comm="syz.5.896" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.732323][ T61] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 276.882408][ T61] usb 11-1: Using ep0 maxpacket: 8 [ 276.896024][ T61] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 276.899633][ T61] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.907122][ T61] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.915464][ T61] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.926033][ T61] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.933120][ T61] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.936473][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.069018][ T8895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.148228][ T61] usb 11-1: usb_control_msg returned -32 [ 277.150316][ T61] usbtmc 11-1:16.0: can't read capabilities [ 277.163102][ T42] audit: type=1400 audit(1785982101.091:634): avc: denied { connect } for pid=8896 comm="syz.7.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 277.380087][ T61] usb 11-1: USB disconnect, device number 2 [ 277.827132][ T8906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.906'. [ 277.855154][ T42] audit: type=1400 audit(1785982101.761:635): avc: denied { execute } for pid=8907 comm="syz.7.907" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 278.281061][ T8917] team0 (unregistering): Port device team_slave_0 removed [ 278.303668][ T8917] team0 (unregistering): Port device team_slave_1 removed [ 278.742711][ T8921] efs: cannot read volume header [ 279.352408][ T847] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 279.532503][ T847] usb 9-1: Using ep0 maxpacket: 16 [ 279.540219][ T847] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.547837][ T847] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.557096][ T847] usb 9-1: config 0 interface 0 has no altsetting 0 [ 279.564619][ T847] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 279.576729][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.635014][ T847] usb 9-1: config 0 descriptor?? [ 280.104902][ T847] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 280.292423][ T42] audit: type=1400 audit(1785982104.151:636): avc: denied { write } for pid=8929 comm="syz.6.915" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 281.010508][ T847] usb 9-1: USB disconnect, device number 5 [ 282.509325][ T8964] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 282.542851][ T42] audit: type=1400 audit(1785982106.431:637): avc: denied { append } for pid=8958 comm="syz.4.925" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.567901][ T42] audit: type=1400 audit(1785982106.441:638): avc: denied { map } for pid=8958 comm="syz.4.925" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.606230][ T42] audit: type=1400 audit(1785982106.441:639): avc: denied { execute } for pid=8958 comm="syz.4.925" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.008790][ T42] audit: type=1400 audit(1785982106.931:640): avc: denied { bind } for pid=8969 comm="syz.5.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.345624][ T42] audit: type=1400 audit(1785982107.271:641): avc: denied { block_suspend } for pid=8984 comm="syz.6.934" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.742053][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.941'. [ 283.777928][ T9001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.781595][ T9001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.792528][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 283.806548][ T9001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.817175][ T9001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.819251][ T9001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 283.842927][ T9001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 283.953410][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 283.956786][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.960523][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 283.964542][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.969642][ T9] usb 11-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 283.973700][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.995774][ T9] usb 11-1: config 0 descriptor?? [ 284.003292][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input21 [ 284.259784][ T9] usb 11-1: USB disconnect, device number 3 [ 284.268279][ T5131] pxrc 11-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 284.288253][ T9001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.302583][ T9001] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.324236][ T9001] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.431527][ T9014] vlan0: entered promiscuous mode [ 284.442385][ T9014] bond_slave_0: entered promiscuous mode [ 284.565526][ T9018] input: syz0 as /devices/virtual/input/input22 [ 284.662344][ T8392] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 284.832437][ T8392] usb 12-1: Using ep0 maxpacket: 32 [ 284.840705][ T8392] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.847348][ T8392] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.853592][ T8392] usb 12-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.856466][ T8392] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.864368][ T8392] usb 12-1: config 0 descriptor?? [ 284.868522][ T8392] hub 12-1:0.0: USB hub found [ 285.399715][ T8392] hub 12-1:0.0: 1 port detected [ 285.409512][ T42] audit: type=1400 audit(1785982109.331:642): avc: denied { bind } for pid=9033 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.418099][ T42] audit: type=1400 audit(1785982109.341:643): avc: denied { setopt } for pid=9033 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.443414][ T42] audit: type=1400 audit(1785982109.371:644): avc: denied { write } for pid=9033 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.616307][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 285.671437][ T42] audit: type=1400 audit(1785982109.591:645): avc: denied { name_bind } for pid=9038 comm="syz.5.953" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 285.806276][ T8392] hub 12-1:0.0: activate --> -90 [ 285.812343][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.866739][ T9047] jffs2: notice: (9047) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 285.877707][ T42] audit: type=1400 audit(1785982109.801:646): avc: denied { write } for pid=9046 comm="syz.6.956" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.892961][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.007189][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 286.007527][ T5830] usb 12-1: USB disconnect, device number 2 [ 286.077805][ T9057] syzkaller0: entered promiscuous mode [ 286.080348][ T9057] syzkaller0: entered allmulticast mode [ 286.292560][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.516537][ T9097] jffs2: notice: (9097) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 9 of xref (0 dead, 1 orphan) found. [ 287.632959][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 287.632975][ T42] audit: type=1400 audit(1785982111.561:654): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.642851][ T42] audit: type=1400 audit(1785982111.571:655): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.653849][ T42] audit: type=1400 audit(1785982111.581:656): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.660512][ T42] audit: type=1400 audit(1785982111.581:657): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.667261][ T42] audit: type=1400 audit(1785982111.581:658): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.674064][ T42] audit: type=1400 audit(1785982111.581:659): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.877563][ T42] audit: type=1400 audit(1785982111.591:660): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.884392][ T42] audit: type=1400 audit(1785982111.591:661): avc: denied { write } for pid=9094 comm="syz.7.971" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.891032][ T42] audit: type=1400 audit(1785982111.661:662): avc: denied { name_bind } for pid=9095 comm="syz.4.970" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 287.893941][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.972392][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.372394][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.564279][ T9120] dummy0: entered allmulticast mode [ 288.578867][ T9120] dummy0: left allmulticast mode [ 288.684639][ T42] audit: type=1400 audit(1785982112.561:663): avc: denied { read } for pid=9115 comm="syz.4.974" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 289.167418][ T9131] Bluetooth: MGMT ver 1.23 [ 289.927862][ T8216] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.078239][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.083362][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.452456][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.619280][ T9157] block device autoloading is deprecated and will be removed. [ 290.632812][ T9159] nvme_fabrics: missing parameter 'nqn=%s' [ 290.685320][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.993'. [ 290.687225][ T9170] syz.4.994 (9170): drop_caches: 0 [ 290.941448][ T9184] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 291.046372][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 291.385047][ T9198] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 291.388496][ T9198] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 291.398780][ T9198] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 291.479738][ T9200] Set syz1 is full, maxelem 4096 reached [ 292.775386][ T9224] Set syz1 is full, maxelem 4096 reached [ 292.781322][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 292.781332][ T42] audit: type=1400 audit(1785982116.701:678): avc: denied { write } for pid=9222 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.831378][ T42] audit: type=1400 audit(1785982116.751:679): avc: denied { create } for pid=9220 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 292.860815][ T42] audit: type=1400 audit(1785982116.761:680): avc: denied { bind } for pid=9220 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 292.973839][ T42] audit: type=1400 audit(1785982116.791:681): avc: denied { connect } for pid=9220 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.977994][ T9232] jffs2: notice: (9232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (3 unchecked, 1 orphan) and 10 of xref (0 dead, 4 orphan) found. [ 293.076861][ T42] audit: type=1326 audit(1785982117.001:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 293.087457][ T42] audit: type=1326 audit(1785982117.001:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 293.098014][ T42] audit: type=1326 audit(1785982117.001:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 293.105293][ T42] audit: type=1326 audit(1785982117.001:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 293.113475][ T42] audit: type=1326 audit(1785982117.001:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 293.120543][ T42] audit: type=1326 audit(1785982117.001:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1009" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 293.871917][ T9285] Set syz1 is full, maxelem 4096 reached [ 294.196533][ T5088] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 294.388045][ T5088] usb 9-1: Using ep0 maxpacket: 32 [ 294.391262][ T5088] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.397318][ T5088] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 294.401003][ T5088] usb 9-1: config 0 interface 0 has no altsetting 0 [ 294.405343][ T5088] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 294.408197][ T5088] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.417720][ T5088] usb 9-1: Product: syz [ 294.419025][ T5088] usb 9-1: Manufacturer: syz [ 294.424367][ T5088] usb 9-1: SerialNumber: syz [ 294.427811][ T5088] usb 9-1: config 0 descriptor?? [ 294.824236][ T9277] Set syz1 is full, maxelem 65536 reached [ 294.925479][ T5088] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 295.128865][ T5088] gs_usb 9-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 295.135736][ T5088] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -22 [ 295.330935][ T8402] usb 9-1: USB disconnect, device number 6 [ 295.882777][ T9317] Set syz1 is full, maxelem 65536 reached [ 295.917491][ T9323] Set syz1 is full, maxelem 4096 reached [ 296.030066][ T9335] nvmet: adding nsid 1 to subsystem testnqn [ 296.044965][ T9335] nvmet_rdma: address family 255 not supported [ 296.443637][ T9332] infiniband syz2: set active [ 296.447446][ T9332] infiniband syz2: added veth0 [ 296.463168][ T9332] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 296.468085][ T9332] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 296.473665][ T9332] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 296.856726][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1046'. [ 296.904497][ T9350] Set syz1 is full, maxelem 4096 reached [ 297.089068][ T9332] RDS/IB: syz2: added [ 297.090820][ T9332] smc: adding ib device syz2 with port count 1 [ 297.093339][ T9332] smc: ib device syz2 port 1 has no pnetid [ 298.062358][ T29] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 298.192412][ T5816] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 298.213507][ T29] usb 12-1: Using ep0 maxpacket: 16 [ 298.217790][ T29] usb 12-1: too many configurations: 123, using maximum allowed: 8 [ 298.223129][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.227364][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.231452][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.235948][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.240038][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.255152][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.259201][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.265732][ T29] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.269929][ T29] usb 12-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 298.272929][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 298.275518][ T29] usb 12-1: SerialNumber: syz [ 298.278458][ T29] usb 12-1: config 0 descriptor?? [ 298.285288][ T29] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input23 [ 298.365940][ T5816] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 298.369660][ T5816] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.384926][ T5816] usb 10-1: config 0 descriptor?? [ 298.388797][ T5816] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 298.464652][ T8402] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 298.483310][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 298.483335][ T42] audit: type=1400 audit(1785982122.411:738): avc: denied { append } for pid=9368 comm="syz.7.1054" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 298.535591][ T5131] bcm5974 12-1:0.0: could not read from device [ 298.547919][ T5131] bcm5974 12-1:0.0: could not read from device [ 298.550346][ T29] usb 12-1: USB disconnect, device number 3 [ 298.624490][ T8402] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 298.628550][ T8402] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 298.632188][ T8402] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.646267][ T8402] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 298.791774][ T5816] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 299.194960][ T5816] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 299.478111][ T8392] usb 10-1: USB disconnect, device number 5 [ 299.872717][ T8402] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 299.875371][ T8402] stv0680 9-1:4.0: last error: 86, command = 0x78 [ 299.883979][ T8402] usb 9-1: USB disconnect, device number 7 [ 300.599697][ T9413] CIFS: Attempting to mount //127.0.0.1/share [ 301.477307][ T9413] CIFS: VFS: Error connecting to socket. Aborting operation. [ 301.480576][ T9413] CIFS: VFS: cifs_mount failed w/return code = -4 [ 303.575705][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 303.579371][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 303.826928][ T9465] Set syz1 is full, maxelem 4096 reached [ 304.113360][ T9474] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1091'. [ 304.157590][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1093'. [ 304.410049][ T9487] Set syz1 is full, maxelem 4096 reached [ 304.546903][ T42] audit: type=1400 audit(1785982128.471:739): avc: denied { setopt } for pid=9492 comm="syz.6.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 304.556165][ T42] audit: type=1400 audit(1785982128.481:740): avc: denied { accept } for pid=9492 comm="syz.6.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 305.877723][ T42] audit: type=1800 audit(1785982128.803:741): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1120" name="addr_trtype" dev="configfs" ino=36713 res=0 errno=0 [ 307.157750][ T9598] rdma_rxe: rxe_newlink: failed to add veth0 [ 309.443530][ T9639] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 309.449294][ T9639] qnx6: wrong signature (magic) in superblock #1. [ 309.451407][ T9639] qnx6: unable to read the first superblock [ 310.690737][ T42] audit: type=1400 audit(1785982133.613:742): avc: denied { read } for pid=9659 comm="syz.4.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 311.565960][ T9684] bond1: entered promiscuous mode [ 311.568214][ T9684] bond1: entered allmulticast mode [ 311.570791][ T9684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.656479][ T9694] fuse: Bad value for 'fd' [ 313.282405][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 313.672298][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 313.675806][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.679292][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.682727][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.686777][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.689636][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.695049][ T9] usb 10-1: config 0 descriptor?? [ 314.116410][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.0007/input/input24 [ 314.129444][ T9] microsoft 0003:045E:07DA.0007: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 314.310334][ T9] usb 10-1: USB disconnect, device number 6 [ 314.549932][ T5742] Bluetooth: hci2: unexpected subevent 0x06 length: 18 > 10 [ 314.554325][ T9] hid_parser_main: 30 callbacks suppressed [ 314.554339][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.558666][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.561016][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.563437][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.565767][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.568079][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.570650][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.573269][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.575657][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.577973][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 314.586431][ T9] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.03 Device [syz1] on syz1 [ 314.961925][ T9770] SET target dimension over the limit! [ 315.857819][ T42] audit: type=1400 audit(1785982138.783:743): avc: denied { write } for pid=9790 comm="syz.4.1212" name="cluster" dev="configfs" ino=2191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.885338][ T42] audit: type=1400 audit(1785982138.783:744): avc: denied { write } for pid=9790 comm="syz.4.1212" name="node" dev="configfs" ino=40119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.908244][ T42] audit: type=1800 audit(1785982138.783:745): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1212" name="ipv4_address" dev="configfs" ino=40122 res=0 errno=0 [ 315.922761][ T42] audit: type=1800 audit(1785982138.793:746): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1212" name="ipv4_port" dev="configfs" ino=40123 res=0 errno=0 [ 315.937735][ T42] audit: type=1800 audit(1785982138.793:747): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1212" name="num" dev="configfs" ino=40124 res=0 errno=0 [ 315.948852][ T42] audit: type=1800 audit(1785982138.793:748): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1212" name="local" dev="configfs" ino=40125 res=0 errno=0 [ 315.959282][ T42] audit: type=1400 audit(1785982138.813:749): avc: denied { write } for pid=9790 comm="syz.4.1212" name="heartbeat" dev="configfs" ino=40120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.990882][ T42] audit: type=1800 audit(1785982138.813:750): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1212" name="block_bytes" dev="configfs" ino=40133 res=0 errno=0 [ 316.012479][ T42] audit: type=1800 audit(1785982138.813:751): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1212" name="blocks" dev="configfs" ino=40134 res=0 errno=0 [ 316.033951][ T42] audit: type=1800 audit(1785982138.813:752): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1212" name="start_block" dev="configfs" ino=40135 res=0 errno=0 [ 316.203547][ T9803] jffs2: notice: (9803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (3 unchecked, 1 orphan) and 10 of xref (0 dead, 5 orphan) found. [ 316.612465][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.087328][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.090449][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.194313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.712273][ T9836] binder_alloc: 9834: binder_alloc_buf, no vma [ 319.523729][ T9856] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 320.780121][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.785797][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.793581][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.803827][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.808213][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.423952][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.426357][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.428840][ T9881] bridge_slave_0: entered allmulticast mode [ 321.431565][ T9881] bridge_slave_0: entered promiscuous mode [ 321.435158][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.437532][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.439865][ T9881] bridge_slave_1: entered allmulticast mode [ 321.442848][ T9881] bridge_slave_1: entered promiscuous mode [ 321.461327][ T9881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.466139][ T9881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.482992][ T9881] team0: Port device team_slave_0 added [ 321.486390][ T9881] team0: Port device team_slave_1 added [ 321.501179][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.503501][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.511511][ T9881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.516090][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.518357][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.526767][ T9881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.645105][ T8216] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.754867][ T8216] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.867798][ T8216] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.878377][ T9881] hsr_slave_0: entered promiscuous mode [ 321.880873][ T9881] hsr_slave_1: entered promiscuous mode [ 321.971542][ T8216] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.197621][ T9881] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 322.214907][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.223405][ T9881] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 322.239602][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.257220][ T9881] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 322.264099][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.270859][ T9881] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 322.288797][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.318858][ T8216] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.579283][ T8216] bridge_slave_1: left allmulticast mode [ 322.581839][ T8216] bridge_slave_1: left promiscuous mode [ 322.584561][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.590897][ T8216] bridge_slave_0: left allmulticast mode [ 322.593578][ T8216] bridge_slave_0: left promiscuous mode [ 322.596135][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.791222][ T8216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.808628][ T8216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.816928][ T8216] bond0 (unregistering): Released all slaves [ 322.832661][ T8216] bond1 (unregistering): (slave veth3): Releasing active interface [ 322.845220][ T8216] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 322.850929][ T8216] bond1 (unregistering): Released all slaves [ 322.852377][ T5745] Bluetooth: hci4: command tx timeout [ 322.893833][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.926242][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.953256][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.956086][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.011080][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.013799][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.160378][ T9920] jffs2: notice: (9920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 7 of xref (0 dead, 1 orphan) found. [ 323.168913][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 323.168925][ T42] audit: type=1400 audit(1785982146.093:766): avc: denied { write } for pid=9918 comm="syz.7.1249" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.198221][ T42] audit: type=1400 audit(1785982146.123:767): avc: denied { setattr } for pid=9918 comm="syz.7.1249" name="file0" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 323.208885][ T9920] jffs2: warning: (9920) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=64 [ 323.448424][ T9881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.599298][ T8216] hsr_slave_0: left promiscuous mode [ 323.601616][ T8216] hsr_slave_1: left promiscuous mode [ 323.605265][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.607663][ T8216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.610589][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.613115][ T8216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.714276][ T8216] veth1_vlan: left promiscuous mode [ 323.716624][ T8216] veth0_vlan: left promiscuous mode [ 324.079702][ T1165] smc: removing ib device syz2 [ 324.150978][ T847] syz2: Port: 1 Link DOWN [ 324.223921][ T9881] veth0_vlan: entered promiscuous mode [ 324.244460][ T9881] veth1_vlan: entered promiscuous mode [ 324.281097][ T1165] smbdirect: ib_dev[syz2] removed [ 324.307488][ T9881] veth0_macvtap: entered promiscuous mode [ 324.322383][ T9881] veth1_macvtap: entered promiscuous mode [ 324.341059][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.348950][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.447604][ T5837] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.450828][ T5837] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.483897][ T42] audit: type=1400 audit(1785982147.413:768): avc: denied { write } for pid=9974 comm="syz.4.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.520537][ T42] audit: type=1400 audit(1785982147.423:769): avc: denied { read } for pid=9974 comm="syz.4.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.572430][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.577794][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.591081][ T9985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 324.595327][ T42] audit: type=1400 audit(1785982147.523:770): avc: denied { write } for pid=9984 comm="syz.5.1267" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 324.617562][ T42] audit: type=1400 audit(1785982147.523:771): avc: denied { open } for pid=9984 comm="syz.5.1267" path="/141/debug/tracing/events/kvm/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 324.665450][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.670977][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.687645][ T42] audit: type=1400 audit(1785982147.613:772): avc: denied { read } for pid=9984 comm="syz.5.1267" name="trace_pipe" dev="tracefs" ino=2697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 324.932375][ T5745] Bluetooth: hci4: command tx timeout [ 324.954187][ T9989] tc_dump_action: action bad kind [ 324.997202][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.003439][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.017833][ T42] audit: type=1400 audit(1785982147.943:773): avc: denied { mounton } for pid=9881 comm="syz-executor" path="/syzkaller.Jgwfy5/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 325.196845][ T42] audit: type=1800 audit(1785982148.123:774): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1270" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 326.003523][ T42] audit: type=1400 audit(1785982148.923:775): avc: denied { ioctl } for pid=10028 comm="syz.4.1288" path="/161/config/usb_gadget/g1/idProduct" dev="configfs" ino=40905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 326.140729][T10034] Set syz1 is full, maxelem 4096 reached [ 326.152463][T10035] netlink: 'syz.5.1283': attribute type 29 has an invalid length. [ 326.744871][T10056] Set syz1 is full, maxelem 4096 reached [ 327.042683][ T5745] Bluetooth: hci4: command tx timeout [ 327.861827][T10095] jffs2: notice: (10095) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 7 of xref (0 dead, 1 orphan) found. [ 328.108818][T10104] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 328.191837][T10104] veth3: entered allmulticast mode [ 328.197772][T10104] bond1: (slave veth3): Enslaving as an active interface with a down link [ 328.242081][T10106] bond1: (slave veth0_to_bond): making interface the new active one [ 328.249299][T10106] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 328.268981][T10104] macvlan2: entered promiscuous mode [ 328.271068][T10104] macvlan2: entered allmulticast mode [ 328.273711][T10104] bond1: entered promiscuous mode [ 328.275480][T10104] veth0_to_bond: entered promiscuous mode [ 328.283661][T10104] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.288938][T10104] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth3 [ 328.300791][T10104] bond1: left promiscuous mode [ 328.302634][T10104] veth0_to_bond: left promiscuous mode [ 328.523293][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 328.523307][ T42] audit: type=1400 audit(1785982151.443:786): avc: denied { write } for pid=10121 comm="syz.7.1317" name="functions" dev="configfs" ino=13218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.551912][ T42] audit: type=1400 audit(1785982151.463:787): avc: denied { write } for pid=10121 comm="syz.7.1317" name="uncompressed" dev="configfs" ino=43055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.570506][ T42] audit: type=1400 audit(1785982151.463:788): avc: denied { write } for pid=10121 comm="syz.7.1317" name="fs" dev="configfs" ino=43061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.592636][ T42] audit: type=1400 audit(1785982151.473:789): avc: denied { write } for pid=10121 comm="syz.7.1317" name="header" dev="configfs" ino=43054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.601804][ T42] audit: type=1400 audit(1785982151.473:790): avc: denied { write } for pid=10121 comm="syz.7.1317" name="h" dev="configfs" ino=43065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.608792][ T42] audit: type=1400 audit(1785982151.473:791): avc: denied { write } for pid=10121 comm="syz.7.1317" name="h" dev="configfs" ino=43065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.655939][ T42] audit: type=1800 audit(1785982151.583:792): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1319" name="bDeviceClass" dev="configfs" ino=43067 res=0 errno=0 [ 329.088430][T10143] tipc: Started in network mode [ 329.090550][T10143] tipc: Node identity 4, cluster identity 4711 [ 329.093900][ T5745] Bluetooth: hci4: command tx timeout [ 329.099092][T10143] tipc: Node number set to 4 [ 329.508629][ T42] audit: type=1800 audit(1785982152.433:793): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1330" name="bDeviceClass" dev="configfs" ino=43153 res=0 errno=0 [ 330.106451][T10172] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1334'. [ 330.806611][ T42] audit: type=1800 audit(1785982153.733:794): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1341" name="bDeviceClass" dev="configfs" ino=43174 res=0 errno=0 [ 330.985148][ T42] audit: type=1400 audit(1785982153.913:795): avc: denied { write } for pid=10201 comm="syz.8.1347" name="c.1" dev="configfs" ino=18028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.779028][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 332.052442][ T41] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 332.202402][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 332.216595][ T41] usb 9-1: unable to get BOS descriptor or descriptor too short [ 332.223756][ T41] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 332.227070][ T41] usb 9-1: can't read configurations, error -71 [ 333.654381][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.658079][ C3] bridge0: topology change detected, propagating [ 333.662488][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.664810][ C3] bridge0: topology change detected, propagating [ 335.638824][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 335.638839][ T42] audit: type=1400 audit(1785982158.565:797): avc: denied { write } for pid=10344 comm="syz.4.1407" name="nullb" dev="configfs" ino=5843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 335.664786][ T42] audit: type=1800 audit(1785982158.585:798): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1407" name="size" dev="configfs" ino=44484 res=0 errno=0 [ 335.685115][ T42] audit: type=1800 audit(1785982158.595:799): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1407" name="zone_size" dev="configfs" ino=43247 res=0 errno=0 [ 336.399756][ T42] audit: type=1800 audit(1785982159.325:800): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1421" name="size" dev="configfs" ino=43279 res=0 errno=0 [ 336.406869][ T42] audit: type=1800 audit(1785982159.325:801): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1421" name="zone_size" dev="configfs" ino=43280 res=0 errno=0 [ 336.729960][T10386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.759468][T10386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.763551][ T42] audit: type=1400 audit(1785982159.695:802): avc: denied { getopt } for pid=10383 comm="syz.8.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.904406][ T42] audit: type=1800 audit(1785982159.825:803): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1430" name="size" dev="configfs" ino=41787 res=0 errno=0 [ 336.919521][ T42] audit: type=1800 audit(1785982159.845:804): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1430" name="zone_size" dev="configfs" ino=41788 res=0 errno=0 [ 336.969111][ T42] audit: type=1400 audit(1785982159.895:805): avc: denied { write } for pid=10398 comm="syz.7.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 337.534254][ T42] audit: type=1800 audit(1785982160.465:806): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1441" name="size" dev="configfs" ino=43300 res=0 errno=0 [ 337.541986][T10421] kvm: emulating exchange as write [ 337.772647][ T61] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 337.922347][ T61] usb 13-1: Using ep0 maxpacket: 16 [ 337.925934][ T61] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.929766][ T61] usb 13-1: config 0 interface 0 has no altsetting 0 [ 337.938754][ T61] usb 13-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 337.943715][ T61] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.950084][ T61] usb 13-1: Product: syz [ 337.951530][ T61] usb 13-1: Manufacturer: syz [ 337.957876][ T61] usb 13-1: SerialNumber: syz [ 337.985471][ T61] usb 13-1: config 0 descriptor?? [ 338.004544][T10437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.018648][T10437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.239177][ C3] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 338.264031][ T61] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input25 [ 338.290864][ T61] imon:send_packet: packet tx failed (-71) [ 338.312417][ T61] imon 13-1:0.0: panel buttons/knobs setup failed [ 338.376433][ T61] rc_core: IR keymap rc-imon-pad not found [ 338.378972][ T61] Registered IR keymap rc-empty [ 338.381162][ T61] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 338.385469][ T61] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 338.392186][ T61] imon:send_packet: packet tx failed (-71) [ 338.412592][ T61] imon 13-1:0.0: remote input dev register failed [ 338.416041][ T61] imon 13-1:0.0: imon_init_intf0: rc device setup failed [ 338.492794][ T61] imon 13-1:0.0: unable to initialize intf0, err 0 [ 338.494952][ T61] imon:imon_probe: failed to initialize context! [ 338.496986][ T61] imon 13-1:0.0: unable to register, err -19 [ 338.513334][ T61] usb 13-1: USB disconnect, device number 2 [ 338.522347][ T41] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 338.672421][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 338.676861][ T41] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 338.680667][ T41] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.688758][ T41] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.696138][ T41] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.699561][ T41] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.704525][ T41] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.707489][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.918200][ T41] usb 9-1: GET_CAPABILITIES returned 0 [ 338.920136][ T41] usbtmc 9-1:16.0: can't read capabilities [ 338.932295][ T61] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 339.082383][ T61] usb 13-1: Using ep0 maxpacket: 16 [ 339.087580][ T61] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.098533][ T61] usb 13-1: config 0 interface 0 has no altsetting 0 [ 339.103574][ T61] usb 13-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 339.112382][ T61] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.117443][ T61] usb 13-1: Product: syz [ 339.119015][ T41] usb 9-1: USB disconnect, device number 10 [ 339.123345][ T61] usb 13-1: Manufacturer: syz [ 339.124898][ T61] usb 13-1: SerialNumber: syz [ 339.133809][ T61] usb 13-1: config 0 descriptor?? [ 339.449847][ T61] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input27 [ 339.583592][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.596648][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.612284][ T61] rc_core: IR keymap rc-imon-pad not found [ 339.614218][ T61] Registered IR keymap rc-empty [ 339.615858][ T61] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 339.619129][ T61] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 340.516928][ T61] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 340.520112][ C3] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 340.523473][ T61] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input28 [ 340.527999][ T61] imon 13-1:0.0: iMON device (15c2:0041, intf0) on usb<13:3> initialized [ 340.531871][ T61] usb 13-1: USB disconnect, device number 3 [ 340.842380][ T41] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 340.902446][ T8392] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 340.992316][ T41] usb 12-1: Using ep0 maxpacket: 16 [ 340.997426][ T41] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.002314][ T41] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.012303][ T41] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 341.015682][ T41] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 341.022341][ T41] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.030564][ T41] usb 12-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 341.035709][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.043581][ T41] usb 12-1: config 0 descriptor?? [ 341.052316][ T8392] usb 9-1: Using ep0 maxpacket: 8 [ 341.056968][ T8392] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 341.059705][ T8392] usb 9-1: config 179 has no interface number 0 [ 341.062917][ T8392] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 341.066570][ T8392] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 341.070226][ T8392] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.074126][ T8392] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 341.077450][ T8392] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 341.081667][ T8392] usb 9-1: config 179 interface 65 has no altsetting 0 [ 341.089316][ T8392] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 341.094212][ T8392] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.111626][ T8392] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input30 [ 341.152517][ T41] rc_core: IR keymap rc-hauppauge not found [ 341.156978][ T41] Registered IR keymap rc-empty [ 341.161847][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.182480][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.198413][T10515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.209333][T10515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.214777][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 341.220415][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input29 [ 341.229295][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.242398][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.272564][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.302582][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.306206][ T8392] usb 9-1: USB disconnect, device number 11 [ 341.322407][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.342452][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.362467][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.382380][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.413443][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.442350][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.462343][ T41] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 341.483443][ T41] mceusb 12-1:0.0: Registered with mce emulator interface version 1 [ 341.489598][ T41] mceusb 12-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 341.493834][ T41] usb 12-1: USB disconnect, device number 4 [ 341.851422][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 341.851441][ T42] audit: type=1800 audit(1785982164.775:808): pid=10522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1484" name="size" dev="configfs" ino=42918 res=0 errno=0 [ 342.084946][T10545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.099680][T10545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.119851][T10546] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 342.391239][T10550] NILFS (nullb0): couldn't find nilfs on the device [ 343.904008][T10588] jffs2: notice: (10588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 7 of xref (0 dead, 1 orphan) found. [ 343.920309][ T42] audit: type=1400 audit(1785982166.845:809): avc: denied { lock } for pid=10586 comm="syz.7.1508" path="/198/file0/file0" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 344.037492][ T42] audit: type=1400 audit(1785982166.965:810): avc: denied { open } for pid=10596 comm="syz.4.1512" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.049116][ T42] audit: type=1400 audit(1785982166.965:811): avc: denied { watch } for pid=10596 comm="syz.4.1512" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.438821][T10629] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 345.578119][T10634] md: could not open device unknown-block(1,0). [ 345.599205][ T42] audit: type=1800 audit(1785982168.525:812): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1527" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 345.623913][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 345.868773][T10649] md: personality for level is not loaded! [ 347.311738][T10676] syzkaller0: entered promiscuous mode [ 347.314085][T10676] syzkaller0: entered allmulticast mode [ 347.383820][T10679] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.514127][T10681] md: could not open device unknown-block(1,0). [ 347.572552][T10679] md: could not open device unknown-block(1,2). [ 347.616078][T10681] md: could not open device unknown-block(1,3). [ 347.645383][T10679] md/raid:md0: not clean -- starting background reconstruction [ 347.649049][T10679] md/raid:md0: device ram2 operational as raid disk 2 [ 347.651221][T10679] md/raid:md0: device ram1 operational as raid disk 1 [ 347.682523][T10679] md/raid:md0: not enough operational devices (2/4 failed) [ 348.211037][T10692] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 348.211074][T10692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.217422][T10692] vhci_hcd vhci_hcd.0: Device attached [ 348.452406][ T8402] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 348.639935][T10693] vhci_hcd: connection reset by peer [ 348.654940][ T8216] vhci_hcd vhci_hcd.5: stop threads [ 348.657858][ T8216] vhci_hcd vhci_hcd.5: release socket [ 348.664016][ T8216] vhci_hcd vhci_hcd.5: disconnect device [ 349.102858][T10679] md/raid:md0: failed to run raid set. [ 349.105054][T10679] md: pers->run() failed ... [ 349.228414][ T42] audit: type=1400 audit(1785982172.155:813): avc: denied { write } for pid=10711 comm="syz.5.1554" name="fs" dev="configfs" ino=18052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 349.241843][ T42] audit: type=1400 audit(1785982172.155:814): avc: denied { write } for pid=10711 comm="syz.5.1554" name="fs" dev="configfs" ino=18052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 349.253023][ T42] audit: type=1800 audit(1785982172.175:815): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1554" name="streaming_maxpacket" dev="configfs" ino=43542 res=0 errno=0 [ 349.717163][T10724] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 349.727437][T10724] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 349.741474][T10724] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 349.750175][T10724] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 349.755059][T10724] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 349.761044][T10724] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 349.766525][T10724] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 349.771208][T10724] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 349.776149][T10724] kvm: requested 144152 ns i8254 timer period limited to 200000 ns [ 349.783886][T10724] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 350.119854][T10720] syz.4.1555 (10720) used greatest stack depth: 18072 bytes left [ 350.942520][ T42] audit: type=1800 audit(1785982173.865:816): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1566" name="streaming_maxpacket" dev="configfs" ino=46301 res=0 errno=0 [ 350.999212][ T5745] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 351.013807][T10756] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 351.019736][T10756] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1567'. [ 351.491975][T10778] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 351.491975][T10778] The task syz.5.1574 (10778) triggered the difference, watch for misbehavior. [ 352.469177][ T42] audit: type=1800 audit(1785982175.395:817): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1576" name="streaming_maxpacket" dev="configfs" ino=44937 res=0 errno=0 [ 353.263778][ T42] audit: type=1400 audit(1785982176.195:818): avc: denied { read } for pid=10797 comm="syz.4.1582" lport=43156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.582900][ T8402] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 353.658524][T10812] FAULT_INJECTION: forcing a failure. [ 353.658524][T10812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.663544][T10812] CPU: 1 UID: 0 PID: 10812 Comm: syz.8.1585 Not tainted syzkaller #0 PREEMPT(full) [ 353.663562][T10812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.663576][T10812] Call Trace: [ 353.663595][T10812] [ 353.663600][T10812] dump_stack_lvl+0x100/0x190 [ 353.663681][T10812] should_fail_ex.cold+0x5/0xa [ 353.663709][T10812] _copy_to_user+0x32/0xd0 [ 353.663747][T10812] simple_read_from_buffer+0xcb/0x170 [ 353.663782][T10812] proc_fail_nth_read+0x1af/0x230 [ 353.663807][T10812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.663825][T10812] ? rw_verify_area+0xce/0x6d0 [ 353.663847][T10812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.663864][T10812] vfs_read+0x1e4/0xb40 [ 353.663882][T10812] ? __pfx_vfs_read+0x10/0x10 [ 353.663898][T10812] ? __fget_files+0x215/0x3d0 [ 353.663913][T10812] ? __fget_files+0x21f/0x3d0 [ 353.663928][T10812] ksys_read+0x12a/0x250 [ 353.663944][T10812] ? __pfx_ksys_read+0x10/0x10 [ 353.663965][T10812] do_syscall_64+0x115/0x870 [ 353.663982][T10812] ? clear_bhb_loop+0x40/0x90 [ 353.663997][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.664009][T10812] RIP: 0033:0x7fa6c295e90e [ 353.664019][T10812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 353.664030][T10812] RSP: 002b:00007fa6c394bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.664053][T10812] RAX: ffffffffffffffda RBX: 00007fa6c394c6c0 RCX: 00007fa6c295e90e [ 353.664060][T10812] RDX: 000000000000000f RSI: 00007fa6c394c0a0 RDI: 0000000000000006 [ 353.664067][T10812] RBP: 00007fa6c394c090 R08: 0000000000000000 R09: 0000000000000000 [ 353.664073][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.664080][T10812] R13: 00007fa6c2c26038 R14: 00007fa6c2c25fa0 R15: 00007ffc333f4f18 [ 353.664094][T10812] [ 353.987781][ T42] audit: type=1400 audit(1785982176.915:819): avc: denied { lock } for pid=10818 comm="syz.7.1587" path="socket:[46374]" dev="sockfs" ino=46374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 354.364622][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 354.524287][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 354.527830][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.542278][ T24] usb 9-1: config 0 has no interfaces? [ 354.545644][ T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 354.548458][ T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 354.550999][ T24] usb 9-1: Product: syz [ 354.558512][ T24] usb 9-1: Manufacturer: syz [ 354.560545][ T24] usb 9-1: SerialNumber: syz [ 354.566170][ T24] usb 9-1: config 0 descriptor?? [ 354.783078][T10826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.792785][T10826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.999601][ T8392] usb 9-1: USB disconnect, device number 12 [ 356.076162][T10855] null_blk: nullb1: using native zone append [ 356.149688][T10855] null_blk: disk nullb1 created [ 356.561613][T10863] fuse: root generation should be zero [ 356.882964][ T42] audit: type=1400 audit(1785982179.805:820): avc: denied { remount } for pid=10878 comm="syz.8.1609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 357.332706][ T24] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 357.482299][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 357.488620][ T24] usb 12-1: unable to get BOS descriptor or descriptor too short [ 357.493432][ T24] usb 12-1: config 4 interface 0 has no altsetting 0 [ 357.507303][ T24] usb 12-1: string descriptor 0 read error: -22 [ 357.509367][ T24] usb 12-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 357.513341][ T24] usb 12-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 357.530715][ T24] usb 12-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 357.543404][ T24] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 357.553245][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 357.558113][ T24] usb 12-1: media controller created [ 357.572026][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.638282][T10906] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 357.742788][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 357.772989][ T24] usb 12-1: USB disconnect, device number 5 [ 358.072354][ T29] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 358.232427][ T29] usb 13-1: Using ep0 maxpacket: 8 [ 358.239379][ T29] usb 13-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 358.245469][ T29] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.255131][ T29] usb 13-1: Product: syz [ 358.258810][ T29] usb 13-1: Manufacturer: syz [ 358.267359][ T29] usb 13-1: SerialNumber: syz [ 358.277883][ T29] usb 13-1: config 0 descriptor?? [ 358.299786][ T29] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 358.322991][ T42] audit: type=1800 audit(1785982181.255:821): pid=10931 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1629" name="streaming_maxpacket" dev="configfs" ino=43629 res=0 errno=0 [ 358.333384][ T29] pctv452e: pctv452e_power_ctrl: 1 [ 358.333384][ T29] [ 358.336949][ T29] usb 13-1: selecting invalid altsetting 3 [ 358.339417][ T29] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 358.339417][ T29] [ 358.352166][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 358.373144][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.377595][ T29] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 358.381125][ T29] usb 13-1: media controller created [ 358.384392][ T29] dvb-usb: bulk message failed: -22 (8/0) [ 358.390331][ T29] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 358.398183][ T29] dvb-usb: MAC address reading failed. [ 358.406899][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.440079][ T29] DVB: Unable to find symbol stb0899_attach() [ 358.444903][ T29] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 358.492286][ T29] rc_core: IR keymap rc-tt-1500 not found [ 358.494286][ T29] Registered IR keymap rc-empty [ 358.497234][ T29] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 358.503344][ T29] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input31 [ 358.509311][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 358.512018][ T29] pctv452e: pctv452e_power_ctrl: 0 [ 358.512018][ T29] [ 358.515234][ T29] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 358.520630][ T29] usb 13-1: USB disconnect, device number 4 [ 358.547541][ T29] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 359.295542][ T42] audit: type=1800 audit(1785982182.225:822): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1638" name="streaming_maxpacket" dev="configfs" ino=46546 res=0 errno=0 [ 361.091082][ T42] audit: type=1800 audit(1785982184.015:823): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1649" name="streaming_maxpacket" dev="configfs" ino=46557 res=0 errno=0 [ 362.381141][ T42] audit: type=1800 audit(1785982185.305:824): pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1660" name="streaming_maxpacket" dev="configfs" ino=46566 res=0 errno=0 [ 362.524921][ T42] audit: type=1800 audit(1785982185.455:825): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1662" name="streaming_maxpacket" dev="configfs" ino=46578 res=0 errno=0 [ 363.995309][ T42] audit: type=1800 audit(1785982186.925:826): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1671" name="streaming_maxpacket" dev="configfs" ino=45742 res=0 errno=0 [ 364.072645][ T42] audit: type=1800 audit(1785982186.995:827): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1675" name="streaming_maxpacket" dev="configfs" ino=46599 res=0 errno=0 [ 364.375761][T11067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.437304][T11067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.504182][ T42] audit: type=1800 audit(1785982188.305:828): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1683" name="streaming_maxpacket" dev="configfs" ino=47582 res=0 errno=0 [ 365.916876][ T42] audit: type=1400 audit(1785982188.325:829): avc: denied { create } for pid=11079 comm="syz.7.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 365.926579][ T42] audit: type=1800 audit(1785982188.345:830): pid=11082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1685" name="streaming_maxpacket" dev="configfs" ino=43870 res=0 errno=0 [ 366.579282][ T42] audit: type=1800 audit(1785982189.505:831): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1695" name="streaming_maxpacket" dev="configfs" ino=46690 res=0 errno=0 [ 367.465980][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 367.583196][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1702'. [ 367.935464][ T42] audit: type=1800 audit(1785982190.865:832): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1705" name="streaming_maxpacket" dev="configfs" ino=43973 res=0 errno=0 [ 369.187522][T11187] CIFS: Attempting to mount //::1/share [ 369.263183][T11192] jffs2: notice: (11192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 7 of xref (0 dead, 1 orphan) found. [ 369.273632][ T42] audit: type=1400 audit(1785982192.195:833): avc: denied { write } for pid=11191 comm="syz.4.1721" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.030992][T11187] CIFS: VFS: cifs_mount failed w/return code = -512 [ 371.459856][T11238] netlink: 'syz.7.1739': attribute type 10 has an invalid length. [ 371.463995][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.469952][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.479048][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.481803][T11238] bridge0: port 2(bridge_slave_1) entered listening state [ 371.484247][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.486585][T11238] bridge0: port 1(bridge_slave_0) entered listening state [ 371.490999][T11238] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 371.496742][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1739'. [ 371.499667][T11238] bridge_slave_1: left allmulticast mode [ 371.501557][T11238] bridge_slave_1: left promiscuous mode [ 371.503560][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.507324][T11238] bridge_slave_0: left allmulticast mode [ 371.509177][T11238] bridge_slave_0: left promiscuous mode [ 371.511170][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.587385][T11238] bond0: (slave bridge0): Releasing backup interface [ 371.726617][ T5837] nci: nci_rx_work: unknown MT 0x1 [ 372.492270][T11242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.990900][ T24] IPVS: starting estimator thread 0... [ 373.010022][T11278] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 373.094623][T11286] IPVS: using max 44 ests per chain, 105600 per kthread [ 373.326031][ T5815] IPVS: stop unused estimator thread 0... [ 374.785697][ T24] IPVS: starting estimator thread 0... [ 374.789729][T11316] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 374.893082][T11318] IPVS: using max 44 ests per chain, 105600 per kthread [ 375.085496][ T5815] IPVS: stop unused estimator thread 0... [ 376.569952][ T24] IPVS: starting estimator thread 0... [ 376.662382][T11361] IPVS: using max 44 ests per chain, 105600 per kthread [ 377.311307][T11391] syzkaller0: entered promiscuous mode [ 377.313502][T11391] syzkaller0: entered allmulticast mode [ 378.457023][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.459100][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.941345][ T61] IPVS: starting estimator thread 0... [ 379.953965][T11421] syzkaller0: entered promiscuous mode [ 379.955772][T11421] syzkaller0: entered allmulticast mode [ 380.032345][T11425] IPVS: using max 45 ests per chain, 108000 per kthread [ 380.118367][ T42] audit: type=1400 audit(1785982203.045:834): avc: denied { connect } for pid=11435 comm="syz.7.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.227694][ T42] audit: type=1400 audit(1785982203.155:835): avc: denied { write } for pid=11440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.281162][ T42] audit: type=1400 audit(1785982203.205:836): avc: denied { write } for pid=11451 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.302946][T11450] syzkaller1: entered promiscuous mode [ 380.304832][T11450] syzkaller1: entered allmulticast mode [ 380.320615][T11436] bridge0: port 3(wlan1) entered disabled state [ 380.408828][ T42] audit: type=1400 audit(1785982203.335:837): avc: denied { write } for pid=11456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.459986][ T42] audit: type=1400 audit(1785982203.385:838): avc: denied { write } for pid=11459 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.541852][ T42] audit: type=1400 audit(1785982203.465:839): avc: denied { write } for pid=11465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.589218][ T42] audit: type=1400 audit(1785982203.515:840): avc: denied { write } for pid=11471 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.659115][ T9] IPVS: starting estimator thread 0... [ 380.662198][T11467] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 380.667111][ T42] audit: type=1400 audit(1785982203.595:841): avc: denied { write } for pid=11475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.741800][ T42] audit: type=1400 audit(1785982203.665:842): avc: denied { write } for pid=11486 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.752325][T11479] IPVS: using max 45 ests per chain, 108000 per kthread [ 380.867252][ T42] audit: type=1400 audit(1785982203.795:843): avc: denied { write } for pid=11493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.951148][T11436] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.954694][T11436] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 380.970443][T11506] syzkaller1: entered promiscuous mode [ 380.975727][T11506] syzkaller1: entered allmulticast mode [ 380.981268][T11436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.984370][T11436] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 381.050862][ T8216] IPVS: stop unused estimator thread 0... [ 381.068371][T11436] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 381.071885][T11436] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 381.856889][T11559] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 381.895939][T11564] syzkaller0: entered promiscuous mode [ 381.897825][T11564] syzkaller0: entered allmulticast mode [ 382.256901][T11591] syzkaller0: entered promiscuous mode [ 382.258953][T11591] syzkaller0: entered allmulticast mode [ 382.554417][ T61] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 382.706842][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1870'. [ 382.754490][ T61] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.767400][ T61] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.784943][ T61] usb 9-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 382.793385][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.875606][ T61] usb 9-1: config 0 descriptor?? [ 382.973084][T11634] syzkaller0: entered promiscuous mode [ 382.974915][T11634] syzkaller0: entered allmulticast mode [ 383.202759][T11641] syz_tun: entered allmulticast mode [ 383.242202][ T61] usb 9-1: USB disconnect, device number 13 [ 383.343578][T11648] syzkaller1: entered promiscuous mode [ 383.345469][T11648] syzkaller1: entered allmulticast mode [ 383.653624][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1885'. [ 383.654461][T11657] syzkaller0: entered promiscuous mode [ 383.658542][T11657] syzkaller0: entered allmulticast mode [ 383.835248][T11666] syz_tun: entered allmulticast mode [ 383.904504][T11670] syzkaller1: entered promiscuous mode [ 383.909170][T11670] syzkaller1: entered allmulticast mode [ 384.804133][T11683] syzkaller0: entered promiscuous mode [ 384.806532][T11683] syzkaller0: entered allmulticast mode [ 384.873719][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1897'. [ 385.036072][T11699] syzkaller1: entered promiscuous mode [ 385.040155][T11699] syzkaller1: entered allmulticast mode [ 385.140077][T11713] syzkaller0: entered promiscuous mode [ 385.146884][T11713] syzkaller0: entered allmulticast mode [ 385.377208][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1915'. [ 385.426472][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'. [ 385.481450][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 385.481476][ T42] audit: type=1800 audit(1785982208.405:850): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1920" name="streaming_maxpacket" dev="configfs" ino=51438 res=0 errno=0 [ 385.557667][T11745] syzkaller0: entered promiscuous mode [ 385.559500][T11745] syzkaller0: entered allmulticast mode [ 385.787066][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1925'. [ 385.824144][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1927'. [ 385.930384][ T42] audit: type=1800 audit(1785982208.855:851): pid=11773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1933" name="streaming_maxpacket" dev="configfs" ino=48669 res=0 errno=0 [ 385.986454][T11780] syzkaller0: entered promiscuous mode [ 385.990566][T11780] syzkaller0: entered allmulticast mode [ 386.095573][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1938'. [ 386.097755][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 386.661567][ T42] audit: type=1800 audit(1785982209.585:852): pid=11814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1946" name="streaming_maxpacket" dev="configfs" ino=50460 res=0 errno=0 [ 387.052734][T11824] syzkaller0: entered promiscuous mode [ 387.054628][T11824] syzkaller0: entered allmulticast mode [ 387.202669][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1949'. [ 387.216601][T11842] syz_tun: entered allmulticast mode [ 387.377917][ T42] audit: type=1800 audit(1785982210.305:853): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1958" name="streaming_maxpacket" dev="configfs" ino=49559 res=0 errno=0 [ 388.457945][T11923] __nla_validate_parse: 1 callbacks suppressed [ 388.457965][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1972'. [ 389.029162][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1986'. [ 389.540490][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1992'. [ 389.808809][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1995'. [ 390.191731][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2001'. [ 391.040606][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 391.306803][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 391.445384][T12078] syzkaller0: entered promiscuous mode [ 391.447822][T12078] syzkaller0: entered allmulticast mode [ 391.831603][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2020'. [ 392.409713][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2025'. [ 392.480900][T12111] syzkaller0: entered promiscuous mode [ 392.485908][T12111] syzkaller0: entered allmulticast mode [ 392.919539][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 393.905304][T12165] syzkaller0: entered promiscuous mode [ 393.910070][T12165] syzkaller0: entered allmulticast mode [ 394.311479][T12200] __nla_validate_parse: 1 callbacks suppressed [ 394.311500][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 394.360301][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2049'. [ 395.419430][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2060'. [ 395.597312][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2066'. [ 395.853832][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 396.211248][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2079'. [ 396.494264][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2084'. [ 396.621537][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2088'. [ 400.913871][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2139'. [ 400.970242][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 401.869334][T12557] syzkaller1: entered promiscuous mode [ 401.871083][T12557] syzkaller1: entered allmulticast mode [ 402.000330][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'. [ 402.135041][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2158'. [ 403.237577][T12610] syzkaller1: entered promiscuous mode [ 403.250459][T12610] syzkaller1: entered allmulticast mode [ 403.469733][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2171'. [ 403.838485][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 404.424787][T12666] syzkaller1: entered promiscuous mode [ 404.426708][T12666] syzkaller1: entered allmulticast mode [ 404.556071][T12673] jffs2: notice: (12673) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 7 of xref (0 dead, 1 orphan) found. [ 404.577586][ T42] audit: type=1400 audit(1785982227.505:854): avc: denied { write } for pid=12672 comm="syz.7.2184" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.597848][ T42] audit: type=1400 audit(1785982227.515:855): avc: denied { ioctl } for pid=12672 comm="syz.7.2184" path="/353/mnt/test2" dev="jffs2" ino=5 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 405.795946][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2207'. [ 405.802327][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2207'. [ 405.953389][T12746] fuse: Bad value for 'fd' [ 406.054808][T12754] hub 8-0:1.0: USB hub found [ 406.057832][T12754] hub 8-0:1.0: 1 port detected [ 406.414470][ T41] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 406.572294][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 406.587150][ T41] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 406.598228][ T41] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 406.611380][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 406.622350][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 406.629717][ T41] usb 10-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 406.642379][ T41] usb 10-1: config 168 interface 0 has no altsetting 0 [ 406.646606][ T41] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 406.662294][ T41] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 406.665880][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 406.669475][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 406.676088][ T41] usb 10-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 406.692665][ T41] usb 10-1: config 168 interface 0 has no altsetting 0 [ 406.696078][ T41] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 406.699258][ T41] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 406.705754][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 406.712361][ T41] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 406.722312][ T41] usb 10-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 406.734945][ T41] usb 10-1: config 168 interface 0 has no altsetting 0 [ 406.744269][ T41] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 406.748010][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.762318][ T41] usb 10-1: Product: syz [ 406.763751][ T41] usb 10-1: Manufacturer: syz [ 406.765492][ T41] usb 10-1: SerialNumber: syz [ 406.900282][T12770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.030273][ T41] adutux 10-1:168.0: interrupt endpoints not found [ 407.040912][ T41] usb 10-1: USB disconnect, device number 7 [ 408.649277][ T42] audit: type=1800 audit(1785982231.575:856): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2234" name="idProduct" dev="configfs" ino=53279 res=0 errno=0 [ 408.670429][ T42] audit: type=1800 audit(1785982231.575:857): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2234" name="ep_name" dev="configfs" ino=53280 res=0 errno=0 [ 408.691603][ T42] audit: type=1800 audit(1785982231.585:858): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2234" name="direction" dev="configfs" ino=53281 res=0 errno=0 [ 408.719530][ T42] audit: type=1800 audit(1785982231.585:859): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2234" name="name" dev="configfs" ino=53282 res=0 errno=0 [ 408.753140][ T42] audit: type=1800 audit(1785982231.585:860): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2234" name="ep_name" dev="configfs" ino=53283 res=0 errno=0 [ 408.773504][ T42] audit: type=1800 audit(1785982231.585:861): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2234" name="name" dev="configfs" ino=52412 res=0 errno=0 [ 408.792867][ T42] audit: type=1800 audit(1785982231.585:862): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2234" name="active" dev="configfs" ino=53284 res=0 errno=0 [ 410.186959][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2245'. [ 412.028708][ T42] audit: type=1400 audit(1785982234.955:863): avc: denied { write } for pid=12899 comm="syz.5.2260" name="fs" dev="configfs" ino=43061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.042289][ T42] audit: type=1400 audit(1785982234.965:864): avc: denied { write } for pid=12899 comm="syz.5.2260" name="fs" dev="configfs" ino=43061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.047065][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 412.062347][ T42] audit: type=1400 audit(1785982234.965:865): avc: denied { write } for pid=12899 comm="syz.5.2260" name="fs" dev="configfs" ino=43061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.105273][T12904] syzkaller0: entered promiscuous mode [ 412.107303][T12904] syzkaller0: entered allmulticast mode [ 412.280189][T12912] TC_ACT_REPEAT abuse ? [ 413.390920][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2272'. [ 413.799192][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2286'. [ 414.447891][ T42] audit: type=1326 audit(1785982237.375:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12991 comm="syz.5.2290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 414.472325][ T42] audit: type=1326 audit(1785982237.375:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12991 comm="syz.5.2290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 414.558484][ T42] audit: type=1326 audit(1785982237.375:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12991 comm="syz.5.2290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 414.567963][ T42] audit: type=1326 audit(1785982237.375:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12991 comm="syz.5.2290" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 414.580593][ T42] audit: type=1326 audit(1785982237.425:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12991 comm="syz.5.2290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 414.590046][ T42] audit: type=1326 audit(1785982237.425:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12991 comm="syz.5.2290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 414.599627][ T42] audit: type=1326 audit(1785982237.425:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12991 comm="syz.5.2290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006999e0d9 code=0x7ffc0000 [ 414.854064][T13002] block device autoloading is deprecated and will be removed. [ 415.050699][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2304'. [ 415.328414][T13035] (syz.7.2308,13035,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 415.344263][T13035] (syz.7.2308,13035,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 415.352618][T13035] (syz.7.2308,13035,3):o2hb_region_dev_store:1850 ERROR: status = -5 [ 415.414771][T13038] syzkaller0: entered promiscuous mode [ 415.421352][T13038] syzkaller0: entered allmulticast mode [ 415.539044][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2313'. [ 416.150105][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 416.992832][ T8216] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.998117][ T8216] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.001803][ T8216] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.005714][ T8216] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.461071][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2340'. [ 417.540019][T13130] syzkaller0: entered promiscuous mode [ 417.541874][T13130] syzkaller0: entered allmulticast mode [ 417.665488][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 417.665510][ T42] audit: type=1800 audit(1785982240.595:905): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2343" name="idProduct" dev="configfs" ino=57356 res=0 errno=0 [ 417.675343][ T42] audit: type=1800 audit(1785982240.605:906): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2343" name="ep_name" dev="configfs" ino=57357 res=0 errno=0 [ 417.714488][ T42] audit: type=1800 audit(1785982240.645:907): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2344" name="idProduct" dev="configfs" ino=57360 res=0 errno=0 [ 417.721912][ T42] audit: type=1800 audit(1785982240.645:908): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2344" name="ep_name" dev="configfs" ino=57361 res=0 errno=0 [ 417.738170][ T42] audit: type=1800 audit(1785982240.665:909): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2344" name="direction" dev="configfs" ino=57362 res=0 errno=0 [ 417.810674][ T42] audit: type=1800 audit(1785982240.735:910): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2347" name="idProduct" dev="configfs" ino=57370 res=0 errno=0 [ 417.833328][ T42] audit: type=1800 audit(1785982240.755:911): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2347" name="ep_name" dev="configfs" ino=57372 res=0 errno=0 [ 417.852334][ T42] audit: type=1800 audit(1785982240.755:912): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2347" name="direction" dev="configfs" ino=57373 res=0 errno=0 [ 417.861435][ T42] audit: type=1800 audit(1785982240.755:913): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2347" name="name" dev="configfs" ino=57374 res=0 errno=0 [ 418.000736][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2349'. [ 418.110374][T13159] syzkaller0: entered promiscuous mode [ 418.112318][T13159] syzkaller0: entered allmulticast mode [ 418.502015][ T42] audit: type=1800 audit(1785982241.425:914): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2355" name="idProduct" dev="configfs" ino=55568 res=0 errno=0 [ 419.061197][T13186] syzkaller0: entered promiscuous mode [ 419.064494][T13186] syzkaller0: entered allmulticast mode [ 419.338406][T13210] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 419.415823][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2369'. [ 419.658359][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2373'. [ 419.662383][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 419.822354][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 419.826837][ T9] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.831672][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 419.837186][ T9] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 419.841186][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.850434][ T9] usb 10-1: config 0 descriptor?? [ 419.968399][T13252] (syz.7.2381,13252,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 419.974191][T13252] (syz.7.2381,13252,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 419.977428][T13252] (syz.7.2381,13252,1):o2hb_region_dev_store:1850 ERROR: status = -5 [ 420.131258][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2380'. [ 420.243209][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2382'. [ 420.275593][ T9] mcp2221 0003:04D8:00DD.0009: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 420.671227][ T9] usb 10-1: USB disconnect, device number 8 [ 421.585648][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2394'. [ 421.617861][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2392'. [ 422.451622][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2404'. [ 422.746390][ T29] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 422.928227][ T29] usb 12-1: config index 0 descriptor too short (expected 69, got 51) [ 422.931731][ T29] usb 12-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.939443][ T29] usb 12-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 422.945443][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.951650][ T29] usb 12-1: Product: syz [ 422.953339][ T29] usb 12-1: Manufacturer: syz [ 422.957109][ T29] usb 12-1: SerialNumber: syz [ 422.992675][ T29] usb 12-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 423.170138][ T29] usb 12-1: Error initialising Scarlett Gen 2 Mixer Driver: -32 [ 423.275043][ T42] kauditd_printk_skb: 66 callbacks suppressed [ 423.275059][ T42] audit: type=1800 audit(1785982246.195:981): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2417" name="idProduct" dev="configfs" ino=55732 res=0 errno=0 [ 423.289916][ T42] audit: type=1800 audit(1785982246.205:982): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2417" name="name" dev="configfs" ino=55733 res=0 errno=0 [ 423.318759][ T29] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 423.328377][ T42] audit: type=1800 audit(1785982246.255:983): pid=13425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2419" name="idProduct" dev="configfs" ino=58502 res=0 errno=0 [ 423.344078][ T42] audit: type=1800 audit(1785982246.275:984): pid=13425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2419" name="name" dev="configfs" ino=58504 res=0 errno=0 [ 423.386387][ T42] audit: type=1800 audit(1785982246.315:985): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2420" name="ep_name" dev="configfs" ino=57637 res=0 errno=0 [ 423.627352][ T42] audit: type=1800 audit(1785982246.555:986): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2428" name="ep_name" dev="configfs" ino=57659 res=0 errno=0 [ 423.639449][ T42] audit: type=1800 audit(1785982246.565:987): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2429" name="ipv4_address" dev="configfs" ino=58543 res=0 errno=0 [ 423.648605][ T42] audit: type=1800 audit(1785982246.565:988): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2429" name="ipv4_port" dev="configfs" ino=58544 res=0 errno=0 [ 423.657497][ T42] audit: type=1800 audit(1785982246.575:989): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2429" name="num" dev="configfs" ino=58545 res=0 errno=0 [ 423.669422][ T42] audit: type=1800 audit(1785982246.575:990): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2429" name="local" dev="configfs" ino=58546 res=0 errno=0 [ 423.994943][T13477] CIFS: Attempting to mount //127.0.0.1/share [ 424.089695][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2436'. [ 424.615979][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2442'. [ 424.797615][T13477] CIFS: VFS: Error connecting to socket. Aborting operation. [ 424.800668][T13477] CIFS: VFS: cifs_mount failed w/return code = -4 [ 424.993145][T13514] syzkaller0: entered promiscuous mode [ 424.994962][T13514] syzkaller0: entered allmulticast mode [ 425.323323][ T8392] usb 12-1: USB disconnect, device number 6 [ 425.767208][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 425.770511][T13543] syzkaller0: entered promiscuous mode [ 425.779237][T13543] syzkaller0: entered allmulticast mode [ 425.807950][T11453] hid_parser_main: 84 callbacks suppressed [ 425.807965][T11453] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 425.894318][T11453] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 425.935119][T13554] loop2: detected capacity change from 0 to 7 [ 425.946342][T13554] Dev loop2: unable to read RDB block 7 [ 425.948919][T13554] loop2: unable to read partition table [ 425.951982][T13554] loop2: partition table beyond EOD, truncated [ 425.954470][T13554] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 425.996365][T13558] binder: 13557:13558 ioctl c0306201 200000000080 returned -14 [ 426.001085][T13558] binder: 13557:13558 ioctl c0306201 2000000003c0 returned -14 [ 426.005606][T13558] binder_alloc: 13557: binder_alloc_buf, no vma [ 426.130830][T13565] (syz.7.2466,13565,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 426.134150][T13565] (syz.7.2466,13565,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 426.137278][T13565] (syz.7.2466,13565,3):o2hb_region_dev_store:1850 ERROR: status = -5 [ 426.153542][ T29] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 426.322487][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 426.327105][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.330906][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 426.334924][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.338703][ T29] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 426.341439][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.350049][ T29] usb 10-1: config 0 descriptor?? [ 426.355245][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input33 [ 426.359728][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 426.431730][T13585] syzkaller0: entered promiscuous mode [ 426.435274][T13585] syzkaller0: entered allmulticast mode [ 426.562320][ T29] usb 10-1: USB disconnect, device number 9 [ 426.732195][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2473'. [ 427.354980][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 427.653562][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 427.955774][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2492'. [ 428.570777][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 428.570808][ T42] audit: type=1800 audit(1785982251.495:1036): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2503" name="ipv4_address" dev="configfs" ino=55995 res=0 errno=0 [ 428.623602][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 428.652297][ T42] audit: type=1800 audit(1785982251.575:1037): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2503" name="ipv4_port" dev="configfs" ino=57863 res=0 errno=0 [ 428.662759][ T42] audit: type=1800 audit(1785982251.575:1038): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2503" name="num" dev="configfs" ino=57864 res=0 errno=0 [ 428.669728][ T42] audit: type=1800 audit(1785982251.575:1039): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2503" name="local" dev="configfs" ino=57865 res=0 errno=0 [ 428.676798][ T42] audit: type=1800 audit(1785982251.575:1040): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2503" name="block_bytes" dev="configfs" ino=57866 res=0 errno=0 [ 428.687165][ T42] audit: type=1800 audit(1785982251.575:1041): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2503" name="blocks" dev="configfs" ino=57867 res=0 errno=0 [ 428.695396][ T42] audit: type=1800 audit(1785982251.585:1042): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2503" name="dev" dev="configfs" ino=57870 res=0 errno=0 [ 428.932983][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2507'. [ 429.239930][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2514'. [ 429.513857][T13745] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 429.588555][ T42] audit: type=1800 audit(1785982252.515:1043): pid=13759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2528" name="ipv4_address" dev="configfs" ino=56091 res=0 errno=0 [ 429.596971][ T42] audit: type=1800 audit(1785982252.525:1044): pid=13759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2528" name="ipv4_port" dev="configfs" ino=56092 res=0 errno=0 [ 429.607307][ T42] audit: type=1800 audit(1785982252.535:1045): pid=13759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2528" name="num" dev="configfs" ino=56093 res=0 errno=0 [ 429.620888][T13759] (syz.5.2528,13759,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 429.624059][T13759] (syz.5.2528,13759,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 429.626651][T13759] (syz.5.2528,13759,3):o2hb_region_dev_store:1850 ERROR: status = -5 [ 429.699554][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2523'. [ 430.772710][ T8392] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 431.206465][ T8392] usb 10-1: unable to get BOS descriptor or descriptor too short [ 431.211986][ T8392] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.220491][ T8392] usb 10-1: string descriptor 0 read error: -22 [ 431.227359][ T8392] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 431.231242][ T8392] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.451031][ T8392] usb 10-1: 1:1: cannot set freq 48000 to ep 0x1 [ 431.598334][ T8392] usb 10-1: USB disconnect, device number 10 [ 431.638944][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 431.715829][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2555'. [ 432.152535][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'. [ 432.261628][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2567'. [ 432.683468][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2579'. [ 432.704852][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2581'. [ 432.804172][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2579'. [ 432.811947][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2581'. [ 432.821024][T13947] (syz.4.2583,13947,2):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 432.825834][T13947] (syz.4.2583,13947,2):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 432.830620][T13947] (syz.4.2583,13947,2):o2hb_region_dev_store:1850 ERROR: status = -5 [ 432.905286][T13958] misc userio: The device must be registered before sending interrupts [ 432.906843][T13959] fuse: Bad value for 'fd' [ 432.915143][T13959] fuse: Bad value for 'fd' [ 432.919194][T13958] misc userio: The device must be registered before sending interrupts [ 432.930085][T13958] misc userio: Invalid payload size [ 432.933624][T13958] misc userio: Invalid payload size [ 432.935591][T13958] misc userio: The device must be registered before sending interrupts [ 432.941228][T13958] misc userio: Invalid payload size [ 433.133692][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2594'. [ 433.171150][T13979] (syz.4.2596,13979,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 433.173796][T13979] (syz.4.2596,13979,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 433.176435][T13979] (syz.4.2596,13979,3):o2hb_region_dev_store:1850 ERROR: status = -5 [ 433.450585][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2598'. [ 433.550753][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 433.625276][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 433.625301][ T42] audit: type=1800 audit(1785982256.555:1085): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2606" name="ipv4_address" dev="configfs" ino=59562 res=0 errno=0 [ 433.641754][ T42] audit: type=1800 audit(1785982256.565:1086): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2606" name="ipv4_port" dev="configfs" ino=59565 res=0 errno=0 [ 433.651644][T14011] (syz.8.2606,14011,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 433.660628][T14011] (syz.8.2606,14011,3):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 433.664586][T14011] (syz.8.2606,14011,3):o2hb_region_dev_store:1850 ERROR: status = -5 [ 433.667235][ T42] audit: type=1800 audit(1785982256.565:1087): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2606" name="num" dev="configfs" ino=59567 res=0 errno=0 [ 433.675165][ T42] audit: type=1800 audit(1785982256.565:1088): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2606" name="local" dev="configfs" ino=59569 res=0 errno=0 [ 433.690562][ T42] audit: type=1800 audit(1785982256.565:1089): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2606" name="dev" dev="configfs" ino=59570 res=0 errno=0 [ 433.852557][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2609'. [ 433.912721][ T9] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 433.922334][ T41] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 433.966957][T14029] tipc: Started in network mode [ 433.968675][T14029] tipc: Node identity 12cb3851c7fc, cluster identity 4711 [ 433.971127][T14029] tipc: Enabled bearer , priority 0 [ 433.999039][T14029] syzkaller0: entered promiscuous mode [ 434.000978][T14029] syzkaller0: entered allmulticast mode [ 434.003545][T14029] tipc: Resetting bearer [ 434.064112][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.067659][ T9] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.070637][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.075753][ T9] usb 12-1: config 0 descriptor?? [ 434.102375][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 434.105960][ T41] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 434.112495][ T41] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.122285][ T41] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.128307][ T41] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.142307][ T41] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.147379][ T41] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 434.150932][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.285283][T14013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.288579][T14013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.294456][ T9] usbhid 12-1:0.0: can't add hid device: -71 [ 434.296691][ T9] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 434.300531][ T9] usb 12-1: USB disconnect, device number 7 [ 434.366455][ T41] usb 9-1: usb_control_msg returned -32 [ 434.368725][ T41] usbtmc 9-1:16.0: can't read capabilities [ 434.383285][T14028] tipc: Resetting bearer [ 434.571535][ T8392] usb 9-1: USB disconnect, device number 14 [ 434.754053][ T9] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 434.904856][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.908358][ T9] usb 12-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 434.911209][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.917236][ T9] usb 12-1: config 0 descriptor?? [ 435.329427][ T42] audit: type=1800 audit(1785982258.255:1090): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2613" name="ep_name" dev="configfs" ino=58256 res=0 errno=0 [ 435.660818][ T42] audit: type=1400 audit(1785982258.585:1091): avc: denied { write } for pid=14052 comm="syz.4.2617" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 435.740169][ T9] aiptek 12-1:0.0: Aiptek using 400 ms programming speed [ 435.745383][ T9] input: Aiptek as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input34 [ 436.161271][ T10] usb 12-1: USB disconnect, device number 8 [ 436.161358][ C0] aiptek 12-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 437.280148][T14028] tipc: Disabling bearer [ 437.288089][T14031] __nla_validate_parse: 3 callbacks suppressed [ 437.288110][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2612'. [ 437.306047][ T8392] tipc: Node number set to 3577165905 [ 437.324573][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2619'. [ 437.608561][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2628'. [ 437.699453][T14104] device-mapper: ioctl: Invalid ioctl structure: name thinpool, dev f802 [ 437.703183][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2628'. [ 437.969922][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2632'. [ 438.585188][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 438.623012][T14169] TC_ACT_REPEAT abuse ? [ 439.500394][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2658'. [ 439.520198][ T42] audit: type=1800 audit(1785982262.445:1092): pid=14208 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2659" name="ep_name" dev="configfs" ino=59692 res=0 errno=0 [ 439.547147][T14210] TC_ACT_REPEAT abuse ? [ 439.668758][T14215] fuse: Bad value for 'fd' [ 439.670782][T14215] fuse: Bad value for 'fd' [ 439.782080][ T42] audit: type=1800 audit(1785982262.705:1093): pid=14223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2666" name="name" dev="configfs" ino=59782 res=0 errno=0 [ 439.906668][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.911281][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.983180][T14238] TC_ACT_REPEAT abuse ? [ 440.044644][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2669'. [ 440.105655][T14247] tipc: Started in network mode [ 440.107898][T14247] tipc: Node identity a64a5ed54b88, cluster identity 4711 [ 440.110663][T14248] fuse: Bad value for 'fd' [ 440.112157][T14247] tipc: Enabled bearer , priority 0 [ 440.114506][T14248] fuse: Bad value for 'fd' [ 440.185550][T14242] tipc: Disabling bearer [ 440.207773][ T42] audit: type=1800 audit(1785982263.135:1094): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2677" name="name" dev="configfs" ino=60678 res=0 errno=0 [ 440.522542][ T10] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 440.570215][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 440.704124][ T10] usb 13-1: unable to get BOS descriptor or descriptor too short [ 440.716471][ T10] usb 13-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.728290][ T10] usb 13-1: string descriptor 0 read error: -22 [ 440.731577][ T10] usb 13-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 440.742453][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.516928][ T42] audit: type=1800 audit(1785982264.445:1095): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2687" name="name" dev="configfs" ino=62636 res=0 errno=0 [ 441.560688][T14295] fuse: Bad value for 'fd' [ 441.562883][T14295] fuse: Bad value for 'fd' [ 441.569176][ T10] usb 13-1: USB disconnect, device number 5 [ 441.852317][ T61] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 442.043632][ T61] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.067529][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.083942][ T61] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 442.102857][ T61] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.121168][ T61] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 442.130779][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.163939][ T42] audit: type=1800 audit(1785982265.095:1096): pid=14311 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2695" name="ep_name" dev="configfs" ino=60790 res=0 errno=0 [ 442.186558][T14310] TC_ACT_REPEAT abuse ? [ 442.317904][ T42] audit: type=1800 audit(1785982265.245:1097): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2697" name="name" dev="configfs" ino=59829 res=0 errno=0 [ 442.729892][ T42] audit: type=1800 audit(1785982265.655:1098): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2705" name="ep_name" dev="configfs" ino=61791 res=0 errno=0 [ 442.759557][ T61] gud 9-1:1.0: Failed to add properties (error=-71) [ 442.766530][ T61] gud 9-1:1.0: probe with driver gud failed with error -71 [ 442.778563][ T61] usb 9-1: USB disconnect, device number 15 [ 442.799521][T14335] TC_ACT_REPEAT abuse ? [ 442.937720][ T42] audit: type=1800 audit(1785982265.865:1099): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2708" name="name" dev="configfs" ino=59940 res=0 errno=0 [ 443.202495][ T41] usb 12-1: new low-speed USB device number 9 using dummy_hcd [ 443.355874][ T41] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.359221][ T41] usb 12-1: config 0 has no interface number 0 [ 443.361289][ T41] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 443.365562][ T41] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 443.369100][ T41] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 443.372068][ T41] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.377052][ T41] usb 12-1: config 0 descriptor?? [ 443.379937][T14341] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 443.386888][ T41] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 443.593239][ T41] usb 12-1: USB disconnect, device number 9 [ 443.725358][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2714'. [ 443.832639][ T42] audit: type=1800 audit(1785982266.765:1100): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2722" name="ipv4_address" dev="configfs" ino=61915 res=0 errno=0 [ 443.840871][ T42] audit: type=1800 audit(1785982266.765:1101): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2722" name="ipv4_port" dev="configfs" ino=61916 res=0 errno=0 [ 443.851993][T14377] (syz.5.2722,14377,2):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 443.856674][T14377] (syz.5.2722,14377,2):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 443.859813][T14377] (syz.5.2722,14377,2):o2hb_region_dev_store:1850 ERROR: status = -5 [ 444.051428][T14390] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 444.074533][T14381] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 444.078404][T14381] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 444.081241][T14381] CPU: 1 UID: 0 PID: 14381 Comm: syz.8.2723 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.084777][T14381] Tainted: [L]=SOFTLOCKUP [ 444.086144][T14381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 444.089280][T14381] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 444.091406][T14381] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 444.098487][T14381] RSP: 0018:ffffc900258ff830 EFLAGS: 00010202 [ 444.100569][T14381] RAX: dffffc0000000000 RBX: ffff888029f38158 RCX: ffffc9000c603000 [ 444.103923][T14381] RDX: 00000000000000e6 RSI: ffffffff87e73bc6 RDI: ffff888029f38128 [ 444.107399][T14381] RBP: ffff888029f38150 R08: 0000000000000001 R09: 0000000000000000 [ 444.110881][T14381] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 444.114306][T14381] R13: ffff888029f38128 R14: ffff888058e43920 R15: ffff888029f38000 [ 444.117740][T14381] FS: 00007fa6c394c6c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 444.121311][T14381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.124118][T14381] CR2: 00007f0069989240 CR3: 00000000382c5000 CR4: 0000000000352ef0 [ 444.127450][T14381] Call Trace: [ 444.128914][T14381] [ 444.130196][T14381] ? f_midi2_unbind+0x146/0x800 [ 444.132048][T14381] f_midi2_unbind+0x265/0x800 [ 444.133810][T14381] ? __pfx_f_midi2_unbind+0x10/0x10 [ 444.135939][T14381] purge_configs_funcs+0x285/0x510 [ 444.137703][T14381] configfs_composite_bind+0xf2c/0x1960 [ 444.140058][T14381] ? kernfs_create_link+0x1bd/0x240 [ 444.142049][T14381] gadget_bind_driver+0x28c/0xbf0 [ 444.144196][T14381] ? __pfx_gadget_bind_driver+0x10/0x10 [ 444.146134][T14381] really_probe+0x241/0xa60 [ 444.147746][T14381] __driver_probe_device+0x20e/0x450 [ 444.149597][T14381] driver_probe_device+0x4a/0x140 [ 444.151874][T14381] __driver_attach+0x21f/0x5b0 [ 444.153983][T14381] ? __pfx___driver_attach+0x10/0x10 [ 444.155931][T14381] bus_for_each_dev+0x13e/0x1d0 [ 444.157474][T14381] ? __pfx_bus_for_each_dev+0x10/0x10 [ 444.159271][T14381] ? bus_add_driver+0x2b5/0x5b0 [ 444.161402][T14381] bus_add_driver+0x305/0x5b0 [ 444.163423][T14381] driver_register+0x1e2/0x360 [ 444.165165][T14381] usb_gadget_register_driver_owner+0x132/0x210 [ 444.167751][T14381] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 444.169959][T14381] configfs_write_iter+0x302/0x4e0 [ 444.172197][T14381] vfs_write+0x6ac/0x1050 [ 444.174044][T14381] ? __pfx_configfs_write_iter+0x10/0x10 [ 444.176386][T14381] ? __pfx_vfs_write+0x10/0x10 [ 444.178395][T14381] ksys_write+0x12a/0x250 [ 444.180218][T14381] ? __pfx_ksys_write+0x10/0x10 [ 444.182255][T14381] do_syscall_64+0x115/0x870 [ 444.184198][T14381] ? clear_bhb_loop+0x40/0x90 [ 444.186192][T14381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.188661][T14381] RIP: 0033:0x7fa6c299e0d9 [ 444.190551][T14381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.198389][T14381] RSP: 002b:00007fa6c394c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.201579][T14381] RAX: ffffffffffffffda RBX: 00007fa6c2c25fa0 RCX: 00007fa6c299e0d9 [ 444.204307][T14381] RDX: 000000000000000c RSI: 0000200000002100 RDI: 0000000000000003 [ 444.207299][T14381] RBP: 00007fa6c2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 444.210665][T14381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.213964][T14381] R13: 00007fa6c2c26038 R14: 00007fa6c2c25fa0 R15: 00007ffc333f4f18 [ 444.217260][T14381] [ 444.218595][T14381] Modules linked in: [ 444.221443][T14381] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 444.296605][T14381] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 444.298577][T14381] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 444.305125][T14381] RSP: 0018:ffffc900258ff830 EFLAGS: 00010202 [ 444.307142][T14381] RAX: dffffc0000000000 RBX: ffff888029f38158 RCX: ffffc9000c603000 [ 444.309663][T14381] RDX: 00000000000000e6 RSI: ffffffff87e73bc6 RDI: ffff888029f38128 [ 444.322268][T14381] RBP: ffff888029f38150 R08: 0000000000000001 R09: 0000000000000000 [ 444.325887][T14381] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 444.329326][T14381] R13: ffff888029f38128 R14: ffff888058e43920 R15: ffff888029f38000 [ 444.336213][T14381] FS: 00007fa6c394c6c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 444.340056][T14381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.343072][T14381] CR2: 00007fbdcf827dac CR3: 00000000382c5000 CR4: 0000000000352ef0 [ 444.346567][T14381] Kernel panic - not syncing: Fatal exception [ 444.349970][T14381] Kernel Offset: disabled [ 444.351827][T14381] Rebooting in 86400 seconds..