last executing test programs: 5m59.403391291s ago: executing program 3 (id=45): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1d1) socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x24000, &(0x7f0000000280)={[{@xino_off}], [{@euid_gt={'euid>', r0}}, {@euid_eq={'euid', 0x3d, r0}}, {@appraise}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@permit_directio}, {@fowner_gt={'fowner>', r0}}, {@measure}]}) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2004001) ppoll(&(0x7f0000000200)=[{r2, 0x2188}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r4) r5 = creat(&(0x7f0000000100)='./bus/file0\x00', 0x194) openat2(r5, &(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000180)={0x1a042, 0x8a, 0x6}, 0x18) r6 = fcntl$getown(r3, 0x9) process_vm_writev(r6, &(0x7f0000000780)=[{&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/42, 0x2a}, {&(0x7f00000005c0)=""/86, 0x56}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000740)=""/46, 0x2e}], 0x9, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/211, 0xd3}, {&(0x7f0000000940)=""/50, 0x32}, {&(0x7f0000000980)=""/198, 0xc6}], 0x3, 0x0) 5m58.287984578s ago: executing program 3 (id=49): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) r3 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 5m55.046928555s ago: executing program 3 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x15}, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x7}]}}]}, 0x3c}}, 0x44080) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="03000000000000000000000000000000bf0000008217212193a2601230605564afbee975748fb8dcae4f94b2fefff41f8756a8fab82e8dbdb619844a478cf2b7082a1585e2ae6b055e6e6dc5046a96d8266b37ec6aec495f4bb2fc2a3fd10c9fe891ca33a440693097dc2f9ebce7a4e291bebc873a22d777046e20dcbcfb4895f00ff2389113af078a384cbccecc829becade3723ca98e76c44bb140b0f313240bb1707bc5cd429b7f60d12726bcbf0a7b87eb853c3032e0ff1f5b21aa6bcc5d5a69a1fb161ed315519280117829e345bc89a009f961cb85e1e2649c3ce7e89834a2a6c146dccee2d73ec907431d6fe43add74e5fc34c2d2e905621b110b531c1221d0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r11, r10}, 0xc) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x48200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m53.437523132s ago: executing program 3 (id=59): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f646500000000000095000000000002200000000000000400000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) creat(&(0x7f00000001c0)='./file1\x00', 0xdf) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000008f2d5987ebb503cb86299e017e2cd158e0f6ea07f969f9879657efc0275bbd6ee79f3882baa8d8bfa35884a4fb4c6bd0ef3583adbc6893cf9b800746b08baae5fc0932b7b764ddaf974deff21270c17643b6ce8c9ba959c0dbc60983969d00ba1250e535c4a97a25f6323141ff329b1cff7f39d869fca6da86989085634b2b23a4d328437f56cbb1d399642ee05b092dfef4305ceef396b3e3bc4ee3b5a9c767b3a446dc34ec256c6d9a551240f36c8020edda137a14c12d2e720c8e4514109befb3188b567428b7ffb38cd7328e5f1731ea79a50cd71edf904ae9e08f63b38d3f59e1ccea7a0c6c", @ANYRES16=r4, @ANYBLOB="000428bd7000fedbdf250800000008000400060000003400068014000400fe80000000000000000000000000001c060005004e20000014000400fe880000000000000000000000000101080003000300000008000400080000000500050004000000"], 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) 5m52.051762703s ago: executing program 3 (id=65): socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002680), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}}, 0x4000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 5m36.666562721s ago: executing program 32 (id=65): socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002680), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}}, 0x4000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 5m16.903285987s ago: executing program 4 (id=188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x48, 0x2, 0xffffffffffffffff, &(0x7f0000001300)=0x80, &(0x7f0000001340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x0, 0x0, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) fcntl$lock(r2, 0x25, &(0x7f0000000000)) syz_io_uring_setup(0x3678, &(0x7f0000000280)={0x0, 0xfffffffd, 0x1, 0x0, 0xfffffffe, 0x0, r2}, &(0x7f00000001c0), &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x2f, 0x31, 0xd, 0x4, 0x7be5b0a4cb6308b1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x40, 0x5, 0x40}}) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f0030000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="5a45a7e7", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400020076657468315f746f5f7465616d000000140002006e6963766630000000000000000000001400020076657468315f766972745f77696669001400020077673200000000000000000000000000140002007465616d5f736c6176655f30000000001400020076657468315f746f5f7465616d000000"], 0x3f0}, 0x1, 0x0, 0x0, 0x400d0}, 0x8000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000d0000000000040000000044008000000700000000000000"]) 5m16.502466907s ago: executing program 4 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) (async) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x88800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000040000000200020004000000", @ANYRES32, @ANYBLOB="000000000000ef932b3f0000000000007f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() waitid(0x0, r6, &(0x7f00000002c0), 0x1000000, 0x0) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00070c000000000000000002000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/16], 0x28}}, 0x0) 5m15.838395143s ago: executing program 4 (id=191): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1f00}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 5m14.908658415s ago: executing program 4 (id=194): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) r3 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184d, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x400) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000004b2ab5d7c11812376ac9620ddbf9f9196f16335caf34697e04210ce77a731eee38080e9be160e327d799124722f2ab3b7cf844151d374a3585d4fdef0a197023be48a166c03487d2e918c3bedc59cda70bd6a1ddf5a499f8c8661b4a3356c8df8c51b8790802b930be0d64a73f31d66beee0555495ac85fc9937bc0606b332912a9a40b64397feafdc11c11c92c0698b4f6300"/167, @ANYRES32=r12, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) 5m9.255208226s ago: executing program 4 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xe4ffffff}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 5m8.951216322s ago: executing program 4 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m54.151222872s ago: executing program 33 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 11.262130431s ago: executing program 0 (id=1259): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xffffffe5}], 0x1}}, {{&(0x7f0000000b00)={0xa, 0x4e25, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000003c0)="6816dfc6e4b0a0bf529798b6b033611654e072925a229e72f124e7afecbfd0275a4317527fb2cf5e0d294ddbac6a1f8da709421fcdeb280cab85c806d206b722a122c2a8542b798fd08684fb6988feab80"}, {&(0x7f0000000500)="7916fe585cf0753a824c9cacffdb744667611e0e648f39cf9c935cb58b3b281fc8e1332160282e5277ad10f1da1f13fd09525de1fc93947ee1a55b216d9c3dc3f47a2522cce33da55ec1b0e4c43bfedd7e2fe8a4007e650bd0624da5398015c24816ef22ac48bc2d2528cc1482df1cf89206d48e505922eae68ea28411c536c01b4c03a77f424da92bb22c77949738d93d1a5274efdb150f56745d51cc3fdc817081263fb97816abdb3d7cfbbe03a15a"}]}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001d80)="276138ecdd054eff2adc305adaa9900513dc95f3e18949e6eedbc2e3130ebb3260a0615128bc7bb8c4bfd36276847da933f367678c3863b6ca26e3f53b01f8fe05600b64d754c9417b96eac5729bfa3476fb1974fb33bba1cf3fbbca3220c18ee002aaf5c7e5b15b00000000000000", 0x6f}, {&(0x7f0000001e00)="65105fcb1b36db3a4358634c86cd818eb830ee2c5655b5f3a3be9fbbd1d7bb00e4108b7cc19a7e", 0x27}, {&(0x7f00000002c0)="31d35369d6eb018000000000000093be8c327f7f7b88c615ca8c4ab5bab8b01b4d7ab10261ffcfa2ee407559d8badcfa346b10f04bb52bea97c1bb291434ee460173ce5fb4b883bcc55d0b40a2fd69d6bf622316e19d3fb2e4a00b6991f08a657213c09de816003cc1a2cf76abc0a986aa7f38419b83f23e467824a707df6a2696ef0080585eeeca5ac79b8b951abc3482f915636f705b2111ccc12f07e479ce93430b4e31ed93399fedd58877b2747f4bc94824133775ce7ff09fa1571aac83d431160e82e827ce", 0xc8}, {&(0x7f0000001f00)="a6992eed0efe8964eebd68e30029b9c560fbbd9355bb61b4ed2f088ff7fb9b5c7b5315987635c75ad104305895e62072ad77542e2e2302022a6c0073385a590a96ff7a13ef7778", 0x47}, {&(0x7f0000002000)}, {0x0}], 0x6, &(0x7f0000000080)}}], 0x3, 0x8000000) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@empty, @random="9f875bf6a485", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote, @link_local, @empty}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) open(0x0, 0x143142, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0xb, &(0x7f0000000d40)=ANY=[@ANYRES64=r4, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x5f1812487049da77, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x783c1000) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 9.968140516s ago: executing program 0 (id=1269): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000040)='x', 0x1}], 0x1) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fdatasync(r3) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$isdn_base(0x22, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 9.523844247s ago: executing program 0 (id=1271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xd3}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 9.456791125s ago: executing program 0 (id=1272): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021200010000100011043300001870fd00"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x6db6e559) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03001200000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000"], 0xf0}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109021200f0ffffff0009040000003c7f9800"], 0x0) 7.762912241s ago: executing program 5 (id=1279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) 7.744386579s ago: executing program 2 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000000)={@multicast, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x3}}, {@arp={0x806, @generic={0x4, 0x88ca, 0x6, 0xa, 0x1, @local, "ad4855206544865cd082", @broadcast}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) fcntl$addseals(r3, 0x409, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2804d0c0}, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 6.481282487s ago: executing program 2 (id=1283): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000100)={'veth0_to_bridge\x00', @ifru_data=&(0x7f0000000000)="74591f415264685a882426faf116cbf562cb9544c35bc05350eca92245830983"}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) 5.923499155s ago: executing program 0 (id=1286): syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x3, '^'}]}}}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f00000022c0)=ANY=[@ANYBLOB="4008f30000006cf91b61ea536b906dc4"], 0x0, 0x0, 0x0, 0x0}) syz_clone(0x4000, &(0x7f0000000080)="f3410c8ff58e97f360c6bef108c102669e354281b567f1ccfef89e98e8b3c3c810e2230b22010f8a5e88f4a0408d0a93f5e6b03be9fee6a302b87edacd13c28e7e01556d4cd8d8dbafdcb2f21606996a2e067ae1c892a24782c2840bba02725acac9b4493007a6ec48c437e722dca053bd8e131d923df1c34a16ea491363fb6e79690bfa345a7fc5a45e9fe447eb149099be2b6b1b2bf9679c6305dd5377e29118a15a063110ca03a449052f05ee7ef634f37378af52f56f126ed07ee543174dc70c1fb88d619966bb794e808957bbc15c08cddd62c9a3affc2abe30793d5ebc5e66426fcf5eb90ed3664a61e5fa813d4e", 0xf1, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="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") r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x19c, &(0x7f0000000000)=0x1000, 0x0, 0x4) 5.726800195s ago: executing program 2 (id=1290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r2) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8b35, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) prlimit64(r6, 0x297df81503645fe2, &(0x7f0000000580)={0x4, 0x2}, &(0x7f00000005c0)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0x44) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000002010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x340, 0x2b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040050}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40010) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) (rerun: 32) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x33fe0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r10, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004044}, 0x20004044) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) (async) times(0xfffffffffffffffe) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r11, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x81}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf1}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x40050) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r12, @ANYBLOB="140004006e69637666300000000000f5ed0000000800050008000000"], 0x38}}, 0xc0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) 5.559171798s ago: executing program 2 (id=1291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x48, 0x2, 0xffffffffffffffff, &(0x7f0000001300)=0x80, &(0x7f0000001340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x0, 0x0, 0x1, {0x0, r3}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r3}}) fcntl$lock(r2, 0x25, 0x0) syz_io_uring_setup(0x3678, &(0x7f0000000280)={0x0, 0xfffffffd, 0x1, 0x0, 0xfffffffe, 0x0, r2}, &(0x7f00000001c0), &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x2f, 0x31, 0xd, 0x4, 0x7be5b0a4cb6308b1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x40, 0x5, 0x40}}) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f0030000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf25080000003403028098000380100001800c0002006367726f7570320014000180050002000000000004000300040003002c000180060002002e0000000800020047504c000500020000000000040003000400030008000100ff0300001c0001800500020000000000080001000700000008000100070000001400018008000100f7ffffff080001000010000014000180080001000f00000008000100040000008400038034000180080001000000000008000100050000000500020000000000060002002e00000008000100010000000800010000100000100001800c0002006367726f757032000c000180080001001d0000002000018004000300080001000700000004000300040003000800010003000000100001800400030008000100050000009b00040005e25fb4e7f3089a93359827f83ba2719d4ed6c35122e8304b42d844a8d03abf9bb6ffceefeeac94d4846e16e6086bc65dd5778b3104dccc3bf92e73d54cb2fdb88359616ab0fc9355ff3d6b5779e0e71e21073c11912e9483572123bd317af6e456bc9b2851e61785212a5bc3f3fd9f84a29560dfbf4a1847603baabc5baa33c0cd5b51d00de2cce29cb145a3910ad3cb2c9e31f47f3b00080002000200000034010380280001800400030008000100b93f00000500020000000000060002002a00000008000100d8950000180001800400030008000100030000000800020047504c0008000180040003001800018004000300070002002f5d000005000200000000002c000180080001002c0b00000b000200215b23282e7d00000600020026000000040003000800010076000000200001800800020047504c0006000200270000000c0002006367726f7570320040000180040003000500020000000000080001000d0000000800020047504c00080001000200000008000100040000000800010028000000060002006e00000008000180040003003c000180080001000300000004000300040003000800010001000000070002002d2a0000040003000c0002006367726f757032000800020047504c0004000100380003803400018008000100000000000800020047504c0008000100070000000800010001000000040003000a0002007d2d5d282a000000a800018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400020076657468315f746f5f7465616d000000140002006e6963766630000000000000000000001400020076657468315f766972745f77696669001400020077673200000000000000000000000000140002007465616d5f736c6176655f30000000001400020076657468315f746f5f7465616d000000"], 0x3f0}, 0x1, 0x0, 0x0, 0x400d0}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000d0000000000040000000044008000000700000000000000"]) 5.266743798s ago: executing program 1 (id=1292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000108500000000000000000000811200000000000095", @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.811081763s ago: executing program 1 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000000)={@multicast, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x3}}, {@arp={0x806, @generic={0x4, 0x88ca, 0x6, 0xa, 0x1, @local, "ad4855206544865cd082", @broadcast}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) fcntl$addseals(r3, 0x409, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2804d0c0}, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 4.80961188s ago: executing program 6 (id=1294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000906000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x20000800) 4.589591777s ago: executing program 2 (id=1295): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000180)=""/34) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000002c0)={0x6, 0x8001}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, 0x0) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket$inet(0x2, 0x2, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.268522113s ago: executing program 1 (id=1296): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0xa4bb) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000002a16e2f8f7a786fc61000014fe53a2"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setuid(0xee01) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r7, 0x4, 0x42400) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9e", 0x79, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 3.168290237s ago: executing program 2 (id=1297): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r2 = epoll_create(0x4) syz_clone(0x4019200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39dd48) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (rerun: 64) sendto$inet(r4, &(0x7f0000000080)='j', 0x1, 0x20040041, 0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$HIDIOCGVERSION(r6, 0x80044801, 0x0) (async, rerun: 64) recvfrom(r4, &(0x7f00000000c0)=""/212, 0xd4, 0x143, 0x0, 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000200)={0x2004}) (async) write$sequencer(r1, &(0x7f0000000200)=ANY=[], 0x20) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) arch_prctl$ARCH_GET_CPUID(0x1011) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r10, 0x7a5, &(0x7f0000000100)={{@local, 0x6}, 0x1, 0x2, 0x540d}) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYRESDEC=r9], 0x0) (async) arch_prctl$ARCH_GET_CPUID(0x1011) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) gettid() 3.1655144s ago: executing program 5 (id=1298): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000500000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x0) 2.934912274s ago: executing program 5 (id=1299): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x40384708, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000033c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140", @ANYRES8=r2], 0x108}}, 0x0) 2.116176033s ago: executing program 1 (id=1300): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0xfdef}], 0x1}, 0x11) 2.036567172s ago: executing program 5 (id=1301): unshare(0x6a040000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x3, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2}}}}, 0x0) (async) unshare(0xc050000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x2, 0x6, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl(r0, 0x8b32, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.975159157s ago: executing program 1 (id=1302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000006801000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) setreuid(0x0, 0xee01) (async) r1 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000313"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0xe1, 0x1, 0x7, 0x0, 0xe}}}, 0x0) 1.805477181s ago: executing program 6 (id=1303): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fsmount(0xffffffffffffffff, 0x0, 0xf9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xab}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 1.698751396s ago: executing program 6 (id=1304): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x700}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.616004754s ago: executing program 6 (id=1305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x48, 0x2, 0xffffffffffffffff, &(0x7f0000001300)=0x80, &(0x7f0000001340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x0, 0x0, 0x1, {0x0, r3}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r3}}) fcntl$lock(r2, 0x25, 0x0) syz_io_uring_setup(0x3678, &(0x7f0000000280)={0x0, 0xfffffffd, 0x1, 0x0, 0xfffffffe, 0x0, r2}, &(0x7f00000001c0), &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', r4, 0x2f, 0x31, 0xd, 0x4, 0x7be5b0a4cb6308b1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x40, 0x5, 0x40}}) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f0030000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf25080000003403028098000380100001800c0002006367726f7570320014000180050002000000000004000300040003002c000180060002002e0000000800020047504c000500020000000000040003000400030008000100ff0300001c0001800500020000000000080001000700000008000100070000001400018008000100f7ffffff080001000010000014000180080001000f00000008000100040000008400038034000180080001000000000008000100050000000500020000000000060002002e00000008000100010000000800010000100000100001800c0002006367726f757032000c000180080001001d0000002000018004000300080001000700000004000300040003000800010003000000100001800400030008000100050000009b00040005e25fb4e7f3089a93359827f83ba2719d4ed6c35122e8304b42d844a8d03abf9bb6ffceefeeac94d4846e16e6086bc65dd5778b3104dccc3bf92e73d54cb2fdb88359616ab0fc9355ff3d6b5779e0e71e21073c11912e9483572123bd317af6e456bc9b2851e61785212a5bc3f3fd9f84a29560dfbf4a1847603baabc5baa33c0cd5b51d00de2cce29cb145a3910ad3cb2c9e31f47f3b00080002000200000034010380280001800400030008000100b93f00000500020000000000060002002a00000008000100d8950000180001800400030008000100030000000800020047504c0008000180040003001800018004000300070002002f5d000005000200000000002c000180080001002c0b00000b000200215b23282e7d00000600020026000000040003000800010076000000200001800800020047504c0006000200270000000c0002006367726f7570320040000180040003000500020000000000080001000d0000000800020047504c00080001000200000008000100040000000800010028000000060002006e00000008000180040003003c000180080001000300000004000300040003000800010001000000070002002d2a0000040003000c0002006367726f757032000800020047504c0004000100380003803400018008000100000000000800020047504c0008000100070000000800010001000000040003000a0002007d2d5d282a000000a800018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400020076657468315f746f5f7465616d000000140002006e6963766630000000000000000000001400020076657468315f766972745f77696669001400020077673200000000000000000000000000140002007465616d5f736c6176655f30000000001400020076657468315f746f5f7465616d000000"], 0x3f0}, 0x1, 0x0, 0x0, 0x400d0}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000d0000000000040000000044008000000700000000000000"]) 1.274475563s ago: executing program 6 (id=1306): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffec7, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_emit_ethernet(0x17, &(0x7f0000000380)={@local, @broadcast, @void, {@llc={0x4, {@snap={0xff, 0xaa, "ed53", "bbe3db", 0x88f8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffff000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) 1.039180615s ago: executing program 5 (id=1307): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000300000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b4000000000"], 0x110}}, 0x0) 159.415828ms ago: executing program 5 (id=1308): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000640, 0x0, 0x0, 0x200000000670, 0x2000000006a0], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0xfffff9, 0xfffffffffffffffe}]}, 0x108) 118.452404ms ago: executing program 1 (id=1309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c0015005a"], 0xc4}}, 0x14) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x488a00) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f00000002c0)) (async, rerun: 32) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x1, 0x7], 0x0, 0x0, 0x2}}, 0x40) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000ffffffff00000000000000000000000000000000000000000a00800032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8d67a6ef7d118814229c8479b00000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}}, 0x0) (async, rerun: 64) rmdir(&(0x7f0000000000)='./file0\x00') (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x7, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x63, 0x2}, @datasec={0x2, 0x6, 0x0, 0xf, 0x1, [{0x2, 0x800, 0x1}, {0x3, 0x1, 0x5}, {0x1, 0x7, 0x40}, {0x2, 0x7, 0x3}, {0x2, 0x400, 0x9e3}, {0x4, 0x8, 0xffffffa1}], "aa"}, @func={0x2, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x3e, 0x5f, 0x61, 0x30]}}, &(0x7f0000000500)=""/149, 0x93, 0x95, 0x0, 0x6, 0x0, @void, @value}, 0x28) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000480)={0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (rerun: 32) 62.906182ms ago: executing program 0 (id=1310): userfaultfd(0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='dirsync\x00', 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_DQEVENT(r8, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x2c0, 0x24, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0x2}, {0xfff3, 0xfff3}, {0xffe0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xf7, 0x1ff, 0x1, 0x1, 0x6, 0x1, 0x6}}, {0x10, 0x2, [0x4a, 0x1cf5, 0x0, 0x0, 0x4, 0x3]}}, {{0x1c, 0x1, {0x2, 0x8f, 0x0, 0x73f2, 0x1, 0x10, 0x6, 0xa}}, {0x18, 0x2, [0x7, 0xd, 0x7, 0xc, 0x1, 0x1, 0xffff, 0x3, 0x84, 0x81]}}, {{0x1c, 0x1, {0x40, 0x8, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x7}}, {0x12, 0x2, [0x3, 0x8, 0x0, 0x10, 0x9, 0xfff5, 0xc388]}}, {{0x1c, 0x1, {0x6, 0x7, 0x9, 0x4, 0x2, 0x80, 0xa7, 0x8}}, {0x14, 0x2, [0x6, 0x2, 0x0, 0x80, 0x8, 0x4, 0xb26, 0x7]}}, {{0x1c, 0x1, {0x5, 0x7, 0xb, 0x50, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x6]}}, {{0x1c, 0x1, {0x3, 0x6, 0x6, 0x433, 0x2, 0x80, 0x4, 0x5}}, {0xe, 0x2, [0x4, 0x5, 0x6, 0x6, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_TARGET={0x8}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x68d4}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x401}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf}]}}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa8, 0x1000, 0x516, 0x1, 0x8, 0x2, 0xa}}, {0x18, 0x2, [0x4, 0x0, 0x0, 0x1, 0x9, 0x5, 0x4, 0xffff, 0xe6, 0x0]}}, {{0x1c, 0x1, {0x4, 0x2, 0x1ff, 0x1, 0x0, 0x6, 0x85, 0x4}}, {0xc, 0x2, [0xf5b, 0x101, 0x6, 0x3ff]}}, {{0x1c, 0x1, {0xd, 0x6, 0xafc, 0xfffffff8, 0x2, 0x600b, 0x7, 0x6}}, {0x10, 0x2, [0x7ff, 0x4, 0x8, 0x1153, 0x43ff, 0x3]}}, {{0x1c, 0x1, {0x4, 0x0, 0x800f, 0x8, 0x1, 0x3, 0x7, 0xa}}, {0x18, 0x2, [0x1, 0x6fff, 0x1, 0x80, 0x9, 0x7, 0x5, 0x9, 0x30, 0x3ff]}}, {{0x1c, 0x1, {0x2, 0x4, 0x5, 0x0, 0x0, 0x4, 0xc89, 0x9}}, {0x16, 0x2, [0xaa70, 0x4, 0x4, 0xa8af, 0xea15, 0x2, 0xc, 0x0, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x1}, 0x4800) memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) 0s ago: executing program 6 (id=1311): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa1ff}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0xffa1}, 0x0) kernel console output (not intermixed with test programs): 648][ T29] audit: type=1400 audit(1738843575.040:631): avc: denied { open } for pid=8433 comm="syz.6.588" path="/46/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 253.410577][ T5824] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 254.514183][ T29] audit: type=1400 audit(1738843575.740:632): avc: denied { connect } for pid=8484 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.667250][ T8496] 9pnet: Could not find request transport: rd00000004e22 [ 254.746387][ T5824] Bluetooth: hci5: command 0x0c1a tx timeout [ 254.755057][ T29] audit: type=1400 audit(1738843576.530:633): avc: denied { watch watch_reads } for pid=8484 comm="syz.5.600" path="/74" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 254.772806][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.601'. [ 255.275901][ T8446] team0 (unregistering): Port device team_slave_0 removed [ 255.298964][ T8446] team0 (unregistering): Port device team_slave_1 removed [ 255.330534][ T8446] team0 (unregistering): Port device vlan0 removed [ 255.375334][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.384102][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.589964][ T29] audit: type=1400 audit(1738843577.610:634): avc: denied { setopt } for pid=8518 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.728712][ T29] audit: type=1400 audit(1738843577.750:635): avc: denied { search } for pid=8525 comm="syz.0.609" name="/" dev="configfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.861401][ T29] audit: type=1400 audit(1738843577.780:636): avc: denied { mounton } for pid=8525 comm="syz.0.609" path="/" dev="configfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.497325][ T8545] netlink: 76 bytes leftover after parsing attributes in process `syz.2.611'. [ 258.058985][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.617'. [ 259.873509][ T8590] FAULT_INJECTION: forcing a failure. [ 259.873509][ T8590] name failslab, interval 1, probability 0, space 0, times 0 [ 259.980155][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz.6.621 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 259.980182][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 259.980196][ T8590] Call Trace: [ 259.980202][ T8590] [ 259.980212][ T8590] dump_stack_lvl+0x16c/0x1f0 [ 259.980239][ T8590] should_fail_ex+0x50a/0x650 [ 259.980265][ T8590] ? fs_reclaim_acquire+0xae/0x150 [ 259.980292][ T8590] should_failslab+0xc2/0x120 [ 259.980311][ T8590] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 259.980330][ T8590] ? __alloc_skb+0x2b1/0x380 [ 259.980354][ T8590] __alloc_skb+0x2b1/0x380 [ 259.980376][ T8590] ? __pfx___alloc_skb+0x10/0x10 [ 259.980395][ T8590] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 259.980417][ T8590] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 259.980447][ T8590] netlink_alloc_large_skb+0x69/0x130 [ 259.980472][ T8590] netlink_sendmsg+0x689/0xd70 [ 259.980497][ T8590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.980526][ T8590] ____sys_sendmsg+0xaaf/0xc90 [ 259.980559][ T8590] ? copy_msghdr_from_user+0x10b/0x160 [ 259.980581][ T8590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.980618][ T8590] ___sys_sendmsg+0x135/0x1e0 [ 259.980641][ T8590] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.980668][ T8590] ? __pfx_lock_release+0x10/0x10 [ 259.980692][ T8590] ? trace_lock_acquire+0x14e/0x1f0 [ 259.980720][ T8590] ? __fget_files+0x206/0x3a0 [ 259.980744][ T8590] __sys_sendmsg+0x16e/0x220 [ 259.980767][ T8590] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.980806][ T8590] do_syscall_64+0xcd/0x250 [ 259.980826][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.980849][ T8590] RIP: 0033:0x7f95b6f8cde9 [ 259.980863][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.980879][ T8590] RSP: 002b:00007f95b7e52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.980894][ T8590] RAX: ffffffffffffffda RBX: 00007f95b71a5fa0 RCX: 00007f95b6f8cde9 [ 259.980906][ T8590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 259.980916][ T8590] RBP: 00007f95b7e52090 R08: 0000000000000000 R09: 0000000000000000 [ 259.980926][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.980939][ T8590] R13: 0000000000000000 R14: 00007f95b71a5fa0 R15: 00007ffd1bb67bf8 [ 259.980959][ T8590] [ 260.440732][ T8603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.801628][ T8607] netlink: 76 bytes leftover after parsing attributes in process `syz.1.622'. [ 261.853656][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.626'. [ 261.870611][ T8619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.626'. [ 263.606096][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.5.630'. [ 263.771449][ T8647] netlink: 596 bytes leftover after parsing attributes in process `syz.2.635'. [ 263.987301][ T8658] netlink: 100 bytes leftover after parsing attributes in process `syz.5.639'. [ 264.043658][ T8658] nbd: must specify at least one socket [ 264.790027][ T5873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 264.819612][ T29] audit: type=1400 audit(1738843586.841:637): avc: denied { create } for pid=8664 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 264.858502][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 264.868243][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 264.944221][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.971052][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.001063][ T5873] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.014482][ T5873] usb 1-1: New USB device strings: Mfr=104, Product=1, SerialNumber=0 [ 265.027033][ T5873] usb 1-1: Product: syz [ 265.031667][ T5873] usb 1-1: Manufacturer: syz [ 265.039258][ T5873] usb 1-1: config 0 descriptor?? [ 265.075156][ T29] audit: type=1400 audit(1738843587.101:638): avc: denied { getopt } for pid=8678 comm="syz.5.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 265.272785][ T8688] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 265.285812][ T8688] xfrm0: entered allmulticast mode [ 266.436588][ T8695] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.102677][ T5873] input: syz syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input10 [ 267.179556][ T8708] netlink: 72 bytes leftover after parsing attributes in process `syz.1.654'. [ 267.279851][ T5873] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 267.404387][ T8716] Mount JFS Failure: -22 [ 267.554076][ T5873] usb 1-1: USB disconnect, device number 17 [ 268.168352][ T29] audit: type=1400 audit(1738843590.181:639): avc: denied { bind } for pid=8737 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.224729][ T29] audit: type=1400 audit(1738843591.241:640): avc: denied { setopt } for pid=8747 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 269.261455][ T8755] Bluetooth: MGMT ver 1.23 [ 269.421221][ T5823] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 269.606797][ T29] audit: type=1400 audit(1738843591.621:641): avc: denied { accept } for pid=8768 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 269.781126][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 269.816883][ T5823] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.989870][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.206085][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.247300][ T5823] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.277754][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.316243][ T5823] usb 2-1: Product: syz [ 270.356960][ T5823] usb 2-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 270.397323][ T5823] usb 2-1: SerialNumber: syz [ 270.402943][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 270.440174][ T8786] netlink: 'syz.6.679': attribute type 16 has an invalid length. [ 270.448397][ T8786] netlink: 240 bytes leftover after parsing attributes in process `syz.6.679'. [ 270.469559][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.679'. [ 270.567660][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 270.588820][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.619219][ T9] usb 1-1: Product: syz [ 270.677538][ T9] usb 1-1: Manufacturer: syz [ 270.694439][ T9] usb 1-1: SerialNumber: syz [ 270.802779][ T8790] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 271.372899][ T8792] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 271.429045][ T9] usb 1-1: config 0 descriptor?? [ 271.627032][ T9] usb 1-1: interface 1 not found [ 271.990466][ T9] usb 1-1: USB disconnect, device number 18 [ 272.120611][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 272.231910][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.684'. [ 273.273439][ T5823] usb 2-1: 0:2 : does not exist [ 273.302547][ T5823] usb 2-1: USB disconnect, device number 14 [ 273.401039][ T29] audit: type=1400 audit(1738843595.423:642): avc: denied { connect } for pid=8814 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.428303][ T29] audit: type=1400 audit(1738843595.423:643): avc: denied { map } for pid=8813 comm="syz.6.689" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 273.551299][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.920450][ T29] audit: type=1400 audit(1738843595.943:644): avc: denied { read } for pid=8841 comm="syz.5.699" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 273.981395][ T8856] loop6: detected capacity change from 0 to 524287999 [ 273.988359][ T29] audit: type=1400 audit(1738843595.973:645): avc: denied { open } for pid=8841 comm="syz.5.699" path="/99/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 274.036622][ T29] audit: type=1400 audit(1738843596.003:646): avc: denied { read } for pid=8854 comm="syz.0.702" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.086347][ T29] audit: type=1400 audit(1738843596.003:647): avc: denied { open } for pid=8854 comm="syz.0.702" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 274.131732][ T8856] loop6: detected capacity change from 524287999 to 0 [ 274.205506][ T29] audit: type=1400 audit(1738843596.233:648): avc: denied { read } for pid=5180 comm="acpid" name="event9" dev="devtmpfs" ino=2876 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 274.231488][ T29] audit: type=1400 audit(1738843596.233:649): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2876 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 274.259726][ T8862] kernel profiling enabled (shift: 7) [ 274.261324][ T5873] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 274.321151][ T8864] team0: Port device team_slave_1 removed [ 274.368977][ T29] audit: type=1400 audit(1738843596.233:650): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2876 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 274.431478][ T5873] usb 7-1: Using ep0 maxpacket: 32 [ 274.443634][ T5873] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 274.454775][ T5873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.519395][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.977764][ T8871] process 'syz.2.707' launched '/dev/fd/3' with NULL argv: empty string added [ 275.005008][ T29] audit: type=1400 audit(1738843597.023:651): avc: denied { execute_no_trans } for pid=8867 comm="syz.2.707" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 275.012235][ T5873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.132751][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.158921][ T5873] usb 7-1: Product: syz [ 275.193843][ T5873] usb 7-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 275.266540][ T5873] usb 7-1: SerialNumber: syz [ 275.812605][ T8889] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 276.481005][ T8] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 276.633128][ T8] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 276.699256][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 276.755313][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 277.027967][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.190066][ T8] usb 2-1: config 0 descriptor?? [ 277.201032][ T8875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 277.285350][ T8899] Mount JFS Failure: -22 [ 277.659369][ T5873] usb 7-1: 0:2 : does not exist [ 278.371652][ T5873] usb 7-1: USB disconnect, device number 4 [ 278.395559][ T8] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 278.411690][ T8] konepure 0003:1E7D:2DB4.0004: item fetching failed at offset 3/5 [ 278.426129][ T8] konepure 0003:1E7D:2DB4.0004: parse failed [ 278.434616][ T8] konepure 0003:1E7D:2DB4.0004: probe with driver konepure failed with error -22 [ 278.865819][ T7027] udevd[7027]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.891122][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 278.891139][ T29] audit: type=1400 audit(1738843600.913:657): avc: denied { listen } for pid=8874 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.079086][ T5823] usb 2-1: USB disconnect, device number 15 [ 280.457150][ T8936] 9pnet_virtio: no channels available for device syz [ 280.558162][ T29] audit: type=1400 audit(1738843602.583:658): avc: denied { ioctl } for pid=8935 comm="syz.2.726" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 280.715960][ T29] audit: type=1400 audit(1738843602.743:659): avc: denied { create } for pid=8949 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 280.733951][ T8953] bond1: entered promiscuous mode [ 280.755620][ T29] audit: type=1400 audit(1738843602.743:660): avc: denied { write } for pid=8949 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 280.755684][ T5903] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 280.781064][ T29] audit: type=1400 audit(1738843602.743:661): avc: denied { nlmsg_write } for pid=8949 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 280.784371][ T8953] bond1: entered allmulticast mode [ 280.867911][ T8953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.090750][ T29] audit: type=1400 audit(1738843603.113:662): avc: denied { bind } for pid=8952 comm="syz.6.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.141227][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 281.161101][ T5873] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 281.200957][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 281.221542][ T5903] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 281.222226][ T8953] bond1 (unregistering): Released all slaves [ 281.230304][ T5903] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.230325][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.232815][ T5903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.278862][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.288826][ T5903] usb 6-1: Product: syz [ 281.481754][ T5903] usb 6-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 281.784097][ T5903] usb 6-1: SerialNumber: syz [ 281.805641][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.813929][ T5873] usb 1-1: not running at top speed; connect to a high speed hub [ 281.894073][ T5873] usb 1-1: config 9 has an invalid interface number: 229 but max is 0 [ 281.902531][ T5873] usb 1-1: config 9 has 2 interfaces, different from the descriptor's value: 1 [ 281.914315][ T5873] usb 1-1: config 9 has no interface number 1 [ 281.920467][ T5873] usb 1-1: config 9 interface 229 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.935940][ T8971] netlink: 'syz.6.731': attribute type 14 has an invalid length. [ 281.936351][ T5873] usb 1-1: config 9 interface 229 has no altsetting 0 [ 281.962948][ T5873] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice=12.34 [ 281.977667][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.986265][ T5873] usb 1-1: Product: syz [ 281.990554][ T5873] usb 1-1: Manufacturer: syz [ 281.995647][ T5873] usb 1-1: SerialNumber: syz [ 282.304358][ T8981] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 284.071938][ T5903] usb 6-1: 0:2 : does not exist [ 284.175427][ T5903] usb 6-1: USB disconnect, device number 14 [ 284.290036][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.681916][ T9006] netlink: 277 bytes leftover after parsing attributes in process `syz.2.741'. [ 286.436562][ T9003] Mount JFS Failure: -22 [ 286.482669][ T5873] hub 1-1:9.229: bad descriptor, ignoring hub [ 286.488893][ T5873] hub 1-1:9.229: probe with driver hub failed with error -5 [ 286.574808][ T5873] usb 1-1: USB disconnect, device number 19 [ 287.504095][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.229/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.641020][ T5873] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.079724][ T9023] sctp: failed to load transform for md5: -2 [ 288.110950][ T5873] usb 1-1: device descriptor read/64, error -71 [ 288.128727][ T9034] loop6: detected capacity change from 0 to 524287999 [ 288.219863][ T9034] loop6: detected capacity change from 524287999 to 0 [ 288.371274][ T5873] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 288.655132][ T9044] netlink: 76 bytes leftover after parsing attributes in process `syz.2.749'. [ 289.211007][ T5873] usb 1-1: device descriptor read/64, error -71 [ 289.321416][ T5873] usb usb1-port1: attempt power cycle [ 289.615441][ T9051] xt_nfacct: accounting object `syz1' does not exists [ 289.705249][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 289.821356][ T29] audit: type=1400 audit(1738843611.723:663): avc: denied { write } for pid=9047 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 289.852131][ T5873] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 290.292942][ T9036] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.391011][ T9036] kvm: pic: non byte read [ 290.396502][ T9036] kvm: pic: level sensitive irq not supported [ 290.396622][ T9036] kvm: pic: non byte read [ 290.429701][ T9036] kvm: pic: level sensitive irq not supported [ 290.429774][ T9036] kvm: pic: non byte read [ 290.449538][ T5873] usb 1-1: device not accepting address 22, error -71 [ 290.458484][ T9036] kvm: pic: level sensitive irq not supported [ 290.458550][ T9036] kvm: pic: non byte read [ 290.469717][ T9036] kvm: pic: level sensitive irq not supported [ 290.469776][ T9036] kvm: pic: non byte read [ 290.719164][ T9065] 9pnet_virtio: no channels available for device 127.0.0.1 [ 291.239699][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 292.169994][ T29] audit: type=1400 audit(1738843614.183:664): avc: denied { getopt } for pid=9072 comm="syz.5.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.231806][ T8] usb 2-1: device descriptor read/64, error -71 [ 292.297058][ T29] audit: type=1400 audit(1738843614.313:665): avc: denied { sqpoll } for pid=9072 comm="syz.5.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 292.325249][ T9077] netlink: 'syz.0.761': attribute type 10 has an invalid length. [ 292.571448][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 292.784439][ T8] usb 2-1: device descriptor read/64, error -71 [ 293.824592][ T8] usb usb2-port1: attempt power cycle [ 294.171686][ T9101] syz.5.767: attempt to access beyond end of device [ 294.171686][ T9101] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 294.217940][ T9101] MINIX-fs: unable to read superblock [ 294.402702][ T9100] Mount JFS Failure: -22 [ 294.631293][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 295.268379][ T9113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=9113 comm=syz.5.770 [ 295.315269][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 295.321951][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.342887][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.770'. [ 295.360964][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.407009][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.438093][ T9113] xfrm1: entered promiscuous mode [ 295.444303][ T9113] xfrm1: entered allmulticast mode [ 295.463306][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.509886][ T8] usb 2-1: config 0 descriptor?? [ 295.527431][ T8] hub 2-1:0.0: USB hub found [ 296.661030][ T8] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 296.672302][ T5834] block nbd0: Receive control failed (result -32) [ 296.711753][ T9126] block nbd0: shutting down sockets [ 296.863826][ T29] audit: type=1400 audit(1738843618.893:666): avc: denied { unmount } for pid=6380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 297.089442][ T9137] 9pnet_virtio: no channels available for device 127.0.0.1 [ 297.364713][ T8] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x4 [ 297.417566][ T8] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 297.520792][ T29] audit: type=1400 audit(1738843619.533:667): avc: denied { bind } for pid=9138 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.901476][ T29] audit: type=1400 audit(1738843619.533:668): avc: denied { write } for pid=9138 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.923715][ T8] usb 2-1: USB disconnect, device number 18 [ 298.199991][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.775'. [ 298.998240][ T9131] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 299.186869][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.779'. [ 299.456836][ T9153] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 299.471059][ T9153] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.546094][ T9153] program syz.6.780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.656457][ T9153] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 300.757639][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 300.765343][ T29] audit: type=1400 audit(1738843622.053:669): avc: denied { append } for pid=9159 comm="syz.2.783" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 301.001755][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 301.008665][ T9] usb 1-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 301.065777][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.103241][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 301.113894][ T29] audit: type=1400 audit(1738843623.133:670): avc: denied { create } for pid=9174 comm="syz.5.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 301.136758][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.149073][ T9] usb 1-1: Product: syz [ 301.239547][ T29] audit: type=1400 audit(1738843623.133:671): avc: denied { ioctl } for pid=9174 comm="syz.5.786" path="socket:[21931]" dev="sockfs" ino=21931 ioctlcmd=0x8b22 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 301.327367][ T9] usb 1-1: Manufacturer: syz [ 301.332624][ T9] usb 1-1: SerialNumber: syz [ 301.400519][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 301.578773][ T9184] syz.2.787: attempt to access beyond end of device [ 301.578773][ T9184] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 301.601883][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.5.789'. [ 301.738506][ T9] usb 1-1: config 0 descriptor?? [ 302.458836][ T9192] netlink: 56 bytes leftover after parsing attributes in process `syz.0.784'. [ 303.571323][ T5916] usb 1-1: USB disconnect, device number 24 [ 304.825829][ T9209] netlink: 76 bytes leftover after parsing attributes in process `syz.2.793'. [ 305.850972][ T5916] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 306.490056][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.508897][ T5916] usb 2-1: config 0 has no interface number 0 [ 306.526127][ T29] audit: type=1400 audit(1738843628.543:672): avc: denied { write } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.567460][ T5916] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 306.585307][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.599971][ T29] audit: type=1400 audit(1738843628.543:673): avc: denied { remove_name } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.635305][ T5916] usb 2-1: Product: syz [ 306.639536][ T5916] usb 2-1: Manufacturer: syz [ 306.657227][ T5916] usb 2-1: SerialNumber: syz [ 306.679415][ T5916] usb 2-1: config 0 descriptor?? [ 306.691866][ T29] audit: type=1400 audit(1738843628.543:674): avc: denied { add_name } for pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.694457][ T9231] capability: warning: `syz.0.800' uses 32-bit capabilities (legacy support in use) [ 306.723459][ T5916] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 306.738756][ T5916] usb 2-1: selecting invalid altsetting 1 [ 306.748191][ T5916] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 306.760377][ T29] audit: type=1400 audit(1738843628.723:675): avc: denied { bind } for pid=9230 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 306.808469][ T5916] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 306.808952][ T29] audit: type=1400 audit(1738843628.723:676): avc: denied { write } for pid=9230 comm="syz.0.800" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 306.875878][ T29] audit: type=1400 audit(1738843628.873:677): avc: denied { accept } for pid=9230 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.948944][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.801'. [ 307.541637][ T9243] FAULT_INJECTION: forcing a failure. [ 307.541637][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.583029][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.2.804 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 307.583059][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 307.583071][ T9243] Call Trace: [ 307.583077][ T9243] [ 307.583085][ T9243] dump_stack_lvl+0x16c/0x1f0 [ 307.583112][ T9243] should_fail_ex+0x50a/0x650 [ 307.583146][ T9243] _copy_from_user+0x2e/0xd0 [ 307.583176][ T9243] copy_msghdr_from_user+0x99/0x160 [ 307.583202][ T9243] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 307.583240][ T9243] ___sys_sendmsg+0xff/0x1e0 [ 307.583264][ T9243] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.583298][ T9243] ? __pfx_lock_release+0x10/0x10 [ 307.583329][ T9243] ? trace_lock_acquire+0x14e/0x1f0 [ 307.583361][ T9243] ? __fget_files+0x206/0x3a0 [ 307.583387][ T9243] __sys_sendmsg+0x16e/0x220 [ 307.583411][ T9243] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.583452][ T9243] do_syscall_64+0xcd/0x250 [ 307.583476][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.583504][ T9243] RIP: 0033:0x7f679578cde9 [ 307.583520][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.583538][ T9243] RSP: 002b:00007f6796555038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.583556][ T9243] RAX: ffffffffffffffda RBX: 00007f67959a5fa0 RCX: 00007f679578cde9 [ 307.583569][ T9243] RDX: 0000000004000800 RSI: 0000200000002840 RDI: 0000000000000004 [ 307.583582][ T9243] RBP: 00007f6796555090 R08: 0000000000000000 R09: 0000000000000000 [ 307.583594][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.583605][ T9243] R13: 0000000000000000 R14: 00007f67959a5fa0 R15: 00007fffe00c7f58 [ 307.583631][ T9243] [ 307.906438][ T5916] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 308.011514][ T5916] usb 2-1: USB disconnect, device number 19 [ 309.280948][ T5823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 310.303175][ T9275] syz.5.814: attempt to access beyond end of device [ 310.303175][ T9275] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 310.318926][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.814'. [ 310.330952][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.814'. [ 311.021175][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 311.783867][ T5823] usb 3-1: device descriptor read/all, error -71 [ 312.064556][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.328862][ T9294] syz.2.816: attempt to access beyond end of device [ 312.328862][ T9294] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 312.553170][ T9295] netlink: 84 bytes leftover after parsing attributes in process `syz.0.819'. [ 312.863198][ T29] audit: type=1400 audit(1738843634.513:678): avc: denied { ioctl } for pid=9290 comm="syz.0.819" path="socket:[22104]" dev="sockfs" ino=22104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 313.527302][ T9299] FAULT_INJECTION: forcing a failure. [ 313.527302][ T9299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.809830][ T9299] CPU: 1 UID: 0 PID: 9299 Comm: syz.1.821 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 313.809862][ T9299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 313.809873][ T9299] Call Trace: [ 313.809879][ T9299] [ 313.809886][ T9299] dump_stack_lvl+0x16c/0x1f0 [ 313.809913][ T9299] should_fail_ex+0x50a/0x650 [ 313.809945][ T9299] _copy_from_user+0x2e/0xd0 [ 313.809976][ T9299] copy_msghdr_from_user+0x99/0x160 [ 313.810002][ T9299] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 313.810039][ T9299] ___sys_sendmsg+0xff/0x1e0 [ 313.810065][ T9299] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.810099][ T9299] ? __pfx_lock_release+0x10/0x10 [ 313.810125][ T9299] ? trace_lock_acquire+0x14e/0x1f0 [ 313.810157][ T9299] ? __fget_files+0x206/0x3a0 [ 313.810183][ T9299] __sys_sendmsg+0x16e/0x220 [ 313.810208][ T9299] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.810249][ T9299] do_syscall_64+0xcd/0x250 [ 313.810272][ T9299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.810299][ T9299] RIP: 0033:0x7fb534f8cde9 [ 313.810314][ T9299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.810332][ T9299] RSP: 002b:00007fb532df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.810352][ T9299] RAX: ffffffffffffffda RBX: 00007fb5351a5fa0 RCX: 00007fb534f8cde9 [ 313.810365][ T9299] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 313.810377][ T9299] RBP: 00007fb532df6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.810388][ T9299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.810400][ T9299] R13: 0000000000000000 R14: 00007fb5351a5fa0 R15: 00007ffe488a4428 [ 313.810425][ T9299] [ 313.982819][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.638845][ T29] audit: type=1400 audit(1738843636.663:679): avc: denied { create } for pid=9307 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 314.658334][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.717046][ T9310] netlink: 'syz.6.824': attribute type 3 has an invalid length. [ 314.726156][ T9310] netlink: 'syz.6.824': attribute type 3 has an invalid length. [ 314.956875][ T9310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.824'. [ 314.966603][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 315.641201][ T29] audit: type=1400 audit(1738843637.283:680): avc: denied { connect } for pid=9307 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 315.671545][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 315.931520][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 315.940643][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 315.960148][ T8] usb 1-1: config 1 has no interface number 1 [ 315.982859][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.006194][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.045402][ T8] usb 1-1: Product: syz [ 316.049617][ T8] usb 1-1: Manufacturer: syz [ 316.087801][ T8] usb 1-1: SerialNumber: syz [ 316.257480][ T5873] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 316.348833][ T29] audit: type=1400 audit(1738843638.373:681): avc: denied { name_bind } for pid=9327 comm="syz.5.831" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 316.379894][ T9334] syz.2.829: attempt to access beyond end of device [ 316.379894][ T9334] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 316.827719][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.827930][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.314521][ T8] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 317.323253][ T8] usb 1-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 317.330803][ T8] usb 1-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 317.342167][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 317.358556][ T8] usb 1-1: USB disconnect, device number 25 [ 317.367588][ T5873] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 317.381503][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.396710][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.428579][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.458447][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.483758][ T5873] usb 2-1: Product: syz [ 317.651552][ T9343] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 317.663948][ T9343] xfrm0: entered allmulticast mode [ 318.437978][ T9] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 318.448952][ T5873] usb 2-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 318.477783][ T5873] usb 2-1: SerialNumber: syz [ 318.484935][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.975391][ T9348] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 319.235930][ T9350] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 320.143163][ T9] usb 6-1: device descriptor read/64, error -71 [ 320.248469][ T9352] block nbd0: shutting down sockets [ 321.199217][ T29] audit: type=1400 audit(1738843642.923:682): avc: denied { mount } for pid=9356 comm="syz.5.836" name="/" dev="ramfs" ino=22612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 321.229156][ T9366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.838'. [ 321.241203][ T9366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.838'. [ 321.415920][ T5873] usb 2-1: 0:2 : does not exist [ 321.552000][ T5873] usb 2-1: USB disconnect, device number 20 [ 321.686138][ T9374] 9pnet_fd: Insufficient options for proto=fd [ 321.707614][ T29] audit: type=1400 audit(1738843643.733:683): avc: denied { remount } for pid=9371 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 321.731981][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.863156][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.836'. [ 322.089958][ T9381] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 322.239053][ T29] audit: type=1400 audit(1738843644.263:684): avc: denied { unmount } for pid=6380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 322.341341][ T5903] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 322.409937][ T9381] team0: Port device wlan1 removed [ 322.561164][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 322.619694][ T5903] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 322.666016][ T9381] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 322.718737][ T5903] usb 7-1: config 0 has no interface number 0 [ 322.775319][ T5903] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 322.808648][ T5903] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 322.840640][ T5903] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 322.865075][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.956748][ T5903] usb 7-1: Product: syz [ 322.970922][ T5903] usb 7-1: Manufacturer: syz [ 322.975585][ T5903] usb 7-1: SerialNumber: syz [ 322.983857][ T5903] usb 7-1: config 0 descriptor?? [ 323.092454][ T5870] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 323.109345][ T9388] vivid-000: disconnect [ 323.271177][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 323.298162][ T5870] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 323.317992][ T5870] usb 2-1: config 1 has no interface number 1 [ 323.376561][ T5870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.427655][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.440440][ T5870] usb 2-1: Product: syz [ 323.449380][ T5870] usb 2-1: Manufacturer: syz [ 323.457135][ T5870] usb 2-1: SerialNumber: syz [ 323.513498][ T5903] radio-si470x 7-1:0.35: this is not a si470x device. [ 323.573853][ T5823] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 323.582978][ T5903] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 323.632167][ T5903] usb 7-1: USB disconnect, device number 5 [ 323.689053][ T9386] vivid-000: reconnect [ 323.792735][ T5823] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 323.819800][ T5823] usb 3-1: config 0 has no interface number 0 [ 323.842717][ T5823] usb 3-1: New USB device found, idVendor=fba0, idProduct=4f36, bcdDevice=7e.e3 [ 323.867555][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.876487][ T5823] usb 3-1: Product: syz [ 323.880813][ T5823] usb 3-1: Manufacturer: syz [ 323.888688][ T5823] usb 3-1: SerialNumber: syz [ 323.908878][ T5870] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 323.918565][ T5823] usb 3-1: config 0 descriptor?? [ 323.924811][ T5870] usb 2-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 323.933159][ T5870] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 323.941587][ T5823] usb 3-1: bad CDC descriptors [ 323.989995][ T5870] usb 2-1: USB disconnect, device number 21 [ 324.069075][ T9396] Mount JFS Failure: -22 [ 324.127490][ T9397] Mount JFS Failure: -22 [ 324.263183][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.719016][ T9406] netlink: 76 bytes leftover after parsing attributes in process `syz.6.849'. [ 325.720785][ T9410] FAULT_INJECTION: forcing a failure. [ 325.720785][ T9410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.734760][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.6.851 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 325.734787][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 325.734797][ T9410] Call Trace: [ 325.734803][ T9410] [ 325.734811][ T9410] dump_stack_lvl+0x16c/0x1f0 [ 325.734830][ T9410] should_fail_ex+0x50a/0x650 [ 325.734849][ T9410] _copy_to_user+0x32/0xd0 [ 325.734861][ T9410] simple_read_from_buffer+0xd0/0x160 [ 325.734878][ T9410] proc_fail_nth_read+0x198/0x270 [ 325.734894][ T9410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.734909][ T9410] ? rw_verify_area+0xcf/0x680 [ 325.734925][ T9410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.734939][ T9410] vfs_read+0x1df/0xbf0 [ 325.734954][ T9410] ? __fget_files+0x1fc/0x3a0 [ 325.734965][ T9410] ? __pfx___mutex_lock+0x10/0x10 [ 325.734977][ T9410] ? __pfx_vfs_read+0x10/0x10 [ 325.734996][ T9410] ? __fget_files+0x206/0x3a0 [ 325.735011][ T9410] ksys_read+0x12b/0x250 [ 325.735026][ T9410] ? __pfx_ksys_read+0x10/0x10 [ 325.735045][ T9410] do_syscall_64+0xcd/0x250 [ 325.735058][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.735073][ T9410] RIP: 0033:0x7f95b6f8b7fc [ 325.735083][ T9410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 325.735094][ T9410] RSP: 002b:00007f95b7e52030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.735105][ T9410] RAX: ffffffffffffffda RBX: 00007f95b71a5fa0 RCX: 00007f95b6f8b7fc [ 325.735112][ T9410] RDX: 000000000000000f RSI: 00007f95b7e520a0 RDI: 0000000000000004 [ 325.735118][ T9410] RBP: 00007f95b7e52090 R08: 0000000000000000 R09: 0000000000000000 [ 325.735125][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.735131][ T9410] R13: 0000000000000000 R14: 00007f95b71a5fa0 R15: 00007ffd1bb67bf8 [ 325.735145][ T9410] [ 327.101137][ T5870] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 327.118697][ T9419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.854'. [ 327.130483][ T9419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.854'. [ 327.312826][ T5870] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 327.374556][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.410326][ T5873] usb 3-1: USB disconnect, device number 12 [ 327.447482][ T5870] usb 7-1: config 0 descriptor?? [ 327.469470][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 327.658647][ T29] audit: type=1400 audit(1738843649.543:685): avc: denied { ioctl } for pid=9423 comm="syz.0.856" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.777758][ T5870] gp8psk: usb in 128 operation failed. [ 327.794287][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 327.836697][ T5870] gp8psk: usb in 137 operation failed. [ 327.859307][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.882967][ T5870] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 327.917750][ T5870] usb 7-1: media controller created [ 327.946036][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.990169][ T5870] gp8psk_fe: Frontend attached [ 328.004074][ T5870] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 328.017293][ T5870] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 328.054430][ T5870] gp8psk: usb in 138 operation failed. [ 328.059992][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 328.070133][ T5870] gp8psk: found Genpix USB device pID = 203 (hex) [ 328.171429][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 328.178625][ T8] usb 2-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 328.187786][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.197502][ T8] usb 2-1: config 0 descriptor?? [ 328.204659][ T8] usblcd 2-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 328.231002][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 328.342356][ T5871] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 328.352453][ T29] audit: type=1400 audit(1738843650.313:686): avc: denied { nlmsg_read } for pid=9435 comm="syz.0.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 328.467206][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 328.521639][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.551542][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 328.608508][ T5871] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 328.700806][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.738754][ T5871] usb 6-1: config 1 has no interface number 1 [ 328.745830][ T8] usb 7-1: USB disconnect, device number 6 [ 328.758798][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.762209][ T5871] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.771202][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.780330][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 328.805543][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.808491][ T5823] usb 2-1: USB disconnect, device number 22 [ 328.820219][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.831458][ T5871] usb 6-1: Product: syz [ 328.835764][ T5871] usb 6-1: Manufacturer: syz [ 328.916230][ T9] usb 3-1: config 0 descriptor?? [ 328.924110][ T5871] usb 6-1: SerialNumber: syz [ 328.956617][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 329.237540][ T5871] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 329.246424][ T5872] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 329.254583][ T5871] usb 6-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 329.262365][ T5871] usb 6-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 329.280809][ T5871] usb 6-1: USB disconnect, device number 17 [ 329.345026][ T9] ft260 0003:0403:6030.0006: collection stack underflow [ 329.356984][ T9] ft260 0003:0403:6030.0006: item 0 1 0 12 parsing failed [ 329.364634][ T9] ft260 0003:0403:6030.0006: failed to parse HID [ 329.373878][ T9] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -22 [ 329.412746][ T5872] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 329.422413][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.475654][ T9336] udevd[9336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.587038][ T5872] usb 1-1: config 0 descriptor?? [ 329.594338][ T5872] cp210x 1-1:0.0: cp210x converter detected [ 330.318981][ T5872] usb 1-1: cp210x converter now attached to ttyUSB0 [ 330.413509][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.427136][ T29] audit: type=1400 audit(1738843652.443:687): avc: denied { listen } for pid=9429 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 330.457011][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.716727][ T29] audit: type=1326 audit(1738843652.743:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.2.858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f679578cde9 code=0x0 [ 331.740976][ T29] audit: type=1326 audit(1738843653.373:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b6f8cde9 code=0x7ffc0000 [ 331.831022][ T5823] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 331.957023][ T29] audit: type=1326 audit(1738843653.373:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b6f8cde9 code=0x7ffc0000 [ 331.980348][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.018442][ T5823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 332.033317][ T5823] usb 6-1: can't read configurations, error -61 [ 332.060178][ T29] audit: type=1326 audit(1738843653.703:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f95b6f8cde9 code=0x7ffc0000 [ 332.083465][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.099954][ T5870] usb 1-1: USB disconnect, device number 26 [ 332.142325][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 332.180602][ T29] audit: type=1326 audit(1738843653.703:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b6f8cde9 code=0x7ffc0000 [ 332.233016][ T5823] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 332.253547][ T29] audit: type=1326 audit(1738843653.703:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b6f8cde9 code=0x7ffc0000 [ 332.280392][ T5916] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 332.295693][ T29] audit: type=1326 audit(1738843653.703:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.6.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f95b6f8cde9 code=0x7ffc0000 [ 332.319308][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.403049][ T5823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 332.412200][ T5823] usb 6-1: can't read configurations, error -61 [ 332.429793][ T5823] usb usb6-port1: attempt power cycle [ 332.441101][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 332.458537][ T5916] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.470787][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.486154][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.496836][ T5916] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.516074][ T5916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.527414][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.724006][ T5870] cp210x 1-1:0.0: device disconnected [ 332.751472][ T9] usb 3-1: USB disconnect, device number 13 [ 332.772612][ T5916] usb 2-1: GET_CAPABILITIES returned 0 [ 332.781139][ T5823] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 332.809565][ T5916] usbtmc 2-1:16.0: can't read capabilities [ 332.840636][ T5823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 332.859474][ T5823] usb 6-1: can't read configurations, error -61 [ 332.960817][ T9472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.871'. [ 333.113606][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'. [ 333.791237][ T5870] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 333.800359][ T9472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.871'. [ 333.812112][ T5823] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 334.070967][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 334.130983][ T5870] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 334.139235][ T5870] usb 1-1: config 0 has no interface number 0 [ 334.171461][ T5870] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.182682][ T5823] usb 6-1: device descriptor read/8, error -71 [ 334.201595][ T5870] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 334.244586][ T5870] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 334.275893][ T5871] usb 2-1: USB disconnect, device number 23 [ 334.278064][ T5870] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 334.297986][ T5823] usb usb6-port1: unable to enumerate USB device [ 334.308768][ T5870] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 334.320048][ T5870] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 334.335604][ T5870] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 334.345866][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.354588][ T5870] usb 1-1: Product: syz [ 334.359167][ T5870] usb 1-1: Manufacturer: syz [ 334.382524][ T5870] usb 1-1: SerialNumber: syz [ 334.403925][ T5870] usb 1-1: config 0 descriptor?? [ 334.414533][ T9468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.430344][ T9468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.655130][ T5870] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 334.701017][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 334.772086][ T9494] kernel read not supported for file /eth0 (pid: 9494 comm: syz.5.878) [ 334.793230][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 334.793245][ T29] audit: type=1800 audit(1738843656.823:700): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.878" name="eth0" dev="mqueue" ino=23724 res=0 errno=0 [ 334.850753][ C1] sd 0:0:1:0: [sda] tag#347 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 334.861098][ C1] sd 0:0:1:0: [sda] tag#347 CDB: Write(6) 0a 00 00 00 00 18 00 00 00 00 00 00 [ 334.870686][ T5870] etas_es58x 1-1:0.219: could not parse product info: '424242424242' [ 334.891013][ T5871] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 334.902750][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.926820][ T5903] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 334.959469][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 334.993682][ T5903] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 335.028768][ T5903] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 335.073315][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 335.126322][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.379538][ T5903] usb 7-1: config 0 descriptor?? [ 335.487408][ T5871] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 335.533217][ T5871] usb 3-1: config 1 has no interface number 1 [ 335.545112][ T5870] usb 1-1: USB disconnect, device number 27 [ 335.553200][ T5870] etas_es58x 1-1:0.219: Disconnecting syz syz [ 335.590221][ T5871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.641829][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.649863][ T5871] usb 3-1: Product: syz [ 335.693246][ T5871] usb 3-1: Manufacturer: syz [ 335.697993][ T5871] usb 3-1: SerialNumber: syz [ 335.924148][ T9505] netlink: 'syz.5.881': attribute type 6 has an invalid length. [ 336.525452][ T5871] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 336.575973][ T5871] usb 3-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 336.626851][ T5871] usb 3-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 336.645304][ T9511] Cannot find add_set index 0 as target [ 336.674393][ T29] audit: type=1400 audit(1738843658.703:701): avc: denied { bind } for pid=9509 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 336.759786][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.883'. [ 336.769545][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.883'. [ 337.139521][ T29] audit: type=1400 audit(1738843658.703:702): avc: denied { name_bind } for pid=9509 comm="syz.0.882" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 337.149774][ T5871] usb 3-1: USB disconnect, device number 14 [ 337.240656][ T9511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 337.308137][ T5903] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 337.326826][ T29] audit: type=1400 audit(1738843658.703:703): avc: denied { node_bind } for pid=9509 comm="syz.0.882" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 337.348246][ T9511] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 337.383416][ T5903] hdpvr 7-1:0.0: device init failed [ 337.400708][ T5903] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 337.429799][ T29] audit: type=1400 audit(1738843659.283:704): avc: denied { listen } for pid=9509 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 337.463755][ T29] audit: type=1400 audit(1738843659.303:705): avc: denied { connect } for pid=9509 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 337.488548][ T29] audit: type=1400 audit(1738843659.303:706): avc: denied { name_connect } for pid=9509 comm="syz.0.882" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 337.548598][ T5903] usb 7-1: USB disconnect, device number 7 [ 337.596160][ T29] audit: type=1400 audit(1738843659.313:707): avc: denied { accept } for pid=9509 comm="syz.0.882" lport=60757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 337.662891][ T9336] udevd[9336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.709182][ T9534] bridge_slave_0: left allmulticast mode [ 337.711587][ T29] audit: type=1400 audit(1738843659.483:708): avc: denied { bind } for pid=9521 comm="syz.5.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 337.821159][ T9534] bridge_slave_0: left promiscuous mode [ 337.827652][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.910193][ T9534] bridge_slave_1: left allmulticast mode [ 338.931229][ T9534] bridge_slave_1: left promiscuous mode [ 338.963673][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.018204][ T9545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.108981][ T9545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.888'. [ 339.925651][ T9534] bond0: (slave bond_slave_0): Releasing backup interface [ 339.998595][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.104887][ T9534] bond0: (slave bond_slave_1): Releasing backup interface [ 340.116199][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.160115][ T9534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.196637][ T9534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.242718][ T9534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.250441][ T5903] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 340.286726][ T9534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.325328][ T9534] batman_adv: batadv0: Interface deactivated: wlan0 [ 340.349688][ T9534] batman_adv: batadv0: Removing interface: wlan0 [ 340.376142][ T9561] vlan2: entered promiscuous mode [ 340.396881][ T9561] syz_tun: entered promiscuous mode [ 340.477173][ T29] audit: type=1400 audit(1738843662.503:709): avc: denied { module_load } for pid=9573 comm="syz.6.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 340.503376][ T9574] Invalid ELF header type: 0 != 1 [ 340.729805][ T9580] Mount JFS Failure: -22 [ 340.877344][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.897'. [ 341.389654][ T5870] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 341.497449][ T29] audit: type=1400 audit(1738843663.524:710): avc: denied { ioctl } for pid=9589 comm="syz.1.900" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 341.584332][ T5870] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.599807][ T5870] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.625677][ T5870] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 341.648659][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.670966][ T29] audit: type=1400 audit(1738843663.694:711): avc: denied { map } for pid=9603 comm="syz.0.906" path="socket:[23089]" dev="sockfs" ino=23089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 341.696877][ T5870] usb 7-1: SerialNumber: syz [ 341.760569][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 341.770272][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 341.891758][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 342.031120][ T5871] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 342.072634][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.111009][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.190960][ T8] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 342.211774][ T9590] xt_l2tp: invalid flags combination: c [ 342.221215][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.362685][ T8] usb 3-1: config 0 descriptor?? [ 342.383857][ T5871] usb 1-1: config 0 has an invalid interface number: 80 but max is 0 [ 342.392287][ T5871] usb 1-1: config 0 has no interface number 0 [ 342.398426][ T5871] usb 1-1: config 0 interface 80 has no altsetting 0 [ 342.410501][ T5871] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 342.421916][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.478388][ T5871] usb 1-1: config 0 descriptor?? [ 342.812229][ T8] hid-led 0003:0FC5:B080.0007: item fetching failed at offset 0/3 [ 342.813108][ T8] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -22 [ 343.171035][ T8] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 343.442983][ T9621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.909'. [ 343.454284][ T9621] XFS (nullb0): no-recovery mounts must be read-only. [ 344.226510][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 344.230788][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.251926][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.265589][ T8] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 344.280187][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.317270][ T8] usb 6-1: config 0 descriptor?? [ 344.402622][ T5870] usb 7-1: 0:2 : does not exist [ 344.454951][ T5870] usb 7-1: USB disconnect, device number 8 [ 344.487065][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.489742][ T9625] bond0: (slave rose0): Enslaving as an active interface with an up link [ 344.518981][ T29] audit: type=1400 audit(1738843666.544:712): avc: denied { ioctl } for pid=9604 comm="syz.2.907" path="socket:[23191]" dev="sockfs" ino=23191 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 344.698245][ T29] audit: type=1400 audit(1738843666.704:713): avc: denied { write } for pid=9629 comm="syz.6.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 344.724167][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.816358][ T29] audit: type=1400 audit(1738843666.804:714): avc: denied { accept } for pid=9629 comm="syz.6.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 344.853164][ T9634] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 344.925296][ T9634] program syz.1.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.958362][ T9634] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 344.976129][ T8] corsair-psu 0003:1B1C:1C03.0008: unbalanced collection at end of report description [ 344.976417][ T8] corsair-psu 0003:1B1C:1C03.0008: probe with driver corsair-psu failed with error -22 [ 345.376534][ T5871] usb 1-1: Cannot read MAC address [ 345.376666][ T5871] MOSCHIP usb-ethernet driver 1-1:0.80: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 345.379037][ T5871] usb 1-1: USB disconnect, device number 28 [ 345.590115][ T9655] netlink: 84 bytes leftover after parsing attributes in process `syz.6.916'. [ 346.624371][ T9] usb 3-1: USB disconnect, device number 15 [ 346.824142][ T9670] netlink: 'syz.2.919': attribute type 9 has an invalid length. [ 346.851135][ T5870] usb 6-1: USB disconnect, device number 23 [ 346.999284][ T9678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.042537][ T9678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.918'. [ 347.293735][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 347.302668][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 347.311504][ T9674] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 347.319151][ T9674] netlink: 10 bytes leftover after parsing attributes in process `syz.1.921'. [ 347.421026][ T9674] nbd: socks must be embedded in a SOCK_ITEM attr [ 347.427686][ T9674] block nbd0: shutting down sockets [ 347.779101][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 347.987579][ T9693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.605538][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 349.367457][ T5834] Bluetooth: hci0: unexpected cc 0x1004 length: 39 > 11 [ 349.376064][ T5834] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 349.419275][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.458384][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.510333][ T9727] netlink: 140 bytes leftover after parsing attributes in process `syz.6.933'. [ 349.516260][ T9] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 349.579380][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.613019][ T9] usb 6-1: config 0 descriptor?? [ 350.036724][ T9] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 350.115474][ T9] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 350.745055][ T9] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 350.787293][ C0] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -71 [ 350.798643][ T9] usb 6-1: USB disconnect, device number 24 [ 350.800990][ T5834] block nbd6: Receive control failed (result -32) [ 350.902431][ T9748] block nbd6: shutting down sockets [ 350.913664][ T9755] netlink: 'syz.2.939': attribute type 6 has an invalid length. [ 351.100687][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.938'. [ 351.112708][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.938'. [ 351.180567][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.942'. [ 351.243241][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.942'. [ 351.485797][ T9758] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 351.492773][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 351.530154][ T9758] vhci_hcd vhci_hcd.0: Device attached [ 351.615992][ T9772] netlink: 240 bytes leftover after parsing attributes in process `syz.2.943'. [ 351.823340][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 352.106101][ T5823] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 352.720984][ T9] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 352.949888][ T9] usb 7-1: config 0 has no interfaces? [ 352.955489][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.965667][ T9783] Mount JFS Failure: -22 [ 352.970312][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.002488][ T9] usb 7-1: config 0 descriptor?? [ 353.217929][ T9] usb 7-1: USB disconnect, device number 9 [ 353.226450][ T9762] vhci_hcd: connection closed [ 353.250031][ T35] vhci_hcd: stop threads [ 353.283703][ T35] vhci_hcd: release socket [ 353.319714][ T35] vhci_hcd: disconnect device [ 353.452369][ T5834] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 353.461452][ T5834] Bluetooth: hci0: Injecting HCI hardware error event [ 353.472767][ T5834] Bluetooth: hci0: hardware error 0x00 [ 354.753111][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 355.260540][ T29] audit: type=1400 audit(1738843677.284:715): avc: denied { ioctl } for pid=9806 comm="syz.1.956" path="/181/file0" dev="tmpfs" ino=970 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 355.300974][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 355.310619][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 355.319818][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.350487][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.410142][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.455355][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.525979][ T9] usb 6-1: Product: syz [ 355.601250][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 355.843390][ T9] usb 6-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 355.877311][ T9816] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 355.905361][ T9816] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 355.915191][ T9] usb 6-1: SerialNumber: syz [ 355.944069][ T9820] ALSA: mixer_oss: invalid OSS volume '' [ 355.950038][ T9820] ALSA: mixer_oss: invalid OSS volume '#YH~cͼ1#&~!IZz' [ 355.961868][ T9816] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 355.972022][ T9820] ALSA: mixer_oss: invalid OSS volume '\UjiwIlˌ;z:8F' [ 356.045898][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 356.081618][ T9820] ALSA: mixer_oss: invalid OSS volume '$iyM,.1@P' [ 356.222796][ T9820] ALSA: mixer_oss: invalid OSS volume 'Id2څD[gм]E' [ 356.298626][ T9820] ALSA: mixer_oss: invalid OSS volume 'hf9\4԰ZkJO' [ 356.441947][ T9820] ALSA: mixer_oss: invalid OSS volume 'l~:-7gX2W' [ 356.449676][ T9820] ALSA: mixer_oss: invalid OSS volume 'JlF5p0' [ 356.541023][ T9820] ALSA: mixer_oss: invalid OSS volume '}(8=3U.' [ 356.550983][ T9820] ALSA: mixer_oss: invalid OSS volume 'C/bhą./صi,tQc;Z' [ 356.605426][ T9820] ALSA: mixer_oss: invalid OSS volume 'FyU{Bd*' [ 356.632936][ T9828] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 356.733783][ T9820] ALSA: mixer_oss: invalid OSS volume '5EIpOSn{~gi}@' [ 357.390176][ T9842] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.433921][ T9842] program syz.1.968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.444653][ T9842] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 357.562434][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 357.631097][ T5903] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 357.742040][ T8] usb 7-1: no configurations [ 357.746924][ T8] usb 7-1: can't read configurations, error -22 [ 357.781275][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 357.788927][ T5903] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.799414][ T5903] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 357.813249][ T5903] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 357.826755][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 357.837637][ T5903] usb 3-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 357.849466][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.851408][ T9850] netlink: 'syz.1.969': attribute type 16 has an invalid length. [ 357.861748][ T5903] usb 3-1: config 0 descriptor?? [ 357.879864][ T9850] netlink: 240 bytes leftover after parsing attributes in process `syz.1.969'. [ 357.891429][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 357.899717][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 359.091200][ T8] usb 7-1: no configurations [ 359.095865][ T8] usb 7-1: can't read configurations, error -22 [ 359.112948][ T9] usb 6-1: 0:2 : does not exist [ 359.139954][ T8] usb usb7-port1: attempt power cycle [ 359.186289][ T9] usb 6-1: USB disconnect, device number 25 [ 359.539780][ T9280] udevd[9280]: setting mode of /dev/bus/usb/006/025 to 020664 failed: No such file or directory [ 359.604516][ T8] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 359.768919][ T9280] udevd[9280]: setting owner of /dev/bus/usb/006/025 to uid=0, gid=0 failed: No such file or directory [ 359.790964][ T5903] nzxt-smart2 0003:1E71:2010.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.2-1/input0 [ 359.799524][ T8] usb 7-1: no configurations [ 359.810989][ T8] usb 7-1: can't read configurations, error -22 [ 359.832327][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.859936][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 359.868944][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 359.878220][ T9866] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 359.885948][ T9866] netlink: 10 bytes leftover after parsing attributes in process `syz.0.973'. [ 360.088012][ T9869] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 360.126056][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 360.221440][ T8] usb 7-1: no configurations [ 360.228416][ T8] usb 7-1: can't read configurations, error -22 [ 360.300960][ T9866] nbd: socks must be embedded in a SOCK_ITEM attr [ 360.307606][ T9866] block nbd0: shutting down sockets [ 360.476173][ T8] usb usb7-port1: unable to enumerate USB device [ 361.344612][ T9874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.742407][ T5903] usb 3-1: USB disconnect, device number 16 [ 363.043186][ T5871] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 363.801449][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 363.812851][ T5871] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 363.830977][ T5871] usb 2-1: config 1 has no interface number 1 [ 363.922811][ T5871] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.941257][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.949298][ T5871] usb 2-1: Product: syz [ 363.970935][ T5871] usb 2-1: Manufacturer: syz [ 363.975576][ T5871] usb 2-1: SerialNumber: syz [ 363.982856][ T9926] loop6: detected capacity change from 0 to 524287999 [ 364.071908][ T9926] loop6: detected capacity change from 524287999 to 0 [ 364.632808][ T9912] netlink: 76 bytes leftover after parsing attributes in process `syz.2.986'. [ 364.725146][ T5871] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 364.780811][ T5871] usb 2-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 364.860909][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.6.992'. [ 365.151441][ T5871] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 365.232876][ T5871] usb 2-1: USB disconnect, device number 24 [ 365.473789][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.816379][ T29] audit: type=1400 audit(1738843687.844:716): avc: denied { read } for pid=9941 comm="syz.0.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.931125][ T5871] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 366.481767][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 366.491180][ T5871] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.884548][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.905941][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.103176][ T5871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.182481][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.206751][ T5871] usb 3-1: Product: syz [ 367.216244][ T5871] usb 3-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 368.032192][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1003'. [ 368.041223][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1003'. [ 368.050732][ T9978] netlink: 'syz.6.1003': attribute type 1 has an invalid length. [ 368.058590][ T9978] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1003'. [ 368.111252][ T9978] nbd: socks must be embedded in a SOCK_ITEM attr [ 368.117974][ T9978] block nbd0: shutting down sockets [ 368.123097][ T5871] usb 3-1: SerialNumber: syz [ 368.654548][ T9985] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 369.968208][ T9996] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1008'. [ 370.036684][T10000] xt_nfacct: accounting object `syz1' does not exists [ 370.271068][ T5872] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 370.409251][ T5871] usb 3-1: 0:2 : does not exist [ 370.644366][ T5872] usb 1-1: device descriptor read/64, error -71 [ 370.713382][ T5871] usb 3-1: USB disconnect, device number 17 [ 371.049499][ T5872] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 371.088133][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.451198][ T25] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 371.741146][ T5872] usb 1-1: device descriptor read/64, error -71 [ 371.794069][ T25] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.803831][ T25] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 371.813110][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.834373][ T25] usb 6-1: config 0 descriptor?? [ 371.866817][ T5872] usb usb1-port1: attempt power cycle [ 371.919280][ T29] audit: type=1400 audit(1738843693.944:717): avc: denied { write } for pid=10022 comm="syz.6.1020" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 372.213154][ T5871] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 372.227117][T10032] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1022'. [ 372.242505][ T5872] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 372.271451][ T5872] usb 1-1: device descriptor read/8, error -71 [ 372.390953][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 372.403708][ T5871] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 372.420926][ T5871] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.440891][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.459827][ T5871] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.469951][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.482635][ T5871] usb 2-1: Product: syz [ 372.486806][ T5871] usb 2-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 372.513757][ T5871] usb 2-1: SerialNumber: syz [ 372.523424][ T5872] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 372.599746][ T29] audit: type=1400 audit(1738843694.624:718): avc: denied { ioctl } for pid=10033 comm="syz.6.1023" path="socket:[24991]" dev="sockfs" ino=24991 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.631812][ T29] audit: type=1400 audit(1738843694.624:719): avc: denied { write } for pid=10033 comm="syz.6.1023" path="socket:[24991]" dev="sockfs" ino=24991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.664884][ T5872] usb 1-1: device descriptor read/8, error -71 [ 372.946887][ T5872] usb usb1-port1: unable to enumerate USB device [ 373.033784][T10027] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 373.224998][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 373.267835][T10044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1024'. [ 373.327226][ T5871] usb 2-1: 0:2 : does not exist [ 373.381306][ T5871] usb 2-1: USB disconnect, device number 25 [ 373.525122][T10054] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 373.584060][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.746664][T10061] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1032'. [ 373.781102][ T5872] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 373.952572][ T5872] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 374.049557][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.104613][T10069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1034'. [ 374.116278][T10069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1034'. [ 374.227786][ T5872] usb 1-1: config 0 descriptor?? [ 374.639382][T10071] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 374.670367][ T25] usb 6-1: USB disconnect, device number 26 [ 374.844970][T10078] xt_hashlimit: max too large, truncated to 1048576 [ 375.150524][T10080] xt_nfacct: accounting object `syz1' does not exists [ 376.121032][ T5823] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 376.820956][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 376.834126][ T5823] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 376.844988][ T5872] pegasus 1-1:0.0: can't reset MAC [ 376.850185][ T5872] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 376.881187][ T5872] usb 1-1: USB disconnect, device number 33 [ 376.891121][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.899152][ T5823] usb 6-1: Product: syz [ 376.930634][ T5823] usb 6-1: Manufacturer: syz [ 376.931954][ T29] audit: type=1400 audit(1738843698.954:720): avc: denied { write } for pid=10092 comm="syz.2.1042" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 376.946912][ T5823] usb 6-1: SerialNumber: syz [ 376.999462][ T29] audit: type=1400 audit(1738843698.994:721): avc: denied { write } for pid=10092 comm="syz.2.1042" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 377.002303][ T5823] usb 6-1: config 0 descriptor?? [ 377.048121][ T5823] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 377.240923][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 377.392128][ T5823] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 377.611302][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 377.637990][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.655638][ T9] usb 3-1: config 0 descriptor?? [ 378.031160][T10112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 378.043894][T10112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 378.259342][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.266160][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.271189][ T9] usb 3-1: Cannot read MAC address [ 378.280546][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 378.281185][ T29] audit: type=1400 audit(1738843700.304:722): avc: denied { read } for pid=10111 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 378.439651][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 378.449964][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 378.459079][T10117] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 378.466969][T10117] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1049'. [ 378.500203][ T9] usb 3-1: USB disconnect, device number 18 [ 378.501035][T10117] nbd: socks must be embedded in a SOCK_ITEM attr [ 378.514911][T10117] block nbd0: shutting down sockets [ 378.753927][ T29] audit: type=1400 audit(1738843700.784:723): avc: denied { mounton } for pid=10123 comm="syz.0.1052" path="/248/file0" dev="tmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 378.792015][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1053'. [ 378.901307][ T5903] usb 6-1: USB disconnect, device number 27 [ 378.980303][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 380.062032][ T29] audit: type=1326 audit(1738843702.094:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.2.1056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f679578cde9 code=0x0 [ 381.373689][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1064'. [ 382.557337][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 382.645493][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1073'. [ 382.905048][T10194] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 382.917001][T10194] xt_hashlimit: overflow, try lower: 1125899906842624/4 [ 383.504511][ T29] audit: type=1400 audit(1738843705.524:725): avc: denied { ioctl } for pid=10190 comm="syz.6.1074" path="socket:[25957]" dev="sockfs" ino=25957 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 383.533652][T10196] overlayfs: missing 'lowerdir' [ 383.858736][T10203] __nla_validate_parse: 1 callbacks suppressed [ 383.858772][T10203] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1076'. [ 384.019767][ T29] audit: type=1400 audit(1738843705.784:726): avc: denied { append } for pid=10201 comm="syz.2.1076" name="v4l-subdev6" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.189203][ T29] audit: type=1400 audit(1738843706.184:727): avc: denied { shutdown } for pid=10200 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 384.388416][T10209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1079'. [ 384.390960][ T5823] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 384.452381][T10210] loop6: detected capacity change from 0 to 524287999 [ 384.481252][T10214] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1080'. [ 384.581329][T10210] loop6: detected capacity change from 524287999 to 0 [ 384.601241][ T5823] usb 2-1: device descriptor read/64, error -71 [ 384.934510][ T5823] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 385.182055][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 385.191519][ T5823] usb 2-1: device descriptor read/64, error -71 [ 385.312732][ T5823] usb usb2-port1: attempt power cycle [ 385.327912][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 385.682488][ T5823] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 385.719827][ T5823] usb 2-1: device descriptor read/8, error -71 [ 386.002197][ T5823] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 386.024312][ T5823] usb 2-1: device descriptor read/8, error -71 [ 386.134176][ T5823] usb usb2-port1: unable to enumerate USB device [ 386.355509][T10248] Mount JFS Failure: -22 [ 386.732790][T10252] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1093'. [ 386.925856][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 386.958306][ T29] audit: type=1400 audit(1738843708.984:728): avc: denied { map } for pid=10253 comm="syz.0.1094" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 387.482662][T10270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'. [ 387.829163][T10272] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1102'. [ 387.916597][ T29] audit: type=1400 audit(1738843709.904:729): avc: denied { ioctl } for pid=10273 comm="syz.6.1100" path="socket:[25550]" dev="sockfs" ino=25550 ioctlcmd=0x4946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 387.941580][ T29] audit: type=1400 audit(1738843709.914:730): avc: denied { getopt } for pid=10273 comm="syz.6.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 387.961165][ T29] audit: type=1400 audit(1738843709.914:731): avc: denied { getopt } for pid=10273 comm="syz.6.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 388.111887][T10279] netlink: 'syz.2.1103': attribute type 6 has an invalid length. [ 388.130465][T10279] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1103'. [ 388.377226][ T5871] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 388.396397][ T5871] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 388.451822][ T5871] hid-generic 0000:0003:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 389.193451][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 389.604141][ T29] audit: type=1400 audit(1738843711.634:732): avc: denied { read } for pid=10301 comm="syz.2.1110" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 389.688304][ T29] audit: type=1400 audit(1738843711.634:733): avc: denied { open } for pid=10301 comm="syz.2.1110" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 389.789287][T10309] overlay: ./file1 is not a directory [ 389.811033][ T29] audit: type=1400 audit(1738843711.674:734): avc: denied { create } for pid=10301 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 389.928710][ T29] audit: type=1400 audit(1738843711.674:735): avc: denied { map } for pid=10301 comm="syz.2.1110" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 390.310905][T10315] xt_hashlimit: max too large, truncated to 1048576 [ 390.909710][ T29] audit: type=1400 audit(1738843712.934:736): avc: denied { unmount } for pid=7011 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 392.154359][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1122'. [ 392.223559][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 392.809272][T10355] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1126'. [ 394.918042][ T29] audit: type=1400 audit(1738843716.944:737): avc: denied { name_bind } for pid=10375 comm="syz.2.1133" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 395.971107][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 396.145349][ T9] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 396.222256][ T9] usb 3-1: config 0 has no interface number 0 [ 396.342347][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 396.379284][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.399199][ T9] usb 3-1: Product: syz [ 396.403543][ T9] usb 3-1: Manufacturer: syz [ 396.408327][ T9] usb 3-1: SerialNumber: syz [ 396.423859][ T9] usb 3-1: config 0 descriptor?? [ 396.631072][ T5872] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 396.810115][ T5872] usb 6-1: Invalid ep0 maxpacket: 64 [ 396.865204][ T29] audit: type=1400 audit(1738843718.884:738): avc: denied { search } for pid=5489 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=26797 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 396.972825][ T5872] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 397.171080][ T5872] usb 6-1: Invalid ep0 maxpacket: 64 [ 397.196075][ T5872] usb usb6-port1: attempt power cycle [ 398.061558][ T5872] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 398.112378][ T5872] usb 6-1: Invalid ep0 maxpacket: 64 [ 398.192658][ T9] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 398.199127][ T9] usb 3-1: No valid video chain found. [ 398.221421][ T9] usb 3-1: USB disconnect, device number 19 [ 398.262512][ T5872] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 398.302658][ T5872] usb 6-1: Invalid ep0 maxpacket: 64 [ 398.323686][ T5872] usb usb6-port1: unable to enumerate USB device [ 398.450160][ T29] audit: type=1400 audit(1738843720.474:739): avc: denied { map } for pid=10421 comm="syz.1.1139" path="socket:[27113]" dev="sockfs" ino=27113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 398.514109][ T29] audit: type=1400 audit(1738843720.474:740): avc: denied { read accept } for pid=10421 comm="syz.1.1139" path="socket:[27113]" dev="sockfs" ino=27113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 398.538104][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.092242][T10461] overlayfs: missing 'lowerdir' [ 401.319658][T10489] xt_hashlimit: max too large, truncated to 1048576 [ 401.675403][T10485] overlayfs: missing 'lowerdir' [ 402.031175][ T29] audit: type=1400 audit(1738843724.041:741): avc: denied { shutdown } for pid=10497 comm="syz.2.1158" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.841258][T10512] geneve2: entered promiscuous mode [ 402.867478][T10512] geneve2: entered allmulticast mode [ 403.140933][T10525] 9pnet_virtio: no channels available for device 127.0.0.1 [ 403.846672][T10530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1163'. [ 403.936256][T10535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.710020][T10541] /dev/sg0: Can't lookup blockdev [ 404.734919][T10541] /dev/sg0: Can't lookup blockdev [ 406.036068][T10549] overlayfs: missing 'lowerdir' [ 406.225016][ T29] audit: type=1400 audit(1738843728.241:742): avc: denied { getopt } for pid=10550 comm="syz.6.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 406.328594][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 406.857715][T10575] 9pnet_virtio: no channels available for device 127.0.0.1 [ 407.043026][ T5872] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 407.630930][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 407.638034][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.649566][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.670231][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 408.629770][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 408.635096][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.646814][ T5872] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 409.696097][ T5872] usb 1-1: config 1 has no interface number 1 [ 409.706586][ T9] usb 3-1: config 0 descriptor?? [ 409.731545][ T5834] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 409.754627][ T5872] usb 1-1: string descriptor 0 read error: -71 [ 409.762948][ T5872] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.772268][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.826860][ T5872] usb 1-1: can't set config #1, error -71 [ 409.837044][ T9] usb 3-1: can't set config #0, error -71 [ 409.848793][ T5872] usb 1-1: USB disconnect, device number 34 [ 409.876601][T10581] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 409.921797][ T9] usb 3-1: USB disconnect, device number 20 [ 410.449182][ T29] audit: type=1800 audit(1738843732.461:743): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1183" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 412.989425][T10618] netlink: 'syz.2.1188': attribute type 2 has an invalid length. [ 413.351910][T10620] 9pnet_virtio: no channels available for device 127.0.0.1 [ 413.817964][ T29] audit: type=1400 audit(1738843735.030:744): avc: denied { read } for pid=10604 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 413.987469][ T29] audit: type=1326 audit(1738843736.010:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10625 comm="syz.6.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95b6f8cde9 code=0x0 [ 414.168919][T10628] xt_l2tp: v2 sid > 0xffff: 1245184 [ 414.581030][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 414.621260][ T5872] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 414.863178][ T5872] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 414.890285][ T5872] usb 7-1: config 0 has no interface number 0 [ 414.902319][ T5872] usb 7-1: config 0 interface 113 has no altsetting 0 [ 414.918821][ T5872] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 414.928740][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.938753][T10639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 414.945295][T10639] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 415.199737][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 415.211705][ T5872] usb 7-1: Product: syz [ 415.215953][ T5872] usb 7-1: Manufacturer: syz [ 415.220601][ T5872] usb 7-1: SerialNumber: syz [ 415.247694][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 415.271508][T10643] 9pnet_fd: Insufficient options for proto=fd [ 415.316854][ T5872] usb 7-1: config 0 descriptor?? [ 415.364289][ T9] usb 1-1: config 1 has no interface number 1 [ 415.407760][T10639] vhci_hcd vhci_hcd.0: Device attached [ 415.449865][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.550219][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.568879][ T9] usb 1-1: Product: syz [ 415.574099][ T9] usb 1-1: Manufacturer: syz [ 415.622726][ T9] usb 1-1: SerialNumber: syz [ 415.702339][T10640] vhci_hcd: connection closed [ 415.702775][ T3500] vhci_hcd: stop threads [ 415.740313][ T3500] vhci_hcd: release socket [ 415.751982][ T5871] usb 36-1: SetAddress Request (2) to port 0 [ 415.760251][ T3500] vhci_hcd: disconnect device [ 415.780096][ T5871] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 415.841250][ T5871] usb 36-1: enqueue for inactive port 0 [ 416.019043][ T9] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 416.065005][ T9] usb 1-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 416.093466][ T9] usb 1-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 416.134958][ T9] usb 1-1: USB disconnect, device number 35 [ 416.282491][ T5871] usb usb36-port1: attempt power cycle [ 416.327815][ T9336] udevd[9336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.518347][T10669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.834176][ T5823] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 417.447453][ T5823] usb 2-1: too many configurations: 164, using maximum allowed: 8 [ 417.462918][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1205'. [ 417.668984][ T5871] usb usb36-port1: unable to enumerate USB device [ 417.712518][ C0] usb 7-1: NFC: Urb failure (status -71) [ 417.715567][ C0] usb 7-1: NFC: Urb failure (status -71) [ 417.718266][ T5872] usb 7-1: NFC: Unable to get FW version [ 417.811665][ T5872] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -71 [ 417.861178][ T5823] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 417.870267][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.893486][ T5823] usb 2-1: config 0 descriptor?? [ 417.901100][ T5823] usb 2-1: bad CDC descriptors [ 417.913057][ T5872] usb 7-1: USB disconnect, device number 14 [ 417.981876][T10689] overlayfs: missing 'lowerdir' [ 418.029414][T10686] overlayfs: failed to resolve './file1': -2 [ 418.107769][ T5823] usb 2-1: USB disconnect, device number 30 [ 418.204896][T10692] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 419.331284][ T5916] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 419.669605][ T5916] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 419.772225][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.873247][T10714] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1218'. [ 419.959614][ T5916] usb 1-1: config 0 descriptor?? [ 420.049971][ T5916] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 420.240505][ T29] audit: type=1400 audit(1738843742.260:746): avc: denied { ioctl } for pid=10718 comm="syz.2.1220" path="socket:[28761]" dev="sockfs" ino=28761 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.433865][T10727] evm: overlay not supported [ 420.448808][ T5916] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 420.478233][ T29] audit: type=1400 audit(1738843742.500:747): avc: denied { getopt } for pid=10730 comm="syz.1.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.724358][ T5823] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 420.960490][ T5916] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 421.011125][ T5823] usb 3-1: device descriptor read/64, error -71 [ 421.062682][ T29] audit: type=1400 audit(1738843742.800:748): avc: denied { getopt } for pid=10728 comm="syz.6.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 421.101444][ T29] audit: type=1400 audit(1738843743.030:749): avc: denied { read } for pid=10734 comm="syz.5.1226" path="socket:[27770]" dev="sockfs" ino=27770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.162380][T10742] fuse: Unknown parameter '' [ 421.180192][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.186584][T10743] fuse: Unknown parameter '' [ 421.220501][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.249171][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.283144][ T5823] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 421.323654][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.340921][ T5903] usb 1-1: USB disconnect, device number 36 [ 421.347727][ T29] audit: type=1400 audit(1738843743.280:750): avc: granted { setsecparam } for pid=10734 comm="syz.5.1226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 421.394942][ T5834] Bluetooth: hci3: connection err: -111 [ 421.402468][ T5834] Bluetooth: hci3: unexpected event 0x03 length: 17 > 11 [ 421.460954][ T5823] usb 3-1: device descriptor read/64, error -71 [ 421.582409][ T5823] usb usb3-port1: attempt power cycle [ 421.922013][ T5823] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 421.995660][ T5823] usb 3-1: device descriptor read/8, error -71 [ 422.356295][ T5823] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 422.399151][ T5823] usb 3-1: device descriptor read/8, error -71 [ 422.479882][ T5916] IPVS: starting estimator thread 0... [ 422.521349][ T5823] usb usb3-port1: unable to enumerate USB device [ 422.652252][T10762] IPVS: using max 28 ests per chain, 67200 per kthread [ 423.665838][ T5872] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 424.038104][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 424.051765][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 424.080996][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 424.238898][ T5872] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 424.844340][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.864256][ T5872] usb 6-1: Product: syz [ 424.871124][ T5872] usb 6-1: Manufacturer: syz [ 424.875763][ T5872] usb 6-1: SerialNumber: syz [ 424.942719][ T5872] usb 6-1: config 0 descriptor?? [ 424.963451][T10775] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 425.131087][ T5872] rc_core: IR keymap rc-streamzap not found [ 425.137042][ T5872] Registered IR keymap rc-empty [ 425.251009][ T29] audit: type=1400 audit(1738843747.250:751): avc: denied { append } for pid=10774 comm="syz.5.1238" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 425.256627][ T5872] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 426.243355][ T5872] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 426.275791][ T5872] usb 6-1: USB disconnect, device number 32 [ 427.124892][ T5834] block nbd0: Receive control failed (result -32) [ 427.131854][T10815] block nbd0: shutting down sockets [ 427.345086][ T29] audit: type=1400 audit(1738843749.370:752): avc: denied { ioctl } for pid=10825 comm="syz.1.1253" path="socket:[27969]" dev="sockfs" ino=27969 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 427.396980][ T29] audit: type=1400 audit(1738843749.410:753): avc: denied { append } for pid=10823 comm="syz.6.1254" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 427.497904][T10833] overlayfs: missing 'lowerdir' [ 427.512511][ T5903] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 427.691728][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 427.884825][ T5903] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 428.459156][T10845] syz.2.1258: attempt to access beyond end of device [ 428.459156][T10845] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 428.475921][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 428.487527][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 428.867116][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.889821][ T5903] usb 6-1: Product: syz [ 428.894159][ T5903] usb 6-1: Manufacturer: syz [ 428.898901][ T5903] usb 6-1: SerialNumber: syz [ 429.269835][ T5903] usb 6-1: config 0 descriptor?? [ 429.543607][ T5903] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 429.575840][T10859] loop6: detected capacity change from 0 to 524287999 [ 429.622079][T10859] loop6: detected capacity change from 524287999 to 0 [ 429.751193][ T5872] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 429.921062][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 429.937704][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.970264][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.986699][ T5872] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 429.996799][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.070982][ T5903] gspca_sunplus: reg_w_riv err -110 [ 430.102639][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 430.128346][ T5903] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 430.421261][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 430.595116][ T25] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 430.597300][ T5872] usb 3-1: config 0 descriptor?? [ 430.636996][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.654221][ T25] usb 7-1: Product: syz [ 430.664615][ T25] usb 7-1: Manufacturer: syz [ 430.666183][ T29] audit: type=1400 audit(1738843752.690:754): avc: denied { write } for pid=10871 comm="syz.1.1268" name="net" dev="proc" ino=29130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 430.674951][ T25] usb 7-1: SerialNumber: syz [ 430.690691][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.706698][ T29] audit: type=1400 audit(1738843752.720:755): avc: denied { add_name } for pid=10871 comm="syz.1.1268" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 430.721613][T10874] overlayfs: missing 'lowerdir' [ 430.729719][ T29] audit: type=1400 audit(1738843752.720:756): avc: denied { create } for pid=10871 comm="syz.1.1268" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 430.753873][ T25] usb 7-1: config 0 descriptor?? [ 430.759870][ T29] audit: type=1400 audit(1738843752.720:757): avc: denied { associate } for pid=10871 comm="syz.1.1268" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 430.784119][ T25] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 431.074827][ T5872] ft260 0003:0403:6030.000C: item fetching failed at offset 0/2 [ 431.084276][ T5872] ft260 0003:0403:6030.000C: failed to parse HID [ 431.095084][ T5872] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -22 [ 431.285592][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.387038][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.699485][ T9] usb 6-1: USB disconnect, device number 33 [ 431.751126][ T5823] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 431.770312][ T5916] usb 3-1: USB disconnect, device number 25 [ 431.931508][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 431.940165][ T5823] usb 1-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 431.962814][ T5823] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.984714][ T5823] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 432.005679][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.018625][ T5823] usb 1-1: Product: syz [ 432.023731][ T5823] usb 1-1: Manufacturer: syz [ 432.028794][ T5823] usb 1-1: SerialNumber: syz [ 432.081051][ T25] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 432.114627][ T25] usb 7-1: USB disconnect, device number 15 [ 432.124883][ T5823] usb 1-1: config 0 descriptor?? [ 432.538221][T10907] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1278'. [ 432.592975][T10906] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1272'. [ 432.633321][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 432.693359][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.759885][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.859985][ T29] audit: type=1400 audit(1738843754.880:758): avc: denied { name_bind } for pid=10912 comm="syz.1.1281" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 433.428013][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 433.507734][ T5871] usb 1-1: USB disconnect, device number 37 [ 433.670289][T10922] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1282'. [ 434.163801][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 434.173646][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 434.183515][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.193870][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.205556][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.214973][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.231002][ T9] usb 6-1: Product: syz [ 434.237422][ T9] usb 6-1: Manufacturer: እ㐞㍦䍭收窰䠅牍弙䖲ଽ岄ߑ嫫㏝㛌綁똕䯵䰛ꛄ뤡㭶᳡欙塮倏琟疈輯힬칗科ꙙ쪟쑊ㅁ鬣넴店졫㗻佊羦㟨薯惒ᱨ烰蛽ᄁၮ裟⯉鋘儽잚⬏੆༊ᨮ䮭䚑늝暓紖ꈌꀲ」滃麚ᩞ皙⛭诲咥㱃 [ 434.300090][ T29] audit: type=1400 audit(1738843756.310:759): avc: denied { ioctl } for pid=10924 comm="syz.2.1283" path="socket:[28146]" dev="sockfs" ino=28146 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 434.324721][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.377497][ T9] usb 6-1: SerialNumber: syz [ 434.420672][T10929] overlayfs: missing 'lowerdir' [ 434.943421][T10948] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 435.450950][ T25] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 435.782659][T10958] bond1: entered promiscuous mode [ 435.787754][T10958] bond1: entered allmulticast mode [ 435.808170][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 435.813698][T10958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.826527][ T25] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 435.872860][ T25] usb 1-1: config 0 has no interface number 0 [ 435.963981][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 436.048287][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.123636][ T25] usb 1-1: Product: syz [ 436.369675][ T25] usb 1-1: Manufacturer: syz [ 436.404636][ T25] usb 1-1: SerialNumber: syz [ 437.160318][ T9] usb 6-1: 0:2 : does not exist [ 437.198742][ T25] usb 1-1: config 0 descriptor?? [ 437.211213][ T9] usb 6-1: USB disconnect, device number 34 [ 437.222419][ T25] smsc95xx v2.0.0 [ 437.466900][ T9280] udevd[9280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.205405][T10978] vivid-000: disconnect [ 438.221144][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 438.236117][T10974] vivid-000: reconnect [ 438.243438][ T25] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 438.356845][ T5872] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 438.428685][T10958] bond1 (unregistering): Released all slaves [ 438.510164][ T5872] usb 3-1: device descriptor read/64, error -71 [ 438.611001][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 438.781018][ T5872] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 438.794181][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.805885][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.818611][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 438.828360][ T9] usb 2-1: New USB device strings: Mfr=104, Product=1, SerialNumber=0 [ 438.850779][ T9] usb 2-1: Product: syz [ 438.860667][ T9] usb 2-1: Manufacturer: syz [ 438.880229][ T9] usb 2-1: config 0 descriptor?? [ 438.920928][ T5872] usb 3-1: device descriptor read/64, error -71 [ 439.031311][ T5872] usb usb3-port1: attempt power cycle [ 439.332887][T11004] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1307'. [ 439.401066][ T5872] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 439.477362][T11006] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1306'. [ 440.084559][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.094135][ T5872] usb 3-1: device descriptor read/8, error -71 [ 440.197471][ T9] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 440.242781][ T9] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 440.332646][ T9] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 440.348262][ T9] usb 2-1: USB disconnect, device number 31 [ 440.391037][ T5872] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 545.410806][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 545.417798][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5195/1:b..l P5817/1:b..l [ 545.427442][ C0] rcu: (detected by 0, t=10503 jiffies, g=33933, q=324 ncpus=2) [ 545.435159][ C0] task:syz-executor state:R running task stack:22288 pid:5817 tgid:5817 ppid:5812 task_flags:0x400140 flags:0x00004002 [ 545.449880][ C0] Call Trace: [ 545.453169][ C0] [ 545.456104][ C0] __schedule+0xf43/0x5890 [ 545.460538][ C0] ? __pfx_mark_lock+0x10/0x10 [ 545.465311][ C0] ? __kernel_text_address+0xd/0x40 [ 545.470521][ C0] ? __pfx_mark_lock+0x10/0x10 [ 545.475306][ C0] ? __pfx___schedule+0x10/0x10 [ 545.480176][ C0] ? mark_held_locks+0x9f/0xe0 [ 545.484955][ C0] preempt_schedule_irq+0x51/0x90 [ 545.489980][ C0] irqentry_exit+0x36/0x90 [ 545.494396][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.500391][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 545.506313][ C0] Code: b8 ff ff ff ff 65 0f c1 05 80 de 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 545.525942][ C0] RSP: 0018:ffffc900039b78b0 EFLAGS: 00000206 [ 545.532104][ C0] RAX: 0000000000000046 RBX: 1ffff92000736f17 RCX: 000000004b267492 [ 545.540080][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cf020 RDI: ffffffff8bd34c80 [ 545.548071][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd7598 [ 545.556044][ C0] R10: ffffffff96ebacc7 R11: 0000000000000003 R12: 0000000000000000 [ 545.564021][ C0] R13: ffffffff8e1bcc80 R14: 0000000000000000 R15: 0000000000000000 [ 545.572452][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 545.578108][ C0] ? rcu_is_watching+0x12/0xc0 [ 545.582889][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 545.588099][ C0] ? __memcg_slab_post_alloc_hook+0x3ca/0x9b0 [ 545.594173][ C0] ? lock_acquire+0x2f/0xb0 [ 545.598684][ C0] ? __memcg_slab_post_alloc_hook+0x3ca/0x9b0 [ 545.604763][ C0] __memcg_slab_post_alloc_hook+0x3de/0x9b0 [ 545.610668][ C0] ? __memcg_slab_post_alloc_hook+0x3ca/0x9b0 [ 545.616749][ C0] ? kasan_save_track+0x14/0x30 [ 545.621626][ C0] kmem_cache_alloc_noprof+0x366/0x3d0 [ 545.627117][ C0] ? down_write+0x14e/0x200 [ 545.631658][ C0] ? vm_area_dup+0x53/0x2f0 [ 545.636203][ C0] vm_area_dup+0x53/0x2f0 [ 545.640549][ C0] copy_process+0x776f/0x8c50 [ 545.645252][ C0] ? __pfx_copy_process+0x10/0x10 [ 545.650321][ C0] kernel_clone+0xfd/0x960 [ 545.654750][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 545.659790][ C0] ? find_held_lock+0x59/0x110 [ 545.664565][ C0] ? find_held_lock+0x2d/0x110 [ 545.669345][ C0] __do_sys_clone+0xba/0x100 [ 545.673954][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 545.679175][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 545.684486][ C0] do_syscall_64+0xcd/0x250 [ 545.688999][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.694913][ C0] RIP: 0033:0x7f72b4183653 [ 545.699335][ C0] RSP: 002b:00007ffe851103b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 545.707762][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f72b4183653 [ 545.715742][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 545.723725][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 545.731708][ C0] R10: 00005555773477d0 R11: 0000000000000246 R12: 0000000000000000 [ 545.739697][ C0] R13: 000000000000004f R14: 000000000006b3d9 R15: 00007ffe85110550 [ 545.747689][ C0] [ 545.750727][ C0] task:udevd state:R running task stack:24240 pid:5195 tgid:5195 ppid:1 task_flags:0x400140 flags:0x00000002 [ 545.764236][ C0] Call Trace: [ 545.767525][ C0] [ 545.770464][ C0] __schedule+0xf43/0x5890 [ 545.774917][ C0] ? __pfx_lock_release+0x10/0x10 [ 545.779961][ C0] ? __wake_up_common+0x131/0x1e0 [ 545.784991][ C0] ? __pfx___schedule+0x10/0x10 [ 545.789855][ C0] ? do_raw_read_unlock+0x44/0xe0 [ 545.794896][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 545.800285][ C0] preempt_schedule_common+0x44/0xc0 [ 545.805598][ C0] preempt_schedule_thunk+0x1a/0x30 [ 545.810813][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 545.816480][ C0] sock_def_readable+0x15f/0x610 [ 545.821436][ C0] netlink_unicast+0x6f1/0x7f0 [ 545.826216][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 545.831528][ C0] netlink_sendmsg+0x8b8/0xd70 [ 545.836301][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.841629][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 545.846432][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 545.851907][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.857212][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 545.862524][ C0] ___sys_sendmsg+0x135/0x1e0 [ 545.867210][ C0] ? rcu_is_watching+0x12/0xc0 [ 545.871989][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.877250][ C0] __sys_sendmsg+0x16e/0x220 [ 545.881887][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.887032][ C0] do_syscall_64+0xcd/0x250 [ 545.891544][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.897534][ C0] RIP: 0033:0x7f0d93524a4b [ 545.901951][ C0] RSP: 002b:00007ffd8a033538 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.910371][ C0] RAX: ffffffffffffffda RBX: 000056471ea9ad90 RCX: 00007f0d93524a4b [ 545.918344][ C0] RDX: 0000000000000000 RSI: 00007ffd8a033548 RDI: 0000000000000004 [ 545.926321][ C0] RBP: 000056471eae8700 R08: 0000000000000001 R09: 0000000000000000 [ 545.934301][ C0] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 545.942274][ C0] R13: 00000000000000b3 R14: 0000000000000000 R15: 0000000000000000 [ 545.950273][ C0] [ 545.953298][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g33933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 545.964495][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 545.974465][ C0] rcu: RCU grace-period kthread stack dump: [ 545.980345][ C0] task:rcu_preempt state:R running task stack:26128 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 545.993838][ C0] Call Trace: [ 545.997113][ C0] [ 546.000050][ C0] __schedule+0xf43/0x5890 [ 546.004482][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 546.009702][ C0] ? __pfx___schedule+0x10/0x10 [ 546.014565][ C0] ? schedule+0x298/0x350 [ 546.018905][ C0] ? __pfx_lock_release+0x10/0x10 [ 546.023943][ C0] ? lock_acquire+0x2f/0xb0 [ 546.028457][ C0] ? schedule+0x1fd/0x350 [ 546.032800][ C0] schedule+0xe7/0x350 [ 546.036881][ C0] schedule_timeout+0x124/0x280 [ 546.041757][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 546.047140][ C0] ? __pfx_process_timeout+0x10/0x10 [ 546.052436][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 546.058344][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 546.063821][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 546.068605][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 546.073905][ C0] ? rcu_gp_init+0xc82/0x1630 [ 546.078595][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 546.083811][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 546.089635][ C0] rcu_gp_kthread+0x271/0x380 [ 546.094326][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 546.099536][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 546.104741][ C0] ? __kthread_parkme+0x148/0x220 [ 546.109772][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 546.114984][ C0] kthread+0x3af/0x750 [ 546.119063][ C0] ? __pfx_kthread+0x10/0x10 [ 546.123666][ C0] ? __pfx_kthread+0x10/0x10 [ 546.128269][ C0] ret_from_fork+0x45/0x80 [ 546.132707][ C0] ? __pfx_kthread+0x10/0x10 [ 546.137329][ C0] ret_from_fork_asm+0x1a/0x30 [ 546.142133][ C0] [ 546.145159][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 546.151488][ C0] CPU: 0 UID: 0 PID: 7011 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 546.162342][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 546.172408][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 546.179197][ C0] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 546.198819][ C0] RSP: 0018:ffffc900036b7930 EFLAGS: 00000202 [ 546.204894][ C0] RAX: 0000000000000001 RBX: ffff8880b8744a80 RCX: ffffffff81adcd3a [ 546.212871][ C0] RDX: ffff888021748000 RSI: 0000000000000001 RDI: 0000000000000000 [ 546.220847][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 546.228828][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170e8951 [ 546.236807][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 546.244784][ C0] FS: 0000555585348500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 546.253721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.260322][ C0] CR2: 000055557f67b808 CR3: 0000000077050000 CR4: 00000000003526f0 [ 546.268305][ C0] DR0: 0000000000000008 DR1: 00000000000000ff DR2: fffffffffffffffb [ 546.276371][ C0] DR3: 3e00000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.284350][ C0] Call Trace: [ 546.287631][ C0] [ 546.290484][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 546.296826][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 546.302035][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 546.307513][ C0] ? timekeeping_advance+0x72e/0xa90 [ 546.312814][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 546.318459][ C0] ? __asan_memcpy+0x3c/0x60 [ 546.323066][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 546.328367][ C0] ? rcu_is_watching+0x12/0xc0 [ 546.333138][ C0] ? update_process_times+0x178/0x2d0 [ 546.338525][ C0] ? __pfx_update_process_times+0x10/0x10 [ 546.344436][ C0] ? update_wall_time+0x1c/0x40 [ 546.349305][ C0] ? tick_nohz_handler+0x376/0x530 [ 546.354422][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 546.359889][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 546.365274][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 546.370997][ C0] ? read_tsc+0x9/0x20 [ 546.375080][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 546.380207][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 546.386380][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 546.392212][ C0] [ 546.395146][ C0] [ 546.398101][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.404293][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 546.410381][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 546.416581][ C0] smp_call_function_many_cond+0x4ea/0x12c0 [ 546.422515][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 546.427727][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 546.432848][ C0] flush_tlb_mm_range+0x271/0x4a0 [ 546.437881][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 546.443435][ C0] ? up_write+0x1b2/0x520 [ 546.447786][ C0] copy_process+0x70fb/0x8c50 [ 546.452495][ C0] ? __pfx_copy_process+0x10/0x10 [ 546.457552][ C0] kernel_clone+0xfd/0x960 [ 546.461971][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 546.467006][ C0] ? find_held_lock+0x59/0x110 [ 546.471773][ C0] ? find_held_lock+0x2d/0x110 [ 546.476542][ C0] __do_sys_clone+0xba/0x100 [ 546.481133][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 546.486345][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 546.491645][ C0] do_syscall_64+0xcd/0x250 [ 546.496159][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.502078][ C0] RIP: 0033:0x7f95b6f83653 [ 546.506503][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 546.526123][ C0] RSP: 002b:00007ffd1bb67e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 546.534541][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95b6f83653 [ 546.542515][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 546.550487][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 546.558466][ C0] R10: 00005555853487d0 R11: 0000000000000246 R12: 0000000000000000 [ 546.566440][ C0] R13: 00000000000927c0 R14: 000000000006b995 R15: 00007ffd1bb68010 [ 546.574439][ C0]