last executing test programs: 15m3.510027324s ago: executing program 4 (id=1374): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 15m3.120637618s ago: executing program 4 (id=1375): fsopen(&(0x7f0000000040)='adfs\x00', 0x1) mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000080)=0x9, 0x2, 0xa) 15m3.017221657s ago: executing program 4 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) (async) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000000}) (async, rerun: 32) r5 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f000086fff4)) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) (async) close_range(r6, 0xffffffffffffffff, 0x3e00000000000000) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x5}, 0x18) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 15m2.779747231s ago: executing program 4 (id=1378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103a9914eac91b37e5c012205000915810300027eea59d119131982c95d0af36add8964", @ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="8307fdfac2b8514f16d016", @ANYBLOB="941d4e67d03b2ac7570e1e20ec0d330a4640de91568cb0e2b13b143823c24273423923f540149ce35d0a45452259b344d4632853d02f87634108ac7cb09010df4bb707103556100e7b043639621c71e7fb924dca", @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRES8=r2], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect$cdc_ncm(0x2, 0x98, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x9, 0x58, 0x48, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a851"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x4c, 0xffff, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0xd, 0x30}, [@country_functional={0xe, 0x24, 0x7, 0x4b, 0x7, [0x53, 0x200, 0xa16, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x5, 0x7, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x2, 0xd, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xfd, 0xa8, 0x1, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xf, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x5, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x5, 0xa, 0x77, 0x10, 0x9}, 0x13a, &(0x7f0000000180)={0x5, 0xf, 0x13a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7, 0x40, 0x945}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb975, 0x7800, 0x2, [0x0, 0xff0000, 0x3ff0, 0xffdf8f, 0x0, 0xff3f00]}, @generic={0xe1, 0x10, 0x4, "35d101dddf97741dad90fa74b5b6cdb2d50f97963727253eaa615d2587020fcc0f6b7df2eab87150463cbdc48e53de04c7410d55daf1a014db62eb2b7c457fc39e435d9ecb69915b65d5e294924fe959d7e40ed2fc4112c28f992f09181cb083e9d69a4b0c390a25b3f1b0b1b0c03f5b04024ae240ef6b1042d734f36a0e227a46d3f80d13595914d44580d9b3676e9f0827b3561696118d633dd06f98346956b5052d8d1659b203f08236e4abfd89ab5cb504254dbba045acd24fbfc5fc8ec7ee025d548fc88845e8a898be0994b545f4d8cec34e05b8635a453af4c86a"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x0, 0xb, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a3098ca97e9cd60b7c0dcb1cf6562419"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x3, 0x1, 0xf3}]}, 0x5, [{0x14, &(0x7f00000002c0)=@string={0x14, 0x3, "0a11537a60370fe22c14ef5f89151fcb1f47"}}, {0xf, &(0x7f0000000300)=@string={0xf, 0x3, "b97be7031ce0ddb88c9b8de3b5"}}, {0x2b, &(0x7f0000000340)=@string={0x2b, 0x3, "7822f6946eae816cd513086530cda0abcf580702bce73649d1c316e77397377f4b0cc85c6fe5a08dec"}}, {0xf7, &(0x7f0000000440)=@string={0xf7, 0x3, "5eb8be9d8a974e4606b3cd44f729e71bb30fe6d6e0a7688233d559b8820c9a80a530d9b0b36cb314eaef02d39c55b1669cb6322dad0f089859392c781e97acf42a9d7a0dbac87afe8aaca2a9d8c5f82b1f1728e5e527bb108c5b9518e2bd3561b30b32df9188701266d371cbe96e91e868fbaa9300955b5230128a2ce602111d8f2a2cc61bd31e19a529ffe249e2b910bdb88fb2175444ab9ec4869f40184a7c7cc8e955c11d35b8d13af2e5d5d55dcbf2df760d6a3a2d5bbe97665a317d35df513083bb29815f74a6987d5d7b1dfff80ff2ee999a1cd41dbebc5000b83b73b0cf3bf0252af8062c04e5a89213be69c25555a2bb9c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500e}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') syz_usb_ep_write(r5, 0x81, 0x9, &(0x7f0000000000)="61f6b413604946cb37") 14m59.294954428s ago: executing program 4 (id=1392): syz_emit_vhci(&(0x7f0000002240)=ANY=[@ANYBLOB="3b8489d929edc57a7ec864e6f58e090000000000000002c566"], 0x8) open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x40) r0 = openat(0xffffffffffffff9c, 0x0, 0x161c80, 0x1) mkdir(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x2) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x1ff, {0x7, 0x29, 0x1001, 0x24ff87199961d6af, 0x2008, 0x4000, 0xb, 0xdc1, 0x0, 0x0, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 14m58.50474404s ago: executing program 4 (id=1398): syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x87) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000240), 0x8) sendto$inet6(r5, &(0x7f0000000340)="80821e54e8ce488712b3b8f7f4e7fe53cfeb091a67c748f4e59d5f658daa1c713877b0d8805141a5ae7f8bdaf57affa0921f0f36a06d144369793bb4348931231ab7326b601de037724cb6c47864f942bbd81866b524b827a45912b3d3db53767e95369830d1fb78cf04cff09492d2986fe866522f0c9ad0037d2f1b7bd5d63624ae76886c9a1de3615cac279366ce30dd3cbdd67cc9a5087df51d6fdb4e38cee06f11036caef905092a71ed85e7d695e4f8c985a74c383d75d9a0cf46ebfdef542bc371128b8ce5d6d6", 0xca, 0xe0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0x1, '\x00', 0x0, r6, 0x2, 0x5, 0x5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000000c0)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r9], 0x44}}, 0x40000c0) 14m58.26659323s ago: executing program 32 (id=1398): syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x87) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000240), 0x8) sendto$inet6(r5, &(0x7f0000000340)="80821e54e8ce488712b3b8f7f4e7fe53cfeb091a67c748f4e59d5f658daa1c713877b0d8805141a5ae7f8bdaf57affa0921f0f36a06d144369793bb4348931231ab7326b601de037724cb6c47864f942bbd81866b524b827a45912b3d3db53767e95369830d1fb78cf04cff09492d2986fe866522f0c9ad0037d2f1b7bd5d63624ae76886c9a1de3615cac279366ce30dd3cbdd67cc9a5087df51d6fdb4e38cee06f11036caef905092a71ed85e7d695e4f8c985a74c383d75d9a0cf46ebfdef542bc371128b8ce5d6d6", 0xca, 0xe0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0x1, '\x00', 0x0, r6, 0x2, 0x5, 0x5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000000c0)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r9], 0x44}}, 0x40000c0) 10m57.839185631s ago: executing program 2 (id=2264): r0 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x0, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x400, 0x3, 0x5, 0x2, 0x4, 0xfffffff9, 0x5}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x232003, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2f4, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf985}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x78}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc74c}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb5d}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x24000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffaa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x13}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x585d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xda}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd936}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd03}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20044000}, 0x90) 10m57.777532158s ago: executing program 2 (id=2265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x9, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x36b203, 0x99) write$selinux_load(r1, 0x0, 0x10c) setrlimit(0xf, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'comedi_test\x00', [0x4f23, 0x7f, 0x7, 0x3, 0x1, 0xdea7, 0xc, 0x3, 0xa, 0xfd, 0xfffffff7, 0xffffffff, 0x401, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0x1, 0xc3, 0x3, 0x68, 0x81, 0x0, 0xc6]}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) socket$packet(0x11, 0x2, 0x300) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r4, 0x25, 0x10, @void}, 0x10) 10m57.391514998s ago: executing program 2 (id=2267): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$inet(0x2, 0x1, 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r7 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0xc3ff, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 10m53.657451637s ago: executing program 2 (id=2277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x8000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000004, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x10003}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) lsetxattr$security_capability(&(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f0000000240), &(0x7f0000000300)=@v2={0x2000000, [{0xc8, 0x5}, {0x1000, 0x7}]}, 0x14, 0x2) sendto$inet6(r0, &(0x7f0000000800)="e97dfed3e6e53f494189a50bc87c2a431b", 0xfffffffffffffd96, 0x10060006, 0x0, 0x0) 10m53.501951851s ago: executing program 2 (id=2280): syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x8000000) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) connect$pppoe(r3, &(0x7f0000000180)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x40047452, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'veth1\x00'}}) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc0000001b1204002abd7000fcdbdf25ffffffff0000000000000000000000007f000001141eb236ca79391dd80000000000000000000000004e24fffc4e232f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0b000000000000000300000000000000050000000000000004000000000000009e2e0000000000000e00000000000000080000000000000000400000000000000700000000000000000000000000000005000000000000000600000000000000000000000000000000010301000000000d0000000000000008000b00010000000a00100001000000000000000800180000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 10m51.756645364s ago: executing program 2 (id=2285): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x6000000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x118) fanotify_mark(0xffffffffffffffff, 0x105, 0x800101b, r2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000aaf9a16c9bf96f5e1f7f3a87ab24fd4237f7a8613327f82d21ed4674de56e5c2ebd757b90d04bd09a2cf9355990b0644aba85dc19a91dcd9853afb438a5852d55f61209d207f0ac17e018e54305a9851c2f502242eb953ea6875bed0ffd38984725482c440be3fb6cf7866c874dbc249f9e32936fa962769487d0281dc4c8eae5f2e941eb074c6d8ae6245da4ba607ecad54dee716417e19cc8702bb993e4ad6709e31a8a5cd44d7948aeb9f27124dfd5ca80c2010386b9d3d065797b36a3462d900a05ef4d9ea33aa330accaca32684b509cf907210000000005bac0c87", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 10m51.337758038s ago: executing program 33 (id=2285): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x6000000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x118) fanotify_mark(0xffffffffffffffff, 0x105, 0x800101b, r2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000aaf9a16c9bf96f5e1f7f3a87ab24fd4237f7a8613327f82d21ed4674de56e5c2ebd757b90d04bd09a2cf9355990b0644aba85dc19a91dcd9853afb438a5852d55f61209d207f0ac17e018e54305a9851c2f502242eb953ea6875bed0ffd38984725482c440be3fb6cf7866c874dbc249f9e32936fa962769487d0281dc4c8eae5f2e941eb074c6d8ae6245da4ba607ecad54dee716417e19cc8702bb993e4ad6709e31a8a5cd44d7948aeb9f27124dfd5ca80c2010386b9d3d065797b36a3462d900a05ef4d9ea33aa330accaca32684b509cf907210000000005bac0c87", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 36.350644173s ago: executing program 5 (id=4514): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x90, 0xec, 0x24, 0x40, 0x694, 0x1, 0x34c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x10, 0x20, 0x10, [{{0x9, 0x4, 0xb, 0x1, 0x0, 0xa9, 0x7a, 0x53, 0xa2}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x5, @mcast1, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@flowinfo={{0x14, 0x29, 0xb, 0x8000}}], 0x18}, 0xc044) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x68, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x1, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xb, 0x24, 0x6, 0x0, 0x0, "6aba71b744b4"}, {0x5, 0x24, 0x0, 0x8fd}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x1, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0xfff, 0xff, 0x3, 0x3, 0x75}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x7, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xa1, 0x3, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x6, 0x0, 0x5, 0x20, 0x7}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x5, [{0x7d, &(0x7f0000000340)=@string={0x7d, 0x3, "d97719f3ea94cb8ee4082fb873bfa503c90c6a8d4894efef9204330a170a54c4e3c893a16ea78b80b5e81da5e8c0ac8e07340e93d90e413b21f8c9221428e225b28ebb5b545d45ae3690aa6cc690d2ed5e8ace1084a930e90ad24cf158f78396e45fb7ca6cc1a2cb494dfdd9db315296beed0c226d2bfa0f08f69e"}}, {0xe, &(0x7f00000003c0)=@string={0xe, 0x3, "70bc82f5d63e906f84a15f49"}}, {0x64, &(0x7f0000000400)=@string={0x64, 0x3, "fbc222b261870b86a121ec66a0199b156902fba0b939958f8086a950107b422a21cb909096fbeeb3970af18421874f1307c2ed27d575184e460145d02355f43280e675cc398d6336e1cc7f5b542fb0adbda7b7b06ab965738102887d7a3a0e2de6fa"}}, {0xcb, &(0x7f0000000480)=@string={0xcb, 0x3, "b5b0924636039c1da4b484fe9db80d6e7de39268229561fda0d1c342a983ca3448bdc05644b082bf46f2de15b8af6d520907ae0646b18805f661f3ce7ac1e94bfb4d86369384a6b51f1d2234a21b462c58ea27cf3f1508c9bf7a6917b9ab5d5c86fa1463cb74bc9d941b069058d1e7df84682285cb842f5e65ca56e14bed703698552751e9d08b844f1522f53d4801729519683987787c59d7d4b205456e2fa9833bd8e0455d89601e7cc0aab9156dbf42a1ac2623d7952d9d3e1af5a3d81c7650f93bf76094c4f92e"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x443}}]}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000100)={0x8, 0x0, [{0x80000000, 0xe85, 0x0, 0x0, 0x5df, 0x0, 0x5}, {0x80000007, 0xb, 0x0, 0x0, 0x6, 0x651d, 0xfab}, {0x40000001, 0xffffffff, 0x5, 0x4, 0x3, 0x9eb, 0x5c}, {0x1, 0x9, 0x0, 0x2c0, 0xad1, 0x2, 0x81}, {0x7, 0x3, 0x7, 0xb974, 0x3, 0xe, 0x7}, {0xb, 0x100, 0x4, 0x1000, 0x641, 0x2, 0x9}, {0x4, 0x807, 0x4, 0x1c, 0xb93, 0xe, 0x8}, {0xb, 0x1000, 0x1, 0xd, 0x6, 0x5, 0x9}]}) 34.78493078s ago: executing program 5 (id=4520): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="8905040400", 0x28) 34.77025485s ago: executing program 5 (id=4521): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x343100, 0x0) syz_open_dev$midi(&(0x7f0000000380), 0x219, 0x402000) (async) r2 = syz_open_dev$midi(&(0x7f0000000380), 0x219, 0x402000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0xffffffff, 0xfffffffc}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0xffffffff, 0xfffffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) pselect6(0x39, &(0x7f0000000400)={0x8, 0x7, 0xffffff7ffffffff7, 0x6, 0x5, 0x9, 0x8f, 0x1}, &(0x7f0000000140)={0xf, 0x101, 0x7, 0x6, 0x80000000, 0x3, 0x5, 0x5}, &(0x7f0000000180)={0x12000000000000, 0xf, 0x9, 0x575, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x8001]}, 0x8}) (async) pselect6(0x39, &(0x7f0000000400)={0x8, 0x7, 0xffffff7ffffffff7, 0x6, 0x5, 0x9, 0x8f, 0x1}, &(0x7f0000000140)={0xf, 0x101, 0x7, 0x6, 0x80000000, 0x3, 0x5, 0x5}, &(0x7f0000000180)={0x12000000000000, 0xf, 0x9, 0x575, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x8001]}, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getrusage(0x100000000000000, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xbe, 0x44, 0x8f, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xe, 0x4b, 0x2}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xbe, 0x44, 0x8f, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xe, 0x4b, 0x2}}]}}]}}]}}, 0x0) 31.298466429s ago: executing program 5 (id=4528): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x100, 0x1a, 0x100, 0x0, 0x25dfdbff, {{@in6=@mcast2, @in6=@private0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2c}, @in=@rand_addr=0x64010101, {0x0, 0x8000000000000, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@proto={0x5, 0x19, 0xff}, @proto={0x5, 0x19, 0x33}]}, 0x100}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x400d7ed, 0x10100, 0x0, 0x2cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 30.371615473s ago: executing program 5 (id=4532): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0xb54e8e36cc2dc254, 0x84) fsopen(&(0x7f00000001c0)='smb3\x00', 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x24020400) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x500) 28.684612036s ago: executing program 5 (id=4535): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)="f31743047f818aa0347bd57960a64ea3f9730ebd3ce942188c", 0x19, 0x40488d1}, 0x48800) read$msr(r4, &(0x7f00000056c0)=""/102398, 0xfffffe94) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f0000000180)) write$cgroup_pid(r7, &(0x7f00000000c0)=r1, 0x12) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc00000500"], 0x5c}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000002}, 0x94) 13.323411212s ago: executing program 34 (id=4535): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)="f31743047f818aa0347bd57960a64ea3f9730ebd3ce942188c", 0x19, 0x40488d1}, 0x48800) read$msr(r4, &(0x7f00000056c0)=""/102398, 0xfffffe94) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f0000000180)) write$cgroup_pid(r7, &(0x7f00000000c0)=r1, 0x12) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc00000500"], 0x5c}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000002}, 0x94) 10.271243237s ago: executing program 0 (id=4579): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000340)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x20020000) open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca", 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 10.076804051s ago: executing program 3 (id=4580): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000380)='c:::\x00S\x944\xdd\xbd\\,YD\xdfU> \x1a\xe1%j\xadG\xb42n\x96\f\xa6\x02\x9bk\x14k22\xfcG\xf43\x8b\fH\x90\xednc\xbc\a\x88u\xe2\xa8\xe7\x89\xf3\xa4\xf86.*f&\x82\xee]\x9e/s\xe4b\x18\xf0\x91\xe7%j&N\xb5\x1f\xc4\x9d>\xa4\x1f\x1d\x93\xd8\x97I\xc6S\x8a\x1aH|b\xf6\x10e)@>\x91\xd8\xd7\xc6\xf8\x85\xefN]c\xe6E\"\xb0\xe4\x1c\xb8\x0e4\xed\xab\xa6k`\x8a\x11\x954b8\x8b\xd8:\xb4J\x1er\xf8zb\v\xfe', 0x0) r0 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x50) r3 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0xb516, 0xc2de, 0x8, 0x0, 0x0) 9.95183547s ago: executing program 6 (id=4581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x6000000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x118) fanotify_mark(r3, 0x105, 0x800101b, r2, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000aaf9a16c9bf96f5e1f7f3a87ab24fd4237f7a8613327f82d21ed4674de56e5c2ebd757b90d04bd09a2cf9355990b0644aba85dc19a91dcd9853afb438a5852d55f61209d207f0ac17e018e54305a9851c2f502242eb953ea6875bed0ffd38984725482c440be3fb6cf7866c874dbc249f9e32936fa962769487d0281dc4c8eae5f2e941eb074c6d8ae6245da4ba607ecad54dee716417e19cc8702bb993e4ad6709e31a8a5cd44d7948aeb9f27124dfd5ca80c2010386b9d3d065797b36a3462d900a05ef4d9ea33aa330accaca32684b509cf907210000000005bac0c87", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 9.108390573s ago: executing program 6 (id=4582): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x100, 0x1a, 0x100, 0x0, 0x25dfdbff, {{@in6=@mcast2, @in6=@private0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2c}, @in=@rand_addr=0x64010101, {0x0, 0x8000000000000, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@proto={0x5, 0x19, 0xff}, @proto={0x5, 0x19, 0x33}]}, 0x100}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20) r5 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x400d7ed, 0x10100, 0x0, 0x2cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000280), 0x9) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000c40), 0x12) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 9.017974136s ago: executing program 0 (id=4583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="01000000000000000000040000001400050003030000080a0000005dc000000000010800020003000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 8.793179515s ago: executing program 0 (id=4584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0xdcee729b7a9fe6c8) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 8.460501454s ago: executing program 0 (id=4585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x6000000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x118) fanotify_mark(r3, 0x105, 0x800101b, r2, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000aaf9a16c9bf96f5e1f7f3a87ab24fd4237f7a8613327f82d21ed4674de56e5c2ebd757b90d04bd09a2cf9355990b0644aba85dc19a91dcd9853afb438a5852d55f61209d207f0ac17e018e54305a9851c2f502242eb953ea6875bed0ffd38984725482c440be3fb6cf7866c874dbc249f9e32936fa962769487d0281dc4c8eae5f2e941eb074c6d8ae6245da4ba607ecad54dee716417e19cc8702bb993e4ad6709e31a8a5cd44d7948aeb9f27124dfd5ca80c2010386b9d3d065797b36a3462d900a05ef4d9ea33aa330accaca32684b509cf907210000000005bac0c87", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 7.544011367s ago: executing program 0 (id=4587): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x100, 0x1a, 0x100, 0x0, 0x25dfdbff, {{@in6=@mcast2, @in6=@private0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2c}, @in=@rand_addr=0x64010101, {0x0, 0x8000000000000, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@proto={0x5, 0x19, 0xff}, @proto={0x5, 0x19, 0x33}]}, 0x100}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x400d7ed, 0x10100, 0x0, 0x2cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.455801035s ago: executing program 3 (id=4589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000340)={[{@none}, {@xattr}, {@xattr}], [{@uid_gt={'uid>', r6}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 5.815810417s ago: executing program 6 (id=4591): sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x884) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xae30, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r6}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 4.867195777s ago: executing program 3 (id=4592): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000340)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x20020000) open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca", 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 4.24213894s ago: executing program 1 (id=4594): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\x00\x00\x00\a\x00'}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) 4.164109399s ago: executing program 1 (id=4595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000003000000580001800d0001007564703a73797a3100000000440004"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x14, 0x12, 0x1, 0x70bd2a, 0x0, {0x28}}, 0x14}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x40010) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x4e) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x7) sendmsg$can_bcm(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0600000012030000e700000000000000", @ANYRES64=0x0, @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000e005000000b395ac5160fbdac3"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4048aecb, &(0x7f0000001440)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0x1, 0x1}}, "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", "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"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4.130210793s ago: executing program 0 (id=4596): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000140000000109022000010000000009040000010300000009210500"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x20000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x2, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00'], 0x8}) semget(0x1, 0x4, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r5, &(0x7f0000000380)=""/144, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x2, 0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 3.877999927s ago: executing program 3 (id=4597): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_pts(r3, 0x0) r8 = dup3(r7, r3, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3.586579978s ago: executing program 6 (id=4598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000050000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x70, 0x401, 0xe2, 0x3, 0x88d7, 0x80000001, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x9, 0x1ff, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4005, 0x2, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000004]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400"], 0x48) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x4840) 3.012757317s ago: executing program 1 (id=4599): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00006f6000/0x1000)=nil, 0x1000}, 0x5}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x5b, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xc, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@lsrr={0x83, 0x17, 0x4e, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) 3.011962487s ago: executing program 6 (id=4600): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00006f6000/0x1000)=nil, 0x1000}, 0x5}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x5b, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xc, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@lsrr={0x83, 0x17, 0x4e, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) 2.242600253s ago: executing program 3 (id=4601): getpgrp(0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x2000004, 0x80000000, '\x00', 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x33, @multicast2, 0x4e22, 0x3, 'wrr\x00', 0x30, 0x1b53, 0x7f}, 0xffffffffffffff8e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xdaf}}, './file0\x00'}) r6 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000000010104000000122800000000000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e00000020800074000000005"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.173226378s ago: executing program 1 (id=4602): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="1bc387f31bf6681b5b", 0x9}, {&(0x7f0000000000)="277265b21367cef075d54e60f660a2fe70efb874488f479d", 0x18}, {&(0x7f00000001c0)="a375c693d41728b12f0c33e87a58f42e20d281945023f2f53dae560ed86b228fdcb1d691aba2afc18c29fae93db95d89284f852f3120abdbcca2d05e6f45bb6b9ffe2fa7c24b6ae6bf52d437b83bcc0e53c1e893b5211c3d6f541e949924904e5258b0e6268f6d8d21201eaf89c7922ff50371af55e88310d2d7", 0x7a}, {&(0x7f00000004c0)="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", 0x800}], 0x4}, 0x4048005) 2.066743361s ago: executing program 6 (id=4603): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x601040, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xae30, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r6}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2.057029133s ago: executing program 1 (id=4604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) fanotify_mark(r4, 0x105, 0x800101b, r3, 0x0) read$FUSE(r4, 0x0, 0x0) getpid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000380)={0x28, 0x1, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 1.028313868s ago: executing program 1 (id=4605): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) mkdir(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, r6, 0x3, 0x217f5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa0100fe}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x108, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x1, 0xff}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1326beaee514580e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x23, &(0x7f00000002c0)=0x40, 0x4) 0s ago: executing program 3 (id=4606): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000340)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x20020000) open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca", 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1210.934060][ T5873] usb 6-1: USB disconnect, device number 75 [ 1211.404052][ T30] audit: type=1400 audit(1766141099.927:1727): avc: denied { read } for pid=21604 comm="syz.0.4071" laddr=::1 lport=52889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1213.718870][T18294] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1213.742156][ T30] audit: type=1400 audit(1766141102.257:1728): avc: denied { mounton } for pid=21628 comm="syz.6.4079" path="/398/file0" dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1213.766463][T21629] 9pnet_fd: p9_fd_create_tcp (21629): problem connecting socket to 127.0.0.1 [ 1213.893885][T18294] usb 2-1: Using ep0 maxpacket: 16 [ 1213.906550][T18294] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1213.937992][T18294] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1213.963958][T18294] usb 2-1: Product: syz [ 1213.975998][T18294] usb 2-1: Manufacturer: syz [ 1213.990754][T18294] usb 2-1: SerialNumber: syz [ 1214.016754][T18294] usb 2-1: config 0 descriptor?? [ 1214.693914][ T5873] usb 2-1: USB disconnect, device number 108 [ 1218.473929][T18294] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1218.636326][T18294] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1218.703828][T18294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.735185][T18294] usb 1-1: config 0 descriptor?? [ 1218.765269][T18294] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1219.317272][T18294] gspca_zc3xx: reg_w_i err -110 [ 1219.322166][T18294] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1219.592323][ T30] audit: type=1400 audit(1766141108.107:1729): avc: denied { accept } for pid=21713 comm="syz.3.4102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1219.597355][T18294] usb 1-1: USB disconnect, device number 101 [ 1220.043883][T17689] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1220.215204][T17689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.226902][T17689] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1220.238544][T17689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.257136][T17689] usb 2-1: config 0 descriptor?? [ 1221.238139][T21739] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1221.555072][T19754] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1221.763825][T19754] usb 1-1: Using ep0 maxpacket: 16 [ 1221.828795][T19754] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1222.008256][T19754] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40 [ 1222.041992][T19754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.221987][T19754] usb 1-1: Product: 꾙涺翮⚋〾뮵嬳軅òɐ䲟鼄닇藬查侀ᆮ팔齓ຬ缞롩䄩 ᧫櫴ᚕႪ뱔淁먅᰻ᱽݰ螿ҹ녴庣捿荭쯨矋ᄉ [ 1223.066212][T19754] usb 1-1: Manufacturer: И [ 1223.110790][T19754] usb 1-1: SerialNumber:  [ 1223.558991][T19754] usbhid 1-1:1.0: can't add hid device: -71 [ 1223.597917][T19754] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1223.616454][T21755] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4112'. [ 1223.635050][ T30] audit: type=1400 audit(1766141112.037:1730): avc: denied { unmount } for pid=17466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1223.720351][T19754] usb 1-1: USB disconnect, device number 102 [ 1224.163804][T17786] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1224.351309][T17786] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1224.360863][T17786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.388339][T17786] usb 6-1: config 0 descriptor?? [ 1224.405105][T17786] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1224.585290][T17689] usbhid 2-1:0.0: can't add hid device: -71 [ 1224.595193][T17689] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1224.639701][T17689] usb 2-1: USB disconnect, device number 109 [ 1224.998059][T17786] gspca_zc3xx: reg_w_i err -110 [ 1225.004239][T17786] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1225.400124][T21788] netlink: 'syz.3.4122': attribute type 1 has an invalid length. [ 1225.576177][T21792] syzkaller0: entered promiscuous mode [ 1225.584755][T21792] syzkaller0: entered allmulticast mode [ 1225.637538][T19754] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1225.653764][ T5866] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1225.795504][T19754] usb 7-1: Using ep0 maxpacket: 16 [ 1225.882805][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 1225.893028][ T5866] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1225.906241][T19754] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.917448][ T5866] usb 4-1: config 0 has no interface number 0 [ 1225.923534][ T5866] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1225.933891][T19754] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.439104][T19754] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1226.452138][T19754] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1226.461349][T19754] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.472379][ T5866] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1226.486499][T19754] usb 7-1: config 0 descriptor?? [ 1226.494583][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.506333][ T5866] usb 4-1: Product: syz [ 1226.510601][ T5866] usb 4-1: Manufacturer: syz [ 1226.519433][ T5866] usb 4-1: SerialNumber: syz [ 1226.528079][ T5866] usb 4-1: config 0 descriptor?? [ 1226.537193][T21788] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1226.807028][T21788] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1226.936078][ T30] audit: type=1400 audit(1766141115.457:1731): avc: denied { write } for pid=21799 comm="syz.1.4126" path="socket:[72627]" dev="sockfs" ino=72627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1226.975134][T18331] usb 6-1: USB disconnect, device number 76 [ 1227.004767][T21786] random: crng reseeded on system resumption [ 1227.070927][T19754] input: HID 0955:7214 Haptics as /devices/virtual/input/input92 [ 1227.168073][T19754] shield 0003:0955:7214.0030: Registered Thunderstrike controller [ 1227.195821][T19754] shield 0003:0955:7214.0030: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1227.260472][T21786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.271021][T21786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.387327][ T5886] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1227.387594][ T5865] usb 7-1: USB disconnect, device number 32 [ 1227.418676][ T5886] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1227.433841][T18331] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1227.451451][ T5886] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1227.466807][ T5886] shield 0003:0955:7214.0030: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1227.483310][T21788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.515984][T21788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.573706][T18331] usb 6-1: device descriptor read/64, error -71 [ 1227.823690][T18331] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1227.963867][T18331] usb 6-1: device descriptor read/64, error -71 [ 1227.983861][T19754] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1228.074250][T18331] usb usb6-port1: attempt power cycle [ 1228.143659][T19754] usb 1-1: Using ep0 maxpacket: 16 [ 1228.150013][T19754] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1228.165878][T19754] usb 1-1: config 0 has no interface number 0 [ 1228.174238][T19754] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1228.194068][T19754] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1228.203664][T19754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.211884][T19754] usb 1-1: Product: syz [ 1228.220266][T19754] usb 1-1: Manufacturer: syz [ 1228.225258][T19754] usb 1-1: SerialNumber: syz [ 1228.260088][T19754] usb 1-1: config 0 descriptor?? [ 1228.319180][T21818] 9p: Bad value for 'rfdno' [ 1228.508993][T18331] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1228.546264][ T5866] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1228.562180][ T5866] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1228.653647][T18331] usb 6-1: device descriptor read/8, error -71 [ 1228.745561][ T5866] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1228.764144][ T5866] usb 4-1: USB disconnect, device number 12 [ 1228.954920][T19754] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input93 [ 1228.993700][T18331] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1229.034644][T18331] usb 6-1: device descriptor read/8, error -71 [ 1229.156870][T18331] usb usb6-port1: unable to enumerate USB device [ 1229.221883][T17786] usb 1-1: USB disconnect, device number 103 [ 1230.052430][ T30] audit: type=1400 audit(1766141118.567:1732): avc: denied { connect } for pid=21858 comm="syz.0.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1230.370322][T19754] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1232.939685][T19754] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1232.962173][T19754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.008848][T19754] usb 2-1: config 0 descriptor?? [ 1233.019157][T21870] syzkaller0: entered promiscuous mode [ 1233.054077][T21870] syzkaller0: entered allmulticast mode [ 1233.066664][T19754] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1233.123359][T19754] gspca_zc3xx: reg_w_i err -71 [ 1233.228254][T19754] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1234.015213][ T30] audit: type=1400 audit(1766141121.847:1733): avc: denied { kexec_image_load } for pid=21873 comm="syz.5.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1234.063780][T19754] usb 2-1: USB disconnect, device number 110 [ 1235.138913][ T30] audit: type=1400 audit(1766141123.647:1734): avc: denied { getopt } for pid=21898 comm="syz.1.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1235.778806][T21911] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=21911 comm=syz.5.4149 [ 1236.033755][T19754] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1236.235171][T19754] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1236.269848][T19754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.325716][T19754] usb 2-1: config 0 descriptor?? [ 1236.353012][T19754] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1236.965540][T19754] gspca_zc3xx: reg_w_i err -110 [ 1236.991495][T19754] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1237.050662][T19754] usb 2-1: USB disconnect, device number 111 [ 1237.332242][ T30] audit: type=1400 audit(1766141125.757:1735): avc: denied { create } for pid=21924 comm="syz.3.4154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1237.485057][T21932] syzkaller0: entered promiscuous mode [ 1237.490561][T21932] syzkaller0: entered allmulticast mode [ 1238.285677][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.494956][T21965] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=21965 comm=syz.6.4165 [ 1240.591575][T21959] comedi comedi3: reset error (fatal) [ 1240.848945][ T30] audit: type=1400 audit(1766141129.357:1736): avc: denied { create } for pid=21969 comm="syz.3.4167" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1241.712321][ T30] audit: type=1400 audit(1766141129.357:1737): avc: denied { write } for pid=21969 comm="syz.3.4167" name="file0" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1241.739565][ T30] audit: type=1400 audit(1766141129.357:1738): avc: denied { open } for pid=21969 comm="syz.3.4167" path="/189/file0" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1241.764589][ T30] audit: type=1400 audit(1766141129.357:1739): avc: denied { ioctl } for pid=21969 comm="syz.3.4167" path="/189/file0" dev="tmpfs" ino=1010 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1241.845330][ T30] audit: type=1400 audit(1766141130.367:1740): avc: denied { unlink } for pid=18150 comm="syz-executor" name="file0" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1241.901846][T21985] syzkaller0: entered promiscuous mode [ 1241.921401][T21980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4170'. [ 1241.923847][ T978] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1241.941751][T21985] syzkaller0: entered allmulticast mode [ 1241.985245][T21981] Bluetooth: MGMT ver 1.23 [ 1242.105502][ T978] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 1242.115287][ T978] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.128691][ T978] usb 1-1: config 8 has no interface number 0 [ 1242.137402][ T978] usb 1-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1242.149407][ T978] usb 1-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1242.168893][ T978] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1242.181059][ T978] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1242.195091][ T978] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1242.205851][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.232734][ T978] usb 1-1: NFC: intf ffff8880797b7000 id ffffffff8f325180 [ 1242.233682][T19754] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1242.290944][ T978] nfcmrvl 1-1:8.80: NFC: registered with nci successfully [ 1242.383694][ T5966] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1242.403894][T19754] usb 2-1: device descriptor read/64, error -71 [ 1242.435422][T21975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.444133][T21975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.556085][ T5966] usb 4-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1242.574051][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.598317][ T5966] usb 4-1: config 0 descriptor?? [ 1242.616008][ T5966] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1242.687363][T19754] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1243.019278][T19754] usb 2-1: device descriptor read/64, error -71 [ 1243.413734][T19754] usb usb2-port1: attempt power cycle [ 1243.458255][ T5966] gspca_zc3xx: reg_w_i err -110 [ 1243.470134][ T5966] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1243.680143][ T5966] usb 1-1: USB disconnect, device number 104 [ 1243.690803][ T5966] usb 1-1: NFC: intf ffff8880797b7000 [ 1243.755140][ T30] audit: type=1400 audit(1766141132.277:1741): avc: denied { setopt } for pid=22012 comm="syz.0.4177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1243.837854][T19754] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1244.182626][T19754] usb 2-1: device descriptor read/8, error -71 [ 1244.712200][ T30] audit: type=1400 audit(1766141133.227:1742): avc: denied { write } for pid=22008 comm="syz.6.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1245.013792][ T978] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1245.081702][T22030] syzkaller0: entered promiscuous mode [ 1245.102371][T22030] syzkaller0: entered allmulticast mode [ 1245.171941][T17786] usb 4-1: USB disconnect, device number 13 [ 1245.201705][ T978] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1245.241051][ T978] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1245.280310][ T978] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1245.329619][ T978] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1245.437913][ T978] usb 7-1: Product: syz [ 1245.474426][ T978] usb 7-1: Manufacturer: syz [ 1245.485067][ T978] usb 7-1: SerialNumber: syz [ 1245.509788][ T978] usb 7-1: config 0 descriptor?? [ 1245.588635][ T978] usb 7-1: selecting invalid altsetting 0 [ 1245.606705][T22038] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=22038 comm=syz.3.4183 [ 1245.761060][T22023] comedi comedi3: reset error (fatal) [ 1245.819139][T17786] usb 7-1: USB disconnect, device number 33 [ 1246.019390][T22044] random: crng reseeded on system resumption [ 1246.303728][T17786] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1246.816048][T17786] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1246.825609][T17786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.834151][T17786] usb 1-1: Product: syz [ 1246.840562][T17786] usb 1-1: Manufacturer: syz [ 1246.849749][T17786] usb 1-1: SerialNumber: syz [ 1246.863045][T17786] usb 1-1: config 0 descriptor?? [ 1246.875648][T17786] go7007 1-1:0.0: Sensoray 2250 found [ 1246.882601][T17786] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1247.125104][T17786] usb 1-1: USB disconnect, device number 105 [ 1247.244966][T22059] fuse: Unknown parameter 'obj_type' [ 1247.265393][T22059] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4192'. [ 1247.406951][T22062] syzkaller0: entered promiscuous mode [ 1247.412539][T22062] syzkaller0: entered allmulticast mode [ 1247.463754][ T5866] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1247.713912][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 1247.788093][ T5866] usb 4-1: config 35 contains an unexpected descriptor of type 0x2, skipping [ 1247.870426][ T5866] usb 4-1: config 35 has an invalid interface number: 59 but max is 3 [ 1247.948785][ T5866] usb 4-1: config 35 has an invalid interface number: 20 but max is 3 [ 1248.029915][ T5866] usb 4-1: config 35 has an invalid interface number: 37 but max is 3 [ 1248.067562][ T5866] usb 4-1: config 35 has no interface number 0 [ 1248.086837][T22068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1248.094599][ T5866] usb 4-1: config 35 has no interface number 1 [ 1248.107025][ T5866] usb 4-1: config 35 has no interface number 2 [ 1248.143398][ T5866] usb 4-1: config 35 interface 3 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1248.176585][ T5866] usb 4-1: config 35 interface 3 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1248.210091][ T5866] usb 4-1: config 35 interface 3 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1248.284770][ T5866] usb 4-1: config 35 interface 3 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1248.345090][ T5866] usb 4-1: config 35 interface 3 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1248.405325][ T5866] usb 4-1: config 35 interface 3 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1248.445134][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1248.479221][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has an endpoint descriptor with address 0x7E, changing to 0xE [ 1248.540301][ T5866] usb 4-1: config 35 interface 59 altsetting 3 endpoint 0xE has invalid maxpacket 17049, setting to 1024 [ 1248.581757][ T5866] usb 4-1: config 35 interface 59 altsetting 3 bulk endpoint 0xE has invalid maxpacket 1024 [ 1248.609374][T22076] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1248.643247][ T5866] usb 4-1: config 35 interface 59 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1248.683145][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1248.742441][ T5866] usb 4-1: config 35 interface 59 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1248.790767][ T5866] usb 4-1: config 35 interface 59 altsetting 3 endpoint 0xF has an invalid bInterval 73, changing to 10 [ 1248.956582][ T5866] usb 4-1: config 35 interface 59 altsetting 3 endpoint 0xF has invalid maxpacket 1536, setting to 1024 [ 1249.151026][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1249.290781][T22080] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1249.305976][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1249.435748][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1249.524800][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1249.602775][ T5866] usb 4-1: config 35 interface 59 altsetting 3 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1249.653742][ T5866] usb 4-1: config 35 interface 20 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 1249.741002][T22083] kvm: pic: non byte write [ 1249.745578][ T5866] usb 4-1: config 35 interface 20 altsetting 47 has a duplicate endpoint with address 0x8, skipping [ 1249.787519][ T5866] usb 4-1: config 35 interface 37 altsetting 51 has a duplicate endpoint with address 0xB, skipping [ 1249.858220][ T5866] usb 4-1: config 35 interface 37 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 1249.910616][ T5866] usb 4-1: config 35 interface 37 altsetting 51 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 1249.987085][T22090] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=22090 comm=syz.6.4201 [ 1250.321821][ T5866] usb 4-1: config 35 interface 37 altsetting 51 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1250.384530][ T5866] usb 4-1: config 35 interface 37 altsetting 51 has a duplicate endpoint with address 0x5, skipping [ 1250.458047][ T5866] usb 4-1: config 35 interface 37 altsetting 51 has an invalid descriptor for endpoint zero, skipping [ 1250.507541][ T5866] usb 4-1: config 35 interface 37 altsetting 51 has a duplicate endpoint with address 0x8, skipping [ 1250.564950][ T5866] usb 4-1: config 35 interface 37 altsetting 51 has a duplicate endpoint with address 0x2, skipping [ 1250.614557][ T5866] usb 4-1: config 35 interface 37 altsetting 51 has a duplicate endpoint with address 0x2, skipping [ 1250.694156][ T5866] usb 4-1: config 35 interface 3 has no altsetting 0 [ 1250.769390][ T5866] usb 4-1: config 35 interface 59 has no altsetting 0 [ 1250.784686][T22087] comedi comedi3: reset error (fatal) [ 1250.793047][ T5866] usb 4-1: config 35 interface 20 has no altsetting 0 [ 1250.833919][ T5866] usb 4-1: config 35 interface 37 has no altsetting 0 [ 1250.896662][ T5866] usb 4-1: string descriptor 0 read error: -71 [ 1250.905214][ T5866] usb 4-1: Dual-Role OTG device on HNP port [ 1250.934547][ T5866] usb 4-1: can't set HNP mode: -71 [ 1250.991012][T22106] syzkaller0: entered promiscuous mode [ 1251.005800][T22106] syzkaller0: entered allmulticast mode [ 1251.296942][ T5866] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1251.304899][T19754] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1251.503737][T19754] usb 6-1: Using ep0 maxpacket: 16 [ 1251.547627][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 1251.844612][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.865803][ T5866] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1251.882974][T19754] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1251.893200][T19754] usb 6-1: config 0 has no interface number 0 [ 1251.899569][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.908345][T19754] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 1251.947720][ T5866] usb 4-1: config 0 descriptor?? [ 1251.953963][T19754] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1251.982384][T19754] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.995241][T19754] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1252.004524][T19754] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1252.012806][T19754] usb 6-1: Product: syz [ 1252.017241][T19754] usb 6-1: SerialNumber: syz [ 1252.057773][T19754] usb 6-1: config 0 descriptor?? [ 1252.070892][T19754] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1252.156815][ T30] audit: type=1400 audit(1766141140.677:1743): avc: denied { unmount } for pid=17716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1252.409159][ T978] usb 6-1: USB disconnect, device number 81 [ 1252.494177][T18294] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1252.578188][T22130] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1252.584728][T22130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1252.631933][T22130] vhci_hcd vhci_hcd.0: Device attached [ 1252.673849][T18294] usb 2-1: Using ep0 maxpacket: 32 [ 1252.724759][T18294] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1252.803079][T18294] usb 2-1: config 0 has no interface number 0 [ 1252.845887][T18294] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1252.891856][T18294] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1252.926744][T18294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.943877][ T978] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1252.966285][T18294] usb 2-1: Product: syz [ 1252.997461][T18294] usb 2-1: Manufacturer: syz [ 1253.027474][T18294] usb 2-1: SerialNumber: syz [ 1253.100736][T18294] usb 2-1: config 0 descriptor?? [ 1253.157958][T22125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1253.465823][T22125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1253.609299][T22132] vhci_hcd: connection reset by peer [ 1253.887063][T16643] vhci_hcd vhci_hcd.0: stop threads [ 1253.927344][T16643] vhci_hcd vhci_hcd.0: release socket [ 1253.939724][T16643] vhci_hcd vhci_hcd.0: disconnect device [ 1253.990933][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 1253.999536][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1254.388303][T19754] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1255.347162][ T5866] usb 4-1: USB disconnect, device number 15 [ 1255.645500][T22155] syzkaller0: entered promiscuous mode [ 1255.651246][T22155] syzkaller0: entered allmulticast mode [ 1255.681240][T22157] tmpfs: Unknown parameter 'usrquota' [ 1255.696082][T19754] usb 7-1: Using ep0 maxpacket: 32 [ 1255.703414][T19754] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1255.714049][T19754] usb 7-1: config 0 has no interface number 0 [ 1255.721312][T19754] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1255.724167][T22157] ucma_write: process 1938 (syz.5.4220) changed security contexts after opening file descriptor, this is not allowed. [ 1255.730910][T19754] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1255.753002][T19754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.769767][T19754] usb 7-1: Product: syz [ 1255.774164][T19754] usb 7-1: Manufacturer: syz [ 1255.785572][T19754] usb 7-1: SerialNumber: syz [ 1255.848342][T19754] usb 7-1: config 0 descriptor?? [ 1255.873330][T19754] smsc75xx v1.0.0 [ 1255.906083][T22162] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=22162 comm=syz.0.4221 [ 1256.014466][T22125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.042599][T22125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.683157][T19754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1256.716329][T19754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1257.558360][T22170] comedi comedi3: reset error (fatal) [ 1257.582333][T18294] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1257.654058][T18294] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1257.704015][T22179] FAULT_INJECTION: forcing a failure. [ 1257.704015][T22179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.722311][T22179] CPU: 1 UID: 0 PID: 22179 Comm: syz.1.4227 Tainted: G L syzkaller #0 PREEMPT(full) [ 1257.722341][T22179] Tainted: [L]=SOFTLOCKUP [ 1257.722347][T22179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1257.722357][T22179] Call Trace: [ 1257.722363][T22179] [ 1257.722369][T22179] dump_stack_lvl+0x16c/0x1f0 [ 1257.722395][T22179] should_fail_ex+0x512/0x640 [ 1257.722422][T22179] _copy_to_user+0x32/0xd0 [ 1257.722444][T22179] simple_read_from_buffer+0xcb/0x170 [ 1257.722467][T22179] proc_fail_nth_read+0x197/0x240 [ 1257.722486][T22179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1257.722503][T22179] ? rw_verify_area+0xcf/0x6c0 [ 1257.722520][T22179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1257.722536][T22179] vfs_read+0x1e4/0xcf0 [ 1257.722550][T18294] asix 2-1:0.188: probe with driver asix failed with error -71 [ 1257.722556][T22179] ? __pfx___mutex_lock+0x10/0x10 [ 1257.722580][T22179] ? __pfx_vfs_read+0x10/0x10 [ 1257.722603][T22179] ? __fget_files+0x20e/0x3c0 [ 1257.722628][T22179] ksys_read+0x12a/0x250 [ 1257.722645][T22179] ? __pfx_ksys_read+0x10/0x10 [ 1257.722669][T22179] do_syscall_64+0xcd/0xf80 [ 1257.722690][T22179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.722705][T22179] RIP: 0033:0x7f8efd58e15c [ 1257.722718][T22179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1257.722732][T22179] RSP: 002b:00007f8efe423030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1257.722746][T22179] RAX: ffffffffffffffda RBX: 00007f8efd7e5fa0 RCX: 00007f8efd58e15c [ 1257.722757][T22179] RDX: 000000000000000f RSI: 00007f8efe4230a0 RDI: 0000000000000004 [ 1257.722766][T22179] RBP: 00007f8efe423090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.722775][T22179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.722784][T22179] R13: 00007f8efd7e6038 R14: 00007f8efd7e5fa0 R15: 00007fff4db36e48 [ 1257.722806][T22179] [ 1257.909349][ T30] audit: type=1400 audit(1766141146.427:1744): avc: denied { mounton } for pid=22184 comm="syz.1.4230" path="/221/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1257.960178][T22185] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1258.085381][T22139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.101081][T22139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.107341][T18294] usb 2-1: USB disconnect, device number 116 [ 1258.165150][T19754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1258.183574][T19754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 1258.201594][T19754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1258.211372][T18331] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1258.232016][T19754] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1258.304009][ T978] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1258.339049][T19754] usb 7-1: USB disconnect, device number 34 [ 1258.375879][T18331] usb 4-1: Using ep0 maxpacket: 16 [ 1258.387109][T18331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1258.397636][T18331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 1258.414630][T18331] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1258.490638][T18331] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.40 [ 1258.492270][T22200] syzkaller0: entered promiscuous mode [ 1258.510558][T22200] syzkaller0: entered allmulticast mode [ 1258.537622][T18331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.561340][T18331] usb 4-1: Product: syz [ 1258.573081][T18331] usb 4-1: Manufacturer: syz [ 1258.579407][T18331] usb 4-1: SerialNumber: syz [ 1259.313775][ T5866] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1259.733739][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 1259.750445][ T5866] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1259.758934][ T5866] usb 7-1: config 0 has no interface number 0 [ 1259.765418][ T5866] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1259.811469][ T5866] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1259.823043][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.847622][ T5866] usb 7-1: Product: syz [ 1259.852251][ T5866] usb 7-1: Manufacturer: syz [ 1259.859170][ T5866] usb 7-1: SerialNumber: syz [ 1260.091072][T17689] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1260.202361][T22182] netlink: 'syz.3.4229': attribute type 2 has an invalid length. [ 1260.210891][ T5866] usb 7-1: config 0 descriptor?? [ 1260.226005][T22207] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1260.259528][T18331] hid_parser_main: 2 callbacks suppressed [ 1260.259541][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.281089][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.306330][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.320120][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.337661][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.354317][T17689] usb 6-1: Using ep0 maxpacket: 16 [ 1260.360599][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.361741][T17689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.408852][T17689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.410453][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.430301][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.430387][T17689] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1260.447627][T17689] usb 6-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1260.455618][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.491326][T17689] usb 6-1: Manufacturer: syz [ 1260.494142][T18331] elecom 0003:056E:011C.0031: unknown main item tag 0x0 [ 1260.508098][T17689] usb 6-1: config 0 descriptor?? [ 1260.588102][T18331] elecom 0003:056E:011C.0031: hidraw0: USB HID v80.01 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 1260.634474][T18331] usb 4-1: USB disconnect, device number 16 [ 1260.703819][ T978] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1260.813135][T22228] fido_id[22228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1260.874039][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 1260.905611][ T978] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1260.917607][ T978] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1260.940387][T17689] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1260.951654][ T978] usb 2-1: Product: syz [ 1260.955886][ T978] usb 2-1: Manufacturer: syz [ 1260.960910][ T978] usb 2-1: SerialNumber: syz [ 1260.971181][ T978] usb 2-1: config 0 descriptor?? [ 1262.322712][T22207] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1262.536102][ T5866] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1262.546769][ T5866] asix 7-1:0.188: probe with driver asix failed with error -32 [ 1262.556609][T17689] usb 2-1: USB disconnect, device number 117 [ 1262.863798][T17030] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1262.905310][T22255] sch_fq: defrate 4294967295 ignored. [ 1263.103805][T17030] usb 4-1: device descriptor read/64, error -71 [ 1263.114814][T18294] usb 6-1: USB disconnect, device number 82 [ 1263.159174][T22257] syzkaller0: entered promiscuous mode [ 1263.174133][T22257] syzkaller0: entered allmulticast mode [ 1263.367159][T17030] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1263.513777][T17030] usb 4-1: device descriptor read/64, error -71 [ 1263.623428][T18294] usb 7-1: USB disconnect, device number 35 [ 1263.631068][T17030] usb usb4-port1: attempt power cycle [ 1264.457349][T22271] 9p: Bad value for 'wfdno' [ 1264.572521][ T30] audit: type=1400 audit(1766141153.087:1745): avc: denied { search } for pid=22274 comm="syz.6.4254" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1264.633843][T17030] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1264.663012][ T30] audit: type=1400 audit(1766141153.087:1746): avc: denied { search } for pid=22274 comm="syz.6.4254" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1264.696994][T17030] usb 4-1: device descriptor read/8, error -71 [ 1264.823703][T22281] bond_slave_0: entered promiscuous mode [ 1264.829771][T22281] bond_slave_1: entered promiscuous mode [ 1264.835564][T22281] team_slave_0: entered promiscuous mode [ 1264.841477][T22281] team_slave_1: entered promiscuous mode [ 1264.855801][T22281] macvtap1: entered promiscuous mode [ 1264.862369][T22281] bond0: entered promiscuous mode [ 1264.900508][T22281] team0: entered promiscuous mode [ 1264.919131][T22281] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1264.943754][T17030] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1265.035176][T22281] bond0: left promiscuous mode [ 1265.054401][T17030] usb 4-1: device descriptor read/8, error -71 [ 1265.061699][T22281] team0: left promiscuous mode [ 1265.544351][T22281] bond_slave_0: left promiscuous mode [ 1265.549795][T22281] bond_slave_1: left promiscuous mode [ 1265.555385][T22281] team_slave_0: left promiscuous mode [ 1265.560803][T22281] team_slave_1: left promiscuous mode [ 1265.674494][T17030] usb usb4-port1: unable to enumerate USB device [ 1266.037855][ T30] audit: type=1400 audit(1766141154.557:1747): avc: denied { write } for pid=22298 comm="syz.0.4261" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1266.750007][T22305] kAFS: unable to lookup cell '(,' [ 1266.819275][T22307] syzkaller0: entered promiscuous mode [ 1266.829570][T22307] syzkaller0: entered allmulticast mode [ 1266.919515][T22311] futex_wake_op: syz.3.4264 tries to shift op by -1; fix this program [ 1268.505012][ T5929] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1268.524115][ T5866] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1268.733674][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 1268.740351][ T5866] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1268.759274][ T5929] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1268.781808][ T5866] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1268.793949][ T5929] usb 6-1: config 0 has no interface number 0 [ 1268.819569][ T5929] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1268.829835][ T5866] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1269.319045][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.332602][T22343] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1269.340234][ T5929] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1269.350756][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.371039][ T5866] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.378553][ T5929] usb 6-1: Product: syz [ 1269.391809][ T5929] usb 6-1: Manufacturer: syz [ 1269.398668][ T5929] usb 6-1: SerialNumber: syz [ 1269.460612][ T5929] usb 6-1: config 0 descriptor?? [ 1269.478716][T22342] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1269.623088][T22343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.678504][T17786] usb 7-1: USB disconnect, device number 36 [ 1269.706138][T22342] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1269.900301][T22364] syzkaller0: entered promiscuous mode [ 1269.907370][T22364] syzkaller0: entered allmulticast mode [ 1270.476566][ T5929] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1270.560176][ T5929] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1270.658701][T22376] futex_wake_op: syz.6.4283 tries to shift op by -1; fix this program [ 1271.583727][ T5929] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1271.688704][T22393] set match dimension is over the limit! [ 1271.755078][ T5929] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1271.789812][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.832838][ T5929] usb 2-1: config 0 descriptor?? [ 1271.875473][ T5929] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1272.084165][ T5929] gspca_spca508: reg_read err -32 [ 1272.101613][T18331] usb 6-1: USB disconnect, device number 83 [ 1272.112739][ T5929] gspca_spca508: reg_read err -32 [ 1272.144763][ T5929] gspca_spca508: reg_read err -32 [ 1272.163043][ T5929] gspca_spca508: reg_read err -32 [ 1272.180813][ T5929] gspca_spca508: reg_read err -32 [ 1272.412697][ T5929] gspca_spca508: reg write: error -71 [ 1272.440226][ T5929] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1272.468349][T22401] netlink: 'syz.5.4290': attribute type 1 has an invalid length. [ 1272.476491][T22401] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4290'. [ 1272.552206][ T5929] usb 2-1: USB disconnect, device number 118 [ 1272.593545][T22403] syzkaller0: entered promiscuous mode [ 1272.612075][T22403] syzkaller0: entered allmulticast mode [ 1272.912677][T22406] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=22406 comm=syz.0.4292 [ 1273.671096][ T30] audit: type=1400 audit(1766141162.177:1748): avc: denied { create } for pid=22419 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1273.948823][T22424] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=22424 comm=syz.5.4297 [ 1275.754282][T22443] FAULT_INJECTION: forcing a failure. [ 1275.754282][T22443] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.815914][T22443] CPU: 1 UID: 0 PID: 22443 Comm: syz.0.4303 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.815946][T22443] Tainted: [L]=SOFTLOCKUP [ 1275.815952][T22443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1275.815959][T22443] Call Trace: [ 1275.815963][T22443] [ 1275.815967][T22443] dump_stack_lvl+0x16c/0x1f0 [ 1275.815984][T22443] should_fail_ex+0x512/0x640 [ 1275.816000][T22443] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1275.816013][T22443] should_failslab+0xc2/0x120 [ 1275.816027][T22443] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1275.816038][T22443] ? __alloc_skb+0x156/0x410 [ 1275.816056][T22443] ? __alloc_skb+0x156/0x410 [ 1275.816071][T22443] __alloc_skb+0x156/0x410 [ 1275.816086][T22443] ? __alloc_skb+0x35d/0x410 [ 1275.816101][T22443] ? __pfx___alloc_skb+0x10/0x10 [ 1275.816117][T22443] ? netlink_autobind.isra.0+0x158/0x370 [ 1275.816133][T22443] netlink_alloc_large_skb+0x69/0x140 [ 1275.816147][T22443] netlink_sendmsg+0x698/0xdd0 [ 1275.816162][T22443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.816180][T22443] ____sys_sendmsg+0xa5d/0xc30 [ 1275.816194][T22443] ? copy_msghdr_from_user+0x10a/0x160 [ 1275.816204][T22443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.816224][T22443] ___sys_sendmsg+0x134/0x1d0 [ 1275.816235][T22443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.816263][T22443] __sys_sendmsg+0x16d/0x220 [ 1275.816273][T22443] ? __pfx___sys_sendmsg+0x10/0x10 [ 1275.816292][T22443] do_syscall_64+0xcd/0xf80 [ 1275.816307][T22443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.816318][T22443] RIP: 0033:0x7f0bd5b8f749 [ 1275.816326][T22443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1275.816337][T22443] RSP: 002b:00007f0bd69ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.816347][T22443] RAX: ffffffffffffffda RBX: 00007f0bd5de5fa0 RCX: 00007f0bd5b8f749 [ 1275.816354][T22443] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1275.816361][T22443] RBP: 00007f0bd69ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.816366][T22443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.816372][T22443] R13: 00007f0bd5de6038 R14: 00007f0bd5de5fa0 R15: 00007fff01148e18 [ 1275.816386][T22443] [ 1276.503768][ T5929] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1276.657398][ T5929] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1276.692922][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.750429][ T5929] usb 1-1: config 0 descriptor?? [ 1276.794184][ T5929] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1277.667958][ T5929] gspca_zc3xx: reg_w_i err -110 [ 1278.008596][ T5929] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1278.116606][T17786] usb 1-1: USB disconnect, device number 106 [ 1279.323734][ T978] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1279.475226][ T978] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1279.502009][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.544135][ T978] usb 1-1: config 0 descriptor?? [ 1279.567733][ T978] pwc: Creative Labs Webcam Pro Ex detected. [ 1281.285294][T22493] SELinux: Context system_u:object_r:mail_spool_t:s0 is not valid (left unmapped). [ 1281.309365][ T30] audit: type=1400 audit(1766141169.827:1749): avc: denied { relabelto } for pid=22492 comm="syz.1.4314" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mail_spool_t:s0" [ 1281.377199][ T30] audit: type=1400 audit(1766141169.857:1750): avc: denied { associate } for pid=22492 comm="syz.1.4314" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mail_spool_t:s0" [ 1281.474936][ T30] audit: type=1400 audit(1766141169.997:1751): avc: denied { listen } for pid=22492 comm="syz.1.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1281.518276][ T30] audit: type=1400 audit(1766141169.997:1752): avc: denied { accept } for pid=22492 comm="syz.1.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1281.565892][ T30] audit: type=1400 audit(1766141170.037:1753): avc: denied { execute } for pid=22492 comm="syz.1.4314" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=75229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1281.943688][ T5929] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1282.004445][ T978] pwc: Failed to set LED on/off time (-71) [ 1282.023702][ T978] pwc: send_video_command error -71 [ 1282.028938][ T978] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1282.063754][ T978] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1282.096575][ T978] usb 1-1: USB disconnect, device number 107 [ 1282.114494][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1282.163048][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.186192][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1282.203440][ T5929] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1282.214703][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.279618][ T5929] usb 6-1: config 0 descriptor?? [ 1282.407210][T22506] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4635 sclass=netlink_xfrm_socket pid=22506 comm=syz.0.4317 [ 1282.782022][ T5929] hid_parser_main: 1793 callbacks suppressed [ 1282.782042][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1282.809031][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1282.821362][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1282.832294][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1283.357795][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1283.365971][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1283.374337][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1283.404088][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1283.413072][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1283.439396][ T5929] hid-multitouch 0003:0457:07DA.0033: unknown main item tag 0x0 [ 1283.508240][ T5929] hid-multitouch 0003:0457:07DA.0033: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 1283.834561][ T5929] usb 6-1: USB disconnect, device number 84 [ 1283.917174][T22517] fido_id[22517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1284.013750][ T5866] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1284.489686][ T30] audit: type=1400 audit(1766141172.927:1754): avc: denied { ioctl } for pid=22524 comm="syz.5.4323" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1284.676041][ T5866] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1284.795263][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.241099][ T5866] usb 2-1: config 0 descriptor?? [ 1285.266619][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1285.536360][T12984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1285.549496][T12984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1285.563423][T12984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1285.575694][T12984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1285.583461][T12984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1285.717162][T22533] lo speed is unknown, defaulting to 1000 [ 1285.747174][T22542] overlayfs: failed to resolve './file0/file0': -2 [ 1286.256261][ T5866] gspca_zc3xx: reg_w_i err -110 [ 1286.267739][ T5866] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1287.183748][T17689] usb 2-1: USB disconnect, device number 119 [ 1287.296849][T15871] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.586054][T15871] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.669651][T12984] Bluetooth: hci2: command tx timeout [ 1288.089256][T17689] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1288.179378][T15871] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.308526][T17689] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1288.349143][T17689] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1288.460500][T17689] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1288.472030][T17689] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1288.484401][T17689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.511865][T17689] usb 2-1: config 0 descriptor?? [ 1288.980791][T22555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1289.010835][T22533] chnl_net:caif_netlink_parms(): no params data found [ 1289.294870][T15871] bridge0: port 3(batadv0) entered disabled state [ 1289.309499][T15871] bridge_slave_1: left allmulticast mode [ 1289.317662][T15871] bridge_slave_1: left promiscuous mode [ 1289.323345][T15871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.332418][T15871] bridge_slave_0: left promiscuous mode [ 1289.338367][T15871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.515087][T17689] logitech 0003:046D:C24F.0034: unbalanced collection at end of report description [ 1289.544887][T17689] logitech 0003:046D:C24F.0034: parse failed [ 1290.033710][T17689] logitech 0003:046D:C24F.0034: probe with driver logitech failed with error -22 [ 1290.044875][T12984] Bluetooth: hci2: command tx timeout [ 1290.863716][ T5886] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1291.024373][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 1291.049758][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.383370][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.405532][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1291.435008][ T5886] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1291.465715][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.537684][ T5886] usb 4-1: config 0 descriptor?? [ 1291.841123][T17030] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1291.871228][T15871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.882749][T15871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.893230][T15871] bond0 (unregistering): Released all slaves [ 1291.905636][T15871] bond1 (unregistering): Released all slaves [ 1291.980666][ T5886] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0035/input/input94 [ 1292.041775][T17030] usb 7-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1292.051526][T15871] bond2 (unregistering): Released all slaves [ 1292.057592][T17030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.076132][ T5886] microsoft 0003:045E:07DA.0035: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1292.090731][T17030] usb 7-1: config 0 descriptor?? [ 1292.101752][T15871] bond3 (unregistering): Released all slaves [ 1292.124063][T12984] Bluetooth: hci2: command tx timeout [ 1292.130419][T17030] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1292.159937][T15871] bond4 (unregistering): Released all slaves [ 1292.179029][T15871] bond5 (unregistering): Released all slaves [ 1292.200145][T22533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.211938][T22533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.219415][T22533] bridge_slave_0: entered allmulticast mode [ 1292.227021][T22533] bridge_slave_0: entered promiscuous mode [ 1292.319519][ T5886] usb 4-1: USB disconnect, device number 21 [ 1292.325712][T15871] tipc: Left network mode [ 1292.326286][T22533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.376088][T22533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.394348][T22533] bridge_slave_1: entered allmulticast mode [ 1292.425684][T22533] bridge_slave_1: entered promiscuous mode [ 1292.556519][ T5866] usb 2-1: USB disconnect, device number 120 [ 1292.674091][T17030] gspca_zc3xx: reg_w_i err -110 [ 1292.687776][T17030] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1292.752084][T22533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.308267][T12984] Bluetooth: hci2: command tx timeout [ 1294.693281][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4343'. [ 1295.063373][ T44] usb 7-1: USB disconnect, device number 37 [ 1295.149603][T22533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.166554][T22634] futex_wake_op: syz.1.4341 tries to shift op by -1; fix this program [ 1295.558545][T22619] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1296.108431][ T30] audit: type=1400 audit(1766141184.627:1755): avc: denied { getopt } for pid=22641 comm="syz.1.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1296.274405][T22533] team0: Port device team_slave_0 added [ 1296.375089][T22533] team0: Port device team_slave_1 added [ 1296.580935][T22533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.613424][T22533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.705836][T22533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.774667][T15871] hsr_slave_0: left promiscuous mode [ 1296.786318][T15871] hsr_slave_1: left promiscuous mode [ 1296.814134][T15871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.837966][T15871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.861406][T15871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.879435][T15871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.921979][T15871] veth1_macvtap: left promiscuous mode [ 1296.939033][T15871] veth0_macvtap: left promiscuous mode [ 1296.953877][T15871] veth1_vlan: left promiscuous mode [ 1296.963453][T15871] veth0_vlan: left promiscuous mode [ 1298.167841][T22675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1298.881412][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4355'. [ 1299.734513][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.877214][T22693] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1299.930210][T22533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.944201][T22533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.984696][T22533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.999754][T22681] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4356'. [ 1300.088061][T22693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4358'. [ 1300.120554][T22695] futex_wake_op: syz.3.4360 tries to shift op by -1; fix this program [ 1300.655731][T22533] hsr_slave_0: entered promiscuous mode [ 1301.272075][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1301.281123][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1301.745433][ T30] audit: type=1800 audit(1766141189.887:1756): pid=22711 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4364" name="bus" dev="overlay" ino=1214 res=0 errno=0 [ 1301.783992][T22533] hsr_slave_1: entered promiscuous mode [ 1301.790171][T22533] debugfs: 'hsr0' already exists in 'hsr' [ 1301.822381][T22533] Cannot create hsr debugfs directory [ 1302.334366][T22716] syzkaller0: entered promiscuous mode [ 1302.340976][T22716] syzkaller0: entered allmulticast mode [ 1302.473668][T22722] tipc: Enabling of bearer rejected, failed to enable media [ 1302.940686][T15871] IPVS: stop unused estimator thread 0... [ 1303.344243][T17689] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1303.586784][T17689] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1303.603326][T17689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.624001][T17689] usb 2-1: config 0 descriptor?? [ 1304.137122][T17689] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1304.452936][T22533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1304.552909][T22533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1304.587683][T22533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1304.715824][T17689] gspca_zc3xx: reg_w_i err -110 [ 1304.724039][T22533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1304.731434][T17689] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1305.029706][T22533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.045327][T22533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.067992][T22533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1305.079394][T22533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1305.101576][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.108677][ T6796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.202521][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.209709][ T6796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.533426][T22533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.186325][T22533] veth0_vlan: entered promiscuous mode [ 1306.215589][T22533] veth1_vlan: entered promiscuous mode [ 1306.234027][ T5929] usb 2-1: USB disconnect, device number 121 [ 1306.294240][T22533] veth0_macvtap: entered promiscuous mode [ 1306.317031][T22533] veth1_macvtap: entered promiscuous mode [ 1306.419949][T22533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.444350][T22533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.462739][ T1159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.971949][ T6796] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.983181][ T6796] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.992495][ T6796] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.310445][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.322059][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.342863][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.361717][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.416651][T22820] futex_wake_op: syz.6.4378 tries to shift op by -1; fix this program [ 1308.868195][T22845] macvtap1: entered promiscuous mode [ 1308.888056][T22845] macvtap1: entered allmulticast mode [ 1308.910420][T22845] dummy0: entered promiscuous mode [ 1308.976678][ T30] audit: type=1400 audit(1766141197.497:1757): avc: denied { accept } for pid=22840 comm="syz.6.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1309.006324][T22845] dummy0: entered allmulticast mode [ 1309.038225][T22845] team0: Device macvtap1 failed to register rx_handler [ 1309.058102][T22845] dummy0: left allmulticast mode [ 1309.063289][T22845] dummy0: left promiscuous mode [ 1309.838107][ T30] audit: type=1400 audit(1766141198.357:1758): avc: denied { remove_name } for pid=22866 comm="syz.1.4389" name="file0" dev="cgroup2" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mail_spool_t:s0" [ 1310.695195][ T44] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1310.873796][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 1310.882774][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.897810][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.933219][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1310.953730][ T5929] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1310.995227][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1311.012756][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.046955][ T44] usb 2-1: config 0 descriptor?? [ 1311.069532][T22904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1311.080984][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1311.136476][ T5929] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1311.153663][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.208412][ T5929] usb 6-1: config 0 descriptor?? [ 1311.255397][ T5929] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1311.472555][T22886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.817192][ T5929] gspca_zc3xx: reg_w_i err -110 [ 1311.822149][ T5929] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1311.855163][T22886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.920875][T22886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.959132][T22886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.991438][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 1312.008791][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1312.058002][ T44] usb 2-1: USB disconnect, device number 122 [ 1312.553675][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1312.939945][T22930] netlink: 'syz.1.4408': attribute type 4 has an invalid length. [ 1312.947993][T22930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1312.957470][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1312.971363][ T44] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1312.980749][ T44] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1312.989713][ T44] usb 4-1: Product: syz [ 1312.994325][ T44] usb 4-1: Manufacturer: syz [ 1312.999576][ T44] usb 4-1: SerialNumber: syz [ 1313.026746][ T44] usb 4-1: config 0 descriptor?? [ 1314.363930][ T44] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1315.048866][ T5966] usb 6-1: USB disconnect, device number 85 [ 1315.277980][ T44] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1315.299653][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.320679][ T44] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1315.340075][ T44] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1315.355868][ T44] usb 7-1: Manufacturer: syz [ 1315.406858][ T44] usb 7-1: config 0 descriptor?? [ 1315.437594][T22958] random: crng reseeded on system resumption [ 1315.565311][ T44] rc_core: IR keymap rc-hauppauge not found [ 1315.578078][ T44] Registered IR keymap rc-empty [ 1315.593971][ T44] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1315.629435][ T44] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input95 [ 1315.648099][ T5966] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1315.689425][T17689] usb 4-1: USB disconnect, device number 22 [ 1315.704440][ T44] usb 7-1: USB disconnect, device number 38 [ 1315.713914][T19038] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1315.836147][ T5966] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1315.848983][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.864673][ T5966] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1315.873917][ T5966] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1315.888147][ T5966] usb 6-1: Manufacturer: syz [ 1315.911589][T19038] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1315.922787][T19038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.925892][ T5966] usb 6-1: config 0 descriptor?? [ 1315.944082][T19038] usb 1-1: Product: syz [ 1315.949466][T19038] usb 1-1: Manufacturer: syz [ 1315.954627][T19038] usb 1-1: SerialNumber: syz [ 1315.967891][T19038] usb 1-1: config 0 descriptor?? [ 1315.980507][T19038] go7007 1-1:0.0: Sensoray 2250 found [ 1315.991188][T19038] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1316.023811][ T5966] rc_core: IR keymap rc-hauppauge not found [ 1316.030936][ T5966] Registered IR keymap rc-empty [ 1316.059067][ T5966] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1316.087196][ T5966] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input96 [ 1316.308088][ T44] usb 1-1: USB disconnect, device number 108 [ 1318.973722][ T44] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1319.176019][ T44] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1319.203695][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.267073][ T5886] usb 6-1: USB disconnect, device number 86 [ 1319.286540][ T44] usb 1-1: config 0 descriptor?? [ 1319.318636][ T44] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1319.895683][ T44] gspca_zc3xx: reg_w_i err -110 [ 1319.900642][ T44] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1319.972088][T22999] fuse: Bad value for 'user_id' [ 1319.984268][T22999] fuse: Bad value for 'user_id' [ 1320.023693][ T5886] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1320.203836][ T5886] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1320.229988][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.256193][ T5886] usb 6-1: Product: syz [ 1320.269668][ T5886] usb 6-1: Manufacturer: syz [ 1320.285587][ T5886] usb 6-1: SerialNumber: syz [ 1320.376506][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1320.385576][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1321.081824][T23019] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1321.640926][T23016] openvswitch: netlink: Actions may not be safe on all matching packets [ 1321.688669][ T5886] rtl8150 6-1:1.0: couldn't reset the device [ 1321.707517][ T5886] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1321.800711][T18294] usb 1-1: USB disconnect, device number 109 [ 1323.053690][T23036] input: syz1 as /devices/virtual/input/input97 [ 1323.088918][ T30] audit: type=1400 audit(1766141211.607:1759): avc: denied { write } for pid=23035 comm="syz.0.4432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1323.113782][T18294] usb 6-1: USB disconnect, device number 87 [ 1323.322899][T23043] futex_wake_op: syz.5.4434 tries to shift op by -1; fix this program [ 1324.046118][T23053] netlink: 'syz.3.4437': attribute type 1 has an invalid length. [ 1324.054042][T23053] netlink: 'syz.3.4437': attribute type 2 has an invalid length. [ 1324.067477][T23053] netlink: 'syz.3.4437': attribute type 1 has an invalid length. [ 1324.077381][T23053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4437'. [ 1324.340500][T23059] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1324.746068][T23060] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1325.133906][T19038] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1325.583291][ T30] audit: type=1400 audit(1766141213.797:1760): avc: denied { shutdown } for pid=23065 comm="syz.0.4442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1325.681545][T23071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.688670][T23071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.696245][T23071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.703335][T23071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.860164][T23068] ceph: No mds server is up or the cluster is laggy [ 1325.867616][T18294] libceph: connect (1)[c::]:6789 error -101 [ 1325.999654][T19038] usb 7-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1326.008883][T23071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1326.011659][T18294] libceph: mon0 (1)[c::]:6789 connect error [ 1326.038080][T19038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.081036][T19038] usb 7-1: config 0 descriptor?? [ 1326.112343][T19038] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1326.277436][ T30] audit: type=1400 audit(1766141214.797:1761): avc: denied { block_suspend } for pid=23081 comm="syz.5.4446" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1326.313209][T23082] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1326.426074][ T30] audit: type=1800 audit(1766141214.947:1762): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4448" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1326.763539][T19038] gspca_zc3xx: reg_w_i err -110 [ 1326.778660][T19038] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1327.728171][T23106] input: syz1 as /devices/virtual/input/input98 [ 1328.142122][ T5999] usb 7-1: USB disconnect, device number 39 [ 1328.306795][T23110] futex_wake_op: syz.6.4452 tries to shift op by -1; fix this program [ 1329.112564][T23122] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1329.293704][T18294] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 1329.455173][T18294] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1329.470986][T18294] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1329.506564][T18294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 54370, setting to 8 [ 1329.550152][T18294] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1329.603521][T23124] netlink: 'syz.5.4453': attribute type 10 has an invalid length. [ 1329.614233][T18294] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1329.657108][T18294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.682774][T18294] usb 1-1: config 0 descriptor?? [ 1329.703333][T23124] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1329.705274][T23121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1329.720640][T23130] loop6: detected capacity change from 0 to 2640 [ 1329.776149][T23130] buffer_io_error: 7 callbacks suppressed [ 1329.776168][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1329.800750][T18294] metro_usb 1-1:0.0: Metrologic USB to Serial converter detected [ 1329.965952][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1329.977538][T18294] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1330.456032][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.496823][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.520223][T18294] usb 1-1: USB disconnect, device number 110 [ 1330.557181][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.566423][T18294] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1330.592617][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.604933][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.605298][T18294] metro_usb 1-1:0.0: device disconnected [ 1330.626183][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.634918][T23130] ldm_validate_partition_table(): Disk read failed. [ 1330.645688][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.653927][T23130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1330.674417][T23130] Dev loop6: unable to read RDB block 0 [ 1330.681784][T23130] loop6: unable to read partition table [ 1330.823362][T23130] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1330.865280][ T5184] ldm_validate_partition_table(): Disk read failed. [ 1331.673699][ T5184] Dev loop6: unable to read RDB block 0 [ 1331.691059][ T5184] loop6: unable to read partition table [ 1332.400153][T23162] input: syz1 as /devices/virtual/input/input99 [ 1333.940321][T23185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4470'. [ 1333.949310][T23185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4470'. [ 1334.698732][T23193] random: crng reseeded on system resumption [ 1334.893815][ T5886] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1335.063955][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 1335.083189][ T5886] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 1335.434727][ T5886] usb 4-1: config 0 has no interface number 0 [ 1335.463848][T18294] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1335.463861][ T5886] usb 4-1: config 0 interface 230 has no altsetting 0 [ 1335.466430][ T5886] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1335.510428][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.557803][ T5886] usb 4-1: Product: syz [ 1335.572288][ T5886] usb 4-1: Manufacturer: syz [ 1335.587899][ T5886] usb 4-1: SerialNumber: syz [ 1335.612928][ T5886] usb 4-1: config 0 descriptor?? [ 1335.636237][ T5886] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 1335.657406][T18294] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1335.726770][T18294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.733852][ T5886] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1335.752337][T18294] usb 7-1: Product: syz [ 1335.764018][T18294] usb 7-1: Manufacturer: syz [ 1335.776785][T18294] usb 7-1: SerialNumber: syz [ 1336.377044][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1336.385932][T23209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1336.395002][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1336.403864][T23209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1336.412924][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1336.421767][T23209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4478'. [ 1336.513017][T18294] usb 7-1: config 0 descriptor?? [ 1336.538764][T18294] go7007 7-1:0.0: Sensoray 2250 found [ 1336.549448][T18294] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 1336.550074][T23207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.564450][T23207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.610230][ T30] audit: type=1326 audit(1766141225.127:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23217 comm="syz.1.4481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8efd58f749 code=0x0 [ 1336.776092][T23221] kvm: pic: non byte write [ 1336.861915][ T30] audit: type=1400 audit(1766141225.377:1764): avc: denied { bind } for pid=23225 comm="syz.0.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1336.915149][ T7428] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1337.537271][ T7428] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1337.546601][ T7428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.554666][ T7428] usb 6-1: Product: syz [ 1337.558932][ T7428] usb 6-1: Manufacturer: syz [ 1337.563551][ T7428] usb 6-1: SerialNumber: syz [ 1337.573191][ T7428] usb 6-1: config 0 descriptor?? [ 1337.580262][ T7428] go7007 6-1:0.0: Sensoray 2250 found [ 1337.585828][ T7428] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 1337.784033][ T7428] usb 6-1: USB disconnect, device number 88 [ 1337.931382][ T5886] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 1337.980028][T18294] usb 7-1: USB disconnect, device number 40 [ 1338.550021][T23224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.581138][T23224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.275682][ T7428] usb 4-1: USB disconnect, device number 23 [ 1340.511583][T23276] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1340.557772][ T30] audit: type=1400 audit(1766141229.077:1765): avc: denied { ioctl } for pid=23271 comm="syz.1.4498" path="socket:[78644]" dev="sockfs" ino=78644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1340.593389][ T5929] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1340.766286][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1340.791181][T23282] random: crng reseeded on system resumption [ 1340.793789][ T5929] usb 1-1: config 9 has an invalid interface number: 26 but max is 0 [ 1340.823556][ T5929] usb 1-1: config 9 has no interface number 0 [ 1340.852379][ T5929] usb 1-1: config 9 interface 26 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1340.891049][ T5929] usb 1-1: config 9 interface 26 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1340.943769][ T5929] usb 1-1: config 9 interface 26 altsetting 1 has an endpoint descriptor with address 0x9D, changing to 0x8D [ 1340.979677][ T5929] usb 1-1: config 9 interface 26 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1341.326682][ T5929] usb 1-1: config 9 interface 26 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1341.341400][ T5929] usb 1-1: config 9 interface 26 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1341.363655][T18294] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1341.366666][ T5929] usb 1-1: config 9 interface 26 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1341.386263][ T5929] usb 1-1: config 9 interface 26 has no altsetting 0 [ 1341.412708][ T5929] usb 1-1: New USB device found, idVendor=04fc, idProduct=0201, bcdDevice= 8.8d [ 1341.423978][T23287] futex_wake_op: syz.5.4495 tries to shift op by -1; fix this program [ 1341.768930][T18294] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1341.778116][T18294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.786456][T18294] usb 7-1: Product: syz [ 1341.794201][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.794216][T18294] usb 7-1: Manufacturer: syz [ 1341.794263][T18294] usb 7-1: SerialNumber: syz [ 1341.802301][ T5929] usb 1-1: Product: syz [ 1341.802321][ T5929] usb 1-1: Manufacturer: Ѝ [ 1341.802334][ T5929] usb 1-1: SerialNumber: syz [ 1341.824992][T18294] usb 7-1: config 0 descriptor?? [ 1341.827980][T18294] go7007 7-1:0.0: Sensoray 2250 found [ 1341.843166][T18294] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 1341.966323][T23294] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1343.120246][ T5929] spcp8x5 1-1:9.26: required endpoints missing [ 1343.186905][ T7428] usb 7-1: USB disconnect, device number 41 [ 1343.257562][ T5929] usb 1-1: USB disconnect, device number 111 [ 1343.696027][T23308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.880488][ T30] audit: type=1400 audit(1766141232.397:1766): avc: denied { ioctl } for pid=23314 comm="syz.1.4510" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1344.694761][T18294] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1344.886457][T18294] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.903706][T18294] usb 7-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1344.923459][T18294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.923720][ T5886] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1344.984630][T18294] usb 7-1: config 0 descriptor?? [ 1345.095501][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1345.106434][ T5886] usb 6-1: config 9 has an invalid interface number: 11 but max is 0 [ 1345.116246][ T5886] usb 6-1: config 9 has no interface number 0 [ 1345.122957][ T5886] usb 6-1: config 9 interface 11 has no altsetting 0 [ 1345.132305][ T5886] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=34.c9 [ 1345.141782][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.151625][ T5886] usb 6-1: Product: syz [ 1345.156439][ T5886] usb 6-1: Manufacturer: syz [ 1345.161424][ T5886] usb 6-1: SerialNumber: syz [ 1345.174353][ T5929] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1345.514383][T23331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.529188][T23331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.547848][ T5886] legousbtower 6-1:9.11: interrupt endpoints not found [ 1345.580737][ T5886] usb 6-1: USB disconnect, device number 89 [ 1345.630652][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1345.654172][T23340] futex_wake_op: syz.3.4518 tries to shift op by -1; fix this program [ 1345.958567][T18294] wacom 0003:056A:0000.0036: item fetching failed at offset 5/7 [ 1345.976325][T18294] wacom 0003:056A:0000.0036: parse failed [ 1345.991419][T18294] wacom 0003:056A:0000.0036: probe with driver wacom failed with error -22 [ 1346.093644][ T5929] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1346.160693][ T7428] usb 7-1: USB disconnect, device number 42 [ 1346.193838][ T5886] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1346.223749][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1346.281462][T23353] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1346.290919][T23353] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1346.384997][ T5929] usb usb2-port1: attempt power cycle [ 1346.396076][T23353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.404901][T23353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.414714][ T5886] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1346.423866][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.435563][ T5886] usb 1-1: config 0 descriptor?? [ 1346.441563][T23357] random: crng reseeded on system resumption [ 1346.443536][ T5886] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1346.663704][T18294] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1346.713778][ T7428] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1346.761235][ T5929] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1347.079662][ T5886] gspca_zc3xx: reg_w_i err -110 [ 1347.091688][T18294] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 1347.100275][ T5929] usb 2-1: device descriptor read/8, error -71 [ 1347.102102][T18294] usb 6-1: config 0 has no interface number 0 [ 1347.209577][ T5886] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1347.218413][T18294] usb 6-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.233719][T18294] usb 6-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 1347.237023][ T7428] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1347.245872][T18294] usb 6-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 1347.855951][ T7428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.867520][ T7428] usb 4-1: Product: syz [ 1347.912155][ T7428] usb 4-1: Manufacturer: syz [ 1347.919866][ T7428] usb 4-1: SerialNumber: syz [ 1347.944174][ T7428] usb 4-1: config 0 descriptor?? [ 1347.973974][ T5929] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1347.982844][ T7428] go7007 4-1:0.0: Sensoray 2250 found [ 1347.990717][ T7428] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 1347.995591][T18294] usb 6-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1348.034311][T18294] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 1348.050448][T18294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.069201][T18294] usb 6-1: Product: syz [ 1348.075844][T18294] usb 6-1: Manufacturer: syz [ 1348.081960][T18294] usb 6-1: SerialNumber: syz [ 1348.119666][T18294] usb 6-1: config 0 descriptor?? [ 1348.133295][T23354] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1348.141906][T23354] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1348.766736][ T5929] usb 2-1: device not accepting address 126, error -71 [ 1348.779470][T18294] mct_u232 6-1:0.139: MCT U232 converter detected [ 1348.786217][ T5929] usb usb2-port1: unable to enumerate USB device [ 1348.813773][T18294] usb 6-1: MCT U232 converter now attached to ttyUSB0 [ 1348.839749][ T5999] usb 4-1: USB disconnect, device number 24 [ 1348.882782][T18294] usb 6-1: USB disconnect, device number 90 [ 1348.899559][T18294] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 1348.919302][T18294] mct_u232 6-1:0.139: device disconnected [ 1349.096524][ T5999] usb 1-1: USB disconnect, device number 112 [ 1349.143875][ T5929] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1349.710830][ T5929] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1349.733701][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.746166][ T5929] usb 2-1: Product: syz [ 1349.750337][ T5929] usb 2-1: Manufacturer: syz [ 1349.765133][ T5929] usb 2-1: SerialNumber: syz [ 1349.953897][ T5999] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1350.016401][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4530'. [ 1350.095552][ T5929] rtl8150 2-1:1.0: couldn't reset the device [ 1350.110890][ T5929] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1350.113793][ T5999] usb 1-1: Using ep0 maxpacket: 32 [ 1350.142954][ T5999] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.164014][ T7428] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1350.166045][ T5999] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1350.194164][ T5929] usb 2-1: USB disconnect, device number 127 [ 1350.202791][ T5999] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1350.237326][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.268595][ T5999] usb 1-1: config 0 descriptor?? [ 1350.377347][ T7428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.394231][ T7428] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1350.404057][ T7428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.432273][ T7428] usb 4-1: config 0 descriptor?? [ 1350.507587][T23381] input: syz1 as /devices/virtual/input/input100 [ 1350.801715][ T30] audit: type=1400 audit(1766141239.317:1767): avc: denied { cmd } for pid=23399 comm="syz.5.4532" path="socket:[78805]" dev="sockfs" ino=78805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1351.088274][T23387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.153367][T23387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.273055][T23387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.464606][T23387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.970238][ T30] audit: type=1326 audit(1766141240.007:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.143151][ T30] audit: type=1326 audit(1766141240.007:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.143705][T17689] usb 4-1: USB disconnect, device number 25 [ 1352.167258][ T30] audit: type=1326 audit(1766141240.007:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.243708][ T30] audit: type=1326 audit(1766141240.607:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.283142][ T30] audit: type=1326 audit(1766141240.607:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.345561][ T30] audit: type=1326 audit(1766141240.607:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.489681][ T30] audit: type=1326 audit(1766141240.607:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.740804][ T30] audit: type=1326 audit(1766141240.607:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1352.873983][ T30] audit: type=1326 audit(1766141240.607:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23402 comm="syz.6.4533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efed838f749 code=0x7ffc0000 [ 1354.373693][ T7428] usb 1-1: USB disconnect, device number 113 [ 1354.633316][T23427] random: crng reseeded on system resumption [ 1354.813684][T17689] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1354.821392][ T5999] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1354.924094][T18294] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1355.073677][T17689] usb 1-1: Using ep0 maxpacket: 8 [ 1355.082543][T17689] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1355.090793][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 1355.105604][ T5999] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1355.114789][T17689] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1355.134787][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1355.142893][T17689] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1355.163157][ T5999] usb 4-1: Product: syz [ 1355.169170][T18294] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1355.181655][T17689] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1355.191625][ T5999] usb 4-1: Manufacturer: syz [ 1355.198344][T18294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.208753][ T5999] usb 4-1: SerialNumber: syz [ 1355.222585][ T5999] usb 4-1: config 0 descriptor?? [ 1355.227639][T17689] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1355.240675][T18294] usb 7-1: Product: syz [ 1355.250272][T18294] usb 7-1: Manufacturer: syz [ 1355.267351][T18294] usb 7-1: SerialNumber: syz [ 1355.281689][T17689] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1355.303419][T18294] usb 7-1: config 0 descriptor?? [ 1355.324294][T17689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.344286][T18294] go7007 7-1:0.0: Sensoray 2250 found [ 1355.370340][T18294] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 1355.680598][T17689] usb 1-1: GET_CAPABILITIES returned 0 [ 1355.819037][T17689] usbtmc 1-1:16.0: can't read capabilities [ 1355.967450][T17689] usb 7-1: USB disconnect, device number 43 [ 1356.218672][T23366] usb 4-1: USB disconnect, device number 26 [ 1356.271028][T23439] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1356.578236][T23443] futex_wake_op: syz.6.4542 tries to shift op by -1; fix this program [ 1357.015336][T23447] FAULT_INJECTION: forcing a failure. [ 1357.015336][T23447] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.028414][T23447] CPU: 0 UID: 0 PID: 23447 Comm: syz.1.4543 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.028431][T23447] Tainted: [L]=SOFTLOCKUP [ 1357.028435][T23447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1357.028441][T23447] Call Trace: [ 1357.028447][T23447] [ 1357.028452][T23447] dump_stack_lvl+0x16c/0x1f0 [ 1357.028471][T23447] should_fail_ex+0x512/0x640 [ 1357.028489][T23447] should_failslab+0xc2/0x120 [ 1357.028504][T23447] kmem_cache_alloc_noprof+0x83/0x770 [ 1357.028515][T23447] ? dst_alloc+0x99/0x1a0 [ 1357.028533][T23447] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1357.028544][T23447] ? dst_alloc+0x99/0x1a0 [ 1357.028559][T23447] dst_alloc+0x99/0x1a0 [ 1357.028576][T23447] ip6_pol_route+0x96b/0x1230 [ 1357.028594][T23447] ? __pfx_ip6_pol_route+0x10/0x10 [ 1357.028609][T23447] ? __kasan_slab_alloc+0x89/0x90 [ 1357.028622][T23447] ? kmem_cache_alloc_lru_noprof+0x262/0x770 [ 1357.028632][T23447] ? xas_alloc+0x34f/0x460 [ 1357.028643][T23447] ? xas_store+0x90/0x1910 [ 1357.028657][T23447] ? cma_alloc_port+0x2af/0x620 [ 1357.028669][T23447] ? rdma_bind_addr_dst+0x2349/0x2d20 [ 1357.028687][T23447] ? cma_bind_addr+0x2b5/0x300 [ 1357.028708][T23447] ? do_writev+0x28c/0x340 [ 1357.028725][T23447] ? do_syscall_64+0xcd/0xf80 [ 1357.028742][T23447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.028756][T23447] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1357.028772][T23447] fib6_rule_lookup+0x24c/0x720 [ 1357.028788][T23447] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1357.028812][T23447] ip6_route_output_flags+0x1d0/0x640 [ 1357.028828][T23447] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 1357.028848][T23447] ? find_held_lock+0x2b/0x80 [ 1357.028866][T23447] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 1357.028884][T23447] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.028896][T23447] ? is_bpf_text_address+0x94/0x1a0 [ 1357.028908][T23447] ? kernel_text_address+0x8d/0x100 [ 1357.028922][T23447] ? vfs_writev+0x5df/0xde0 [ 1357.028933][T23447] ? __kernel_text_address+0xd/0x40 [ 1357.028947][T23447] ? unwind_get_return_address+0x59/0xa0 [ 1357.028962][T23447] ? arch_stack_walk+0xa6/0x100 [ 1357.028977][T23447] ip6_dst_lookup_flow+0x99/0x1d0 [ 1357.028994][T23447] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1357.029012][T23447] ? __lock_acquire+0x436/0x2890 [ 1357.029024][T23447] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1357.029040][T23447] addr6_resolve.constprop.0+0x226/0x4a0 [ 1357.029058][T23447] ? __pfx_addr6_resolve.constprop.0+0x10/0x10 [ 1357.029084][T23447] ? do_raw_spin_lock+0x12c/0x2b0 [ 1357.029101][T23447] addr_resolve+0x2b3/0x1ed0 [ 1357.029118][T23447] ? lockdep_hardirqs_on+0x11/0x110 [ 1357.029130][T23447] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1357.029143][T23447] ? __debug_object_init+0x2de/0x3d0 [ 1357.029155][T23447] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1357.029168][T23447] ? __pfx_addr_resolve+0x10/0x10 [ 1357.029183][T23447] ? __pfx___debug_object_init+0x10/0x10 [ 1357.029201][T23447] ? lockdep_init_map_type+0x5c/0x270 [ 1357.029216][T23447] rdma_resolve_ip+0x429/0x6b0 [ 1357.029232][T23447] ? __pfx_addr_handler+0x10/0x10 [ 1357.029247][T23447] rdma_resolve_addr+0x3e7/0x2110 [ 1357.029261][T23447] ? ucma_resolve_ip+0x12d/0x220 [ 1357.029275][T23447] ? xa_load+0x153/0x2c0 [ 1357.029288][T23447] ? __pfx_xa_load+0x10/0x10 [ 1357.029305][T23447] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 1357.029322][T23447] ? __pfx_ucma_get_ctx+0x10/0x10 [ 1357.029341][T23447] ? ucma_resolve_ip+0x15f/0x220 [ 1357.029354][T23447] ucma_resolve_ip+0x15f/0x220 [ 1357.029369][T23447] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1357.029389][T23447] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1357.029404][T23447] ucma_write+0x1fb/0x330 [ 1357.029419][T23447] ? __pfx_ucma_write+0x10/0x10 [ 1357.029432][T23447] ? bpf_lsm_file_permission+0x9/0x10 [ 1357.029443][T23447] ? security_file_permission+0x71/0x210 [ 1357.029458][T23447] ? rw_verify_area+0xcf/0x6c0 [ 1357.029470][T23447] ? __pfx_ucma_write+0x10/0x10 [ 1357.029483][T23447] vfs_writev+0x5df/0xde0 [ 1357.029499][T23447] ? __pfx_vfs_writev+0x10/0x10 [ 1357.029520][T23447] ? __fget_files+0x20e/0x3c0 [ 1357.029534][T23447] ? __fget_files+0x130/0x3c0 [ 1357.029551][T23447] ? do_writev+0x28c/0x340 [ 1357.029562][T23447] do_writev+0x28c/0x340 [ 1357.029574][T23447] ? __pfx_do_writev+0x10/0x10 [ 1357.029590][T23447] do_syscall_64+0xcd/0xf80 [ 1357.029604][T23447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.029615][T23447] RIP: 0033:0x7f8efd58f749 [ 1357.029625][T23447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.029635][T23447] RSP: 002b:00007f8efe423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1357.029645][T23447] RAX: ffffffffffffffda RBX: 00007f8efd7e5fa0 RCX: 00007f8efd58f749 [ 1357.029652][T23447] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 1357.029658][T23447] RBP: 00007f8efe423090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.029664][T23447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.029670][T23447] R13: 00007f8efd7e6038 R14: 00007f8efd7e5fa0 R15: 00007fff4db36e48 [ 1357.029683][T23447] [ 1357.718016][T18294] usb 1-1: USB disconnect, device number 114 [ 1357.943696][T17030] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1358.930714][T17030] usb 4-1: Using ep0 maxpacket: 16 [ 1358.959899][T17030] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1358.995393][T17030] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1359.023879][T17030] usb 4-1: Product: syz [ 1359.028799][T17030] usb 4-1: Manufacturer: syz [ 1359.053636][T17030] usb 4-1: SerialNumber: syz [ 1359.100049][T17030] usb 4-1: config 0 descriptor?? [ 1360.540604][T23477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23477 comm=syz.0.4550 [ 1361.053692][T23485] random: crng reseeded on system resumption [ 1361.198645][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1361.200000][ T30] audit: type=1400 audit(1766141249.697:1780): avc: denied { read open } for pid=23481 comm="syz.6.4551" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1361.545252][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.953630][T23366] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1362.031183][T23492] futex_wake_op: syz.1.4554 tries to shift op by -1; fix this program [ 1362.286578][T23494] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4554'. [ 1362.419963][T23495] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1362.455672][T23366] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1362.471798][T23366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.488181][ T5886] usb 4-1: USB disconnect, device number 27 [ 1362.501508][T23366] usb 1-1: Product: syz [ 1362.548040][T23366] usb 1-1: Manufacturer: syz [ 1362.567521][T23366] usb 1-1: SerialNumber: syz [ 1362.605335][T23366] usb 1-1: config 0 descriptor?? [ 1362.634215][T23366] go7007 1-1:0.0: Sensoray 2250 found [ 1362.644054][T23366] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1362.816289][T23366] usb 1-1: USB disconnect, device number 115 [ 1362.854878][T18294] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1362.943691][ T5886] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1363.003742][T18294] usb 2-1: Using ep0 maxpacket: 16 [ 1363.012539][T18294] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1363.021760][T18294] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1363.039209][T18294] usb 2-1: Product: syz [ 1363.043492][T18294] usb 2-1: Manufacturer: syz [ 1363.053629][T18294] usb 2-1: SerialNumber: syz [ 1363.065541][T18294] usb 2-1: config 0 descriptor?? [ 1363.113697][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 1363.121368][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1363.161648][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1363.197010][ T5886] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1363.221641][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.235380][ T5886] usb 4-1: Product: syz [ 1363.246179][ T5886] usb 4-1: Manufacturer: syz [ 1363.254966][ T5886] usb 4-1: SerialNumber: syz [ 1363.266393][ T5886] usb 4-1: config 0 descriptor?? [ 1363.278735][T23499] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1363.657877][T18294] usb 2-1: USB disconnect, device number 2 [ 1365.033513][T23523] FAULT_INJECTION: forcing a failure. [ 1365.033513][T23523] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.075944][T23523] CPU: 1 UID: 0 PID: 23523 Comm: syz.6.4561 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.075972][T23523] Tainted: [L]=SOFTLOCKUP [ 1365.075977][T23523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1365.075987][T23523] Call Trace: [ 1365.075992][T23523] [ 1365.075998][T23523] dump_stack_lvl+0x16c/0x1f0 [ 1365.076018][T23523] should_fail_ex+0x512/0x640 [ 1365.076037][T23523] ? fs_reclaim_acquire+0xae/0x150 [ 1365.076053][T23523] should_failslab+0xc2/0x120 [ 1365.076067][T23523] __kmalloc_noprof+0xeb/0x910 [ 1365.076084][T23523] ? tomoyo_encode2+0x100/0x3e0 [ 1365.076101][T23523] ? tomoyo_encode2+0x100/0x3e0 [ 1365.076115][T23523] tomoyo_encode2+0x100/0x3e0 [ 1365.076132][T23523] tomoyo_encode+0x29/0x50 [ 1365.076145][T23523] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1365.076164][T23523] tomoyo_path_number_perm+0x245/0x580 [ 1365.076175][T23523] ? tomoyo_path_number_perm+0x237/0x580 [ 1365.076189][T23523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1365.076202][T23523] ? find_held_lock+0x2b/0x80 [ 1365.076230][T23523] ? find_held_lock+0x2b/0x80 [ 1365.076246][T23523] ? hook_file_ioctl_common+0x144/0x410 [ 1365.076265][T23523] ? __fget_files+0x20e/0x3c0 [ 1365.076282][T23523] security_file_ioctl+0x9b/0x240 [ 1365.076298][T23523] __x64_sys_ioctl+0xb7/0x210 [ 1365.076311][T23523] do_syscall_64+0xcd/0xf80 [ 1365.076326][T23523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.076337][T23523] RIP: 0033:0x7efed838f749 [ 1365.076346][T23523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.076356][T23523] RSP: 002b:00007efed65b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1365.076366][T23523] RAX: ffffffffffffffda RBX: 00007efed85e6180 RCX: 00007efed838f749 [ 1365.076373][T23523] RDX: 0000200000000040 RSI: 000000000000541c RDI: 000000000000000a [ 1365.076379][T23523] RBP: 00007efed65b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.076384][T23523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.076390][T23523] R13: 00007efed85e6218 R14: 00007efed85e6180 R15: 00007ffd1f6daab8 [ 1365.076404][T23523] [ 1365.287603][T23523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1365.384846][ T30] audit: type=1400 audit(1766141253.907:1781): avc: denied { compute_member } for pid=23524 comm="syz.0.4562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1365.945379][ T5886] usb 4-1: USB disconnect, device number 28 [ 1365.959741][ T30] audit: type=1400 audit(1766141253.937:1782): avc: denied { bind } for pid=23524 comm="syz.0.4562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1366.353819][ T5929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1366.481933][T23542] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1366.545085][ T5929] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1366.573289][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1366.609147][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1366.642696][ T5929] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1366.651807][ T5886] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1366.677306][ T5929] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1366.705720][ T5929] usb 2-1: Manufacturer: syz [ 1366.732113][ T5929] usb 2-1: config 0 descriptor?? [ 1366.754337][ T5929] igorplugusb 2-1:0.0: endpoint incorrect [ 1366.833846][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 1366.850695][ T5886] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1366.863621][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1366.898703][ T5886] usb 7-1: Product: syz [ 1366.913589][ T5886] usb 7-1: Manufacturer: syz [ 1366.928392][ T5886] usb 7-1: SerialNumber: syz [ 1366.967528][ T5886] usb 7-1: config 0 descriptor?? [ 1367.569012][ T5926] usb 2-1: USB disconnect, device number 3 [ 1367.971919][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1367.985750][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1368.001229][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1368.008442][ T5886] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1368.017404][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1368.025298][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1368.075885][T17689] usb 7-1: USB disconnect, device number 44 [ 1368.131759][T23558] lo speed is unknown, defaulting to 1000 [ 1368.183632][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1368.190482][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.202147][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.212326][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1368.225606][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1368.243977][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.277572][ T5886] usb 1-1: config 0 descriptor?? [ 1369.498389][T23572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=23572 comm=syz.3.4575 [ 1369.513288][T23572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4575'. [ 1369.523410][ T30] audit: type=1400 audit(1766141258.027:1783): avc: denied { ioctl } for pid=23571 comm="syz.3.4575" path="socket:[81301]" dev="sockfs" ino=81301 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1369.595585][ T5886] hid_parser_main: 5 callbacks suppressed [ 1369.595604][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.633890][ T5886] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 1369.643529][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.652046][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.664622][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.672351][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.680672][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.688378][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.698562][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.706180][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.724202][ T5886] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1369.769500][ T5886] microsoft 0003:045E:07DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1369.797792][ T5886] microsoft 0003:045E:07DA.0038: no inputs found [ 1369.808860][ T5886] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway [ 1369.823658][T23366] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1370.035539][T17689] usb 1-1: USB disconnect, device number 116 [ 1370.043678][T19754] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1370.065792][T23366] usb 4-1: config 0 has no interfaces? [ 1370.071264][T23366] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1370.081889][T23366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.092759][T23366] usb 4-1: config 0 descriptor?? [ 1370.119769][T23558] chnl_net:caif_netlink_parms(): no params data found [ 1370.133915][ T52] Bluetooth: hci3: command tx timeout [ 1370.203799][ T5886] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1370.226969][T19754] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1370.243984][T19754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.280974][T23558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.290522][T19754] usb 2-1: config 0 descriptor?? [ 1370.301196][T18893] usb 4-1: USB disconnect, device number 29 [ 1370.314968][T19754] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1370.340287][T23558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.358307][T23558] bridge_slave_0: entered allmulticast mode [ 1370.375173][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 1370.381602][T23558] bridge_slave_0: entered promiscuous mode [ 1370.394604][ T5886] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 1370.414160][T23558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.421253][T23558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.428411][ T5886] usb 7-1: config 0 has no interface number 1 [ 1370.454025][ T5886] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1370.463914][T23558] bridge_slave_1: entered allmulticast mode [ 1370.473705][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.481707][ T5886] usb 7-1: Product: syz [ 1370.494235][T23558] bridge_slave_1: entered promiscuous mode [ 1370.513423][ T5886] usb 7-1: Manufacturer: syz [ 1370.538430][ T5886] usb 7-1: SerialNumber: syz [ 1370.705028][ T5886] usb 7-1: config 0 descriptor?? [ 1370.723338][T23558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.782507][ T5886] snd-usb-audio 7-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 1370.795382][T23558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.810704][T22731] udevd[22731]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1370.853900][T19754] gspca_zc3xx: reg_w_i err -110 [ 1370.858877][T19754] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1370.913500][T23580] fuse: Unknown parameter 'G7UW7r9B2' [ 1370.923911][T23591] fuse: Unknown parameter 'G7UW7r9B2' [ 1371.040689][T23558] team0: Port device team_slave_0 added [ 1371.058991][T17030] usb 7-1: USB disconnect, device number 45 [ 1371.078934][T23558] team0: Port device team_slave_1 added [ 1371.876221][T23596] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1371.921690][T23558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.960024][T23558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.026069][T23558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.098205][T23558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.135965][T23558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.203937][ T52] Bluetooth: hci3: command tx timeout [ 1372.233488][T23558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.348820][T23606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4584'. [ 1372.463291][T23558] hsr_slave_0: entered promiscuous mode [ 1372.494572][T23558] hsr_slave_1: entered promiscuous mode [ 1372.529609][T23558] debugfs: 'hsr0' already exists in 'hsr' [ 1372.541581][T23558] Cannot create hsr debugfs directory [ 1373.307826][T17030] usb 2-1: USB disconnect, device number 4 [ 1374.294399][ T52] Bluetooth: hci3: command tx timeout [ 1375.175290][ T30] audit: type=1326 audit(1766141263.687:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1058f749 code=0x7ffc0000 [ 1375.244304][ T30] audit: type=1326 audit(1766141263.687:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1058f749 code=0x7ffc0000 [ 1375.293636][ T30] audit: type=1326 audit(1766141263.687:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2f1058f749 code=0x7ffc0000 [ 1375.323190][T23631] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 1375.385455][T23631] lo speed is unknown, defaulting to 1000 [ 1375.412932][ T30] audit: type=1400 audit(1766141263.847:1787): avc: denied { remount } for pid=23622 comm="syz.3.4589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1375.633842][ T30] audit: type=1326 audit(1766141263.957:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1058f749 code=0x7ffc0000 [ 1375.742588][T23558] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1375.764506][ T30] audit: type=1326 audit(1766141263.957:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23622 comm="syz.3.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1058f749 code=0x7ffc0000 [ 1375.803471][T23558] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1375.856711][T23558] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1375.962101][T23558] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1376.226484][T23558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.280030][T23558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.326794][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.333915][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.364036][ T52] Bluetooth: hci3: command tx timeout [ 1376.473368][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.480530][ T6677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.537237][T23652] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1376.837728][T23558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.910801][T23665] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1376.954001][T23665] tipc: Invalid UDP bearer configuration [ 1376.954051][T23665] tipc: Enabling of bearer rejected, failed to enable media [ 1377.254078][ T5886] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1377.281980][T23673] netlink: 'syz.3.4597': attribute type 1 has an invalid length. [ 1377.444799][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1377.452356][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.469433][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1377.501212][ T5886] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=14.00 [ 1377.526084][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.827546][ T5886] usb 1-1: config 0 descriptor?? [ 1377.848784][ T5886] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1377.956976][T23673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1378.042694][T23674] bond4: (slave geneve2): making interface the new active one [ 1378.064919][T23674] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1378.398830][T23686] futex_wake_op: syz.6.4600 tries to shift op by -1; fix this program [ 1378.912088][T23558] veth0_vlan: entered promiscuous mode [ 1379.006981][T23558] veth1_vlan: entered promiscuous mode [ 1379.932119][T23558] veth0_macvtap: entered promiscuous mode [ 1379.953154][T23558] veth1_macvtap: entered promiscuous mode [ 1379.972625][T23558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.982834][T23558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.064155][ T7471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.082223][T23709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.094753][ T7471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.104223][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1380.139077][T23709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.209483][ T7471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.244249][T18893] usb 1-1: USB disconnect, device number 117 [ 1380.255219][ T7471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.665110][ T7471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.672954][ T7471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.765361][ T7471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.790974][ T7471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.975700][ T30] audit: type=1400 audit(1766141269.497:1790): avc: denied { add_name } for pid=23558 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mail_spool_t:s0" [ 1381.061475][T23558] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 1381.073558][T23558] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 1381.081962][T23558] CPU: 1 UID: 0 PID: 23558 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.093040][T23558] Tainted: [L]=SOFTLOCKUP [ 1381.097349][T23558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1381.107376][T23558] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 1381.113072][T23558] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 01 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 1381.132652][T23558] RSP: 0018:ffffc9000432fae0 EFLAGS: 00010202 [ 1381.138691][T23558] RAX: dffffc0000000000 RBX: ffff88805aabdd20 RCX: ffffffff826a43b5 [ 1381.146650][T23558] RDX: 0000000000000007 RSI: ffffffff82494a8f RDI: 0000000000000038 [ 1381.154598][T23558] RBP: ffff88805aabddb8 R08: 0000000000000005 R09: 0000000000000000 [ 1381.162568][T23558] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92000865f6b [ 1381.170513][T23558] R13: 0000000000000000 R14: ffff88802a7a8020 R15: 0000000000000038 [ 1381.178459][T23558] FS: 000055557c669500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1381.187372][T23558] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1381.193947][T23558] CR2: 00007f2f107b6ad8 CR3: 0000000072dd8000 CR4: 00000000003526f0 [ 1381.201899][T23558] Call Trace: [ 1381.205154][T23558] [ 1381.208066][T23558] __kernfs_new_node+0x7b4/0x990 [ 1381.212980][T23558] ? __pfx___kernfs_new_node+0x10/0x10 [ 1381.218413][T23558] ? find_held_lock+0x2b/0x80 [ 1381.223069][T23558] ? kernfs_root+0xee/0x2a0 [ 1381.227544][T23558] kernfs_new_node+0x13c/0x1e0 [ 1381.232300][T23558] ? kasan_save_track+0x14/0x30 [ 1381.237124][T23558] kernfs_create_dir_ns+0x4c/0x1a0 [ 1381.242211][T23558] cgroup_mkdir+0x40f/0x12e0 [ 1381.246775][T23558] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1381.251772][T23558] kernfs_iop_mkdir+0x111/0x190 [ 1381.256611][T23558] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1381.261625][T23558] vfs_mkdir+0x731/0xb60 [ 1381.265844][T23558] do_mkdirat+0x442/0x5e0 [ 1381.270152][T23558] ? __pfx_do_mkdirat+0x10/0x10 [ 1381.274989][T23558] ? getname_flags.part.0+0x1c5/0x550 [ 1381.280335][T23558] __x64_sys_mkdirat+0x83/0xb0 [ 1381.285081][T23558] do_syscall_64+0xcd/0xf80 [ 1381.289567][T23558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.295438][T23558] RIP: 0033:0x7f305d38de97 [ 1381.299826][T23558] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.319411][T23558] RSP: 002b:00007ffee8f33208 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 1381.327802][T23558] RAX: ffffffffffffffda RBX: 00007ffee8f33260 RCX: 00007f305d38de97 [ 1381.335746][T23558] RDX: 00000000000001ff RSI: 00007ffee8f33260 RDI: 00000000ffffff9c [ 1381.343690][T23558] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffee8f32f57 [ 1381.351632][T23558] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1381.359585][T23558] R13: 0000000000000003 R14: 00007ffee8f336d8 R15: 0000000000000000 [ 1381.367535][T23558] [ 1381.370524][T23558] Modules linked in: [ 1381.375153][T23558] ---[ end trace 0000000000000000 ]--- [ 1381.490425][T23558] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 1381.494764][ T30] audit: type=1400 audit(1766141269.577:1791): avc: denied { create } for pid=23558 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1381.496306][T23558] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 01 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 1381.537344][T23558] RSP: 0018:ffffc9000432fae0 EFLAGS: 00010202 [ 1381.543712][T23558] RAX: dffffc0000000000 RBX: ffff88805aabdd20 RCX: ffffffff826a43b5 [ 1381.551791][T23558] RDX: 0000000000000007 RSI: ffffffff82494a8f RDI: 0000000000000038 [ 1381.559900][T23558] RBP: ffff88805aabddb8 R08: 0000000000000005 R09: 0000000000000000 [ 1381.568306][T23558] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92000865f6b [ 1381.578073][T23558] R13: 0000000000000000 R14: ffff88802a7a8020 R15: 0000000000000038 [ 1381.586468][T23558] FS: 000055557c669500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1381.596506][T23558] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1381.601380][T23715] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1381.603417][T23558] CR2: 000020000000f000 CR3: 0000000072dd8000 CR4: 00000000003526f0 [ 1381.622927][T23558] Kernel panic - not syncing: Fatal exception [ 1381.629270][T23558] Kernel Offset: disabled [ 1381.633579][T23558] Rebooting in 86400 seconds..