last executing test programs: 1m28.100001908s ago: executing program 2 (id=938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) timer_create(0xb, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 1m27.111672409s ago: executing program 2 (id=940): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x18480, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000180)) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)={0x2c, r3, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000008c0)='sys_enter\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x18) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000102000000000000000002000009", @ANYRES32=r5, @ANYBLOB="000000000a0001"], 0x30}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x2, 0x3, 0xb, 0x13ec, 0x1}, 0x20) 1m26.837029882s ago: executing program 2 (id=943): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x5e, 0x601, 0xff9e, 0x3, "", [@typed={0x9, 0x0, 0x0, 0x0, @str='\\@$$\x00'}]}, 0x1c}], 0x1}, 0x0) 1m26.250218526s ago: executing program 2 (id=944): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x10) 1m26.146220924s ago: executing program 2 (id=945): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) (fail_nth: 18) 1m25.625089535s ago: executing program 2 (id=948): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x400000007fff, 0x3, 0x3e, 0xffffffeb, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1cc, 0xe2, 0x1, 0x2}]}, 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='squashfs\x00', 0x2208894, 0x0) 1m10.611321117s ago: executing program 32 (id=948): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x400000007fff, 0x3, 0x3e, 0xffffffeb, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1cc, 0xe2, 0x1, 0x2}]}, 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='squashfs\x00', 0x2208894, 0x0) 9.096887933s ago: executing program 5 (id=1179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400"], 0x0) io_setup(0x52f, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "000200004b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r8, 0x80404812, &(0x7f0000000140)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002d00)={'ip6tnl0\x00', &(0x7f0000002c80)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0xf, 0x1cfb, 0xed, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x80, 0x1, 0x43, 0x101}}) 7.478535639s ago: executing program 5 (id=1183): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x14927e, 0x19e) fallocate(r0, 0x9, 0x3, 0x1000f4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000240)={0x1, 0x6, "e4f36d", 0x7f, 0x2}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4f22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdc}}, 0x3, 0x0, 0x825e, 0x0, 0x22, 0x1, 0xff}, 0x9c) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) r5 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0xf2, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) 7.180863364s ago: executing program 3 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0xf4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (fail_nth: 4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000240)={0x1, r9, 0x7f, 0x1ff, 0xfffffff8, 0x2, 0x2}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="0100"], 0x3c}}, 0x0) 7.068905237s ago: executing program 1 (id=1185): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x8, 0x816c, 0x6, 0x0, 0x0}) fanotify_init(0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x2f) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1401000001f2808c0018", @ANYBLOB="208a2cbbf1f6754894b291a43a5db148a1330e112efbd9f941aa4bd785dcad45475f04ea9e31cee963b40d15e0027bb21eee2f07fc6ac2ab82b7be90397e7c2342b87b684d6a4ba0b2efa00a976ede92363cb928338570979089ef4dd72413b433455bcfcb7f5f3c71933233bc65dc3166733b7b47211435abcf6424b1bb38ab4cbf8af8d8a28c9d2d713cf9aa5483ba607417e8e3549b1f7a644667dfd38bbb187c8d4ae2c19a26e5f8ca18282638", @ANYRESDEC=r1], 0x114}], 0x1, 0x0, 0x0, 0x4185}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2}) (fail_nth: 2) 6.312357769s ago: executing program 3 (id=1186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x6, 0x0, @val=@iter={0x0}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, 0x0) r9 = dup(0xffffffffffffffff) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) write(r12, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r12) 5.600756749s ago: executing program 5 (id=1187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000200)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0x10000000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, 0x0) 5.237697723s ago: executing program 3 (id=1188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0xdc, 0xfffffffffffffff8, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r2, 0x1b4091a81d4be5a1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2c11}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x249}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2b96}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x844}, 0xaae81b4014550c20) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000a8f3d2207205200385010102030109021b0001000000000904"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r3 = openat$cgroup_pressure(r1, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x400000c, 0x10010, r3, 0x62f53000) 5.104807337s ago: executing program 0 (id=1190): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0x2}, 0x4000000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r6, &(0x7f00000003c0), 0x100000000000022d) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x5, 0xb836, 0x0, @mcast2, @mcast1, 0x700, 0x8000, 0x4, 0x3}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, 0x12, 0x1, 0x70bd25, 0x25dfdbfa, {0x5, 0xf, 0x6, 0x82, {0x4e25, 0x4e20, [0x1, 0x7, 0x8, 0x3], [0xd8, 0x6, 0x0, 0xd8b6], r7, [0x810000]}, 0x890, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000680000042bbd7000fcdbdf2502000300210000001c000000000000000002000001000000080000000200000007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 5.104624055s ago: executing program 1 (id=1191): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140), {0x22}, 0x0, 0x0, &(0x7f0000000500)=""/202, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x58) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa801, 0x0) syz_io_uring_setup(0x1713, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x6, 0x8, 0x0, r1}, &(0x7f0000000480), &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) pselect6(0x40, &(0x7f00000001c0)={0x400000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4.498634405s ago: executing program 0 (id=1192): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socket(0x1e, 0x4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x40, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, '\x00', 0xa, 0x2b, 0x1, @remote, @local, {[@srh={0x32, 0x0, 0x4, 0x0, 0x1, 0x10}], "44a9"}}}}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0x40, @local, 0x1000000}, 0x13) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000001000000000200000000", 0x58}], 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) 4.416577239s ago: executing program 5 (id=1193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400"], 0x0) io_setup(0x52f, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "000200004b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r8, 0x80404812, &(0x7f0000000140)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002d00)={'ip6tnl0\x00', &(0x7f0000002c80)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0xf, 0x1cfb, 0xed, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x80, 0x1, 0x43, 0x101}}) 4.361927064s ago: executing program 1 (id=1194): r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f00000000c0), 0x1001) syz_emit_ethernet(0x28c, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080044cc027e00680000032f9078ac1e0101ac1414aa867b0000000301043e5100096d37616ff9e98e070c5aa541d22a752925b984070f5682e3490e42d1afec6027df000007366437965f020c3040ffc1f7fb486e945e010f047f1282c990ffe3b82881d5fb011102e6fd1a274de9ddf854b99170894f050c68459d9913fe112c9f7b000e46ab7a05eda445d7eb0a01c483177dac14141600000000ac1414bbac1414bbe0000002892735ac1414aa64010100ac1e0001ffffffffe0000001ffffffffac1e00017f000001ac1e01010000000421880b0008000300050000e5bc4162d5d9ded20100080000058000000903f26f47711921c1a5cca5d7efcd2755ad2b9184420799d7d537a767a6c18dfd54f1b0efbe75912d099e2de9752843040086dd00061b694f387ea1dd4ccae0e30a906ed9da53632858537263e11e79ba2c261dc2ba5dea90a8b1afc81922423484c77b403e1208f941e164ac161dbe75ecc7217640abb52514c561359906c3cc351fdea971c8f6a04e84080088be00000000190e34020100000000000003080022eb000000022809720202000000000000d703ff61020800655800000004387ac16801d0c4d5f3ed48ef4ba25b9f2c24dc3e2b49ad5dec9466918d80405c82babcda2b0ac022d0f3d9e5bb612872d523c095d822b4ba7d06000000000000000a9a46550f1a4a766d3762103ec1e9b170bf156bb1c9e3417b4f324316ee4661772ee0aebe58a5f0a24c3b7f9e55c1d2f7b29bedc0e65d6dc8876a1daf31be0e0d1b2082acfefdd323e99851ceb24a15cce8dcc75d322ba7dbf82218f86d801c9d180fcedeca615f382f52c76036a187db2fcdcb937c9de87a533dec54674516d233a31c139887ff6771d48e519035835d3e55a201afa7de"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x1d, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x65, 0x487, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf00001, 0x800}) write$binfmt_register(r5, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\x*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.79298187s ago: executing program 4 (id=1196): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) (fail_nth: 5) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 3.742540928s ago: executing program 1 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f32c04300000000000001000000100002800c00018008ff01000300000004000180"], 0x28}, 0x1, 0x4001000000000000}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b3, 0x3103, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x3, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x8}, 0x8) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "2638cc32"}]}}, 0x0}, 0x0) 3.503962226s ago: executing program 0 (id=1198): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x18a8, 0x0, 0x2}, 0x18, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x10, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f00000000c0)="6f59a8ef42268d65f95b7555fa98868bd671cc0de9a292899591c87b15015e6ab827bd5cf813f4548bce2e626b9502ad765614a97bfa817e3997b3afee4fa63fc52cdd2234d36c6299ee64e70f72d75b918559de82afa900b3e40b9841497d212f189b429489d02cd632cf02ec83a3ab5c436ac475", &(0x7f0000000040)=""/53, &(0x7f0000000180)="81cb470b3cf172b88f4b48d6a95e9bc3b4fe4456ea3ca85806f11a38017b6efd47bd21d603def4a1ab2274249102f00739d337549158f476b6b67fd9ef8d192f86d376ae30e89ec9af8d5d54820bbe408c68ef0d13a023e5f1a779e759980aed58b75f9f41ec1c1633", &(0x7f0000000280)="496304cacb8df2184327a487ee78bafdddc98906", 0x5, r6, 0x4}, 0x38) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r7, 0x28, 0x1, 0x0, 0xffffffffffffffff) 3.12799785s ago: executing program 0 (id=1199): socket$kcm(0x29, 0x7, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x38, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x580, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x5}, 0x0, 0x2, 0x5, 0x10, 0x17, 'syz0\x00', "9d999e377a140ab354cb5a5711053f887a1026aaac629f2f4bae8acd1cf92b10", "bbe8fe2e0860f6975eb182b78bf2dea90c55dcffaff03f639c9a7b3494fa7ef6", [{0x5, 0x0, {0x1, 0x9}}, {0x0, 0xc, {0x0, 0x1000}}, {0x40, 0x5, {0x1, 0x7fffffff}}, {0x101, 0x78, {0x1, 0xfffffff7}}, {0xa, 0x1, {0x3, 0x5}}, {0x9, 0x827b, {0x0, 0x1}}, {0x5, 0x4, {0x3, 0x1}}, {0x0, 0x0, {0x1, 0x200}}, {0x566a, 0xfffb, {0x2, 0x7}}, {0x1, 0x4}, {0x3, 0x4, {0x0, 0x7}}, {0x4, 0x3, {0x2}}, {0x1ff, 0x770a, {0x2, 0x73}}, {0x7, 0x81, {0x2, 0x8000}}, {0x9, 0xd2bb, {0x3, 0x3}}, {0x9, 0x5, {0x0, 0x6}}, {0x8, 0x7f, {0x2, 0x1}}, {0x7, 0x1458, {0x0, 0x2}}, {0xf, 0x1, {0x1, 0x100}}, {0xb22, 0x9, {0x3, 0xbbcf}}, {0x0, 0x4}, {0x6, 0x0, {0x0, 0x1}}, {0xda, 0x8, {0x0, 0xf}}, {0x9, 0x1, {0x1, 0x8}}, {0xffff, 0x0, {0x3, 0x4}}, {0x8, 0x1, {0x2, 0x267}}, {0x10, 0x4, {0x1, 0x7fff}}, {0x3, 0x2, {0x2, 0x2}}, {0x9, 0x7ff, {0x1, 0x7}}, {0x7, 0x1, {0x1, 0x101}}, {0xfffd, 0x9, {0x0, 0xfe}}, {0x5d9, 0xdf60, {0x3, 0x2}}, {0x3, 0x8, {0x2, 0x7}}, {0x2, 0x100, {0x0, 0xc}}, {0x10e, 0x0, {0x2, 0x1faf}}, {0x3f6, 0x9, {0x0, 0x400}}, {0x5, 0x0, {0x0, 0x3ff}}, {0x5, 0x4, {0x1, 0x20000}}, {0x0, 0x9, {0x3, 0xdd78d1e4}}, {0xaf, 0x200, {0x3, 0xfffffffc}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ip6erspan0\x00', &(0x7f00000003c0)=@ethtool_eee={0x44, 0x5, 0x3036, 0xfff, 0xffffffff, 0xfffffff9, 0x4, 0x1, [0x5, 0xc4e]}}) (async) r3 = getpgrp(0xffffffffffffffff) ptrace$poke(0x4, r3, &(0x7f0000000440), 0x5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4a}, "d3febacfcd9bb685a90cbd8de7ff2d038610247c6fc3afe8785b54733ef6b5fa08d85980084e537fe0034740da9cc6721f38f45f3379b2fa475d28d81ea5e7678e9abf701f7b84257281"}, 0x4e) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000005c0)={'team0\x00', @random="988b43d6932c"}) (async) r5 = eventfd(0x9) read$eventfd(r5, &(0x7f0000000600), 0x8) r6 = dup(r5) setpriority(0x2, r3, 0x3ff) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000640)={'\x00', 0x9, 0x2, 0x4, 0xfff, 0x5, r3}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xfc, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0x10000, 0x3, 0xfffffff9, 0x800]}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb0}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xb6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x48000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000880)={{0x0, 0x7, 0x6609, 0xd23e, 0x4, 0xbe3a, 0x8, 0x0, 0x49, 0x2, 0x7f8000, 0xffffffffffffff7a, 0x5, 0x8000000000000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000900)={r7, 0x100000000}) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001940)={0x4, &(0x7f0000001900)=[{0x4, 0x5, 0x0, 0x2}, {0x80, 0x3, 0x0, 0xffffffe5}, {0x3, 0x0, 0x1, 0xfffffffe}, {0x1, 0x0, 0xd, 0x9}]}, 0x10) (async, rerun: 64) r8 = landlock_create_ruleset(&(0x7f0000001980)={0x561, 0x1, 0x1}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f00000019c0)={0x4040}, 0x0) (async) sendmsg$key(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x2, 0xa, 0x86, 0x9, 0x9, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x5, 0x4, 0xa3cdb6561441f8b6}, @sadb_sa={0x2, 0x1, 0x4d5, 0x10, 0xb, 0x75, 0x3, 0x40000000}]}, 0x48}}, 0x8000) socket$kcm(0x29, 0x2, 0x0) syz_emit_vhci(&(0x7f0000001b00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe7}, "85554cda8efa2790d1119aa8470f01492a315441887aacfd24bc3be505c798b1b44a9fd168e7b03aec15022a09d167f41e68e3334f3defda70cd6e3dcaf68cb83f9994d2d7e55c4c7c025899b457f1070a9d4dc33e4f1d2357fbfd54d3636d291b895d8b9a6992349459b57e6f98ca50e465f572d1a6cf2e486b8d4a359dddab7cb6e957b5615881be8ea5c441bf79f85c908d6b94a2de27f757e4ebbcc8e07db7d97694ed2c29582d1fc5e34900bdb17365014a040d5141631623de5c339cf779f59cee5905c29da80f9e62fccff594eee35e3ab09869b8ebbf0eb9fda444095291540d91acb8"}, 0xeb) (async, rerun: 64) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) (rerun: 64) 3.069021276s ago: executing program 4 (id=1200): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x6}) close_range(r0, 0xffffffffffffffff, 0x1000000) 3.068688097s ago: executing program 0 (id=1201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000f40)={'dummy0\x00', @ifru_names='nicvf0\x00'}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x12000021) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r5, 0x2, {0x2, 0xff}, 0xff}, 0x18) 2.909659198s ago: executing program 4 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x12, 0x5, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x88c4}, 0xc1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x5, @loopback, 0x1}, @in6={0xa, 0x4e20, 0xb5, @loopback, 0x3ff}, @in6={0xa, 0x4e20, 0x8001, @private2, 0x6}, @in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0x2, @private2, 0x2439}], 0xc8) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000003c0)=0x1d) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7260}}, 0x6, 0x1}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x60000) read(r6, &(0x7f0000000500)=""/157, 0x9d) fcntl$setlease(r6, 0x400, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000005c0)={0x38}, 0x1) getpid() r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x8, 0x21, 0x4, 0x2, {{0x1c, 0x4, 0x3, 0xf, 0x70, 0x66, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x17, 0x30, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @multicast1, @multicast1]}, @lsrr={0x83, 0x13, 0x92, [@empty, @broadcast, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x99, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0x14, 0x66, 0x3, 0x1, [{@remote, 0x7f13}, {@private=0xa010102, 0x9}]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x42, 0x42, 0x6, [@fwd={0x7}, @datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x0, 0x7}], "95a3"}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x2d, 0x2}, @fwd={0xc}]}, {0x0, [0x5f, 0x0, 0x61, 0x0]}}, &(0x7f0000000800)=""/155, 0x62, 0x9b, 0x0, 0x6, 0x0, @void, @value}, 0x28) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1a, 0xc073, 0x800, 0x5, 0x10000, r7, 0xf42, '\x00', r8, r9, 0x2, 0x1, 0x0, 0x0, @void, @value, @value=r10}, 0x50) r11 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_ACTIVATE(r11, 0x5606, 0x40) r12 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r12, 0x541b, &(0x7f00000009c0)) ioctl$TCSETSF2(r11, 0x402c542d, &(0x7f0000000a00)={0x5, 0xffff, 0x3, 0x7, 0x7, "c909470d57fc415c687d9eae90baa87e4220f6", 0x8, 0x2}) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000a40)) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000000a80)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000ac0)=0x3, 0x4) 2.790495313s ago: executing program 3 (id=1203): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000080)={@local}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000", @ANYRES32=0xee00, @ANYBLOB="0200", @ANYBLOB="0400000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioperm(0x284, 0x7f, 0xe3) r2 = memfd_secret(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x7, 0x5, 0x2}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 2.340101679s ago: executing program 3 (id=1204): prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(r0, &(0x7f00000001c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0xfffffffffffffff7, 0x4, 0x4, 0x8}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix={0x3b, 0x1, 0x35303553, 0x8, 0x7, 0x9103, 0x2, 0x3ff, 0x1, 0x4, 0x3, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000040), 0xa4b9, 0x2) userfaultfd(0x800) 1.82545075s ago: executing program 5 (id=1205): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1.728288886s ago: executing program 3 (id=1206): socket$nl_route(0x10, 0x3, 0x0) utime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x8, 0x200000) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000200)={0x6, "aa1cc352cc350a7702989ffd587323fdabf63b1ce2fcb84aed49495f68add03f", 0x8f481f82c8a0386d, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r4 = socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0x2, 0x81b) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYRES16, @ANYRES32=r8, @ANYRESDEC], 0x3c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB='\x00\b)\x00', @ANYRES16=r8, @ANYBLOB="0c009900070000004000000005008900020000000600480060000000"], 0x38}, 0x1, 0x0, 0x0, 0x9c0c666f398b536b}, 0x40801) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4001, 0x8, @loopback}, 0x1c) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00@\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000080001002756b8b1c9dfbd44cfe1b9e9acd52abffaff2e12b3657d15f08d049899ab32786d6ea103757374d1af37beb6088de6e02f8023e5f6707bfe3dd1e7dfc8563ef3bb00927bc2239a421d0e2a9f4171d673e603191d6cc5aac827572f1ba0cc86c0601faae60c9481b82f78b27a2506885c11897b215dd714e63a6f51", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000003000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="0ecf5cdcc6170c7014c62205f66c9623718cb1831c7820a0fcea8e54f1a411b61b265ed256ad3c69fedc85599113d78bcaf3b5e3a720a849ce7d9ef4abfb41eeb3d11752eec8339c457b52ec7c181e3a313d3f27e8be01dc029ba3add8c141120c5def30a1ea006aea645593f02f4238f940e1b83b7d762026d865e1a7bb2fb93ffd85266dda7528a1f6fca26c3de43534b30b7e165270a15f9b0a3c0c70a4a434920f189f75d7ca14380a544d5562"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x44884) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$char_usb(r11, &(0x7f0000000140)=""/21, 0x15) 1.727963926s ago: executing program 1 (id=1207): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x24, 0x800000000004}, &(0x7f0000bbdffc)) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) socket$inet6(0xa, 0x80000, 0x1ff) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001100010000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0800000049c1000008001c00", @ANYRES32, @ANYBLOB="6b91d1c4c7e277ff3e7f06f88af4452131efbd8e4d6d042dc7a039dd33ab65a26620065374619867f4d63013ebd842c0658e6204fcf2f1968f6a35f231ee4aea67c574bed477826823a3b14249857abb29f36d0c9c6e15a075595ccf7dde5ece3687033a0536b31a81447fa37b67a516bcef334a3d73833e8d9cbacab8e1dc530abcae67fc53"], 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f00000000c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.727314942s ago: executing program 4 (id=1208): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000080)={@local}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000", @ANYRES32=0xee00, @ANYBLOB="0200", @ANYBLOB="0400000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioperm(0x284, 0x7f, 0xe3) r2 = memfd_secret(0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x7, 0x5, 0x2}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 1.478030719s ago: executing program 5 (id=1209): openat$fb0(0xffffffffffffff9c, 0x0, 0x82100, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x54}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40000) socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0xc, 0x4) 678.592414ms ago: executing program 4 (id=1210): r0 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x101) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00000003000000000000040500060000"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x4000}, 0xc) 321.005963ms ago: executing program 1 (id=1211): openat$fb0(0xffffffffffffff9c, 0x0, 0x82100, 0x0) r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0xc, 0x4) 280.81067ms ago: executing program 4 (id=1212): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x7, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x80010, r0, 0x2544b000) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @broadcast=0xac141436}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r8, r8, 0x0, 0x40008) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() 0s ago: executing program 0 (id=1213): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0xf4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x22, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000240)={0x1, r9, 0x7f, 0x1ff, 0xfffffff8, 0x2, 0x2}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="0100"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 0 maxpacket: 32 [ 304.266785][ T30] audit: type=1400 audit(1745694177.860:596): avc: denied { setopt } for pid=8968 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.288618][ T973] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.303248][ T973] usb 5-1: config 1 interface 0 has no altsetting 0 [ 304.312323][ T973] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 304.391116][ T8992] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.410051][ T81] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 304.569882][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 304.610998][ T81] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 304.686573][ T81] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.689216][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.707817][ T81] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.717841][ T81] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.730531][ T81] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.744614][ T81] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.745540][ T973] usb 5-1: Product: syz [ 304.755360][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.770052][ T973] usb 5-1: Manufacturer: syz [ 304.774753][ T973] usb 5-1: SerialNumber: syz [ 305.147654][ T30] audit: type=1400 audit(1745694178.840:597): avc: denied { create } for pid=8997 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 305.226710][ T81] usb 3-1: usb_control_msg returned -32 [ 305.232915][ T81] usbtmc 3-1:16.0: can't read capabilities [ 305.233457][ T973] usbhid 5-1:1.0: can't add hid device: -71 [ 305.242844][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.286837][ T973] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 305.357822][ T973] usb 5-1: USB disconnect, device number 44 [ 305.396205][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.453146][ T30] audit: type=1400 audit(1745694179.200:598): avc: denied { map } for pid=9005 comm="syz.3.836" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 305.475956][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.486889][ T30] audit: type=1400 audit(1745694179.200:599): avc: denied { execute } for pid=9005 comm="syz.3.836" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 305.510049][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.113415][ T30] audit: type=1400 audit(1745694179.860:600): avc: denied { connect } for pid=8988 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 306.120871][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 306.133153][ T30] audit: type=1400 audit(1745694179.870:601): avc: denied { write } for pid=8988 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 306.440047][ T81] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 306.492219][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 306.737310][ T30] audit: type=1400 audit(1745694180.480:602): avc: denied { setopt } for pid=9021 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.737674][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 306.793283][ T81] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 306.804067][ T81] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 306.817934][ T81] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.828028][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.846013][ T81] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.853724][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.866441][ T9] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 306.877984][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.888905][ T9] usb 2-1: Product: syz [ 306.895659][ T9] usb 2-1: Manufacturer: syz [ 306.901228][ T9] usb 2-1: SerialNumber: syz [ 306.903879][ T81] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 306.915618][ T9] usb 2-1: config 0 descriptor?? [ 306.926091][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.945839][ T9] usb 2-1: no audio or video endpoints found [ 307.107282][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 307.108337][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.108589][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.111450][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.113426][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.142920][ T5824] usb 2-1: USB disconnect, device number 58 [ 307.159938][ T5915] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 307.182096][ T81] usb 5-1: USB disconnect, device number 45 [ 307.341403][ T5915] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.352486][ T5915] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 307.363679][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.370330][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 307.379358][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.391137][ T5915] usb 4-1: config 0 descriptor?? [ 307.396895][ T9024] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 307.734272][ T9030] virtio-fs: tag not found [ 307.811923][ T9024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.040183][ T9024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.167646][ T9025] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 308.372559][ T9037] ======================================================= [ 308.372559][ T9037] WARNING: The mand mount option has been deprecated and [ 308.372559][ T9037] and is ignored by this kernel. Remove the mand [ 308.372559][ T9037] option from the mount to silence this warning. [ 308.372559][ T9037] ======================================================= [ 308.407531][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.428498][ T9045] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 309.435132][ T9045] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 309.443262][ T9045] vhci_hcd vhci_hcd.0: Device attached [ 309.452336][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 309.452491][ T30] audit: type=1400 audit(1745694183.200:606): avc: denied { bind } for pid=9038 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.557517][ T9046] vhci_hcd: connection closed [ 309.568223][ T13] vhci_hcd: stop threads [ 309.602656][ T13] vhci_hcd: release socket [ 309.607437][ T13] vhci_hcd: disconnect device [ 309.652560][ T9051] 9pnet_fd: Insufficient options for proto=fd [ 309.951580][ T81] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 310.130487][ T81] usb 5-1: Using ep0 maxpacket: 32 [ 310.174986][ T81] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.219644][ T81] usb 5-1: config 1 interface 0 has no altsetting 0 [ 310.408069][ T81] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 310.431568][ T81] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.439803][ T81] usb 5-1: Product: syz [ 310.445887][ T81] usb 5-1: Manufacturer: syz [ 310.504498][ T81] usb 5-1: SerialNumber: syz [ 310.575289][ T30] audit: type=1400 audit(1745694184.320:607): avc: denied { setopt } for pid=9066 comm="syz.0.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 310.783555][ T81] usbhid 5-1:1.0: can't add hid device: -71 [ 310.789567][ T81] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 310.806358][ T81] usb 5-1: USB disconnect, device number 46 [ 311.050180][ T9075] bridge0: port 3(team0) entered blocking state [ 311.056522][ T9075] bridge0: port 3(team0) entered disabled state [ 311.062967][ T9075] team0: entered allmulticast mode [ 311.068085][ T9075] team_slave_0: entered allmulticast mode [ 311.073848][ T9075] team_slave_1: entered allmulticast mode [ 311.081304][ T9075] team0: entered promiscuous mode [ 311.086338][ T9075] team_slave_0: entered promiscuous mode [ 311.092278][ T9075] team_slave_1: entered promiscuous mode [ 311.098499][ T9075] bridge0: port 3(team0) entered blocking state [ 311.104850][ T9075] bridge0: port 3(team0) entered forwarding state [ 311.141203][ T9011] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 311.202426][ T9024] delete_channel: no stack [ 311.212542][ T9011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.233160][ T30] audit: type=1400 audit(1745694184.790:608): avc: granted { setsecparam } for pid=9072 comm="syz.1.855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 311.245368][ T81] usb 3-1: USB disconnect, device number 56 [ 311.260158][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 311.267794][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.281923][ T5915] usb 4-1: USB disconnect, device number 37 [ 311.469144][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.482221][ T9085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.492033][ T30] audit: type=1400 audit(1745694185.240:609): avc: denied { write } for pid=9083 comm="syz.4.859" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 311.492373][ T9085] random: crng reseeded on system resumption [ 311.515464][ T30] audit: type=1400 audit(1745694185.240:610): avc: denied { ioctl } for pid=9083 comm="syz.4.859" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 311.927683][ T81] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 312.189758][ T973] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 312.221407][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.232428][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.245168][ T81] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 312.258291][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.269280][ T81] usb 3-1: config 0 descriptor?? [ 312.352110][ T9099] x_tables: ip_tables: osf match: only valid for protocol 6 [ 312.652531][ T2147] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 312.844691][ T9103] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 312.851328][ T9103] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 312.859097][ T9103] vhci_hcd vhci_hcd.0: Device attached [ 312.913086][ T2147] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.921910][ T2147] usb 4-1: config 4 has an invalid interface number: 64 but max is 0 [ 312.930101][ T2147] usb 4-1: config 4 has no interface number 0 [ 312.936233][ T2147] usb 4-1: config 4 interface 64 has no altsetting 0 [ 312.944868][ T2147] usb 4-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=22.37 [ 312.953986][ T2147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.962256][ T2147] usb 4-1: Product: syz [ 312.966468][ T2147] usb 4-1: Manufacturer: syz [ 312.971311][ T2147] usb 4-1: SerialNumber: syz [ 313.035450][ T81] usbhid 3-1:0.0: can't add hid device: -71 [ 313.041787][ T81] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 313.053176][ T81] usb 3-1: USB disconnect, device number 57 [ 313.093424][ T9104] vhci_hcd: connection closed [ 313.095856][ T7022] vhci_hcd: stop threads [ 313.106928][ T7022] vhci_hcd: release socket [ 313.111777][ T7022] vhci_hcd: disconnect device [ 313.129781][ T5915] usb 42-1: enqueue for inactive port 0 [ 313.199925][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.208555][ T2147] usb 4-1: bad CDC descriptors [ 313.221009][ T2147] usb 4-1: USB disconnect, device number 38 [ 313.236059][ T9108] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.521527][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.860872][ T5915] usb usb42-port1: attempt power cycle [ 314.286928][ T9123] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.583676][ T9126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.868'. [ 314.626144][ T9119] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 314.632793][ T9119] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 314.643194][ T9119] vhci_hcd vhci_hcd.0: Device attached [ 314.719783][ T5915] usb 42-1: SetAddress Request (9) to port 0 [ 314.726181][ T5915] usb 42-1: new SuperSpeed USB device number 9 using vhci_hcd [ 314.794169][ T9127] vhci_hcd: connection reset by peer [ 314.800293][ T7024] vhci_hcd: stop threads [ 314.810088][ T7024] vhci_hcd: release socket [ 314.819780][ T7024] vhci_hcd: disconnect device [ 314.901307][ T81] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 315.012731][ T9136] netlink: 256 bytes leftover after parsing attributes in process `syz.2.872'. [ 315.022351][ T9136] netlink: 56 bytes leftover after parsing attributes in process `syz.2.872'. [ 315.820635][ T81] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 315.847310][ T81] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.888286][ T81] usb 2-1: Product: syz [ 315.892561][ T81] usb 2-1: Manufacturer: syz [ 315.897925][ T81] usb 2-1: SerialNumber: syz [ 316.030354][ T30] audit: type=1400 audit(1745694189.750:611): avc: denied { append } for pid=9141 comm="syz.4.874" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 316.053686][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.068654][ T81] usb 2-1: config 0 descriptor?? [ 316.077313][ T81] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 316.236747][ T9151] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 316.243377][ T9151] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 316.251318][ T9151] vhci_hcd vhci_hcd.0: Device attached [ 316.554208][ T9131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 316.560758][ T9131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 316.569814][ T9131] vhci_hcd vhci_hcd.0: Device attached [ 316.581465][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.594453][ T81] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 316.606528][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.617611][ T81] sq905c 2-1:0.0: Get version command failed [ 316.637985][ T9157] vhci_hcd: connection closed [ 316.638234][ T7022] vhci_hcd: stop threads [ 316.657139][ T81] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 316.691599][ T7022] vhci_hcd: release socket [ 316.714853][ T81] usb 2-1: USB disconnect, device number 59 [ 316.726674][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.733352][ T9153] vhci_hcd: connection closed [ 316.739587][ T7022] vhci_hcd: disconnect device [ 316.750101][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.812517][ T7022] vhci_hcd: stop threads [ 316.817068][ T7022] vhci_hcd: release socket [ 316.835913][ T7022] vhci_hcd: disconnect device [ 316.843828][ T9] usb 34-1: SetAddress Request (3) to port 0 [ 316.855823][ T9] usb 34-1: new SuperSpeed USB device number 3 using vhci_hcd [ 316.880096][ T9] usb 34-1: enqueue for inactive port 0 [ 317.137427][ T9171] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 317.573541][ T9] usb usb34-port1: attempt power cycle [ 318.053804][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 318.061206][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 318.679144][ T9] usb usb34-port1: unable to enumerate USB device [ 319.863039][ T30] audit: type=1400 audit(1745694193.610:612): avc: denied { watch_mount } for pid=9191 comm="syz.3.884" path="/177" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 319.920259][ T5915] usb 42-1: device descriptor read/8, error -110 [ 320.030453][ T5915] usb usb42-port1: unable to enumerate USB device [ 320.044412][ T9206] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 321.025586][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 321.034960][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.889'. [ 321.044544][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 321.053571][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.889'. [ 322.161023][ T5915] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 322.458936][ T5915] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 322.550342][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.706484][ T5915] usb 4-1: config 0 descriptor?? [ 322.869278][ T5915] gspca_main: spca508-2.14.0 probing 8086:0110 [ 323.032867][ T9230] xt_cgroup: xt_cgroup: no path or classid specified [ 323.576316][ T5915] gspca_spca508: reg_read err -110 [ 323.584147][ T5915] gspca_spca508: reg_read err -32 [ 323.595027][ T5915] gspca_spca508: reg_read err -32 [ 324.100739][ T5915] gspca_spca508: reg_read err -71 [ 324.125149][ T5915] gspca_spca508: reg write: error -71 [ 324.134699][ T5915] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 324.148197][ T30] audit: type=1400 audit(1745694197.890:613): avc: denied { ioctl } for pid=9241 comm="syz.0.895" path="/dev/input/mouse0" dev="devtmpfs" ino=999 ioctlcmd=0x5400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 324.151099][ T973] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 324.183202][ T5915] usb 4-1: USB disconnect, device number 39 [ 324.203660][ T9244] IPv6: addrconf: prefix option has invalid lifetime [ 324.315155][ T30] audit: type=1400 audit(1745694198.060:614): avc: denied { ioctl } for pid=9251 comm="syz.0.900" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 324.359771][ T973] usb 5-1: device descriptor read/64, error -71 [ 324.489780][ T5866] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 324.599761][ T973] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 324.649914][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 324.656234][ T5866] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 324.664533][ T5866] usb 3-1: config 0 has no interface number 0 [ 324.672439][ T5866] usb 3-1: New USB device found, idVendor=0403, idProduct=d011, bcdDevice=45.12 [ 324.681824][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.689999][ T5866] usb 3-1: Product: syz [ 324.694173][ T5866] usb 3-1: Manufacturer: syz [ 324.698740][ T5866] usb 3-1: SerialNumber: syz [ 324.704844][ T5866] usb 3-1: config 0 descriptor?? [ 324.714467][ T5866] ftdi_sio 3-1:0.78: FTDI USB Serial Device converter detected [ 324.722931][ T5866] ftdi_sio ttyUSB0: unknown device type: 0x4512 [ 324.730210][ T973] usb 5-1: device descriptor read/64, error -71 [ 324.840529][ T973] usb usb5-port1: attempt power cycle [ 324.917703][ T5915] usb 3-1: USB disconnect, device number 58 [ 324.925105][ T5915] ftdi_sio 3-1:0.78: device disconnected [ 325.059768][ T5866] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 325.195493][ T973] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 325.212070][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 325.239071][ T973] usb 5-1: device descriptor read/8, error -71 [ 325.248368][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.259722][ T5866] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 325.268968][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.303621][ T5866] usb 4-1: config 0 descriptor?? [ 325.480212][ T973] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 325.571999][ T973] usb 5-1: device descriptor read/8, error -71 [ 325.697535][ T973] usb usb5-port1: unable to enumerate USB device [ 325.752007][ T5866] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 325.931609][ T5915] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 326.026643][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 326.035540][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 326.059033][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 326.092580][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 326.099516][ T5915] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 326.108600][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.121249][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.132022][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.143044][ T5915] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.156256][ T5915] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.165386][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.296893][ T5865] usb 4-1: USB disconnect, device number 40 [ 326.384087][ T5915] usb 2-1: usb_control_msg returned -32 [ 326.392234][ T5915] usbtmc 2-1:16.0: can't read capabilities [ 326.393766][ T9267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.477325][ T9267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.489993][ T2147] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 326.660968][ T2147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.674782][ T2147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 326.686993][ T2147] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 326.700164][ T2147] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.709260][ T2147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.717557][ T2147] usb 5-1: Product: syz [ 326.722403][ T2147] usb 5-1: Manufacturer: syz [ 326.727017][ T2147] usb 5-1: SerialNumber: syz [ 326.734088][ T9275] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 327.010724][ T5865] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 327.149778][ T5865] usb 3-1: device descriptor read/64, error -71 [ 327.390276][ T5865] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 327.550747][ T5865] usb 3-1: device descriptor read/64, error -71 [ 327.660852][ T5865] usb usb3-port1: attempt power cycle [ 327.827784][ T2147] cdc_ncm 5-1:1.0: bind() failure [ 327.839285][ T2147] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 327.849282][ T2147] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 327.870855][ T2147] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 327.900158][ T2147] usb 5-1: USB disconnect, device number 52 [ 328.039778][ T5865] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 328.063438][ T5865] usb 3-1: device descriptor read/8, error -71 [ 328.276321][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.285068][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.293102][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.303545][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.311133][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.324284][ T30] audit: type=1400 audit(1745694202.070:615): avc: denied { mounton } for pid=9289 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 328.350192][ T5865] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 328.390767][ T5865] usb 3-1: device descriptor read/8, error -71 [ 328.513673][ T5865] usb usb3-port1: unable to enumerate USB device [ 328.555816][ T9289] chnl_net:caif_netlink_parms(): no params data found [ 328.991950][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.003866][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.025149][ T9289] bridge_slave_0: entered allmulticast mode [ 329.049298][ T9289] bridge_slave_0: entered promiscuous mode [ 329.081861][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.091423][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.098748][ T9289] bridge_slave_1: entered allmulticast mode [ 329.107115][ T9289] bridge_slave_1: entered promiscuous mode [ 329.145652][ T9289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.157068][ T9289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.191204][ T9289] team0: Port device team_slave_0 added [ 329.198706][ T9289] team0: Port device team_slave_1 added [ 329.243313][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.250595][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.276464][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.283651][ T9289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.299169][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.307008][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.332888][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.339240][ T9289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.374389][ T9289] hsr_slave_0: entered promiscuous mode [ 329.380539][ T9289] hsr_slave_1: entered promiscuous mode [ 329.386431][ T9289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.394259][ T9289] Cannot create hsr debugfs directory [ 330.089814][ T30] audit: type=1400 audit(1745694203.830:616): avc: denied { bind } for pid=9313 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.226262][ T9289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.237329][ T9289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.249491][ T9289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.260196][ T9289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.402252][ T5820] Bluetooth: hci3: command tx timeout [ 330.664566][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.761456][ T9289] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.777501][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.784617][ T7022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.817870][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.825840][ T7022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.850913][ T9289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.903465][ T9289] veth0_vlan: entered promiscuous mode [ 331.921333][ T9289] veth1_vlan: entered promiscuous mode [ 331.929956][ T9281] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 331.967725][ T9352] syzkaller0: entered promiscuous mode [ 331.973291][ T9352] syzkaller0: entered allmulticast mode [ 332.020268][ T9281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.034101][ T5865] usb 2-1: USB disconnect, device number 60 [ 332.484355][ T5820] Bluetooth: hci3: command tx timeout [ 332.529761][ T5865] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 332.686974][ T5865] usb 2-1: no configurations [ 332.699865][ T5865] usb 2-1: can't read configurations, error -22 [ 332.849748][ T5865] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 333.020312][ T5865] usb 2-1: no configurations [ 333.036506][ T5865] usb 2-1: can't read configurations, error -22 [ 333.073863][ T5865] usb usb2-port1: attempt power cycle [ 333.421358][ T5865] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 333.441028][ T9289] veth0_macvtap: entered promiscuous mode [ 333.452259][ T5865] usb 2-1: no configurations [ 333.456880][ T5865] usb 2-1: can't read configurations, error -22 [ 333.460174][ T9289] veth1_macvtap: entered promiscuous mode [ 333.509852][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.530030][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.541951][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.553139][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.565329][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.580316][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.582769][ T5820] Bluetooth: hci1: unexpected event for opcode 0x041c [ 333.594719][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.610909][ T5865] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 333.613576][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.629344][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.641685][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.654796][ T9289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.663822][ T5865] usb 2-1: no configurations [ 333.664101][ T9289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.668488][ T5865] usb 2-1: can't read configurations, error -22 [ 333.677269][ T9289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.677299][ T9289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.705543][ T5865] usb usb2-port1: unable to enumerate USB device [ 333.786124][ T4544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.794982][ T4544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.828511][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.830964][ T5915] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 333.839461][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.865277][ T30] audit: type=1400 audit(1745694207.610:617): avc: denied { mounton } for pid=9289 comm="syz-executor" path="/root/syzkaller.tivTRT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 333.933791][ T30] audit: type=1400 audit(1745694207.670:618): avc: denied { mounton } for pid=9289 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 334.130717][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 334.137287][ T5915] usb 5-1: config 1 has an invalid interface number: 203 but max is 0 [ 334.145947][ T5915] usb 5-1: config 1 has no interface number 0 [ 334.154270][ T5915] usb 5-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 334.163700][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.173054][ T5915] usb 5-1: Product: syz [ 334.177378][ T5915] usb 5-1: Manufacturer: syz [ 334.182352][ T5915] usb 5-1: SerialNumber: syz [ 334.388042][ T9376] netlink: 84 bytes leftover after parsing attributes in process `syz.2.937'. [ 334.404937][ T5915] aqc111 5-1:1.203: probe with driver aqc111 failed with error -22 [ 334.559930][ T5820] Bluetooth: hci3: command tx timeout [ 336.639732][ T5820] Bluetooth: hci3: command tx timeout [ 336.757670][ T30] audit: type=1400 audit(1745694210.500:619): avc: denied { mounton } for pid=9403 comm="syz.2.945" path="/188/file1/file0" dev="autofs" ino=23738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 336.757693][ T9404] FAULT_INJECTION: forcing a failure. [ 336.757693][ T9404] name failslab, interval 1, probability 0, space 0, times 0 [ 336.803943][ T9404] CPU: 0 UID: 0 PID: 9404 Comm: syz.2.945 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 336.803970][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 336.803980][ T9404] Call Trace: [ 336.803986][ T9404] [ 336.803993][ T9404] dump_stack_lvl+0x16c/0x1f0 [ 336.804018][ T9404] should_fail_ex+0x512/0x640 [ 336.804039][ T9404] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 336.804064][ T9404] should_failslab+0xc2/0x120 [ 336.804082][ T9404] __kmalloc_cache_noprof+0x6a/0x3e0 [ 336.804103][ T9404] ? lockdep_init_map_type+0x5c/0x280 [ 336.804133][ T9404] ? shmem_init_fs_context+0x45/0x2b0 [ 336.804159][ T9404] shmem_init_fs_context+0x45/0x2b0 [ 336.804181][ T9404] ? __pfx_shmem_init_fs_context+0x10/0x10 [ 336.804202][ T9404] alloc_fs_context+0x54a/0x9c0 [ 336.804222][ T9404] path_mount+0xb06/0x1f20 [ 336.804241][ T9404] ? kmem_cache_free+0x2d4/0x4d0 [ 336.804263][ T9404] ? __pfx_path_mount+0x10/0x10 [ 336.804283][ T9404] ? putname+0x154/0x1a0 [ 336.804303][ T9404] __x64_sys_mount+0x28d/0x310 [ 336.804320][ T9404] ? __pfx___x64_sys_mount+0x10/0x10 [ 336.804336][ T9404] ? rcu_is_watching+0x12/0xc0 [ 336.804362][ T9404] do_syscall_64+0xcd/0x260 [ 336.804384][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.804400][ T9404] RIP: 0033:0x7f5113f8e969 [ 336.804415][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.804431][ T9404] RSP: 002b:00007f5114dc8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.804447][ T9404] RAX: ffffffffffffffda RBX: 00007f51141b5fa0 RCX: 00007f5113f8e969 [ 336.804458][ T9404] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 336.804467][ T9404] RBP: 00007f5114dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 336.804477][ T9404] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 336.804486][ T9404] R13: 0000000000000000 R14: 00007f51141b5fa0 R15: 00007fff725a4098 [ 336.804508][ T9404] [ 337.194094][ T5824] usb 5-1: USB disconnect, device number 53 [ 337.678695][ T12] bridge_slave_1: left allmulticast mode [ 337.685170][ T5820] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 337.694669][ T5820] Bluetooth: hci1: Injecting HCI hardware error event [ 337.702927][ T5820] Bluetooth: hci1: hardware error 0x00 [ 337.717023][ T12] bridge_slave_1: left promiscuous mode [ 337.724368][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.735812][ T12] bridge_slave_0: left allmulticast mode [ 337.741673][ T12] bridge_slave_0: left promiscuous mode [ 337.747413][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.982901][ T9412] random: crng reseeded on system resumption [ 338.056453][ T30] audit: type=1400 audit(1745694211.800:620): avc: denied { accept } for pid=9411 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 338.131315][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 338.409737][ T1789] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 339.291963][ T1789] usb 2-1: no configurations [ 339.296602][ T1789] usb 2-1: can't read configurations, error -22 [ 339.317888][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 339.392292][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.402810][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.412250][ T12] bond0 (unregistering): Released all slaves [ 339.428434][ T12] bond1 (unregistering): Released all slaves [ 339.440091][ T1789] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 339.456166][ T12] bond2 (unregistering): Released all slaves [ 339.491975][ T9428] veth3: entered promiscuous mode [ 339.860557][ T9433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=9433 comm=syz.0.954 [ 339.876016][ T9433] bridge0: port 3(batadv0) entered blocking state [ 339.883356][ T9433] bridge0: port 3(batadv0) entered disabled state [ 339.890457][ T9433] batadv0: entered allmulticast mode [ 339.902784][ T9433] batadv0: entered promiscuous mode [ 339.910762][ T9433] bridge0: port 3(batadv0) entered blocking state [ 339.917259][ T9433] bridge0: port 3(batadv0) entered forwarding state [ 340.038010][ T9433] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 340.049967][ T5820] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 340.063315][ T1337] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 340.071438][ T30] audit: type=1400 audit(1745694213.600:621): avc: granted { setsecparam } for pid=9430 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 340.074647][ T1337] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 340.094481][ T1789] usb 2-1: no configurations [ 340.117811][ T1789] usb 2-1: can't read configurations, error -22 [ 340.124817][ T1789] usb usb2-port1: attempt power cycle [ 340.469813][ T1789] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 340.498686][ T1789] usb 2-1: no configurations [ 340.511441][ T1789] usb 2-1: can't read configurations, error -22 [ 340.626316][ T12] hsr_slave_0: left promiscuous mode [ 340.651935][ T12] hsr_slave_1: left promiscuous mode [ 340.669387][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.723250][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.811055][ T1789] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 341.040226][ T1789] usb 2-1: device descriptor read/8, error -71 [ 341.147318][ T9457] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[9457] [ 341.508829][ T1789] usb usb2-port1: unable to enumerate USB device [ 341.979128][ T12] team0 (unregistering): Port device team_slave_1 removed [ 342.047569][ T12] team0 (unregistering): Port device team_slave_0 removed [ 342.080005][ T5823] Bluetooth: hci3: command 0x0405 tx timeout [ 342.608239][ T9474] overlay: filesystem on ./file1 not supported [ 344.444659][ T9491] FAULT_INJECTION: forcing a failure. [ 344.444659][ T9491] name failslab, interval 1, probability 0, space 0, times 0 [ 344.457711][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.3.970 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 344.457735][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 344.457746][ T9491] Call Trace: [ 344.457751][ T9491] [ 344.457758][ T9491] dump_stack_lvl+0x16c/0x1f0 [ 344.457782][ T9491] should_fail_ex+0x512/0x640 [ 344.457813][ T9491] should_failslab+0xc2/0x120 [ 344.457831][ T9491] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 344.457851][ T9491] ? sidtab_sid2str_get+0x17a/0x680 [ 344.457880][ T9491] kmemdup_noprof+0x29/0x60 [ 344.457898][ T9491] sidtab_sid2str_get+0x17a/0x680 [ 344.457925][ T9491] sidtab_entry_to_string+0x33/0x110 [ 344.457950][ T9491] security_sid_to_context_core+0x35c/0x640 [ 344.457975][ T9491] avc_audit_post_callback+0x109/0x8f0 [ 344.458000][ T9491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 344.458026][ T9491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 344.458047][ T9491] ? skb_put+0x138/0x1b0 [ 344.458067][ T9491] ? audit_log_n_string+0x253/0x540 [ 344.458098][ T9491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 344.458122][ T9491] common_lsm_audit+0x24b/0x300 [ 344.458145][ T9491] ? __pfx_common_lsm_audit+0x10/0x10 [ 344.458168][ T9491] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 344.458186][ T9491] ? avc_update_node.isra.0+0x4c0/0xb60 [ 344.458214][ T9491] slow_avc_audit+0x186/0x210 [ 344.458240][ T9491] ? __pfx_slow_avc_audit+0x10/0x10 [ 344.458269][ T9491] ? avc_denied+0x14a/0x190 [ 344.458296][ T9491] ? avc_has_perm_noaudit+0x306/0x3b0 [ 344.458326][ T9491] avc_has_perm+0x18b/0x1c0 [ 344.458354][ T9491] ? __pfx_avc_has_perm+0x10/0x10 [ 344.458384][ T9491] ? avc_has_perm_noaudit+0x149/0x3b0 [ 344.458412][ T9491] selinux_path_notify+0x42e/0x4f0 [ 344.458433][ T9491] ? selinux_inode_permission+0x3d8/0x5a0 [ 344.458455][ T9491] ? __pfx_selinux_path_notify+0x10/0x10 [ 344.458475][ T9491] ? ovl_revert_creds+0x13/0x50 [ 344.458494][ T9491] ? __pfx_ovl_permission+0x10/0x10 [ 344.458523][ T9491] ? bpf_lsm_inode_permission+0x9/0x10 [ 344.458542][ T9491] ? security_inode_permission+0xbf/0x260 [ 344.458566][ T9491] security_path_notify+0x211/0x240 [ 344.458588][ T9491] do_fanotify_mark+0x9b0/0x3680 [ 344.458622][ T9491] ? __pfx_do_fanotify_mark+0x10/0x10 [ 344.458651][ T9491] ? ksys_write+0x1b9/0x240 [ 344.458673][ T9491] ? __pfx_ksys_write+0x10/0x10 [ 344.458695][ T9491] ? rcu_is_watching+0x12/0xc0 [ 344.458718][ T9491] __x64_sys_fanotify_mark+0xbd/0x160 [ 344.458738][ T9491] ? do_syscall_64+0x91/0x260 [ 344.458756][ T9491] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.458775][ T9491] do_syscall_64+0xcd/0x260 [ 344.458801][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.458818][ T9491] RIP: 0033:0x7f221c18e969 [ 344.458832][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.458848][ T9491] RSP: 002b:00007f221d043038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 344.458864][ T9491] RAX: ffffffffffffffda RBX: 00007f221c3b5fa0 RCX: 00007f221c18e969 [ 344.458875][ T9491] RDX: 0000000040009975 RSI: 0000000000000105 RDI: 0000000000000004 [ 344.458885][ T9491] RBP: 00007f221d043090 R08: 0000000000000000 R09: 0000000000000000 [ 344.458895][ T9491] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 344.458904][ T9491] R13: 0000000000000000 R14: 00007f221c3b5fa0 R15: 00007ffd37cd4538 [ 344.458929][ T9491] [ 344.796184][ T30] audit: type=1400 audit(1745694218.190:622): avc: denied { watch } for pid=9490 comm="syz.3.970" path="/9/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=72 ssid=146 tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 345.099944][ T5865] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 345.131641][ T1789] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 345.289829][ T1789] usb 2-1: Using ep0 maxpacket: 8 [ 345.295190][ T5865] usb 5-1: no configurations [ 345.301963][ T5865] usb 5-1: can't read configurations, error -22 [ 345.311568][ T1789] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 345.319818][ T1789] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.329520][ T1789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.339294][ T1789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.349322][ T1789] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.362438][ T1789] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.371536][ T1789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.439765][ T5865] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 345.509780][ T5824] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 345.584998][ T1789] usb 2-1: usb_control_msg returned -32 [ 345.587682][ T9497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.590815][ T1789] usbtmc 2-1:16.0: can't read capabilities [ 345.606626][ T5865] usb 5-1: no configurations [ 345.612355][ T5865] usb 5-1: can't read configurations, error -22 [ 345.623517][ T5865] usb usb5-port1: attempt power cycle [ 345.656753][ T9497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.670964][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 345.677239][ T5824] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 345.685832][ T5824] usb 4-1: config 179 has no interface number 0 [ 345.692340][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 345.703393][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 345.715067][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.726221][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 345.737635][ T5824] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 345.750868][ T5824] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 345.759916][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.769950][ T9502] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 345.969729][ T5865] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 345.987517][ T5824] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 345.999930][ T5865] usb 5-1: no configurations [ 346.007943][ T5865] usb 5-1: can't read configurations, error -22 [ 346.139801][ T5865] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 346.161204][ T5865] usb 5-1: no configurations [ 346.165998][ T5865] usb 5-1: can't read configurations, error -22 [ 346.173462][ T5865] usb usb5-port1: unable to enumerate USB device [ 346.316982][ T5824] usb 4-1: USB disconnect, device number 41 [ 346.322974][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 346.323010][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 346.341588][ T5824] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 347.315572][ T30] audit: type=1400 audit(1745694220.940:623): avc: denied { create } for pid=9507 comm="syz.3.977" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 347.404396][ T30] audit: type=1400 audit(1745694220.940:624): avc: denied { rename } for pid=9507 comm="syz.3.977" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=23872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 347.880208][ T1789] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 348.134546][ T1789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.147533][ T1789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.277965][ T1789] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.493322][ T1789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.529970][ T1789] usb 5-1: config 0 descriptor?? [ 349.813362][ T1789] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 350.082226][ T5865] usb 5-1: USB disconnect, device number 58 [ 350.084788][ T30] audit: type=1400 audit(1745694223.830:625): avc: denied { map } for pid=9531 comm="syz.0.984" path="socket:[23897]" dev="sockfs" ino=23897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 350.678034][ T9539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.986'. [ 350.926414][ T9541] 9pnet_fd: Insufficient options for proto=fd [ 351.048201][ T9503] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 351.077959][ T9503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.090128][ T5866] usb 2-1: USB disconnect, device number 69 [ 351.348832][ T9549] veth0_to_team: entered promiscuous mode [ 351.354677][ T9549] veth0_to_team: entered allmulticast mode [ 351.373041][ T5865] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 352.137627][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 352.163054][ T5865] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.191125][ T5865] usb 4-1: config 1 interface 0 has no altsetting 0 [ 352.202398][ T5865] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 352.224914][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.259338][ T5865] usb 4-1: Product: syz [ 352.279052][ T9560] netlink: 48 bytes leftover after parsing attributes in process `syz.0.992'. [ 352.288718][ T9560] netlink: 48 bytes leftover after parsing attributes in process `syz.0.992'. [ 352.359410][ T5865] usb 4-1: Manufacturer: syz [ 353.107337][ T5865] usb 4-1: SerialNumber: syz [ 353.300021][ T9564] fuse: Unknown parameter 'îõœ' [ 353.333012][ T9564] kernel profiling enabled (shift: 7) [ 353.651621][ T5865] usbhid 4-1:1.0: can't add hid device: -71 [ 353.657693][ T5865] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 353.683355][ T9569] __vm_enough_memory: pid: 9569, comm: syz.0.995, bytes: 21200402808832 not enough memory for the allocation [ 353.695196][ T30] audit: type=1400 audit(1745694227.430:626): avc: denied { wake_alarm } for pid=9567 comm="syz.0.995" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.727187][ T5865] usb 4-1: USB disconnect, device number 42 [ 354.375389][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.385665][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.394428][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.408981][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.418396][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.472279][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.496810][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.552105][ T9583] syzkaller0: entered allmulticast mode [ 354.560545][ T5865] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 354.595148][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.608885][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.625568][ T9583] FAULT_INJECTION: forcing a failure. [ 354.625568][ T9583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.650369][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.0.999 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 354.650386][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 354.650392][ T9583] Call Trace: [ 354.650396][ T9583] [ 354.650400][ T9583] dump_stack_lvl+0x16c/0x1f0 [ 354.650416][ T9583] should_fail_ex+0x512/0x640 [ 354.650433][ T9583] _copy_from_user+0x2e/0xd0 [ 354.650448][ T9583] get_user_ifreq+0xf1/0x250 [ 354.650460][ T9583] sock_do_ioctl+0x16b/0x280 [ 354.650472][ T9583] ? __pfx_sock_do_ioctl+0x10/0x10 [ 354.650487][ T9583] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 354.650504][ T9583] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 354.650521][ T9583] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 354.650539][ T9583] sock_ioctl+0x227/0x6b0 [ 354.650552][ T9583] ? __pfx_sock_ioctl+0x10/0x10 [ 354.650563][ T9583] ? hook_file_ioctl_common+0x145/0x410 [ 354.650584][ T9583] ? selinux_file_ioctl+0x180/0x270 [ 354.650599][ T9583] ? selinux_file_ioctl+0xb4/0x270 [ 354.650619][ T9583] ? __pfx_sock_ioctl+0x10/0x10 [ 354.650632][ T9583] __x64_sys_ioctl+0x190/0x200 [ 354.650648][ T9583] do_syscall_64+0xcd/0x260 [ 354.650662][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.650673][ T9583] RIP: 0033:0x7f047e98e969 [ 354.650682][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.650692][ T9583] RSP: 002b:00007f047f7d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.650702][ T9583] RAX: ffffffffffffffda RBX: 00007f047ebb5fa0 RCX: 00007f047e98e969 [ 354.650709][ T9583] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000009 [ 354.650715][ T9583] RBP: 00007f047f7d8090 R08: 0000000000000000 R09: 0000000000000000 [ 354.650721][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.650727][ T9583] R13: 0000000000000000 R14: 00007f047ebb5fa0 R15: 00007fff84c06768 [ 354.650740][ T9583] [ 354.874198][ T5865] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 354.883323][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.892878][ T5865] usb 5-1: config 0 descriptor?? [ 356.179782][ T30] audit: type=1400 audit(1745694229.910:627): avc: denied { mount } for pid=9594 comm="syz.1.1001" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 356.316009][ T5865] pegasus 5-1:0.0: can't reset MAC [ 356.324763][ T5865] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 356.348743][ T5865] usb 5-1: USB disconnect, device number 59 [ 356.480761][ T5823] Bluetooth: hci4: command tx timeout [ 356.505314][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.515941][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.610780][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.621300][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.119948][ T30] audit: type=1400 audit(1745694230.770:628): avc: denied { getopt } for pid=9612 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.137400][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.180272][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.216830][ T9578] chnl_net:caif_netlink_parms(): no params data found [ 358.261343][ T80] bridge_slave_1: left allmulticast mode [ 358.273088][ T80] bridge_slave_1: left promiscuous mode [ 358.378761][ T5865] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 358.401255][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.014469][ T5823] Bluetooth: hci4: command tx timeout [ 359.016685][ T1789] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 359.050287][ T80] bridge_slave_0: left allmulticast mode [ 359.117186][ T5865] usb 4-1: device descriptor read/64, error -71 [ 359.131148][ T80] bridge_slave_0: left promiscuous mode [ 359.137431][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.188584][ T9640] FAULT_INJECTION: forcing a failure. [ 359.188584][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 359.232987][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.4.1013 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 359.233012][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 359.233021][ T9640] Call Trace: [ 359.233027][ T9640] [ 359.233033][ T9640] dump_stack_lvl+0x16c/0x1f0 [ 359.233052][ T9640] should_fail_ex+0x512/0x640 [ 359.233066][ T9640] ? fs_reclaim_acquire+0xae/0x150 [ 359.233081][ T9640] should_failslab+0xc2/0x120 [ 359.233093][ T9640] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 359.233110][ T9640] ? security_inode_alloc+0x3b/0x2b0 [ 359.233125][ T9640] security_inode_alloc+0x3b/0x2b0 [ 359.233139][ T9640] inode_init_always_gfp+0xce4/0x1030 [ 359.233158][ T9640] alloc_inode+0x86/0x240 [ 359.233171][ T9640] sock_alloc+0x40/0x280 [ 359.233183][ T9640] do_accept+0xf7/0x530 [ 359.233196][ T9640] ? do_raw_spin_lock+0x12c/0x2b0 [ 359.233208][ T9640] ? __pfx_do_accept+0x10/0x10 [ 359.233230][ T9640] __sys_accept4+0x100/0x1b0 [ 359.233244][ T9640] ? __pfx___sys_accept4+0x10/0x10 [ 359.233258][ T9640] ? __pfx_ksys_write+0x10/0x10 [ 359.233272][ T9640] ? rcu_is_watching+0x12/0xc0 [ 359.233287][ T9640] __x64_sys_accept4+0x96/0x100 [ 359.233300][ T9640] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.233312][ T9640] do_syscall_64+0xcd/0x260 [ 359.233325][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.233336][ T9640] RIP: 0033:0x7f9e21f8e969 [ 359.233345][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.233355][ T9640] RSP: 002b:00007f9e22dda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 359.233366][ T9640] RAX: ffffffffffffffda RBX: 00007f9e221b5fa0 RCX: 00007f9e21f8e969 [ 359.233373][ T9640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 359.233379][ T9640] RBP: 00007f9e22dda090 R08: 0000000000000000 R09: 0000000000000000 [ 359.233385][ T9640] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 359.233391][ T9640] R13: 0000000000000000 R14: 00007f9e221b5fa0 R15: 00007ffe7becf5b8 [ 359.233404][ T9640] [ 359.502617][ T1789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.514213][ T1789] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 359.523285][ T1789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.566538][ T1789] usb 2-1: config 0 descriptor?? [ 359.574567][ T1789] usb 2-1: bad CDC descriptors [ 359.588643][ T30] audit: type=1326 audit(1745694233.330:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.590059][ T5865] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 359.628246][ T30] audit: type=1326 audit(1745694233.370:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.652839][ T30] audit: type=1326 audit(1745694233.370:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.676743][ T30] audit: type=1326 audit(1745694233.370:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.703817][ T30] audit: type=1326 audit(1745694233.370:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.728528][ T30] audit: type=1326 audit(1745694233.370:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.752294][ T30] audit: type=1326 audit(1745694233.370:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.776524][ T30] audit: type=1326 audit(1745694233.370:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f047e98e969 code=0x7ffc0000 [ 359.799870][ T5865] usb 4-1: device descriptor read/64, error -71 [ 359.909947][ T5865] usb usb4-port1: attempt power cycle [ 360.075738][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.090841][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.101932][ T80] bond0 (unregistering): Released all slaves [ 360.249950][ T5865] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 360.271364][ T5865] usb 4-1: device descriptor read/8, error -71 [ 360.338482][ T9656] vlan0: entered allmulticast mode [ 360.484176][ T9660] erofs (device nbd4): cannot find valid erofs superblock [ 360.552938][ T5865] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 360.596705][ T5865] usb 4-1: device descriptor read/8, error -71 [ 360.769219][ T5865] usb usb4-port1: unable to enumerate USB device [ 360.887251][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.896129][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.903431][ T9578] bridge_slave_0: entered allmulticast mode [ 360.910709][ T9578] bridge_slave_0: entered promiscuous mode [ 360.926317][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.940403][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.947734][ T9578] bridge_slave_1: entered allmulticast mode [ 360.962699][ T9578] bridge_slave_1: entered promiscuous mode [ 361.039778][ T5823] Bluetooth: hci4: command tx timeout [ 361.730548][ T2147] usb 2-1: USB disconnect, device number 70 [ 361.903768][ T80] hsr_slave_0: left promiscuous mode [ 361.911954][ T80] hsr_slave_1: left promiscuous mode [ 362.044972][ T80] veth1_macvtap: left promiscuous mode [ 362.091500][ T80] veth0_macvtap: left promiscuous mode [ 362.140625][ T80] veth1_vlan: left promiscuous mode [ 362.194143][ T80] veth0_vlan: left promiscuous mode [ 363.119740][ T5823] Bluetooth: hci4: command tx timeout [ 365.167660][ T9692] overlayfs: overlapping lowerdir path [ 366.054698][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.119141][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.352558][ T9714] 9pnet_fd: Insufficient options for proto=fd [ 366.429847][ T5823] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 366.457242][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 366.457269][ T30] audit: type=1326 audit(1745694240.190:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.1.1028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab3a18e969 code=0x0 [ 366.505500][ T9578] team0: Port device team_slave_0 added [ 366.547854][ T9578] team0: Port device team_slave_1 added [ 367.129546][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 367.144735][ T9715] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 367.178149][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.199944][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.276549][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.319769][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 367.364912][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.372125][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.382940][ T9] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.398753][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.457621][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 367.558081][ T9749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1031'. [ 367.569255][ T9749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1031'. [ 367.579883][ T5865] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 368.226574][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 368.235827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.238216][ T9578] hsr_slave_0: entered promiscuous mode [ 368.244537][ T9] usb 5-1: Product: syz [ 368.244556][ T9] usb 5-1: Manufacturer: syz [ 368.259152][ T9] usb 5-1: SerialNumber: syz [ 368.302384][ T9578] hsr_slave_1: entered promiscuous mode [ 368.394218][ T5865] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 368.408560][ T5865] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 368.419629][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.469840][ T5865] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 368.479509][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.508128][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 368.515932][ T5865] usb 2-1: config 0 descriptor?? [ 368.522575][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 368.531238][ T9740] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 368.559308][ T9] usb 5-1: USB disconnect, device number 60 [ 368.745196][ T30] audit: type=1400 audit(1745694242.490:641): avc: denied { create } for pid=9735 comm="syz.1.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 369.060015][ T9578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.132160][ T9578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.171997][ T9578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.213596][ T9578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.257747][ T30] audit: type=1800 audit(1745694243.000:642): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1035" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 369.549812][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 370.623111][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 370.629179][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 370.968032][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 371.151142][ T9] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 371.162417][ T5865] usb 2-1: USB disconnect, device number 71 [ 371.176758][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.184070][ T9] usb 4-1: config 2 has no interface number 0 [ 371.193406][ T9] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 371.213869][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.220572][ T9] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.235953][ T9] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 371.249669][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.257752][ T9] usb 4-1: Product: syz [ 371.262164][ T9] usb 4-1: Manufacturer: syz [ 371.266771][ T9] usb 4-1: SerialNumber: syz [ 371.290867][ T9] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected [ 371.295727][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.306294][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.318100][ T9] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 371.355468][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.362576][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.153582][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.940056][ T2147] usb 4-1: USB disconnect, device number 47 [ 372.952892][ T2147] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 373.004201][ T2147] kobil_sct 4-1:2.45: device disconnected [ 373.280856][ T9578] veth0_vlan: entered promiscuous mode [ 373.304706][ T9578] veth1_vlan: entered promiscuous mode [ 373.419631][ T9578] veth0_macvtap: entered promiscuous mode [ 373.442033][ T9578] veth1_macvtap: entered promiscuous mode [ 373.481606][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.500078][ T2147] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 373.515551][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.549748][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.581921][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.604085][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.636204][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.668563][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.683254][ T2147] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 373.702437][ T2147] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.707821][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.738775][ T2147] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 373.766290][ T2147] usb 4-1: config 1 has no interface number 1 [ 373.779707][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.779782][ T2147] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 373.819707][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.845921][ T2147] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.858126][ T2147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.859735][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.872036][ T2147] usb 4-1: Product: syz [ 373.892259][ T2147] usb 4-1: Manufacturer: syz [ 373.896892][ T2147] usb 4-1: SerialNumber: syz [ 373.909449][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.930657][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.945389][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.005034][ T9578] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.488983][ T9851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.798510][ T9578] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.882930][ T9578] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.979420][ T9578] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.024094][ T2147] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 375.090816][ T2147] usb 4-1: MIDIStreaming interface descriptor not found [ 375.267941][ T2147] usb 4-1: USB disconnect, device number 48 [ 375.412962][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.454030][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.508973][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.519330][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.812836][ T9872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.822052][ T9872] bond0: (slave bond1): Enslaving as an active interface with an up link [ 375.854680][ T30] audit: type=1400 audit(1745694249.600:643): avc: denied { read write } for pid=9870 comm="syz.3.1049" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 375.861187][ T5866] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 376.328009][ T30] audit: type=1400 audit(1745694249.600:644): avc: denied { open } for pid=9870 comm="syz.3.1049" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 376.608897][ T5866] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.855381][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 378.254850][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.264218][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.030372][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 380.094796][ T9932] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1060'. [ 380.106482][ T9932] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1060'. [ 380.942898][ T30] audit: type=1400 audit(1745694254.680:645): avc: denied { sys_chroot } for pid=9934 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 381.272911][ T30] audit: type=1400 audit(1745694254.680:646): avc: denied { setgid } for pid=9934 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 381.379936][ T30] audit: type=1400 audit(1745694254.680:647): avc: denied { setrlimit } for pid=9934 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 381.499759][ T1789] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 381.649781][ T1789] usb 6-1: Using ep0 maxpacket: 8 [ 381.658497][ T1789] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 381.669303][ T1789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.694316][ T1789] usb 6-1: Product: syz [ 381.704408][ T1789] usb 6-1: Manufacturer: syz [ 381.719416][ T1789] usb 6-1: SerialNumber: syz [ 381.737059][ T9950] input: syz0 as /devices/virtual/input/input18 [ 381.753160][ T1789] usb 6-1: config 0 descriptor?? [ 381.771799][ T1789] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 382.198189][ T30] audit: type=1400 audit(1745694255.940:648): avc: denied { connect } for pid=9964 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 383.481719][ T5824] usb 6-1: USB disconnect, device number 2 [ 383.529690][ T30] audit: type=1400 audit(1745694257.270:649): avc: denied { create } for pid=9976 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.669548][ T9981] 9pnet_fd: Insufficient options for proto=fd [ 383.921864][ T1789] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 383.923720][ T9989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3110529662 (6221059324 ns) > initial count (5905613172 ns). Using initial count to start timer. [ 384.099749][ T1789] usb 4-1: Using ep0 maxpacket: 32 [ 384.107705][ T1789] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.153323][ T1789] usb 4-1: config 1 interface 0 has no altsetting 0 [ 384.170179][ T2147] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 384.182109][ T1789] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 384.199933][ T1789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.324082][ T2147] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.408728][ T2147] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.596840][ T2147] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.622417][ T1789] usb 4-1: Product: syz [ 384.626888][ T1789] usb 4-1: Manufacturer: syz [ 384.631887][ T1789] usb 4-1: SerialNumber: syz [ 384.679028][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.699846][ T2147] usb 2-1: SerialNumber: syz [ 384.924899][ T2147] usb 2-1: 0:2 : does not exist [ 384.951911][ T1789] usbhid 4-1:1.0: can't add hid device: -71 [ 384.976949][ T1789] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 385.219251][ T1789] usb 4-1: USB disconnect, device number 49 [ 385.453411][ T2147] usb 2-1: USB disconnect, device number 72 [ 385.522203][ T9722] udevd[9722]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.777182][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 385.786534][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'. [ 385.798711][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 385.807666][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'. [ 388.156487][ T2147] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 388.175492][T10037] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 388.202670][T10040] FAULT_INJECTION: forcing a failure. [ 388.202670][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 388.202731][T10040] CPU: 1 UID: 0 PID: 10040 Comm: syz.5.1083 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 388.202749][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 388.202758][T10040] Call Trace: [ 388.202763][T10040] [ 388.202768][T10040] dump_stack_lvl+0x16c/0x1f0 [ 388.202788][T10040] should_fail_ex+0x512/0x640 [ 388.202805][T10040] ? __kvmalloc_node_noprof+0x122/0x600 [ 388.202828][T10040] should_failslab+0xc2/0x120 [ 388.202843][T10040] __kvmalloc_node_noprof+0x135/0x600 [ 388.202863][T10040] ? do_raw_spin_lock+0x12c/0x2b0 [ 388.202877][T10040] ? simple_xattr_alloc+0x41/0xa0 [ 388.202898][T10040] ? simple_xattr_alloc+0x41/0xa0 [ 388.202911][T10040] simple_xattr_alloc+0x41/0xa0 [ 388.202926][T10040] shmem_initxattrs+0x127/0x5b0 [ 388.202944][T10040] ? evm_inode_init_security+0x237/0x320 [ 388.202968][T10040] security_inode_init_security+0x26b/0x390 [ 388.202984][T10040] ? __pfx_shmem_initxattrs+0x10/0x10 [ 388.203002][T10040] ? __pfx_security_inode_init_security+0x10/0x10 [ 388.203025][T10040] shmem_mknod+0x22e/0x450 [ 388.203048][T10040] shmem_mkdir+0x31/0x80 [ 388.203067][T10040] vfs_mkdir+0x590/0x8c0 [ 388.203090][T10040] do_mkdirat+0x304/0x3e0 [ 388.203113][T10040] ? __pfx_do_mkdirat+0x10/0x10 [ 388.203137][T10040] ? getname_flags.part.0+0x1c5/0x550 [ 388.203157][T10040] __x64_sys_mkdir+0xef/0x140 [ 388.203171][T10040] do_syscall_64+0xcd/0x260 [ 388.203190][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.203204][T10040] RIP: 0033:0x7f2dea18e969 [ 388.203217][T10040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.203231][T10040] RSP: 002b:00007f2deaf97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 388.203246][T10040] RAX: ffffffffffffffda RBX: 00007f2dea3b6080 RCX: 00007f2dea18e969 [ 388.203255][T10040] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000200 [ 388.203264][T10040] RBP: 00007f2deaf97090 R08: 0000000000000000 R09: 0000000000000000 [ 388.203272][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.203281][T10040] R13: 0000000000000000 R14: 00007f2dea3b6080 R15: 00007ffc4397d088 [ 388.203302][T10040] [ 388.322545][ T2147] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 388.322574][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.330740][ T2147] usb 2-1: config 0 descriptor?? [ 388.350347][ T2147] gspca_main: spca508-2.14.0 probing 8086:0110 [ 388.537731][ T2147] gspca_spca508: reg_read err -32 [ 388.828123][ T2147] gspca_spca508: reg_read err -71 [ 388.829784][ T2147] gspca_spca508: reg_read err -71 [ 388.830100][ T2147] gspca_spca508: reg_read err -71 [ 388.831299][ T2147] gspca_spca508: reg write: error -71 [ 388.831360][ T2147] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 388.832893][ T2147] usb 2-1: USB disconnect, device number 73 [ 389.354210][T10052] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 389.365478][T10054] tty tty1: ldisc open failed (-12), clearing slot 0 [ 389.672002][T10084] 9pnet_fd: Insufficient options for proto=fd [ 389.813271][T10085] FAULT_INJECTION: forcing a failure. [ 389.813271][T10085] name failslab, interval 1, probability 0, space 0, times 0 [ 389.827097][T10085] CPU: 1 UID: 0 PID: 10085 Comm: syz.0.1091 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 389.827121][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 389.827130][T10085] Call Trace: [ 389.827136][T10085] [ 389.827143][T10085] dump_stack_lvl+0x16c/0x1f0 [ 389.827166][T10085] should_fail_ex+0x512/0x640 [ 389.827186][T10085] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 389.827216][T10085] should_failslab+0xc2/0x120 [ 389.827233][T10085] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 389.827259][T10085] ? __alloc_skb+0x2b2/0x380 [ 389.827287][T10085] __alloc_skb+0x2b2/0x380 [ 389.827307][T10085] ? __pfx___alloc_skb+0x10/0x10 [ 389.827327][T10085] ? __pfx_tc_new_tfilter+0x10/0x10 [ 389.827359][T10085] netlink_ack+0x15d/0xb80 [ 389.827383][T10085] netlink_rcv_skb+0x347/0x440 [ 389.827399][T10085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.827425][T10085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.827453][T10085] ? netlink_deliver_tap+0x1ae/0xd30 [ 389.827482][T10085] netlink_unicast+0x53a/0x7f0 [ 389.827501][T10085] ? __pfx_netlink_unicast+0x10/0x10 [ 389.827524][T10085] netlink_sendmsg+0x8d1/0xdd0 [ 389.827544][T10085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.827570][T10085] ____sys_sendmsg+0xa95/0xc70 [ 389.827590][T10085] ? copy_msghdr_from_user+0x10a/0x160 [ 389.827614][T10085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.827644][T10085] ___sys_sendmsg+0x134/0x1d0 [ 389.827669][T10085] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.827724][T10085] __sys_sendmsg+0x16d/0x220 [ 389.827749][T10085] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.827780][T10085] ? rcu_is_watching+0x12/0xc0 [ 389.827806][T10085] do_syscall_64+0xcd/0x260 [ 389.827827][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.827843][T10085] RIP: 0033:0x7f047e98e969 [ 389.827856][T10085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.827872][T10085] RSP: 002b:00007f047f7d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.827888][T10085] RAX: ffffffffffffffda RBX: 00007f047ebb5fa0 RCX: 00007f047e98e969 [ 389.827899][T10085] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000007 [ 389.827908][T10085] RBP: 00007f047f7d8090 R08: 0000000000000000 R09: 0000000000000000 [ 389.827918][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.827928][T10085] R13: 0000000000000000 R14: 00007f047ebb5fa0 R15: 00007fff84c06768 [ 389.827950][T10085] [ 390.129718][ T1789] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 390.286035][ T30] audit: type=1326 audit(1745694264.030:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.3.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221c18e969 code=0x0 [ 390.332261][ T1789] usb 6-1: Using ep0 maxpacket: 32 [ 390.340533][ T1789] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.356459][ T1789] usb 6-1: config 1 interface 0 has no altsetting 0 [ 390.399318][ T1789] usb 6-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 390.417473][ T1789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.938115][ T1789] usb 6-1: Product: syz [ 390.942487][ T1789] usb 6-1: Manufacturer: syz [ 390.947112][ T1789] usb 6-1: SerialNumber: syz [ 391.271118][ T1789] usbhid 6-1:1.0: can't add hid device: -71 [ 391.278433][ T1789] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 391.297472][T10115] input: syz0 as /devices/virtual/input/input19 [ 391.517452][ T1789] usb 6-1: USB disconnect, device number 3 [ 391.648272][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 391.671091][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 391.881601][ T30] audit: type=1400 audit(1745694265.630:651): avc: denied { write } for pid=10130 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.329719][ T30] audit: type=1400 audit(1745694265.630:652): avc: denied { nlmsg_write } for pid=10130 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.439512][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'. [ 392.607428][ T5915] Process accounting resumed [ 394.027932][T10164] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 394.088757][ T30] audit: type=1400 audit(1745694267.810:653): avc: denied { create } for pid=10166 comm="syz.5.1112" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 394.251861][ T1789] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 394.787799][ T30] audit: type=1400 audit(1745694268.530:654): avc: denied { mounton } for pid=10179 comm="syz.5.1115" path="/proc/56/task" dev="proc" ino=26582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 394.822355][T10181] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1115'. [ 394.859764][ T1789] usb 4-1: Using ep0 maxpacket: 8 [ 394.875225][ T1789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 394.899373][ T1789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 394.925115][ T1789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.967122][ T1789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.001411][ T1789] usb 4-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice= 5.2a [ 395.014059][ T1789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.027504][ T1789] usb 4-1: Product: syz [ 395.032013][ T1789] usb 4-1: Manufacturer: syz [ 395.040589][ T1789] usb 4-1: SerialNumber: syz [ 395.060370][ T1789] usb 4-1: config 0 descriptor?? [ 395.098021][ T1789] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 395.127206][ T1789] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 395.283817][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 395.524776][ T9] usb 6-1: device descriptor read/64, error -71 [ 395.589687][ T30] audit: type=1400 audit(1745694269.330:655): avc: denied { bind } for pid=10192 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.618288][ T30] audit: type=1400 audit(1745694269.330:656): avc: denied { connect } for pid=10192 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.653090][ T30] audit: type=1400 audit(1745694269.330:657): avc: denied { shutdown } for pid=10192 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.860276][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 395.999798][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 396.110790][ T9] usb 6-1: device descriptor read/64, error -71 [ 396.220828][ T9] usb usb6-port1: attempt power cycle [ 396.488735][ T1789] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 396.657976][ T5865] usb 4-1: USB disconnect, device number 50 [ 396.682246][ T5865] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 396.691568][ T1789] usb 2-1: Using ep0 maxpacket: 16 [ 396.710036][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 396.726854][ T1789] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 396.736492][ T9] usb 6-1: device descriptor read/8, error -71 [ 396.752104][ T5865] omninet 4-1:0.0: device disconnected [ 396.759771][ T1789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.794816][ T1789] usb 2-1: Product: syz [ 396.812825][ T1789] usb 2-1: Manufacturer: syz [ 396.818787][ T1789] usb 2-1: SerialNumber: syz [ 396.843858][ T1789] usb 2-1: config 0 descriptor?? [ 396.858170][ T1789] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 397.061506][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 397.268237][ T1789] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 397.274927][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.288527][ T9] usb 6-1: device descriptor read/8, error -71 [ 397.337562][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.397019][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.409761][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.431420][ T9] usb usb6-port1: unable to enumerate USB device [ 397.432361][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.469851][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.479326][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.517415][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.542955][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.567194][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.576242][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.588415][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.592130][ T2147] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 397.619906][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.638991][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.649215][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 397.759700][ T30] audit: type=1400 audit(1745694271.460:658): avc: denied { read } for pid=10230 comm="syz.4.1126" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 397.760065][ T2147] usb 4-1: Using ep0 maxpacket: 32 [ 397.782732][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.792120][ T30] audit: type=1400 audit(1745694271.460:659): avc: denied { open } for pid=10230 comm="syz.4.1126" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 397.817450][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.874360][ T30] audit: type=1400 audit(1745694271.460:660): avc: denied { ioctl } for pid=10230 comm="syz.4.1126" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 397.899298][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.958622][ T2147] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 397.976994][ T2147] usb 4-1: config 0 has no interface number 0 [ 397.985524][ T2147] usb 4-1: config 0 interface 12 has no altsetting 0 [ 398.095103][ T30] audit: type=1400 audit(1745694271.460:661): avc: denied { write } for pid=10230 comm="syz.4.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 398.102471][ T2147] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 398.114481][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.117652][ T30] audit: type=1400 audit(1745694271.460:662): avc: denied { map } for pid=10230 comm="syz.4.1126" path="socket:[27736]" dev="sockfs" ino=27736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 398.173381][ T2147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.183906][ T2147] usb 4-1: Product: syz [ 398.195882][ T2147] usb 4-1: Manufacturer: syz [ 398.204971][ T2147] usb 4-1: SerialNumber: syz [ 398.256719][ T2147] usb 4-1: config 0 descriptor?? [ 398.267468][T10245] ntfs3(md0): try to read out of volume at offset 0x0 [ 398.332407][ T30] audit: type=1400 audit(1745694272.010:663): avc: denied { mounton } for pid=10244 comm="syz.5.1129" path="/21/bus" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 399.049818][ T5868] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.199796][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 399.208268][ T5868] usb 6-1: config 127 has an invalid interface number: 195 but max is 1 [ 399.223921][ T5868] usb 6-1: config 127 has an invalid interface number: 242 but max is 1 [ 399.237793][ T5868] usb 6-1: config 127 has no interface number 0 [ 399.245733][ T5868] usb 6-1: config 127 has no interface number 1 [ 399.252457][ T5868] usb 6-1: config 127 interface 195 has no altsetting 0 [ 399.259479][ T5868] usb 6-1: config 127 interface 242 has no altsetting 0 [ 399.269285][ T5868] usb 6-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=3e.d0 [ 399.279150][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.288394][ T5868] usb 6-1: Product: syz [ 399.292698][ T5868] usb 6-1: Manufacturer: syz [ 399.297884][T10221] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 399.299812][ T5868] usb 6-1: SerialNumber: syz [ 399.402792][ T2147] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 399.413365][ T2147] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 399.420767][ T2147] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 399.435599][ T2147] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 399.470696][ T2147] usb 4-1: USB disconnect, device number 51 [ 399.588742][ T5868] usb 6-1: USB disconnect, device number 8 [ 399.903124][ T5868] usb 2-1: USB disconnect, device number 74 [ 399.963068][ T8605] schedule_timeout: wrong timeout value ffffffffffffffff [ 400.040469][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: vivid-000-vid-c Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 400.040496][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 400.040506][ T8605] Call Trace: [ 400.040512][ T8605] [ 400.040518][ T8605] dump_stack_lvl+0x16c/0x1f0 [ 400.040543][ T8605] schedule_timeout+0x1c9/0x290 [ 400.040569][ T8605] ? __pfx_schedule_timeout+0x10/0x10 [ 400.040600][ T8605] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 400.040617][ T8605] ? prepare_to_wait_event+0xd0/0x6a0 [ 400.040640][ T8605] ? __init_waitqueue_head+0xca/0x150 [ 400.040661][ T8605] vivid_thread_vid_cap+0x8fc/0xda0 [ 400.040691][ T8605] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 400.040713][ T8605] ? __pfx_autoremove_wake_function+0x10/0x10 [ 400.040738][ T8605] ? find_held_lock+0x2b/0x80 [ 400.040766][ T8605] ? __kthread_parkme+0x19e/0x250 [ 400.040794][ T8605] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 400.040814][ T8605] kthread+0x3c2/0x780 [ 400.040831][ T8605] ? __pfx_kthread+0x10/0x10 [ 400.040844][ T8605] ? __pfx_kthread+0x10/0x10 [ 400.040858][ T8605] ? __pfx_kthread+0x10/0x10 [ 400.040872][ T8605] ? __pfx_kthread+0x10/0x10 [ 400.040886][ T8605] ? rcu_is_watching+0x12/0xc0 [ 400.040906][ T8605] ? __pfx_kthread+0x10/0x10 [ 400.040922][ T8605] ret_from_fork+0x45/0x80 [ 400.040937][ T8605] ? __pfx_kthread+0x10/0x10 [ 400.040951][ T8605] ret_from_fork_asm+0x1a/0x30 [ 400.040987][ T8605] [ 400.494504][T10294] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.429721][ T5868] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 401.799715][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 401.837706][ T5868] usb 4-1: config 0 has no interfaces? [ 401.875814][ T5868] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 401.911854][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.941828][ T5868] usb 4-1: Product: syz [ 401.946038][ T5868] usb 4-1: Manufacturer: syz [ 401.959885][ T5868] usb 4-1: SerialNumber: syz [ 402.002510][ T5868] usb 4-1: config 0 descriptor?? [ 402.227674][ T30] audit: type=1400 audit(1745694275.970:664): avc: denied { ioctl } for pid=10297 comm="syz.3.1140" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 402.243591][ T5868] usb 4-1: USB disconnect, device number 52 [ 402.651242][ T5865] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 402.729714][ T1789] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 402.799931][ T5865] usb 6-1: device descriptor read/64, error -71 [ 402.907962][T10352] FAULT_INJECTION: forcing a failure. [ 402.907962][T10352] name failslab, interval 1, probability 0, space 0, times 0 [ 402.929998][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.3.1150 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 402.930025][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 402.930035][T10352] Call Trace: [ 402.930042][T10352] [ 402.930049][T10352] dump_stack_lvl+0x16c/0x1f0 [ 402.930077][T10352] should_fail_ex+0x512/0x640 [ 402.930098][T10352] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 402.930127][T10352] should_failslab+0xc2/0x120 [ 402.930145][T10352] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 402.930171][T10352] ? do_epoll_ctl+0x22ea/0x3590 [ 402.930199][T10352] do_epoll_ctl+0x22ea/0x3590 [ 402.930239][T10352] ? __pfx_do_epoll_ctl+0x10/0x10 [ 402.930261][T10352] ? find_held_lock+0x2b/0x80 [ 402.930280][T10352] ? __might_fault+0xe3/0x190 [ 402.930295][T10352] ? __might_fault+0xe3/0x190 [ 402.930321][T10352] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 402.930344][T10352] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 402.930368][T10352] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 402.930391][T10352] ? rcu_is_watching+0x12/0xc0 [ 402.930419][T10352] do_syscall_64+0xcd/0x260 [ 402.930440][T10352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.930458][T10352] RIP: 0033:0x7f221c18e969 [ 402.930472][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.930488][T10352] RSP: 002b:00007f221d043038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 402.930505][T10352] RAX: ffffffffffffffda RBX: 00007f221c3b5fa0 RCX: 00007f221c18e969 [ 402.930516][T10352] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 402.930525][T10352] RBP: 00007f221d043090 R08: 0000000000000000 R09: 0000000000000000 [ 402.930535][T10352] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 402.930545][T10352] R13: 0000000000000000 R14: 00007f221c3b5fa0 R15: 00007ffd37cd4538 [ 402.930569][T10352] [ 402.931235][ T1789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.215629][ T1789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.225807][ T1789] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 403.234983][ T5865] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 403.252850][ T1789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.329112][ T1789] usb 5-1: config 0 descriptor?? [ 403.379814][ T5865] usb 6-1: device descriptor read/64, error -71 [ 403.490363][ T5865] usb usb6-port1: attempt power cycle [ 403.753616][ T1789] creative-sb0540 0003:041E:3100.0008: reserved main item tag 0xd [ 403.772391][ T1789] creative-sb0540 0003:041E:3100.0008: item fetching failed at offset 3/5 [ 403.789031][ T1789] creative-sb0540 0003:041E:3100.0008: parse failed [ 403.795841][ T1789] creative-sb0540 0003:041E:3100.0008: probe with driver creative-sb0540 failed with error -22 [ 404.360779][ T5865] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 404.425841][ T5865] usb 6-1: device descriptor read/8, error -71 [ 404.667210][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.701339][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.731023][T10394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.777945][T10394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.785775][ T5865] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 404.802773][T10396] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 404.834123][ T5865] usb 6-1: device descriptor read/8, error -71 [ 404.934513][ T1789] usb 5-1: USB disconnect, device number 61 [ 404.952640][ T5865] usb usb6-port1: unable to enumerate USB device [ 404.980005][ T5868] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 405.058726][T10405] FAULT_INJECTION: forcing a failure. [ 405.058726][T10405] name failslab, interval 1, probability 0, space 0, times 0 [ 405.111996][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.3.1159 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 405.112013][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.112019][T10405] Call Trace: [ 405.112023][T10405] [ 405.112027][T10405] dump_stack_lvl+0x16c/0x1f0 [ 405.112043][T10405] should_fail_ex+0x512/0x640 [ 405.112057][T10405] ? fs_reclaim_acquire+0xae/0x150 [ 405.112072][T10405] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 405.112087][T10405] should_failslab+0xc2/0x120 [ 405.112099][T10405] __kmalloc_noprof+0xd2/0x510 [ 405.112119][T10405] tomoyo_realpath_from_path+0xc2/0x6e0 [ 405.112135][T10405] ? tomoyo_profile+0x47/0x60 [ 405.112153][T10405] tomoyo_path_number_perm+0x245/0x580 [ 405.112165][T10405] ? tomoyo_path_number_perm+0x237/0x580 [ 405.112179][T10405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.112198][T10405] ? find_held_lock+0x2b/0x80 [ 405.112223][T10405] ? find_held_lock+0x2b/0x80 [ 405.112235][T10405] ? hook_file_ioctl_common+0x145/0x410 [ 405.112255][T10405] ? __fget_files+0x20e/0x3c0 [ 405.112274][T10405] security_file_ioctl+0x9b/0x240 [ 405.112290][T10405] __x64_sys_ioctl+0xb7/0x200 [ 405.112305][T10405] do_syscall_64+0xcd/0x260 [ 405.112318][T10405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.112329][T10405] RIP: 0033:0x7f221c18e969 [ 405.112338][T10405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.112348][T10405] RSP: 002b:00007f221d043038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.112358][T10405] RAX: ffffffffffffffda RBX: 00007f221c3b5fa0 RCX: 00007f221c18e969 [ 405.112365][T10405] RDX: 0000200000000600 RSI: 00000000c0205648 RDI: 0000000000000003 [ 405.112371][T10405] RBP: 00007f221d043090 R08: 0000000000000000 R09: 0000000000000000 [ 405.112377][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.112383][T10405] R13: 0000000000000000 R14: 00007f221c3b5fa0 R15: 00007ffd37cd4538 [ 405.112396][T10405] [ 405.112400][T10405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.209688][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 405.530057][ T5868] usb 2-1: config 0 has an invalid interface number: 81 but max is 0 [ 405.538177][ T5868] usb 2-1: config 0 has no interface number 0 [ 405.546166][ T5868] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=7b.f0 [ 405.559987][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.568734][ T5868] usb 2-1: Product: syz [ 405.572951][ T5868] usb 2-1: Manufacturer: syz [ 405.578385][ T5868] usb 2-1: SerialNumber: syz [ 406.045551][ T5868] usb 2-1: config 0 descriptor?? [ 406.077129][ T5868] rtl8150 2-1:0.81: couldn't find required endpoints [ 406.109020][ T5868] rtl8150 2-1:0.81: probe with driver rtl8150 failed with error -5 [ 406.279050][ T5868] usb 2-1: USB disconnect, device number 75 [ 407.119755][ T5868] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 407.217884][T10455] option changes via remount are deprecated (pid=10450 comm=syz.1.1167) [ 407.272476][ T30] audit: type=1400 audit(1745694281.000:665): avc: denied { relabelfrom } for pid=10450 comm="syz.1.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 407.379943][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 407.672264][ T5868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 407.706458][ T5868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 407.717858][ T30] audit: type=1400 audit(1745694281.010:666): avc: denied { relabelto } for pid=10450 comm="syz.1.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 407.768772][ T5868] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.812590][ T5868] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.862362][ T5868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.884457][T10459] netlink: 'syz.5.1168': attribute type 1 has an invalid length. [ 407.901830][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.939728][T10459] __nla_validate_parse: 38 callbacks suppressed [ 407.939743][T10459] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1168'. [ 408.211300][ T1789] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 408.318198][T10470] openvswitch: netlink: IP tunnel dst address not specified [ 408.451676][T10471] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 408.459852][T10471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'. [ 408.535998][T10472] CUSE: unknown device info "ÿ" [ 408.541282][T10472] CUSE: zero length info key specified [ 408.693006][ T5868] usb 5-1: GET_CAPABILITIES returned 0 [ 408.751953][ T5868] usbtmc 5-1:16.0: can't read capabilities [ 409.831757][ T1789] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 409.841074][ T1789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.849073][ T1789] usb 6-1: Product: syz [ 409.867752][ T1789] usb 6-1: Manufacturer: syz [ 409.879851][ T1789] usb 6-1: SerialNumber: syz [ 409.907597][ T1789] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 409.989846][ T5868] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 410.033665][T10471] team0: Port device geneve0 added [ 410.071867][ T30] audit: type=1400 audit(1745694283.820:667): avc: denied { firmware_load } for pid=5865 comm="kworker/0:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 410.078807][ T5865] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 410.151871][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 410.172849][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 410.228566][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 410.260461][ T5915] usb 5-1: USB disconnect, device number 62 [ 410.310493][ T5868] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 410.335479][ T30] audit: type=1400 audit(1745694284.060:668): avc: denied { append } for pid=10458 comm="syz.5.1168" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 410.381494][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.423436][ T5868] usb 2-1: config 0 descriptor?? [ 410.430390][T10479] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 410.453421][ T5868] gspca_main: spca561-2.14.0 probing abcd:cdee [ 410.642541][ T5915] usb 6-1: USB disconnect, device number 13 [ 410.659139][ T5868] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 410.673374][ T5868] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.704166][ T5868] usb 2-1: MIDIStreaming interface descriptor not found [ 410.876382][ T5868] usb 2-1: USB disconnect, device number 76 [ 411.516193][ T5865] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 411.532170][ T5865] ath9k_htc: Failed to initialize the device [ 411.571446][ T5915] usb 6-1: ath9k_htc: USB layer deinitialized [ 412.199732][ T5868] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 412.387847][ T5865] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 412.439677][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 412.449535][ T5868] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 412.511226][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.569731][ T5865] usb 4-1: device descriptor read/64, error -71 [ 412.611861][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 412.886019][ T5868] usb 2-1: config 0 descriptor?? [ 413.338504][ T5868] gspca_main: sq930x-2.14.0 probing 041e:403c [ 413.599747][ T5865] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 413.882268][ T5865] usb 4-1: device descriptor read/64, error -71 [ 413.990321][ T5865] usb usb4-port1: attempt power cycle [ 414.139905][ T5915] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 414.329856][ T5865] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 414.339894][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.379838][ T5915] usb 6-1: config 0 has no interfaces? [ 414.385354][ T5915] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.404563][ T5865] usb 4-1: device descriptor read/8, error -71 [ 414.423930][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.426158][T10509] wg1: entered promiscuous mode [ 414.437591][T10509] wg1: entered allmulticast mode [ 414.482558][ T5915] usb 6-1: config 0 descriptor?? [ 414.521417][ T5868] gspca_sq930x: ucbus_write failed -71 [ 414.527210][ T5868] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 414.577404][ T5868] usb 2-1: USB disconnect, device number 77 [ 414.679827][ T5865] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 414.710855][ T5865] usb 4-1: device descriptor read/8, error -71 [ 414.830195][ T5865] usb usb4-port1: unable to enumerate USB device [ 415.319526][ T5865] usb 6-1: USB disconnect, device number 14 [ 415.695348][ T5868] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 415.812387][T10550] FAULT_INJECTION: forcing a failure. [ 415.812387][T10550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.825539][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.3.1184 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 415.825562][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 415.825572][T10550] Call Trace: [ 415.825578][T10550] [ 415.825584][T10550] dump_stack_lvl+0x16c/0x1f0 [ 415.825608][T10550] should_fail_ex+0x512/0x640 [ 415.825632][T10550] _copy_from_iter+0x2a4/0x15b0 [ 415.825658][T10550] ? __alloc_skb+0x200/0x380 [ 415.825683][T10550] ? __pfx__copy_from_iter+0x10/0x10 [ 415.825707][T10550] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 415.825738][T10550] netlink_sendmsg+0x829/0xdd0 [ 415.825759][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.825785][T10550] ____sys_sendmsg+0xa95/0xc70 [ 415.825805][T10550] ? copy_msghdr_from_user+0x10a/0x160 [ 415.825829][T10550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.825860][T10550] ___sys_sendmsg+0x134/0x1d0 [ 415.825886][T10550] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.825941][T10550] __sys_sendmsg+0x16d/0x220 [ 415.825965][T10550] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.826006][T10550] do_syscall_64+0xcd/0x260 [ 415.826027][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.826045][T10550] RIP: 0033:0x7f221c18e969 [ 415.826060][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.826076][T10550] RSP: 002b:00007f221d001038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.826092][T10550] RAX: ffffffffffffffda RBX: 00007f221c3b6160 RCX: 00007f221c18e969 [ 415.826103][T10550] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 415.826114][T10550] RBP: 00007f221d001090 R08: 0000000000000000 R09: 0000000000000000 [ 415.826124][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.826134][T10550] R13: 0000000000000000 R14: 00007f221c3b6160 R15: 00007ffd37cd4538 [ 415.826157][T10550] [ 416.019469][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 416.022156][T10550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 416.038321][T10550] ip6gretap1: entered allmulticast mode [ 416.069736][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 416.076074][ T5868] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 416.084313][ T5868] usb 5-1: config 0 has no interface number 0 [ 416.090408][ T5868] usb 5-1: config 0 interface 12 has no altsetting 0 [ 416.098745][ T5868] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 416.107790][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.115772][ T5868] usb 5-1: Product: syz [ 416.119914][ T5868] usb 5-1: Manufacturer: syz [ 416.124475][ T5868] usb 5-1: SerialNumber: syz [ 416.131010][ T5868] usb 5-1: config 0 descriptor?? [ 416.811588][T10540] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 416.818366][T10560] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10560 comm=syz.3.1186 [ 416.818699][ T30] audit: type=1400 audit(1745694290.560:669): avc: denied { read } for pid=10556 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 416.832048][ T5868] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 416.832076][ T5868] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 416.832086][ T5868] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 416.832122][ T5868] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 416.850502][ T5868] usb 5-1: USB disconnect, device number 63 [ 418.225364][ T5915] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 418.245928][ T30] audit: type=1400 audit(1745694291.990:670): avc: denied { write } for pid=10570 comm="syz.1.1191" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 418.431653][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.445291][ T5915] usb 4-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 418.454830][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.512035][ T5915] usb 4-1: Product: syz [ 418.516231][ T5915] usb 4-1: Manufacturer: syz [ 418.927317][ T5915] usb 4-1: SerialNumber: syz [ 418.958270][ T5915] usb 4-1: config 0 descriptor?? [ 418.978570][ T5915] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 419.027651][ T5915] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 419.045870][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 419.046177][ T5915] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 419.209815][ T5868] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 419.211141][ T5915] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 419.294244][ T81] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 419.305678][T10594] FAULT_INJECTION: forcing a failure. [ 419.305678][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 419.337672][ T5915] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 419.347366][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.4.1196 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 419.347387][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 419.347393][T10594] Call Trace: [ 419.347397][T10594] [ 419.347401][T10594] dump_stack_lvl+0x16c/0x1f0 [ 419.347418][T10594] should_fail_ex+0x512/0x640 [ 419.347432][T10594] ? fs_reclaim_acquire+0xae/0x150 [ 419.347447][T10594] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 419.347462][T10594] should_failslab+0xc2/0x120 [ 419.347474][T10594] __kmalloc_noprof+0xd2/0x510 [ 419.347494][T10594] tomoyo_realpath_from_path+0xc2/0x6e0 [ 419.347513][T10594] tomoyo_check_open_permission+0x2ab/0x3c0 [ 419.347527][T10594] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 419.347553][T10594] ? do_raw_spin_lock+0x12c/0x2b0 [ 419.347568][T10594] tomoyo_file_open+0x6b/0x90 [ 419.347578][T10594] security_file_open+0x84/0x1e0 [ 419.347594][T10594] do_dentry_open+0x596/0x1c10 [ 419.347615][T10594] vfs_open+0x82/0x3f0 [ 419.347628][T10594] path_openat+0x1e5e/0x2d40 [ 419.347649][T10594] ? __pfx_path_openat+0x10/0x10 [ 419.347669][T10594] do_filp_open+0x20b/0x470 [ 419.347686][T10594] ? __pfx_do_filp_open+0x10/0x10 [ 419.347716][T10594] ? alloc_fd+0x471/0x7d0 [ 419.347737][T10594] do_sys_openat2+0x11b/0x1d0 [ 419.347748][T10594] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.347762][T10594] ? __fget_files+0x20e/0x3c0 [ 419.347780][T10594] __x64_sys_openat+0x174/0x210 [ 419.347792][T10594] ? __pfx___x64_sys_openat+0x10/0x10 [ 419.347804][T10594] ? ksys_write+0x1b9/0x240 [ 419.347819][T10594] ? rcu_is_watching+0x12/0xc0 [ 419.347835][T10594] do_syscall_64+0xcd/0x260 [ 419.347849][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.347860][T10594] RIP: 0033:0x7f9e21f8d2d0 [ 419.347869][T10594] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 419.347880][T10594] RSP: 002b:00007f9e22d97b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 419.347890][T10594] RAX: ffffffffffffffda RBX: 0000000000048802 RCX: 00007f9e21f8d2d0 [ 419.347897][T10594] RDX: 0000000000048802 RSI: 00007f9e22d97c10 RDI: 00000000ffffff9c [ 419.347903][T10594] RBP: 00007f9e22d97c10 R08: 0000000000000000 R09: 002367732f766564 [ 419.347910][T10594] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 419.347916][T10594] R13: 0000000000000000 R14: 00007f9e221b6160 R15: 00007ffe7becf5b8 [ 419.347929][T10594] [ 419.347993][T10594] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.365235][ T30] audit: type=1400 audit(1745694293.110:671): avc: denied { getopt } for pid=10597 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.410382][ T5915] usb 4-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 419.489703][ T81] usb 2-1: Using ep0 maxpacket: 16 [ 419.513645][ T5915] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 419.523151][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.599920][ T5915] usb 4-1: USB disconnect, device number 57 [ 419.622535][ T5868] usb 6-1: config 0 has no interfaces? [ 419.675978][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.695347][ T81] usb 2-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 419.709930][ T30] audit: type=1400 audit(1745694293.440:672): avc: denied { ioctl } for pid=10600 comm="syz.0.1199" path="socket:[29294]" dev="sockfs" ino=29294 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.734730][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.740950][ T5829] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 419.773390][ T81] usb 2-1: config 0 descriptor?? [ 419.805357][ T5868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.816291][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.820333][T10609] usb usb8: usbfs: process 10609 (syz.0.1201) did not claim interface 0 before use [ 419.836811][ T5868] usb 6-1: config 0 descriptor?? [ 420.467894][ T81] lenovo 0003:04B3:3103.0009: hidraw0: USB HID v0.00 Device [HID 04b3:3103] on usb-dummy_hcd.1-1/input0 [ 420.965256][ T9] usb 6-1: USB disconnect, device number 15 [ 421.013508][ T81] usb 2-1: USB disconnect, device number 78 [ 421.339805][ T5868] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 422.222705][ T5868] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.469158][ T5868] usb 4-1: config 0 has no interface number 0 [ 422.478483][ T5868] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 422.488057][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.527131][ T5868] usb 4-1: config 0 descriptor?? [ 422.543467][ T5868] usb 4-1: selecting invalid altsetting 1 [ 422.555249][ T5868] dvb_ttusb_budget: ttusb_init_controller: error [ 422.562442][ T30] audit: type=1400 audit(1745694296.310:673): avc: denied { map } for pid=10641 comm="syz.4.1212" path="socket:[28653]" dev="sockfs" ino=28653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 422.595191][ T5868] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 422.677720][ T5868] DVB: Unable to find symbol cx22700_attach() [ 422.713072][ T5868] DVB: Unable to find symbol tda10046_attach() [ 422.719420][ T5868] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 422.961430][ T31] INFO: task kworker/1:7:6997 blocked for more than 143 seconds. [ 422.969179][ T31] Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 [ 422.978713][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.051986][T10649] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 423.129153][T10649] bond0: entered promiscuous mode [ 423.134262][T10649] bond0: entered allmulticast mode [ 423.267999][T10649] ip6gretap2: entered allmulticast mode [ 423.284428][T10649] bond0: (slave ip6gretap2): making interface the new active one [ 423.292256][T10649] ip6gretap2: entered promiscuous mode [ 423.300869][T10649] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 423.389700][ T31] task:kworker/1:7 state:D stack:22408 pid:6997 tgid:6997 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 423.412507][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 423.413969][ T31] Workqueue: usb_hub_wq hub_event [ 423.422346][T10648] bond0: left promiscuous mode [ 423.422378][ T31] [ 423.427365][T10648] ip6gretap2: left promiscuous mode [ 423.427480][T10648] bond0: left allmulticast mode [ 423.432396][ T31] Call Trace: [ 423.435595][T10648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.491360][ T31] [ 423.494383][ T31] __schedule+0x116f/0x5de0 [ 423.498953][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 423.504106][ T31] ? __pfx___schedule+0x10/0x10 [ 423.509025][ T31] ? find_held_lock+0x2b/0x80 [ 423.513798][ T31] ? schedule+0x2d7/0x3a0 [ 423.518149][ T31] schedule+0xe7/0x3a0 [ 423.522374][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.527857][ T31] __mutex_lock+0x6c7/0xb90 [ 423.532453][ T31] ? hub_event+0x292b/0x4fa0 [ 423.537377][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.542468][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.548471][ T31] ? hub_ext_port_status+0x1fa/0x670 [ 423.553948][ T31] ? hub_event+0x292b/0x4fa0 [ 423.558572][ T31] hub_event+0x292b/0x4fa0 [ 423.563111][ T31] ? __pfx_hub_event+0x10/0x10 [ 423.567897][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 423.573625][ T31] ? rcu_is_watching+0x12/0xc0 [ 423.578410][ T31] process_one_work+0x9cc/0x1b70 [ 423.583425][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 423.588736][ T31] ? __pfx_process_one_work+0x10/0x10 [ 423.595305][ T31] ? assign_work+0x1a0/0x250 [ 423.600319][ T31] worker_thread+0x6c8/0xf10 [ 423.604991][ T31] ? __kthread_parkme+0x19e/0x250 [ 423.610139][ T31] ? __pfx_worker_thread+0x10/0x10 [ 423.615255][ T31] kthread+0x3c2/0x780 [ 423.619335][ T31] ? __pfx_kthread+0x10/0x10 [ 423.623980][ T31] ? __pfx_kthread+0x10/0x10 [ 423.628583][ T31] ? __pfx_kthread+0x10/0x10 [ 423.633233][ T31] ? __pfx_kthread+0x10/0x10 [ 423.637847][ T31] ? rcu_is_watching+0x12/0xc0 [ 423.642863][ T31] ? __pfx_kthread+0x10/0x10 [ 423.647475][ T31] ret_from_fork+0x45/0x80 [ 423.668619][ T31] ? __pfx_kthread+0x10/0x10 [ 423.674404][ T31] ret_from_fork_asm+0x1a/0x30 [ 423.679202][ T31] [ 423.682335][ T31] [ 423.682335][ T31] Showing all locks held in the system: [ 423.690074][ T31] 5 locks held by kworker/0:1/10: [ 423.695087][ T31] #0: ffff888144ab2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 423.705973][ T31] #1: ffffc900000f7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 423.734027][ T31] #2: ffff888029c90198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 423.748793][ T31] #3: ffff888029c93510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 423.759011][ T31] #4: ffff88802878f368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 423.768899][ T31] 1 lock held by khungtaskd/31: [ 423.773896][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 423.783816][ T31] 2 locks held by kworker/u8:3/52: [ 423.788937][ T31] #0: ffff888145a9a948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 423.799778][ T31] #1: ffffc90000be7d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 423.811490][ T31] 2 locks held by getty/5578: [ 423.816145][ T31] #0: ffff8880322a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 423.827914][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 423.839440][ T31] 5 locks held by kworker/1:7/6997: [ 423.845028][ T31] #0: ffff888144ab2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 423.855964][ T31] #1: ffffc9000bd77d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 423.867597][ T31] #2: ffff888146b7d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 423.876549][ T31] #3: ffff888146b88510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 423.886532][ T31] #4: ffff88802878f368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 423.896355][ T31] [ 423.898672][ T31] ============================================= [ 423.898672][ T31] [ 423.907490][ T31] NMI backtrace for cpu 0 [ 423.907500][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 423.907513][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 423.907519][ T31] Call Trace: [ 423.907523][ T31] [ 423.907527][ T31] dump_stack_lvl+0x116/0x1f0 [ 423.907543][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 423.907560][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 423.907572][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 423.907590][ T31] watchdog+0xf70/0x12c0 [ 423.907602][ T31] ? __pfx_watchdog+0x10/0x10 [ 423.907622][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 423.907635][ T31] ? __kthread_parkme+0x19e/0x250 [ 423.907651][ T31] ? __pfx_watchdog+0x10/0x10 [ 423.907660][ T31] kthread+0x3c2/0x780 [ 423.907671][ T31] ? __pfx_kthread+0x10/0x10 [ 423.907679][ T31] ? __pfx_kthread+0x10/0x10 [ 423.907688][ T31] ? __pfx_kthread+0x10/0x10 [ 423.907696][ T31] ? __pfx_kthread+0x10/0x10 [ 423.907707][ T31] ? rcu_is_watching+0x12/0xc0 [ 423.907721][ T31] ? __pfx_kthread+0x10/0x10 [ 423.907730][ T31] ret_from_fork+0x45/0x80 [ 423.907740][ T31] ? __pfx_kthread+0x10/0x10 [ 423.907749][ T31] ret_from_fork_asm+0x1a/0x30 [ 423.907770][ T31] [ 423.907774][ T31] Sending NMI from CPU 0 to CPUs 1: [ 424.039442][ C1] NMI backtrace for cpu 1 [ 424.039455][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 424.039471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.039478][ C1] RIP: 0010:trace_irq_disable.constprop.0+0x37/0x120 [ 424.039495][ C1] Code: 07 0f 87 f3 00 00 00 89 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 10 f0 84 90 e8 e1 bd 5d 00 48 0f a3 1d b9 f9 c1 0e <0f> 82 92 00 00 00 5b 5d c3 cc cc cc cc 48 89 fb 65 8b 05 c6 c9 e0 [ 424.039507][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 00000047 [ 424.039518][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81c2f64f [ 424.039525][ C1] RDX: fffffbfff2109e03 RSI: 0000000000000008 RDI: ffffffff9084f010 [ 424.039534][ C1] RBP: ffffed1003b5a488 R08: 0000000000000000 R09: fffffbfff2109e02 [ 424.039541][ C1] R10: ffffffff9084f017 R11: 0000000000000000 R12: 0000000000000001 [ 424.039548][ C1] R13: ffff88801dad2440 R14: ffffffff9084f010 R15: 0000000000000000 [ 424.039556][ C1] FS: 0000000000000000(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 424.039569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.039577][ C1] CR2: 00007f047f6e7d60 CR3: 0000000028c7e000 CR4: 00000000003526f0 [ 424.039585][ C1] Call Trace: [ 424.039590][ C1] [ 424.039595][ C1] do_idle+0x138/0x510 [ 424.039611][ C1] ? __pfx_do_idle+0x10/0x10 [ 424.039629][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 424.039649][ C1] cpu_startup_entry+0x4f/0x60 [ 424.039664][ C1] start_secondary+0x21d/0x2b0 [ 424.039682][ C1] ? __pfx_start_secondary+0x10/0x10 [ 424.039701][ C1] common_startup_64+0x13e/0x148 [ 424.039720][ C1] [ 424.041750][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 424.041763][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 424.041783][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.041791][ T31] Call Trace: [ 424.041797][ T31] [ 424.041804][ T31] dump_stack_lvl+0x3d/0x1f0 [ 424.041825][ T31] panic+0x71c/0x800 [ 424.041848][ T31] ? __pfx_panic+0x10/0x10 [ 424.041869][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 424.041887][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 424.041902][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 424.041918][ T31] ? watchdog+0xdda/0x12c0 [ 424.041933][ T31] ? watchdog+0xdcd/0x12c0 [ 424.041949][ T31] watchdog+0xdeb/0x12c0 [ 424.041967][ T31] ? __pfx_watchdog+0x10/0x10 [ 424.041981][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.041999][ T31] ? __kthread_parkme+0x19e/0x250 [ 424.042021][ T31] ? __pfx_watchdog+0x10/0x10 [ 424.042036][ T31] kthread+0x3c2/0x780 [ 424.042050][ T31] ? __pfx_kthread+0x10/0x10 [ 424.042063][ T31] ? __pfx_kthread+0x10/0x10 [ 424.042076][ T31] ? __pfx_kthread+0x10/0x10 [ 424.042089][ T31] ? __pfx_kthread+0x10/0x10 [ 424.042102][ T31] ? rcu_is_watching+0x12/0xc0 [ 424.042120][ T31] ? __pfx_kthread+0x10/0x10 [ 424.042135][ T31] ret_from_fork+0x45/0x80 [ 424.042149][ T31] ? __pfx_kthread+0x10/0x10 [ 424.042163][ T31] ret_from_fork_asm+0x1a/0x30 [ 424.042193][ T31] [ 424.348189][ T31] Kernel Offset: disabled [ 424.352488][ T31] Rebooting in 86400 seconds..