last executing test programs: 19.474442674s ago: executing program 3 (id=3049): unshare(0x62040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="d8000000140081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00002100005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600010000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) 15.008840835s ago: executing program 3 (id=3072): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000056000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 14.060809009s ago: executing program 3 (id=3075): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) lseek(r1, 0x5, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x794, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x73a2837a66afff3d, 0x11e000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000040)={0x4000, 0x10000}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4010, r6}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r7, &(0x7f0000000340)="d28330cfeb803a0fa90ecafba1932046ca70eb550619e1515ec819c5a573a217758fbd579754a1109ff8d7", &(0x7f00000003c0)=""/132, 0x4}, 0x20) getpid() getpid() openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140c, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x28048110) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 12.45299719s ago: executing program 3 (id=3083): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0x2, 0x23a3f04b, 0x33363248, 0x5, 0x400, 0x8, 0x6, 0x1, 0x0, 0x4}}) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000240)={0x7, &(0x7f00000000c0)=[{0x5, 0x0, 0x13, 0x9}, {0x9, 0x4, 0x3f, 0x1}, {0xdd, 0x12, 0x0, 0x9a}, {0x8, 0xe, 0x5, 0x4}, {0x7, 0x4, 0x6, 0x79}, {0x5, 0x6, 0xb6, 0x7ff}, {0x5, 0xde, 0x7, 0x2}]}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendto$rxrpc(r4, &(0x7f00000027c0)="dc", 0x21, 0xc4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x200, 0x2, 0xfff}, 0x10) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080), 0x4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) socket(0x10, 0x80002, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 32) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) bind$802154_raw(r0, &(0x7f00000008c0)={0x24, @none={0x0, 0xffff}}, 0x14) 12.212074564s ago: executing program 3 (id=3085): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xd, "66581ddb34253c0556c786"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r5, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x100) socket$inet_icmp(0x2, 0x2, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$FUSE_INIT(r6, 0x0, 0x0) 10.574003493s ago: executing program 3 (id=3093): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x5, 0xe8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xfffffe01}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x140, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x40, 0x2, 0x1, [0xff, 0x4, 0xffdf, 0x3, 0x7ff, 0x8, 0x5, 0xceac, 0x3ff, 0x9, 0x400, 0x7, 0x8001, 0x1b, 0xffff], 0xc}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7ff, 0x7}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x8000, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f109d20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff000000, 0x9d848f23f46103e9], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'ipvlan0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x62, 0x1, 0x4, 0x16}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8000) accept$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000002003f000200000800040001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1c, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x9, 0x1, 0xfffffffffffffffc, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3e45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 9.437008192s ago: executing program 2 (id=3097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 9.340592427s ago: executing program 2 (id=3098): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="6112b4000000000061134c0000000000bf2000000000000015000200071b1750bd030100000018009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 8.672899633s ago: executing program 2 (id=3100): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000fd020100c0"]) r3 = socket(0x80000000000000a, 0x809, 0xfffffffe) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1}}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1290c2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000680)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x12, r4, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x214800, 0x0) ioctl$RNDADDTOENTCNT(r7, 0x40045201, &(0x7f0000000180)) r8 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='timerslack_ns\x00') bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 7.658785327s ago: executing program 1 (id=3107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) 6.150598736s ago: executing program 0 (id=3111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = gettid() prlimit64(r1, 0x2, &(0x7f0000000140)={0x400008, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.089982335s ago: executing program 1 (id=3112): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x300}, 0x8000) 5.782788843s ago: executing program 2 (id=3113): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x82, 0xd, "66581ddb34253c0556c786"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r5, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x100) socket$inet_icmp(0x2, 0x2, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$FUSE_INIT(r6, 0x0, 0x0) 5.208343875s ago: executing program 0 (id=3114): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x7000000}, 0x48) 4.827570826s ago: executing program 1 (id=3115): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r0 = syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r6, 0x0, 0x0, 0x0}, 0x30) 4.757032824s ago: executing program 0 (id=3116): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/237, 0xed, 0x0, &(0x7f0000000400)=""/138, 0x8a}, &(0x7f0000000240)=0x40) 4.086629883s ago: executing program 0 (id=3117): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) r8 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000700, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x10, 0x0, @remote}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xf8c]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 3.817330261s ago: executing program 1 (id=3118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 3.754910727s ago: executing program 1 (id=3119): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 3.72151616s ago: executing program 2 (id=3120): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$dri(&(0x7f0000000480), 0x5, 0x200900) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) (async) creat(&(0x7f0000000000)='./file0\x00', 0x135) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766cc646e6f", @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) sched_setscheduler(0x0, 0x4, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/239) 3.592817768s ago: executing program 4 (id=3121): sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000680)}, 0x40840) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="400d21000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.54793843s ago: executing program 1 (id=3122): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/4096, 0xdc7) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) syz_usb_connect(0x5, 0xbd8, &(0x7f00000022c0)={{0x12, 0x1, 0x201, 0x23, 0x5f, 0xdf, 0x10, 0xac8, 0xc301, 0xe8fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc6, 0x3, 0x80, 0xf, 0xb0, 0x1, [{{0x9, 0x4, 0x51, 0x81, 0xd, 0x81, 0x28, 0x4d, 0x2, [], [{{0x9, 0x5, 0x4, 0x3, 0x40, 0x4, 0xd4, 0x1}}, {{0x9, 0x5, 0x8a, 0x4, 0x3ff, 0xb, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x0, 0x5, 0x3, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x55, 0x2}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x3, 0xd, 0x1, [@generic={0x3b, 0x6, "a927adfe73693838e4deafec534c0655b8e9e0d059950a0a586c005b458ac7b5a49e96190ef4361eaec4432e8a19f6619231d54ec32aee2521"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x8, 0x9, 0x81, [@generic={0x2b, 0x6, "0247d74dbf9dc526c6edae90a7999a9e7f2995f645173cd5fd291b6edf355beb8d7c622db4c9f92b09"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x3, 0x6d, 0x6, [@generic={0x36, 0x21, "9cbd1f628242068c314f28aed93a0f09ed2ac4b2d4cfcd3e45d79f59cab0316c3a5c3977bc617591cf072dac2ba96cb2c2c09b49"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x4, 0x6, 0x3, [@generic={0xa4, 0x23, "6fbdc741244b47d0933e9b3eb5c093e06ef33254a4648b2842e548a1f601744ad9068f703a4394fc3d9f822b55e7e3a0d8a817f90b408ad48772e10f75986c2d7c704ebd77a1d03fc95ce30e73c95df2e7c084a063e2ab76136203707ff79a9c7ec404b93fd3195328808e16f79373c0b370e5cf5ffb6e461ac065ed5f3de7e09e0f35e5c09dbbf5486442b893cfb4fed122d82bb80d148ad4b72f4ac136cda54a0b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x1, 0x4}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x1, 0xec33e0fd9dc676fc, 0x10, 0x0, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x9, 0xf, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0x7f, 0xa, [@generic={0xf, 0x31, "9bd34dc75072d744d14582ac69"}, @generic={0x8d, 0xe, "6c3c2c55444086d88fc34548b14125a2c9d90179cdeffd53d43200e09db1a3bd20a040329298838c4310313899c1f424db29da846c69e51614d48b7a1d5d2a9dc20acb56fd092c983f548f89a1b53a9585a90f5f3ffd10e6b3833922e52d244594dcbfc2df6db2578e61df2f27abb0cee83aa0170812218454f1d28512a5a348c53816162f303b11426611"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0x5, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}, @generic={0x8a, 0x6, "9bb29b911ef01e1e33e0b1dbe991a9769dcbba1aa4a99ba25c075d6677a77267bc4804bb9f4813edf0538ea7845679f54ec9fce5bb9cc90cc50640105b67e1949dde684a04eff50299b928228412393faefba8f7accf4d4ba1edb16e0249de81bdea8281effface874432ae1e51358d264c24928b6202311bf292c35015147ca700bb2141da46a40"}]}}]}}, {{0x9, 0x4, 0xb7, 0x7, 0x9, 0x8d, 0x3a, 0xa2, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x8}}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0xc7, 0x8, [@generic={0xc5, 0x22, "da0fb93ad1e51441cf3353288fb9bc1613a79675c23d9fd40af97fe3fc9938d4230e78f6930ca45bd07355d6b5f83623c1da35e4f77fca33b0d5c6f15c7e68458710f9e04d9c5ece11c40c14a4ca0d6864c2f2d27dad2f9b4086283360d769bb3ab1492277f2c2a49a3c40596607f8a8c2b8cb1fa82a4f8cbca73236273794a7b6eca3df0e4fc447cfaf2407361b92e8b96cac76f4bbf3f4a754b720748ffaf6f59b1a28e1da3ea8f58bf99e3a3fe43b598e2886bdbd43213affa821ef28dd85ab8e87"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x10, 0x9}}, {{0x9, 0x5, 0xe32f0e6ac6edb86d, 0x2, 0x3ff, 0x2, 0x0, 0x2, [@generic={0xcb, 0x3, "b9187b39560d9338a6b386c8ca68e572eadeebf1248ec64c03726c6cf55ef4e5b7c643ace6eb054cde550ea07e28f35bd936e509c2fb2fb5f2d1801507319677d7a3d6186897c426a776e37ebd009173877b670b64ebb2d3ae04715a8a452abbf93da4760458e4178b22a8be3f6086cae800e8ab4b036da13dcfbe59af224cfbb865d5c2b2f7e8a70653376113404dfb86cfcf2f6c1ea4aa015fd9ed9f422569fc43c4a3fe55ec9186ad0f4cfe52c2d097575d6c438c8f9e22426394d30c8b2a9273e3dde4a27b0c86"}]}}, {{0x9, 0x5, 0x8c, 0x3, 0x200, 0x0, 0x1, 0x4, [@generic={0x16, 0x3, "28e76d2f95cb8ad9fbabfd1fe64e7c8a9ed70443"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xf, 0xf2, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x10, 0x5, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xd, 0x200}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x3, 0x1, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x64e}, @generic={0x8b, 0x30, "b6757b031c2cc634377f5e2a2c8cd109a68fbb7f5242bc7fa4ed391484d2542caffd8dcccb9942e63a2cc3a9c25ce40a39e605b97c9990b52ddf29978a6aaf1b23bf504112cc57bebc692ceec6226089f345e8324f529cfa0cdb396129acdfe89c9718e62a8f6a9574abc9238882cb74d6a13e8174c2165c4f9955702e0c4e145663a3d3f4c05d7728"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x97, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xd}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x6, 0x85, 0x9, [@generic={0x11, 0xb, "d15cd19402e27d224a44c6dcf226f5"}]}}]}}, {{0x9, 0x4, 0xac, 0x5, 0xe, 0xe, 0x1, 0x0, 0x0, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "c28c6906ea6c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x800, 0x800, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x888, 0x1, 0x5, 0x5, 0x2}, @ncm={0x6, 0x24, 0x1a, 0xfffa}, @ncm={0x6, 0x24, 0x1a, 0xfff8, 0x10}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xd1bf, 0x7f, 0x8, 0x5, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x87c, 0x7f, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "afedc080"}, {0x5, 0x24, 0x0, 0xa469}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0xfff7, 0x4, 0x40}}], [{{0x9, 0x5, 0x7, 0x3, 0x400, 0x10, 0x42, 0x8, [@generic={0x4f, 0x4, "06f37aef6cf736159cdc4c76ddc80d104721886a8de1bf927beb5ea8bdc85e7a8689a1e63dafefc92b14d11356b1c3d2a6de7e245afc27b093c4c8203bd51f33b90e5ac964144593e2bc554829"}, @generic={0xcb, 0x2, "cef86b3930003e70f4242f128d27cd005980987d3764f4d3e5c8957cc80e8ff413231c3a588a5727255c88ff28c811115a1f072deb3548c940ba5a0bdebeaf51d18cf4919cda36b051b970f8d62ad32ff7cd78631b4215f8a856c11e9548dc1d820e5c76c4a1670b55f748b5ff405d7a06d874f85cb4eefc395f8811ee18532006ef478147d0ab6c5308872c2cd5fb00817cd7d36133f547444d70a3d67ea1db7a6307e80e1e0eac88c150405f2e48ed5077676a9454d7b6292844d9fdb93495cd0b86d7ad0b3734ea"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x6, 0x7, 0x7}}, {{0x9, 0x5, 0x4, 0x4, 0x208, 0xff, 0xaa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x80, 0xc, 0x18, 0x0, 0x6, 0x6, [@generic={0x8a, 0x22, "0af6e87168122103a3e7562380da923a5afce22034d8d5cdce0a91f68e481f3fd7ecf944abc97872ad7d58afb352edc8c5d3ede87ed89362186fa6a0e94f4c0daf3a3eb88cb821d0eb273544460b026186ef9081bf0c0b703e01df294628e8aa6f79a8f19e2654eccdc3884a77132bcad4b7a5899f7c95602f9636bdabff1e9e555716beaec93d5a"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x7, 0x81, 0x9, [@generic={0x90, 0x1, "bc4bc013e8e29c49dfa750b07fc047c9ae282071b62e2f715d62d1c02a79b0c16a98fe8c8fb19b00a73060df3b193fed0e6ec1d4f4af88674086afdd6dd303169343fe8f1d2e053b9f69455d4cb78637b4009ef96f57bbd24780b3f7d21de50a6febbc5730a89ecbb2764b37a3f7cc93e45409469161d5f6971ca350ae504d2a0c34c284662384516c2da9814047"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x5, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x86, 0x100}, @generic={0xb2, 0x9, "50675bac11a56311dca704c28c0491363f28d7f2ff894c5d02fc39e031a8e19a8fb78b9e5d1b50e2a9cb2c8a852ab7bce27b9340ba3c40bf0ac2a405369e77412bdba99ca2f4f380aabc05932ed4a7260c1bad702a9973258ee9212b8a357f333b9491429384506521644398b8b71f8b552bf761a6a75ba5cd07e578455818735e367943d8f9de1ed0e4458543fe6d2973292907079b5d5753a35613376558ba637c7fb569b34ab79b4c52d0a9d2958b"}]}}, {{0x9, 0x5, 0xd00cf9e35ab688cd, 0x8, 0x40, 0xd3, 0x5d, 0x3, [@generic={0xa6, 0xa, "a454c6e27c693feae1955a008ad2a61163b84982e61d27bc57832e5990c27508488b74ac8424cb0274eda34f5d74cd0068136da3705ce33395cafc3e30217fff8ee2e9700a1c3133a47b858c36862c3d41d91524cd250766ed28a69218128dee9c10efb53c6a8c6553fde4ca2503ba622ddfe55eaf72c8bfe8ef5556a57e53487d93fd401c3429649253252bba03c7415821eecc444b6c494ad3b7f2e38d85c9a45a406b"}, @generic={0x43, 0x9, "51dfcbaf89f405f93fcabaf0b6e995232b610023b9f207b2808f65ea4f1da93470f3b530bbce0d82d2c770993619e4dd2d412002b2d6464de75278d93375c7cd22"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x34, 0x81, 0x5, [@generic={0xbb, 0x22, "1d9e4eb0bf9ed86778e5944292cebae8f120b1cf9e088f26252624a7ca128f1cd5827abce7a5c59bf39c888001c3ed799027c1c910dd170a43bc95c0889ec71a33fc426074093c334d3c5f787c74a2bc8f6334590bb9b47e0e0b3f3ae48a73c74476ace8eabf831c81ab2d26220658dc93c38a57df683956b002b724b75a5a3b0102a938bb9bd17cfd1eb98c149e5b1e28ac75f44de3da8a439040a8d6ab4e256df60f6abe422d9d4b6b0c1b0b6e93b7aaff76683232e1c43f"}]}}, {{0x9, 0x5, 0xf, 0x11, 0x10, 0x6, 0x7b, 0x3}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x82, 0x58, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x8de804d55b70e909, 0x7, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x7, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x287e}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x1, 0x2a, 0x3, [@generic={0x4a, 0x21, "bd1317d387a0a5cb416f13f6603687f35a6ddce54a4417fc7b19a548c284649103a58a6acaa83ec6caed2654ba1cb3f39ef979ea9b34a1ffcd68d461892172a28dfa71d2f1b181dd"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x380d}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x6, 0x5, 0x2, 0x20, 0x4}, 0x8, &(0x7f0000001200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x3001}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) chdir(&(0x7f00000000c0)='./file0\x00') 3.429480826s ago: executing program 2 (id=3123): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f0000001800)=""/231, 0xe7}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/65, 0xffffffffffffff00}, {&(0x7f0000002980)=""/18, 0x12}, {&(0x7f00000029c0)=""/76, 0x4c}, {&(0x7f0000002a80)=""/124, 0x7c}, {&(0x7f0000002b00)=""/50, 0x32}], 0x8}, 0x5e7}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x40000130, 0x0) 3.284418858s ago: executing program 0 (id=3124): quotactl$Q_GETINFO(0xffffffff80000503, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_usb_ep_write(r2, 0xfc, 0xe9, &(0x7f0000000540)="d69a72fbc6d1f777cc98879a7cdc01350d44ae946ffa4a7f4893f439f32b5b7f2aa13d0eee96553ca6190cee797c2ac923c4ad0922fe32fbafed0e18c07493503c37da39e469b78564efae9a1056d9f462a1e08e85ec7af91af4101dbc867f9c2d88a90ca6f055f4f5af77f54f5c19c0acded75c04d5b9388a0e1bd2556424fa78e24e775ce28852b37721f0bdaaa3ebd7346c0ae765611969ef63500e151bea144bc8c5df59befd047691ddcb0ea3e98004c20de12921228a6c9aab802b61a32d00772e052511e1482767d7029ba60769a83bebb57e0e6723a939064c16774e47b85a8526b0538b23") bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, r6, 0x1, 0x1, 0x0, 0xde, "c14d1dedaa1bde1a3299b7e0f741ef51772aba1135698eba8372f303d6cdbfc141f8b9600cce9cb5628c07ceb1d7cfe97e8ab6bbcd8c29f5f782d5fd6a6e81", 0x10}, 0x60) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8c00) 1.988849533s ago: executing program 0 (id=3125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) r7 = socket(0x10, 0x3, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x82, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "dfbcd935"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r12, &(0x7f0000000080), 0x0}, 0x20) 1.35721588s ago: executing program 4 (id=3126): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/237, 0xed, 0x0, &(0x7f0000000400)=""/138, 0x8a}, &(0x7f0000000240)=0x40) 1.202002892s ago: executing program 4 (id=3127): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r0 = syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r6, 0x0, 0x0, 0x0}, 0x30) 237.921058ms ago: executing program 4 (id=3128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 145.280539ms ago: executing program 4 (id=3129): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x709d2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3, 0xf}}}}]}, 0x48}}, 0x40000) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x48}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xac}}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000007c0)={0x8, @raw_data="1cc406eb698d0d0dfaa701552d76942a60ebb3adb9bf67f483a90adc0580d37482df0985e272ff7087bfa3c0088ce7ed78b40431e924e85393804c4ea28618905e07f0aae8049a37696f940c27925e1d0fe1e7e75a07aa649f04eeab9ac265e8fe4f20feb7ad90190421e086bbbf15b8fde550046bfd8dea43a2262e1883940eb0264091889edc696e10b21f981733ce8584a9ef57a4677942e92dd8eda4dfeee964d96d476aa8691a6e5771ee30318542828589abb2f342276572371efdd4f71e9672069b4b3f64"}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 0s ago: executing program 4 (id=3130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x80, 0x20, 0x10, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x3000000}, 0x0) kernel console output (not intermixed with test programs): face 224 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 615.595718][ T9671] usb 5-1: config 6 interface 224 altsetting 191 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 615.607109][ T9671] usb 5-1: config 6 interface 224 altsetting 191 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 615.618473][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has a duplicate endpoint with address 0xF, skipping [ 615.629528][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 615.647518][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 615.659627][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has an endpoint descriptor with address 0x43, changing to 0x3 [ 615.672531][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has a duplicate endpoint with address 0x3, skipping [ 616.209916][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 616.238458][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has a duplicate endpoint with address 0xF, skipping [ 616.250834][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has a duplicate endpoint with address 0xE, skipping [ 616.262078][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has a duplicate endpoint with address 0xF, skipping [ 616.273165][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has a duplicate endpoint with address 0xC, skipping [ 616.284365][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 616.295794][ T9671] usb 5-1: config 6 interface 224 altsetting 191 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 616.310140][ T9671] usb 5-1: config 6 interface 65 has no altsetting 0 [ 616.316982][ T9671] usb 5-1: config 6 interface 236 has no altsetting 0 [ 616.323877][ T9671] usb 5-1: config 6 interface 224 has no altsetting 0 [ 616.333225][ T9671] usb 5-1: Dual-Role OTG device on HNP port [ 616.339683][ T9671] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a1, bcdDevice= 0.9e [ 616.349263][ T9671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.375127][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 616.435237][ T9671] usb 5-1: Product: ႈ䔗ᖤ釧 [ 616.444568][ T9671] usb 5-1: Manufacturer: ࡡ [ 616.449299][ T9671] usb 5-1: SerialNumber: syz [ 616.457558][ T9671] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 616.469366][ T9672] usb 2-1: USB disconnect, device number 39 [ 616.477798][ T9671] usb 5-1: no configuration chosen from 1 choice [ 616.488673][T14541] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2518'. [ 616.498043][ T5946] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 616.668336][ T5946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.688227][ T5946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.717295][ T5946] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.727570][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.745230][ T5946] usb 4-1: Product: syz [ 616.756611][ T5946] usb 4-1: Manufacturer: syz [ 616.818129][ T30] audit: type=1400 audit(2000001978.368:1652): avc: denied { shutdown } for pid=14549 comm="syz.1.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 616.893424][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'. [ 617.579482][ T5946] usb 4-1: SerialNumber: syz [ 617.688745][ T30] audit: type=1400 audit(2000001979.238:1653): avc: denied { shutdown } for pid=14560 comm="syz.1.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 617.876571][T14565] netlink: 'syz.1.2525': attribute type 5 has an invalid length. [ 617.997383][ T10] usb 5-1: USB disconnect, device number 66 [ 618.125419][T14567] 8021q: VLANs not supported on ipvlan1 [ 618.159698][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.170733][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.495493][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'. [ 618.742874][T14582] tipc: Enabled bearer , priority 0 [ 618.754214][ T5946] usb 4-1: 0:2 : does not exist [ 618.791180][T14580] tipc: Resetting bearer [ 618.814725][ T5946] usb 4-1: USB disconnect, device number 60 [ 618.867291][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.384101][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2531'. [ 619.905368][T14606] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2536'. [ 620.895632][ T9672] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 621.066542][ T9672] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 621.079791][ T9672] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.090018][ T9672] usb 4-1: config 0 has no interface number 0 [ 621.096838][ T9672] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 621.106683][ T9672] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 621.116464][ T9672] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.131817][ T9672] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 621.140969][ T9672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.149059][ T9672] usb 4-1: Product: syz [ 621.153325][ T9672] usb 4-1: Manufacturer: syz [ 621.157981][ T9672] usb 4-1: SerialNumber: syz [ 621.166415][ T9672] usb 4-1: config 0 descriptor?? [ 621.177699][ T9672] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 621.188690][ T9672] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 621.197039][ T9672] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 621.485281][ T30] audit: type=1400 audit(2000001983.038:1654): avc: denied { ioctl } for pid=14610 comm="syz.3.2538" path="socket:[43647]" dev="sockfs" ino=43647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 622.075983][T14580] tipc: Disabling bearer [ 622.105637][T14597] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2533'. [ 622.127567][T14616] tmpfs: Unknown parameter '0x0000000000000003' [ 622.805383][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 623.002932][ T10] usb 2-1: config index 0 descriptor too short (expected 34340, got 36) [ 623.039732][ T10] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 623.111917][ T10] usb 2-1: config 1 has no interfaces? [ 623.151691][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 623.177239][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.426051][ T5946] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 623.455864][T14635] netlink: 'syz.4.2546': attribute type 7 has an invalid length. [ 623.488564][T14635] : entered promiscuous mode [ 623.609445][T14639] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2548'. [ 623.655454][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 623.709998][ T5946] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 623.730897][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.766028][ T9672] usb 4-1: USB disconnect, device number 61 [ 623.768004][ T5946] usb 1-1: Product: syz [ 623.775605][ T9672] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 624.230528][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.241348][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.379778][ T9672] cyberjack 4-1:0.69: device disconnected [ 624.380170][ T5946] usb 1-1: Manufacturer: syz [ 624.392646][ T5946] usb 1-1: SerialNumber: syz [ 624.513098][ T5946] usb 1-1: config 0 descriptor?? [ 624.534797][ T5946] gspca_main: se401-2.14.0 probing 047d:5003 [ 625.009279][ T5846] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 625.033955][ T5946] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 625.052280][ T5946] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 625.074715][ T5946] usb 1-1: USB disconnect, device number 62 [ 625.830683][ T5946] usb 2-1: USB disconnect, device number 40 [ 629.271757][ T30] audit: type=1400 audit(2000001990.818:1655): avc: denied { setopt } for pid=14714 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 629.365182][ T6001] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 629.566587][ T30] audit: type=1400 audit(2000001990.848:1656): avc: denied { ioctl } for pid=14712 comm="syz.1.2569" path="socket:[43828]" dev="sockfs" ino=43828 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 629.685288][ T30] audit: type=1400 audit(2000001990.918:1657): avc: denied { watch watch_reads } for pid=14712 comm="syz.1.2569" path="pipe:[3962]" dev="pipefs" ino=3962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 629.747095][ T30] audit: type=1400 audit(2000001990.918:1658): avc: denied { relabelfrom } for pid=14712 comm="syz.1.2569" name="" dev="pipefs" ino=44090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 629.747219][ T6001] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 629.821822][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.843996][ T6001] usb 5-1: config 0 descriptor?? [ 630.250483][T14728] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2573'. [ 630.835451][ T5946] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 631.405062][ T5946] usb 3-1: device descriptor read/64, error -71 [ 631.409808][ T30] audit: type=1400 audit(2000001992.958:1659): avc: denied { listen } for pid=14739 comm="syz.0.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 631.854685][ T6001] pegasus 5-1:0.0: can't reset MAC [ 631.867532][ T6001] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 631.885358][ T5946] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 631.896034][ T6001] usb 5-1: USB disconnect, device number 67 [ 632.035064][ T5946] usb 3-1: device descriptor read/64, error -71 [ 632.053017][T14752] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 632.065370][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 632.092305][T14752] bond6: entered promiscuous mode [ 632.097888][T14752] 8021q: adding VLAN 0 to HW filter on device bond6 [ 632.155722][ T5946] usb usb3-port1: attempt power cycle [ 632.236983][ T10] usb 2-1: config 0 has no interfaces? [ 632.244616][ T10] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 632.253807][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.261927][ T10] usb 2-1: Product: syz [ 632.266141][ T10] usb 2-1: Manufacturer: syz [ 632.270737][ T10] usb 2-1: SerialNumber: syz [ 632.276813][ T9672] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 632.285757][ T10] usb 2-1: config 0 descriptor?? [ 632.375227][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 632.445051][ T9672] usb 1-1: Using ep0 maxpacket: 8 [ 632.451496][ T9672] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 632.459659][ T9672] usb 1-1: config 0 has no interface number 0 [ 632.473653][ T9672] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 632.487021][ T9672] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice= f.2b [ 632.499105][ T9672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.505074][ T5946] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 632.507231][ T9672] usb 1-1: Product: syz [ 632.523932][ T9672] usb 1-1: Manufacturer: syz [ 632.529473][ T9672] usb 1-1: SerialNumber: syz [ 632.533678][ T10] usb 2-1: USB disconnect, device number 41 [ 632.541412][ T9672] usb 1-1: config 0 descriptor?? [ 632.546973][ T5946] usb 3-1: device descriptor read/8, error -71 [ 632.748921][T14751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.758016][T14751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.917166][ T30] audit: type=1400 audit(2000001994.318:1660): avc: denied { map } for pid=14750 comm="syz.0.2580" path="socket:[44171]" dev="sockfs" ino=44171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 633.077756][ T9672] kobil_sct 1-1:0.25: KOBIL USB smart card terminal converter detected [ 633.199417][ T9672] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 633.469859][ T5946] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 633.478488][ T9672] usb 1-1: USB disconnect, device number 63 [ 633.529108][ T9672] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 633.560125][ T9672] kobil_sct 1-1:0.25: device disconnected [ 633.593623][ T5946] usb 3-1: device descriptor read/8, error -71 [ 633.776239][ T5946] usb usb3-port1: unable to enumerate USB device [ 634.595226][T14780] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2586' sets config #-511 [ 634.805776][T14790] bad cache= option: no%e [ 634.805776][T14790] [ 634.812550][T14790] CIFS: VFS: bad cache= option: no%e [ 635.480113][ T5946] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 635.568144][ T30] audit: type=1326 audit(2000001997.118:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 635.604742][ T30] audit: type=1326 audit(2000001997.118:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 635.726295][ T30] audit: type=1326 audit(2000001997.118:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 635.759609][ T30] audit: type=1326 audit(2000001997.118:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 635.785032][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 635.810623][ T5946] usb 5-1: config 2 has an invalid interface number: 228 but max is 0 [ 635.888849][ T30] audit: type=1326 audit(2000001997.118:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 635.901719][ T5946] usb 5-1: config 2 has no interface number 0 [ 635.919006][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 635.933636][ T5946] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=47.8d [ 635.944507][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 635.954006][ T30] audit: type=1326 audit(2000001997.118:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 635.960360][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.986249][ T30] audit: type=1326 audit(2000001997.118:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 636.017272][ T30] audit: type=1326 audit(2000001997.118:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 636.034978][ T5946] usb 5-1: Product: syz [ 636.040864][ T30] audit: type=1326 audit(2000001997.118:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 636.073392][ T5946] usb 5-1: Manufacturer: syz [ 636.087262][ T5946] usb 5-1: SerialNumber: syz [ 636.098786][ T30] audit: type=1326 audit(2000001997.118:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.3.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbec58e929 code=0x7ffc0000 [ 636.137586][ T5946] snd_usb_variax 5-1:2.228: Line 6 Variax Workbench found [ 636.160360][ T5946] usb 5-1: selecting invalid altsetting 1 [ 636.172582][T14818] xt_cluster: node mask cannot exceed total number of nodes [ 636.185348][ T5946] snd_usb_variax 5-1:2.228: set_interface failed [ 636.199221][ T5946] snd_usb_variax 5-1:2.228: Line 6 Variax Workbench now disconnected [ 636.216269][ T5946] snd_usb_variax 5-1:2.228: probe with driver snd_usb_variax failed with error -22 [ 636.657025][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.665862][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.677224][ T5946] usb 5-1: USB disconnect, device number 68 [ 637.385525][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2608'. [ 637.405120][ T6001] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 637.414111][T14839] netlink: 'syz.2.2608': attribute type 15 has an invalid length. [ 637.439359][T14839] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 768 - 0 [ 637.448208][T14839] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 768 - 0 [ 637.456937][T14839] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 768 - 0 [ 637.465590][T14839] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 768 - 0 [ 637.476132][ T5946] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 637.497386][T14839] vxlan1: entered promiscuous mode [ 637.576660][ T6001] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 637.635597][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 637.665774][ T6001] usb 1-1: config 0 has no interface number 0 [ 637.671993][ T6001] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 637.682957][ T6001] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 637.693709][ T6001] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.705471][ T6001] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 637.714193][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.716533][ T6001] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 637.716576][ T6001] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 637.716597][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.718589][ T6001] usb 1-1: config 0 descriptor?? [ 637.745092][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.750085][T14838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.782805][T14838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.795207][ T6001] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 637.837144][ T5946] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 637.846411][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.866980][ T5946] usb 4-1: Product: syz [ 637.880853][ T5946] usb 4-1: Manufacturer: syz [ 637.892699][ T5946] usb 4-1: SerialNumber: syz [ 637.964232][ T5946] usb 4-1: config 0 descriptor?? [ 638.067392][ T5946] appledisplay 4-1:0.0: Could not find int-in endpoint [ 638.185178][ T5946] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 638.352542][ T5946] usb 4-1: USB disconnect, device number 62 [ 638.555062][ T5947] usb 1-1: USB disconnect, device number 64 [ 638.824108][ T5947] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 639.198780][ T5946] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 639.335348][ T5946] usb 5-1: device descriptor read/64, error -71 [ 639.675878][ T5946] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 639.819923][T14869] netlink: 'syz.2.2618': attribute type 12 has an invalid length. [ 639.827853][T14869] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2618'. [ 639.867927][ T5946] usb 5-1: device descriptor read/64, error -71 [ 639.985054][ T5947] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 640.014629][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.034123][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.053922][ T5946] usb usb5-port1: attempt power cycle [ 640.166798][ T5947] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 640.185031][ T5947] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 640.210011][ T5947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 640.219291][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 640.227377][ T5947] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 640.239682][ T5947] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 640.257104][ T5947] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 640.266761][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 640.274974][ T5947] usb 4-1: Product: syz [ 640.279453][ T5947] usb 4-1: Manufacturer: syz [ 640.415295][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 640.421360][ T5946] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 640.440863][ T10] usb 2-1: config 4 has an invalid interface number: 65 but max is 0 [ 640.491796][ T5947] cdc_wdm 4-1:1.0: skipping garbage [ 640.525287][ T10] usb 2-1: config 4 has no interface number 0 [ 640.540589][ T5946] usb 5-1: device descriptor read/8, error -71 [ 640.549245][ T5947] cdc_wdm 4-1:1.0: skipping garbage [ 640.575031][ T10] usb 2-1: config 4 interface 65 has no altsetting 0 [ 640.592784][ T5947] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 640.599053][ T5947] cdc_wdm 4-1:1.0: Unknown control protocol [ 640.608152][ T10] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice= 7.61 [ 640.623885][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.634395][ T10] usb 2-1: Product: syz [ 640.642827][ T10] usb 2-1: Manufacturer: syz [ 640.647627][ T10] usb 2-1: SerialNumber: syz [ 640.673877][T14864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.684357][T14864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.705274][ T6001] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 640.720415][T14864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.729359][T14864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.738173][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 640.738189][ T30] audit: type=1400 audit(2000002002.298:1684): avc: denied { read write } for pid=14863 comm="syz.3.2616" name="cdc-wdm0" dev="devtmpfs" ino=3499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 640.770901][ T30] audit: type=1400 audit(2000002002.328:1685): avc: denied { open } for pid=14863 comm="syz.3.2616" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 640.825596][ T5946] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 640.856133][ T5946] usb 5-1: device descriptor read/8, error -71 [ 640.867472][ T10] HFC-S_USB 2-1:4.65: probe with driver HFC-S_USB failed with error -5 [ 640.883986][ T10] usb 2-1: USB disconnect, device number 42 [ 640.886574][ T6001] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 640.899840][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.970147][ T5946] usb usb5-port1: unable to enumerate USB device [ 640.995831][ T6001] usb 3-1: Product: syz [ 641.000062][ T6001] usb 3-1: Manufacturer: syz [ 641.006922][ T6001] usb 3-1: SerialNumber: syz [ 641.009900][ T5946] usb 4-1: USB disconnect, device number 63 [ 641.026549][ T6001] usb 3-1: config 0 descriptor?? [ 641.317043][T14885] siw: device registration error -23 [ 641.924199][ T6001] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 641.934503][ T6001] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 641.944505][ T6001] usb 3-1: USB disconnect, device number 62 [ 645.804469][ T6001] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 645.821685][T14951] netlink: 456 bytes leftover after parsing attributes in process `syz.1.2642'. [ 645.883034][T14954] tmpfs: Bad value for 'nr_inodes' [ 645.919602][T14951] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2642'. [ 646.009886][ T6001] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.026000][T14959] netlink: 'syz.3.2644': attribute type 1 has an invalid length. [ 646.051474][ T6001] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 646.074303][T14959] 8021q: adding VLAN 0 to HW filter on device bond7 [ 646.075339][ T6001] usb 1-1: New USB device found, idVendor=256c, idProduct=1798, bcdDevice= 0.00 [ 646.265525][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.276298][ T6001] usb 1-1: config 0 descriptor?? [ 647.361942][T14978] SET target dimension over the limit! [ 648.011169][T14986] can0: slcan on ptm0. [ 648.274186][T14996] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2653'. [ 648.437897][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'. [ 648.967563][T15021] tmpfs: Bad value for 'nr_inodes' [ 649.212742][T15022] tipc: Enabled bearer , priority 0 [ 649.256560][T15022] syzkaller0: entered promiscuous mode [ 649.265259][T15022] syzkaller0: entered allmulticast mode [ 649.464467][T15036] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2663' sets config #-511 [ 650.342320][T15018] tipc: Resetting bearer [ 650.378235][T15018] tipc: Disabling bearer [ 650.517237][T14983] can0 (unregistered): slcan off ptm0. [ 650.548562][ T6001] usb 1-1: USB disconnect, device number 65 [ 651.221929][T15098] xt_cluster: node mask cannot exceed total number of nodes [ 651.294051][ T30] audit: type=1400 audit(2000002012.828:1686): avc: denied { listen } for pid=15099 comm="syz.0.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 651.467930][T15108] SET target dimension over the limit! [ 651.582238][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 651.592065][T15110] bridge_slave_1: left allmulticast mode [ 651.631282][T15110] bridge_slave_1: left promiscuous mode [ 651.765612][T15110] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.782947][ T30] audit: type=1400 audit(2000002013.298:1687): avc: denied { execute } for pid=15109 comm="syz.4.2678" path="/dev/dsp" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 652.106061][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2679'. [ 652.474559][T15110] bridge_slave_0: left allmulticast mode [ 652.482216][T15110] bridge_slave_0: left promiscuous mode [ 652.742264][T15110] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.980826][T15120] vlan3: entered allmulticast mode [ 652.986079][T15120] geneve1: entered allmulticast mode [ 652.996936][T15115] lo speed is unknown, defaulting to 1000 [ 653.003965][T15115] lo speed is unknown, defaulting to 1000 [ 653.545618][T15134] tipc: Enabling of bearer rejected, already enabled [ 653.568260][T15131] lo speed is unknown, defaulting to 1000 [ 653.575638][T15131] lo speed is unknown, defaulting to 1000 [ 653.621923][T15135] veth0_macvtap: entered promiscuous mode [ 653.847836][T15140] netlink: 'syz.2.2685': attribute type 10 has an invalid length. [ 653.969723][ T6001] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 654.766522][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2686'. [ 654.923706][ T6001] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.935621][ T6001] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.033565][ T6001] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.054181][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.225143][ T6001] usb 4-1: Product: syz [ 655.238917][ T6001] usb 4-1: Manufacturer: syz [ 655.243880][ T6001] usb 4-1: SerialNumber: syz [ 655.255579][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 655.277033][ T30] audit: type=1400 audit(2000002016.828:1688): avc: denied { getopt } for pid=15159 comm="syz.4.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 655.416729][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 655.436206][ T10] usb 2-1: config 0 has no interfaces? [ 655.459903][ T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 655.481721][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.505126][ T10] usb 2-1: Product: syz [ 655.509329][ T10] usb 2-1: Manufacturer: syz [ 655.513961][ T10] usb 2-1: SerialNumber: syz [ 655.543338][ T10] usb 2-1: config 0 descriptor?? [ 656.158517][T15173] 8021q: VLANs not supported on ipvlan1 [ 656.177483][T15173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.187176][T15173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.745136][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 656.854870][ T5947] usb 2-1: USB disconnect, device number 43 [ 657.531392][ T6001] usb 4-1: 0:2 : does not exist [ 657.562374][T15191] SET target dimension over the limit! [ 657.569384][ T6001] usb 4-1: USB disconnect, device number 64 [ 657.932172][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.945102][ T30] audit: type=1804 audit(2000002020.438:1689): pid=15206 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2704" name="/newroot/518/file0" dev="tmpfs" ino=2681 res=1 errno=0 [ 659.238660][T15218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2705'. [ 659.773814][T15227] netlink: 'syz.0.2711': attribute type 3 has an invalid length. [ 660.085151][ T6001] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 660.330571][ T6001] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 660.356923][ T6001] usb 4-1: config 0 has no interface number 0 [ 660.376699][ T6001] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 660.396899][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.415316][ T6001] usb 4-1: Product: syz [ 660.419515][ T6001] usb 4-1: Manufacturer: syz [ 660.424117][ T6001] usb 4-1: SerialNumber: syz [ 660.447243][ T6001] usb 4-1: config 0 descriptor?? [ 660.760953][ T6001] usb-storage 4-1:0.250: USB Mass Storage device detected [ 660.969220][T15252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2718'. [ 660.982930][ T10] usb 4-1: USB disconnect, device number 65 [ 661.419300][ T5846] Bluetooth: hci2: unexpected event for opcode 0x200d [ 661.430343][ T6001] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 661.631406][T15264] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 662.122264][ T6001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 662.195070][T15273] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2724'. [ 662.437011][ T6001] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 662.458961][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 29791, setting to 64 [ 662.507884][ T6001] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 662.525967][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.545430][ T6001] usb 3-1: Product: syz [ 662.559623][ T6001] usb 3-1: Manufacturer: syz [ 662.564254][ T6001] usb 3-1: SerialNumber: syz [ 662.602088][ T6001] usb 3-1: config 0 descriptor?? [ 662.622400][T15254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 662.647200][ T6001] usb 3-1: ucan: probing device on interface #0 [ 662.905392][T15254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.918973][ T6001] usb 3-1: ucan: invalid endpoint configuration [ 662.953569][ T6001] usb 3-1: ucan: probe failed; try to update the device firmware [ 663.021486][T15254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.449197][ T9672] usb 3-1: USB disconnect, device number 63 [ 663.587302][T15287] netlink: 'syz.1.2726': attribute type 4 has an invalid length. [ 663.599943][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2726'. [ 663.611332][T15287] openvswitch: netlink: Flow key attr not present in new flow. [ 664.678825][T15314] netlink: 'syz.2.2737': attribute type 21 has an invalid length. [ 664.702262][T15314] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2737'. [ 665.015439][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.804133][T15333] SET target dimension over the limit! [ 666.035076][ T30] audit: type=1400 audit(2000002027.568:1690): avc: denied { append } for pid=15339 comm="syz.3.2744" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 666.302377][T15348] netlink: 'syz.1.2746': attribute type 4 has an invalid length. [ 666.725213][ T30] audit: type=1400 audit(2000002027.578:1691): avc: denied { map } for pid=15339 comm="syz.3.2744" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 666.770036][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 666.873755][ T30] audit: type=1400 audit(2000002027.578:1692): avc: denied { execute } for pid=15339 comm="syz.3.2744" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 667.006766][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 667.077865][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.115000][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 667.126461][ T10] usb 4-1: config 1 has no interface number 1 [ 667.132623][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 667.147713][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 667.480869][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.548117][T15360] netlink: 'syz.2.2749': attribute type 4 has an invalid length. [ 667.559596][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 667.568922][T15360] openvswitch: netlink: Flow key attr not present in new flow. [ 667.766171][ T10] usb 4-1: Product: syz [ 667.770406][ T10] usb 4-1: Manufacturer: syz [ 667.775993][ T10] usb 4-1: SerialNumber: syz [ 668.326043][T15377] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2754'. [ 668.755427][T15382] netlink: 'syz.0.2758': attribute type 10 has an invalid length. [ 668.792605][T15384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.335904][ T10] usb 4-1: USB disconnect, device number 66 [ 670.630742][T15421] geneve2: entered promiscuous mode [ 670.652817][T15421] geneve2: entered allmulticast mode [ 670.855067][ T9672] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 670.994649][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 671.049917][T15446] bond4: entered promiscuous mode [ 671.055839][T15446] bond4: entered allmulticast mode [ 671.061241][T15446] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.121092][T15449] FAULT_INJECTION: forcing a failure. [ 671.121092][T15449] name failslab, interval 1, probability 0, space 0, times 0 [ 671.139311][T15449] CPU: 0 UID: 0 PID: 15449 Comm: syz.0.2775 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 671.139331][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.139338][T15449] Call Trace: [ 671.139342][T15449] [ 671.139347][T15449] dump_stack_lvl+0x16c/0x1f0 [ 671.139369][T15449] should_fail_ex+0x512/0x640 [ 671.139385][T15449] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 671.139404][T15449] should_failslab+0xc2/0x120 [ 671.139421][T15449] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 671.139437][T15449] ? getname_flags.part.0+0x4c/0x550 [ 671.139452][T15449] getname_flags.part.0+0x4c/0x550 [ 671.139466][T15449] getname_flags+0x93/0xf0 [ 671.139481][T15449] __x64_sys_mknod+0x74/0xb0 [ 671.139497][T15449] do_syscall_64+0xcd/0x4c0 [ 671.139516][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.139527][T15449] RIP: 0033:0x7f485678e929 [ 671.139537][T15449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.139549][T15449] RSP: 002b:00007f4857537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 671.139560][T15449] RAX: ffffffffffffffda RBX: 00007f48569b5fa0 RCX: 00007f485678e929 [ 671.139567][T15449] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000200000000040 [ 671.139574][T15449] RBP: 00007f4857537090 R08: 0000000000000000 R09: 0000000000000000 [ 671.139581][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.139587][T15449] R13: 0000000000000000 R14: 00007f48569b5fa0 R15: 00007ffd68681ec8 [ 671.139601][T15449] [ 671.514853][ T9672] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 671.525272][ T9672] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.567046][ T9672] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 671.596684][ T9672] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 671.606029][ T9672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.614002][ T9672] usb 2-1: Product: syz [ 671.618793][ T9672] usb 2-1: Manufacturer: syz [ 671.626755][ T9672] usb 2-1: SerialNumber: syz [ 671.636637][ T9672] usb 2-1: config 0 descriptor?? [ 671.881213][ T10] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 671.885744][ T9672] usb 2-1: USB disconnect, device number 44 [ 671.951014][ T5850] udevd[5850]: setting mode of /dev/bus/usb/002/044 to 020664 failed: No such file or directory [ 671.990042][ T5850] udevd[5850]: setting owner of /dev/bus/usb/002/044 to uid=0, gid=0 failed: No such file or directory [ 672.155711][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.176330][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.325262][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.431589][ T30] audit: type=1400 audit(2000002033.908:1693): avc: denied { connect } for pid=15463 comm="syz.3.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 672.431657][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.611255][ T10] usb 5-1: Product: syz [ 672.623997][ T10] usb 5-1: Manufacturer: syz [ 672.647214][ T10] usb 5-1: SerialNumber: syz [ 672.687215][ T5947] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 673.422155][ T5947] usb 4-1: device descriptor read/64, error -71 [ 673.584971][T15483] 8021q: VLANs not supported on ipvlan1 [ 673.604188][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.615486][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.785243][ T5947] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 674.050075][ T5947] usb 4-1: device descriptor read/64, error -71 [ 674.157572][ T5846] Bluetooth: hci0: unexpected event for opcode 0x200d [ 674.167156][ T5947] usb usb4-port1: attempt power cycle [ 674.311390][T15500] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 768 - 0 [ 674.645118][ T5947] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 674.781265][ T5947] usb 4-1: device descriptor read/8, error -71 [ 674.790563][ T10] usb 5-1: 0:2 : does not exist [ 674.802578][T15504] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2792'. [ 674.846120][ T10] usb 5-1: USB disconnect, device number 74 [ 674.873607][T10147] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 674.947123][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.039385][ T5947] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 675.096746][ T5947] usb 4-1: device descriptor read/8, error -71 [ 675.109550][ T9657] libceph: connect (1)[c::]:6789 error -101 [ 675.116663][ T9657] libceph: mon0 (1)[c::]:6789 connect error [ 675.165314][ T5885] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 675.190383][T15517] ceph: No mds server is up or the cluster is laggy [ 675.220254][ T5947] usb usb4-port1: unable to enumerate USB device [ 675.315041][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 675.331821][ T5885] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 675.377881][ T5885] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 675.405130][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.437388][ T5885] usb 3-1: Product: syz [ 675.441594][ T5885] usb 3-1: Manufacturer: syz [ 675.471937][ T5885] usb 3-1: SerialNumber: syz [ 675.503173][ T5885] usb 3-1: config 0 descriptor?? [ 675.517827][ T5885] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 675.556212][ T5885] usb 3-1: Detected FT232R [ 676.112864][T15547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.128333][T15547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.165921][ T5885] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 676.300446][ T5885] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 676.463818][ T5885] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 676.627879][ T9672] usb 3-1: USB disconnect, device number 64 [ 676.735278][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 676.745402][T15541] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 676.773528][ T9672] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 676.821096][ T9672] ftdi_sio 3-1:0.0: device disconnected [ 677.395342][ T5885] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 677.615194][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 677.654441][ T5885] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 677.690420][ T5885] usb 5-1: config 0 has no interface number 0 [ 677.704437][ T5885] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 677.735419][ T5885] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 677.754781][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.771187][ T5885] usb 5-1: Product: syz [ 677.783021][ T5885] usb 5-1: Manufacturer: syz [ 677.887484][ T5885] usb 5-1: SerialNumber: syz [ 677.899748][ T5885] usb 5-1: config 0 descriptor?? [ 677.905536][T15579] netlink: 'syz.0.2813': attribute type 29 has an invalid length. [ 677.933855][T15579] netlink: 'syz.0.2813': attribute type 3 has an invalid length. [ 677.974133][T15582] xt_bpf: check failed: parse error [ 678.357220][T15579] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2813'. [ 678.489871][ T6001] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 678.695107][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 678.797287][ T6001] usb 1-1: string descriptor 0 read error: -22 [ 678.806345][ T6001] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 678.835095][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.854014][ T6001] usb 1-1: config 0 descriptor?? [ 678.874077][ T6001] usbtest 1-1:0.0: FX2 device [ 678.883759][ T6001] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 679.129122][ T9657] usb 1-1: USB disconnect, device number 66 [ 679.135889][ T5947] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 679.196057][ T5885] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 679.226428][ T5885] usb 5-1: USB disconnect, device number 75 [ 679.795043][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 679.809434][ T5947] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 679.823052][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.839486][ T5947] usb 3-1: Product: syz [ 679.847847][ T5947] usb 3-1: Manufacturer: syz [ 679.858180][ T5947] usb 3-1: SerialNumber: syz [ 679.871837][ T5947] usb 3-1: config 0 descriptor?? [ 679.892565][ T5947] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 680.088848][ T5947] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 680.115271][ T5947] visor 3-1:0.0: probe with driver visor failed with error -71 [ 680.147691][ T5947] usb 3-1: USB disconnect, device number 65 [ 680.632322][ T5947] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 681.509277][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.550932][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.597217][ T5947] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 681.640809][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.767189][T15635] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 682.179487][ T5947] usb 3-1: config 0 descriptor?? [ 682.285896][T12923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.302241][T12923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.305245][ T9671] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 682.320372][T12923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.333082][T12923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.427312][T12923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.455292][ T30] audit: type=1400 audit(2000002043.988:1694): avc: denied { mounton } for pid=15638 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 682.482609][T15638] lo speed is unknown, defaulting to 1000 [ 682.507455][T15638] lo speed is unknown, defaulting to 1000 [ 682.588531][ T5947] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 682.606099][ T9671] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 682.614057][ T9671] usb 2-1: can't read configurations, error -22 [ 682.619174][ T5947] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input23 [ 682.632190][ T9657] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 682.778153][ T5947] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 682.791381][ T9657] usb 1-1: Using ep0 maxpacket: 8 [ 682.797096][T15619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.806663][ T9657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.820924][T15619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.825412][ T9671] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 682.828801][ T9657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.846985][ T9657] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 682.856025][ T9657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.865511][ T9657] usb 1-1: config 0 descriptor?? [ 682.903224][ T9672] usb 3-1: USB disconnect, device number 66 [ 682.925361][T15638] chnl_net:caif_netlink_parms(): no params data found [ 682.955419][ T6001] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 683.158492][ T9671] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 683.197056][T15652] fido_id[15652]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 683.215718][ T9671] usb 2-1: can't read configurations, error -22 [ 683.306673][T15642] netlink: 'syz.0.2830': attribute type 6 has an invalid length. [ 683.347310][ T6001] usb 4-1: config 0 has no interfaces? [ 683.357561][ T9671] usb usb2-port1: attempt power cycle [ 683.533288][T15660] FAULT_INJECTION: forcing a failure. [ 683.533288][T15660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.549788][T15660] CPU: 0 UID: 0 PID: 15660 Comm: syz.2.2832 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 683.549820][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.549831][T15660] Call Trace: [ 683.549838][T15660] [ 683.549845][T15660] dump_stack_lvl+0x16c/0x1f0 [ 683.549883][T15660] should_fail_ex+0x512/0x640 [ 683.549909][T15660] strncpy_from_user+0x3b/0x2e0 [ 683.549934][T15660] getname_flags.part.0+0x8f/0x550 [ 683.549958][T15660] getname_flags+0x93/0xf0 [ 683.549981][T15660] __x64_sys_mknod+0x74/0xb0 [ 683.550006][T15660] do_syscall_64+0xcd/0x4c0 [ 683.550034][T15660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.550053][T15660] RIP: 0033:0x7f3ca7b8e929 [ 683.550068][T15660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.550085][T15660] RSP: 002b:00007f3ca8a3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 683.550102][T15660] RAX: ffffffffffffffda RBX: 00007f3ca7db5fa0 RCX: 00007f3ca7b8e929 [ 683.550113][T15660] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000200000000040 [ 683.550124][T15660] RBP: 00007f3ca8a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 683.550135][T15660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.550146][T15660] R13: 0000000000000000 R14: 00007f3ca7db5fa0 R15: 00007ffc08beb828 [ 683.550170][T15660] [ 683.704392][ T9657] usbhid 1-1:0.0: can't add hid device: -71 [ 683.710436][ T9657] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 683.721289][ T9657] usb 1-1: USB disconnect, device number 67 [ 683.745532][ T6001] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 683.754624][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.763376][ T9671] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 683.778645][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.790749][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.825147][T15638] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.832314][T15638] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.839569][T15638] bridge_slave_0: entered allmulticast mode [ 683.846323][T15638] bridge_slave_0: entered promiscuous mode [ 683.868672][ T6001] usb 4-1: Product: syz [ 683.872980][ T6001] usb 4-1: Manufacturer: syz [ 683.879169][ T6001] usb 4-1: SerialNumber: syz [ 684.160796][T15638] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.168026][ T9671] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 684.176354][ T9671] usb 2-1: can't read configurations, error -22 [ 684.185841][T15638] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.205879][ T6001] usb 4-1: config 0 descriptor?? [ 684.220885][T15638] bridge_slave_1: entered allmulticast mode [ 684.229880][T15638] bridge_slave_1: entered promiscuous mode [ 684.273083][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.293067][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.355815][ T9671] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 684.394330][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.410236][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.430951][ T9671] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 684.440987][ T9671] usb 2-1: can't read configurations, error -22 [ 684.455909][T12923] Bluetooth: hci5: command tx timeout [ 684.467028][ T9671] usb usb2-port1: unable to enumerate USB device [ 684.475915][T15638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.545587][T15638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.559041][ T30] audit: type=1400 audit(2000002046.108:1695): avc: denied { read } for pid=15644 comm="syz.3.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 684.624178][ T30] audit: type=1800 audit(2000002046.168:1696): pid=15672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2838" name="bus" dev="overlay" ino=3041 res=0 errno=0 [ 684.681231][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.693203][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.743943][T15648] pimreg: entered allmulticast mode [ 684.749694][ T9672] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 684.816449][T15638] team0: Port device team_slave_0 added [ 684.840208][T15675] pimreg: left allmulticast mode [ 684.917083][ T9672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 684.932322][T15638] team0: Port device team_slave_1 added [ 684.947147][ T9672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.975956][ T9672] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 684.989077][ T9672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.010127][ T9672] usb 3-1: config 0 descriptor?? [ 685.048283][T15638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.064196][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.102085][T15638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.114603][T15684] batman_adv: batadv0: Adding interface: dummy0 [ 685.121357][T15684] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 685.141496][T15684] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 685.156568][ T9657] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 685.185492][T15638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.195002][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.222794][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.232164][T15638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.247783][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.319123][ T9657] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 685.347682][ T9657] usb 1-1: config 0 has no interface number 0 [ 685.361675][ T9657] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 685.375662][ T9657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.391073][ T9657] usb 1-1: Product: syz [ 685.395474][ T9657] usb 1-1: Manufacturer: syz [ 685.400170][ T9657] usb 1-1: SerialNumber: syz [ 685.409906][ T9657] usb 1-1: config 0 descriptor?? [ 685.465782][T15638] hsr_slave_0: entered promiscuous mode [ 685.474854][T15638] hsr_slave_1: entered promiscuous mode [ 685.482385][ T9672] bigben 0003:146B:0902.0015: unexpected rdesc, please submit for review [ 685.500602][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.507040][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.516647][T15638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.517997][ T9672] bigben 0003:146B:0902.0015: unknown main item tag 0x0 [ 685.531386][T15638] Cannot create hsr debugfs directory [ 685.547436][ T9672] bigben 0003:146B:0902.0015: unknown main item tag 0x0 [ 685.563711][ T9672] bigben 0003:146B:0902.0015: unknown main item tag 0x0 [ 685.571354][ T9672] bigben 0003:146B:0902.0015: unknown main item tag 0x0 [ 685.582669][ T9672] bigben 0003:146B:0902.0015: unknown main item tag 0x0 [ 685.594168][ T9672] bigben 0003:146B:0902.0015: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 685.612663][ T9672] bigben 0003:146B:0902.0015: missing HID_OUTPUT_REPORT 0 [ 685.620120][ T9672] bigben 0003:146B:0902.0015: no output report found [ 685.682671][ T9672] usb 3-1: USB disconnect, device number 67 [ 685.724174][ T12] bridge_slave_1: left allmulticast mode [ 685.739472][ T12] bridge_slave_1: left promiscuous mode [ 685.740277][T15696] fido_id[15696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 685.756922][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.785254][ T12] bridge_slave_0: left allmulticast mode [ 685.798453][ T12] bridge_slave_0: left promiscuous mode [ 685.809851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.952442][ T12] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 685.962117][ T12] ip6gre1 (unregistering): left promiscuous mode [ 686.036523][T15674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2837'. [ 686.314647][ T9672] usb 4-1: USB disconnect, device number 71 [ 686.398897][ T12] bond1 (unregistering): Released all slaves [ 686.535414][T12923] Bluetooth: hci5: command tx timeout [ 686.645028][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 686.775099][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 686.835215][ T10] usb 3-1: device descriptor read/64, error -71 [ 687.032124][ T12] bond2 (unregistering): Released all slaves [ 687.069649][ T12] bond3 (unregistering): Released all slaves [ 687.107244][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 687.245264][ T10] usb 3-1: device descriptor read/64, error -71 [ 687.350947][ T12] bond0 (unregistering): Released all slaves [ 687.404475][ T10] usb usb3-port1: attempt power cycle [ 687.717285][ T12] : left promiscuous mode [ 687.752337][ T9657] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 687.784581][ T9657] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 687.819499][ T9657] asix 1-1:0.251: probe with driver asix failed with error -71 [ 687.828370][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 687.847464][ T9657] usb 1-1: USB disconnect, device number 68 [ 687.858957][ T10] usb 3-1: device descriptor read/8, error -71 [ 687.880055][ T12] tipc: Left network mode [ 688.316077][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 688.365984][ T10] usb 3-1: device descriptor read/8, error -71 [ 688.495672][ T10] usb usb3-port1: unable to enumerate USB device [ 688.622389][T12923] Bluetooth: hci5: command tx timeout [ 689.307287][T15743] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.317902][T15743] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.317958][T15743] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.317984][T15743] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.321579][T15742] lo speed is unknown, defaulting to 1000 [ 689.351843][T15742] lo speed is unknown, defaulting to 1000 [ 690.280340][T15766] 9pnet_fd: Insufficient options for proto=fd [ 690.666496][T15638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 690.706445][T12923] Bluetooth: hci5: command tx timeout [ 690.814466][T15638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 691.322775][T15638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 691.399092][T15638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 693.062310][ T12] hsr_slave_0: left promiscuous mode [ 693.110066][ T12] hsr_slave_1: left promiscuous mode [ 693.120678][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.135944][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.245848][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.275201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.368219][T15838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2876'. [ 694.189643][ T12] veth1_vlan: left promiscuous mode [ 694.195833][ T12] veth0_vlan: left promiscuous mode [ 694.321307][T15844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2878'. [ 694.810653][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2880'. [ 696.072305][ T12] team0 (unregistering): Port device team_slave_1 removed [ 696.109236][ T12] team0 (unregistering): Port device team_slave_0 removed [ 697.213965][T15638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.275713][ T30] audit: type=1400 audit(2000002058.808:1697): avc: denied { accept } for pid=15874 comm="syz.3.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 697.528973][T15638] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.713046][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.720170][T11206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.792587][T15890] overlay: Unknown parameter 'fowner>00000000000000000000' [ 698.242095][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.249229][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.131549][T15913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15913 comm=syz.2.2898 [ 699.344122][T15638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.744273][T15924] binder: 15923:15924 ioctl c0306201 0 returned -14 [ 699.781591][T15924] binder: 15923:15924 ioctl c0306201 200000000180 returned -14 [ 700.545108][ T9672] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 701.010226][T15638] veth0_vlan: entered promiscuous mode [ 701.023316][T15638] veth1_vlan: entered promiscuous mode [ 701.046769][ T9672] usb 1-1: unable to get BOS descriptor or descriptor too short [ 701.055327][ T9672] usb 1-1: not running at top speed; connect to a high speed hub [ 701.067302][ T9672] usb 1-1: config 4 has an invalid interface number: 4 but max is 0 [ 701.079047][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2908'. [ 701.085104][ T9672] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 701.099782][T15638] veth0_macvtap: entered promiscuous mode [ 701.105678][ T9672] usb 1-1: config 4 has no interface number 0 [ 701.122355][ T9672] usb 1-1: New USB device found, idVendor=05c6, idProduct=900f, bcdDevice=dd.1a [ 701.202005][T15954] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 701.381182][T15638] veth1_macvtap: entered promiscuous mode [ 701.387535][ T9672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.409072][ T9672] usb 1-1: Product: Ћ [ 701.432525][ T9672] usb 1-1: Manufacturer: ࠝ [ 701.476313][ T9672] usb 1-1: SerialNumber: 芨὎쎾뵾ᖗ鹦 [ 701.510293][T15638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.526644][T15638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.541014][T15638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.552506][T15638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.561872][T15638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.570986][ T5885] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 701.579569][T15638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.679264][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.691024][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.741003][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.765125][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.801460][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.815749][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.823571][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.836661][ T5885] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.856929][ T9672] usb 1-1: USB disconnect, device number 69 [ 701.883555][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.910125][ T30] audit: type=1400 audit(2000002063.458:1698): avc: denied { mounton } for pid=15638 comm="syz-executor" path="/root/syzkaller.D0DI1J/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=50530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 701.929172][ T5885] usb 2-1: config 0 descriptor?? [ 702.135088][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 702.145237][ T9671] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 702.208752][T15950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.226787][T15950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.285063][T15950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.295808][T15950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.659518][ T9671] usb 3-1: Using ep0 maxpacket: 8 [ 703.041136][ T9671] usb 3-1: no configurations [ 703.055025][ T9671] usb 3-1: can't read configurations, error -22 [ 703.142426][ T30] audit: type=1400 audit(2000002064.688:1699): avc: denied { ioctl } for pid=15969 comm="syz.4.2913" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 703.334339][ T9671] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 703.463501][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 703.490262][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 703.515004][ T9671] usb 3-1: Using ep0 maxpacket: 8 [ 703.525285][ T9671] usb 3-1: no configurations [ 703.529908][ T9671] usb 3-1: can't read configurations, error -22 [ 703.541436][ T5885] usb 2-1: USB disconnect, device number 49 [ 703.556901][ T9671] usb usb3-port1: attempt power cycle [ 703.667100][T15992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2919'. [ 704.013609][T15988] netlink: 'syz.0.2915': attribute type 10 has an invalid length. [ 704.058107][ T9671] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 704.088290][ T30] audit: type=1400 audit(2000002065.638:1700): avc: denied { mounton } for pid=15987 comm="syz.0.2915" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.144839][ T9671] usb 3-1: Using ep0 maxpacket: 8 [ 704.155394][ T9671] usb 3-1: no configurations [ 704.160015][ T9671] usb 3-1: can't read configurations, error -22 [ 704.186180][ T5885] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 704.328108][ T9671] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 704.531612][ T9671] usb 3-1: Using ep0 maxpacket: 8 [ 704.545094][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 704.545646][ T9671] usb 3-1: no configurations [ 704.572606][ T9671] usb 3-1: can't read configurations, error -22 [ 704.575381][ T5885] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 704.589839][ T9671] usb usb3-port1: unable to enumerate USB device [ 704.634517][ T5885] usb 2-1: config 0 has no interface number 0 [ 704.660015][ T5885] usb 2-1: config 0 interface 184 has no altsetting 0 [ 704.704813][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2927'. [ 704.817420][ T5885] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 704.836411][ T5885] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 704.839001][ T30] audit: type=1400 audit(2000002066.388:1701): avc: denied { read write } for pid=16008 comm="syz.4.2925" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 704.844584][ T5885] usb 2-1: Product: syz [ 705.287296][ T5885] usb 2-1: Manufacturer: syz [ 705.291935][ T5885] usb 2-1: SerialNumber: syz [ 705.298700][ T5885] usb 2-1: config 0 descriptor?? [ 705.303907][ T30] audit: type=1400 audit(2000002066.388:1702): avc: denied { open } for pid=16008 comm="syz.4.2925" path="/5/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 705.329053][ T5885] smsc75xx v1.0.0 [ 705.337878][ T30] audit: type=1400 audit(2000002066.598:1703): avc: denied { setattr } for pid=16008 comm="syz.4.2925" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 705.399012][ T30] audit: type=1400 audit(2000002066.828:1704): avc: denied { mounton } for pid=16008 comm="syz.4.2925" path="/5/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 705.438047][ T30] audit: type=1400 audit(2000002066.958:1705): avc: denied { getattr } for pid=16012 comm="syz.3.2927" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 705.931648][ T5885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 705.983038][ T5885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 706.675091][ T30] audit: type=1400 audit(2000002068.218:1706): avc: denied { nlmsg_read } for pid=15985 comm="syz.1.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 706.712218][ T5885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 707.166718][ T5885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 707.184962][ T5885] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 707.194531][ T5885] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 707.212542][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 707.278636][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 707.287376][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 707.301188][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 707.305723][ T5885] usb 2-1: USB disconnect, device number 50 [ 707.310836][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 707.520344][T16058] SET target dimension over the limit! [ 707.534572][T16052] lo speed is unknown, defaulting to 1000 [ 707.538737][T16059] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.2939'. [ 707.552124][T16052] lo speed is unknown, defaulting to 1000 [ 707.553443][ T30] audit: type=1400 audit(2000002069.078:1707): avc: denied { append } for pid=16057 comm="syz.0.2939" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 707.942574][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 708.056265][T16069] netlink: 'syz.3.2940': attribute type 4 has an invalid length. [ 708.130344][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 708.140777][T16068] loop6: detected capacity change from 0 to 524287999 [ 708.432617][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 708.441675][T16081] netlink: 'syz.4.2947': attribute type 18 has an invalid length. [ 708.450070][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 708.581724][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 708.689863][T16087] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 709.138523][T16052] chnl_net:caif_netlink_parms(): no params data found [ 709.297317][ T30] audit: type=1400 audit(2000002070.848:1708): avc: denied { write } for pid=16092 comm="syz.0.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 709.495190][ T5846] Bluetooth: hci1: command tx timeout [ 709.543780][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2950'. [ 709.692085][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.699829][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.713571][T16052] bridge_slave_0: entered allmulticast mode [ 709.725259][T16052] bridge_slave_0: entered promiscuous mode [ 709.875494][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.897110][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.915322][T16052] bridge_slave_1: entered allmulticast mode [ 709.922872][T16052] bridge_slave_1: entered promiscuous mode [ 710.402773][T16052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.441824][T16052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.687599][T16128] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 711.160271][ T30] audit: type=1400 audit(2000002072.708:1709): avc: denied { relabelto } for pid=16116 comm="syz.1.2956" name="file0" dev="overlay" ino=3209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 711.206602][ T30] audit: type=1400 audit(2000002072.748:1710): avc: denied { associate } for pid=16116 comm="syz.1.2956" name="#3210" dev="tmpfs" ino=3210 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 711.575576][ T5947] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 711.583958][ T5846] Bluetooth: hci1: command tx timeout [ 711.688541][ T36] dvmrp1 (unregistering): left allmulticast mode [ 711.732367][ T36] team0: Port device gtp0 removed [ 711.751971][ T5947] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 711.765180][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.773263][ T5947] usb 4-1: Product: syz [ 711.777758][ T5947] usb 4-1: Manufacturer: syz [ 711.782472][ T5947] usb 4-1: SerialNumber: syz [ 711.796111][ T5947] usb 4-1: config 0 descriptor?? [ 711.820983][ T5947] usb 4-1: selecting invalid altsetting 1 [ 711.831652][ T5947] comedi comedi5: could not switch to alternate setting 1 [ 711.840427][ T5947] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 712.069629][ T30] audit: type=1400 audit(2000002073.618:1711): avc: denied { read } for pid=16132 comm="syz.3.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 713.447486][ T36] bond1 (unregistering): Released all slaves [ 713.581412][ T36] bond0 (unregistering): Released all slaves [ 713.655760][ T5846] Bluetooth: hci1: command tx timeout [ 714.119549][ T36] bond2 (unregistering): Released all slaves [ 714.246283][ T36] bond3 (unregistering): Released all slaves [ 714.333216][ T36] bond4 (unregistering): Released all slaves [ 714.349317][ T36] bond5 (unregistering): Released all slaves [ 714.442466][ T36] bond6 (unregistering): Released all slaves [ 714.511665][T16052] team0: Port device team_slave_0 added [ 714.551847][ T36] : left promiscuous mode [ 714.758376][ T5947] usb 4-1: USB disconnect, device number 72 [ 714.768485][ T36] tipc: Left network mode [ 714.785313][T16052] team0: Port device team_slave_1 added [ 715.262246][T16155] overlay: Unknown parameter 'fowner>00000000000000000000' [ 715.745013][ T5846] Bluetooth: hci1: command tx timeout [ 716.029399][T16052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.072609][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.251123][T16052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.270112][ T30] audit: type=1800 audit(2000002077.818:1712): pid=16168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2966" name="bus" dev="overlay" ino=2826 res=0 errno=0 [ 716.818877][T16052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.045642][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.212323][T16052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.234613][T16173] bridge1: entered promiscuous mode [ 717.240276][T16173] bridge1: entered allmulticast mode [ 717.254662][T16173] team0: Port device bridge1 added [ 717.666354][ T30] audit: type=1400 audit(2000002079.218:1713): avc: denied { write } for pid=16178 comm="syz.4.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 717.693044][T16052] hsr_slave_0: entered promiscuous mode [ 717.725916][T16052] hsr_slave_1: entered promiscuous mode [ 717.746134][T16052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.754122][ T30] audit: type=1400 audit(2000002079.218:1714): avc: denied { mount } for pid=16178 comm="syz.4.2970" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 717.778301][T16052] Cannot create hsr debugfs directory [ 717.930233][ T30] audit: type=1400 audit(2000002079.478:1715): avc: denied { unmount } for pid=15638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 717.976117][ T5947] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 718.155784][ T5947] usb 1-1: device descriptor read/64, error -71 [ 718.193118][ T5846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 718.203340][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u9:8 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 718.203369][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.203383][ T5846] Workqueue: hci5 hci_rx_work [ 718.203416][ T5846] Call Trace: [ 718.203424][ T5846] [ 718.203432][ T5846] dump_stack_lvl+0x16c/0x1f0 [ 718.203462][ T5846] sysfs_warn_dup+0x7f/0xa0 [ 718.203491][ T5846] sysfs_create_dir_ns+0x24b/0x2b0 [ 718.203520][ T5846] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 718.203547][ T5846] ? find_held_lock+0x2b/0x80 [ 718.203576][ T5846] ? do_raw_spin_unlock+0x172/0x230 [ 718.203606][ T5846] kobject_add_internal+0x2c4/0x9b0 [ 718.203630][ T5846] kobject_add+0x16e/0x240 [ 718.203649][ T5846] ? __pfx_kobject_add+0x10/0x10 [ 718.203670][ T5846] ? do_raw_spin_unlock+0x172/0x230 [ 718.203693][ T5846] ? kobject_put+0xab/0x5a0 [ 718.203731][ T5846] device_add+0x288/0x1a70 [ 718.203752][ T5846] ? __pfx_dev_set_name+0x10/0x10 [ 718.203776][ T5846] ? __pfx_device_add+0x10/0x10 [ 718.203796][ T5846] ? mgmt_send_event_skb+0x2fb/0x460 [ 718.203833][ T5846] hci_conn_add_sysfs+0x17e/0x230 [ 718.203862][ T5846] le_conn_complete_evt+0x1075/0x1d70 [ 718.203896][ T5846] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 718.203921][ T5846] ? hci_event_packet+0x459/0x11c0 [ 718.203955][ T5846] hci_le_conn_complete_evt+0x23c/0x370 [ 718.203988][ T5846] hci_le_meta_evt+0x354/0x5e0 [ 718.204016][ T5846] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 718.204047][ T5846] hci_event_packet+0x685/0x11c0 [ 718.204073][ T5846] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 718.204103][ T5846] ? __pfx_hci_event_packet+0x10/0x10 [ 718.204132][ T5846] ? kcov_remote_start+0x3c9/0x6d0 [ 718.204154][ T5846] ? lockdep_hardirqs_on+0x7c/0x110 [ 718.204186][ T5846] hci_rx_work+0x2c5/0x16b0 [ 718.204216][ T5846] ? rcu_is_watching+0x12/0xc0 [ 718.204244][ T5846] process_one_work+0x9cf/0x1b70 [ 718.204275][ T5846] ? __pfx_process_one_work+0x10/0x10 [ 718.204303][ T5846] ? assign_work+0x1a0/0x250 [ 718.204325][ T5846] worker_thread+0x6c8/0xf10 [ 718.204357][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 718.204379][ T5846] kthread+0x3c2/0x780 [ 718.204398][ T5846] ? __pfx_kthread+0x10/0x10 [ 718.204419][ T5846] ? rcu_is_watching+0x12/0xc0 [ 718.204443][ T5846] ? __pfx_kthread+0x10/0x10 [ 718.204463][ T5846] ret_from_fork+0x5d4/0x6f0 [ 718.204493][ T5846] ? __pfx_kthread+0x10/0x10 [ 718.204512][ T5846] ret_from_fork_asm+0x1a/0x30 [ 718.204546][ T5846] [ 718.204572][ T5846] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 718.455001][ T5947] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 718.484911][ T5846] Bluetooth: hci5: failed to register connection device [ 719.295266][ T5947] usb 1-1: device descriptor read/64, error -71 [ 719.406162][ T5947] usb usb1-port1: attempt power cycle [ 719.495308][ T9657] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 719.688338][ T9657] usb 4-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 719.708953][ T9657] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 719.741871][ T9657] usb 4-1: Product: syz [ 719.753741][ T9657] usb 4-1: Manufacturer: syz [ 719.758545][ T5947] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 719.786712][ T9657] usb 4-1: SerialNumber: syz [ 719.795759][ T5947] usb 1-1: device descriptor read/8, error -71 [ 719.814746][ T9657] usb 4-1: config 0 descriptor?? [ 719.858874][ T9657] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 719.907867][ T9657] dvb-usb: bulk message failed: -22 (4/0) [ 719.963730][T10147] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 719.988588][ T9657] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 720.065138][ T5947] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 720.079471][ T9657] dvb-usb: bulk message failed: -22 (5/0) [ 720.099390][ T9657] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 720.116345][ T5947] usb 1-1: device descriptor read/8, error -71 [ 720.129525][T16226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2979'. [ 720.146414][ T9657] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 720.160304][T16226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2979'. [ 720.200661][ T9657] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 720.248215][ T5947] usb usb1-port1: unable to enumerate USB device [ 720.562865][ T36] hsr_slave_0: left promiscuous mode [ 720.616444][ T36] hsr_slave_1: left promiscuous mode [ 720.891365][ T5885] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 720.902511][T16250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.913961][T16250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.055121][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 721.152164][ T5947] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 721.196214][ T5885] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 721.386752][ T5885] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 721.397985][ T5885] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 721.445039][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 721.465791][ T5885] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 721.507791][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.566687][ T9684] usb 4-1: USB disconnect, device number 73 [ 721.582056][ T5885] usb 5-1: Product: syz [ 721.586989][ T5885] usb 5-1: Manufacturer: syz [ 721.591816][ T5885] usb 5-1: SerialNumber: syz [ 721.598895][ T5885] usb 5-1: config 0 descriptor?? [ 721.876428][T16267] binder: 16262:16267 ioctl c0306201 0 returned -14 [ 721.892729][T16267] binder_alloc: 16262: binder_alloc_buf size 69664 failed, no address space [ 721.901764][T16267] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 721.942980][ T5885] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 722.030627][ T5188] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 722.069357][T16238] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 722.099620][ T5188] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 722.174353][T16266] netlink: 'syz.0.2985': attribute type 10 has an invalid length. [ 722.182248][ T9684] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 722.190442][T16266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2985'. [ 722.315554][ T6457] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 722.331825][ T5188] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 722.356370][ T9684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.366755][ T9684] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.387223][ T9684] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 722.396485][ T9684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.417639][ T9684] usb 4-1: Product: syz [ 722.428978][ T9684] usb 4-1: Manufacturer: syz [ 722.442579][ T9684] usb 4-1: SerialNumber: syz [ 722.505711][ T5188] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 722.589420][ T5188] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 722.657951][ T5188] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 723.049154][T16276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.059368][T16276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.145347][ T5947] usb 5-1: USB disconnect, device number 76 [ 724.455111][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 725.653130][T16300] tmpfs: Unknown parameter '' [ 726.172453][T16266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.182389][T16266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.191172][T16266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.200087][T16266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.233108][T16266] team0: Port device geneve0 added [ 726.243042][T16275] 8021q: VLANs not supported on ipvlan1 [ 726.260924][T16301] bridge2: entered promiscuous mode [ 726.266188][T16301] bridge2: entered allmulticast mode [ 726.274422][T16301] team0: Port device bridge2 added [ 726.367892][T16052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 726.443328][ T9684] usb 4-1: 0:2 : does not exist [ 726.465864][T16312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.473592][T16312] IPv6: NLM_F_CREATE should be set when creating new route [ 726.480880][T16312] IPv6: NLM_F_CREATE should be set when creating new route [ 726.488136][T16312] IPv6: NLM_F_CREATE should be set when creating new route [ 726.515323][T16052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 726.534457][ T9684] usb 4-1: USB disconnect, device number 74 [ 726.551093][T16052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 726.601342][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.641057][T16052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 726.668438][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2997'. [ 727.176712][T16052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.289534][T16052] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.943100][T16348] syzkaller0: entered promiscuous mode [ 727.948877][T16348] syzkaller0: entered allmulticast mode [ 727.999965][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.007131][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.019785][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.026895][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.050938][T16052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 728.061527][T16052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.308672][ T9684] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 728.655004][ T9684] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 728.886780][ T36] IPVS: stop unused estimator thread 0... [ 728.891988][ T9684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.904084][ T9684] usb 5-1: config 0 descriptor?? [ 729.041785][T16052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.206166][ T9684] cp210x 5-1:0.0: cp210x converter detected [ 729.249514][T16052] veth0_vlan: entered promiscuous mode [ 729.319531][T16052] veth1_vlan: entered promiscuous mode [ 729.416894][ T9684] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 729.498512][ T9684] cp210x 5-1:0.0: querying part number failed [ 729.558311][ T9684] usb 5-1: cp210x converter now attached to ttyUSB0 [ 729.562216][T16052] veth0_macvtap: entered promiscuous mode [ 729.575795][T16052] veth1_macvtap: entered promiscuous mode [ 729.634276][T16052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.697395][T16052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.763168][T16052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.838950][T16052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.872363][T16052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.901041][T16052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.025493][ T9684] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 730.153501][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.192884][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.205680][ T9684] usb 1-1: Using ep0 maxpacket: 16 [ 730.227484][ T9684] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 730.260758][ T9684] usb 1-1: config 0 has no interface number 0 [ 730.282265][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.285560][ T9684] usb 1-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 730.321800][ T9684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.323741][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.364093][ T9684] usb 1-1: Product: syz [ 730.382546][ T9684] usb 1-1: Manufacturer: syz [ 730.399845][ T9684] usb 1-1: SerialNumber: syz [ 730.426415][ T9684] usb 1-1: config 0 descriptor?? [ 730.466094][ T9684] usb 1-1: bad CDC descriptors [ 730.496673][T16399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.520580][T16399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.716620][ T9686] usb 1-1: USB disconnect, device number 75 [ 730.895026][ T9684] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 731.078800][ T9684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.304745][ T9684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.357485][ T9684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 731.407682][ T9684] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 731.442541][ T9684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.573626][ T9684] usb 3-1: config 0 descriptor?? [ 731.579366][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 731.687051][ T30] audit: type=1326 audit(2000002093.228:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.4.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed018e929 code=0x7fc00000 [ 731.894282][ T9671] usb 5-1: USB disconnect, device number 77 [ 731.931491][ T9671] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 731.962410][ T9671] cp210x 5-1:0.0: device disconnected [ 732.202941][T16433] netlink: 'syz.4.3016': attribute type 12 has an invalid length. [ 732.218277][ T9684] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 732.227036][T16433] netlink: 'syz.4.3016': attribute type 29 has an invalid length. [ 732.276932][T16433] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3016'. [ 732.301082][T16433] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3016'. [ 732.391827][ T5947] usb 3-1: USB disconnect, device number 76 [ 732.568974][T16444] trusted_key: encrypted_key: insufficient parameters specified [ 732.624301][T12923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.638040][T12923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.751574][T12923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.765455][T12923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.776705][T12923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.997297][ T9684] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 733.142509][T16447] lo speed is unknown, defaulting to 1000 [ 733.165268][ T9684] usb 5-1: Using ep0 maxpacket: 16 [ 733.169802][T16453] block device autoloading is deprecated and will be removed. [ 733.251692][ T9684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.304405][ T9684] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.471145][ T9684] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.495121][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 733.535292][ T9684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.560614][ T9684] usb 5-1: Product: syz [ 733.583876][ T9684] usb 5-1: Manufacturer: syz [ 733.604172][ T9684] usb 5-1: SerialNumber: syz [ 733.925436][ T9684] usb 5-1: 0:2 : does not exist [ 733.950291][ T9684] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 733.992589][ T9684] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 734.015561][ T9684] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 734.033238][ T9684] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 734.073906][ T9684] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 734.480129][ T9684] usb 5-1: USB disconnect, device number 78 [ 734.546223][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.573176][T16447] chnl_net:caif_netlink_parms(): no params data found [ 734.865564][ T5846] Bluetooth: hci0: command tx timeout [ 735.073245][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 735.848560][ T13] bond0 (unregistering): Released all slaves [ 735.867961][ T13] bond1 (unregistering): Released all slaves [ 735.932192][T16506] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 736.018001][T16503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 736.046044][T16503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 736.058517][T16503] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 736.085266][T16503] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 736.115902][ T13] : left promiscuous mode [ 736.127061][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 736.166665][T16503] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 736.354585][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 736.945008][ T5846] Bluetooth: hci0: command tx timeout [ 737.140369][T16503] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 737.358252][T16503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 737.380663][T16503] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 737.924373][ T13] tipc: Left network mode [ 737.929600][T16447] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.945381][T16447] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.957895][T16447] bridge_slave_0: entered allmulticast mode [ 737.965562][T16503] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 737.969526][T16447] bridge_slave_0: entered promiscuous mode [ 737.981964][T16503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 737.995847][T16503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 738.025245][T16447] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.037349][T16503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 738.043875][T16447] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.055380][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 738.055390][T12923] Bluetooth: hci2: command 0x0406 tx timeout [ 738.135590][ T5846] Bluetooth: hci5: command 0x0c1a tx timeout [ 738.158912][T16447] bridge_slave_1: entered allmulticast mode [ 738.196530][ T5846] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 738.212408][T16447] bridge_slave_1: entered promiscuous mode [ 738.853358][T16447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.868805][T16447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.889011][T16578] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.3040'. [ 739.738241][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 739.757481][T16447] team0: Port device team_slave_0 added [ 740.111210][ T5846] Bluetooth: hci0: command 0x0419 tx timeout [ 740.231527][ T5846] Bluetooth: hci5: command 0x0c1a tx timeout [ 741.069878][T16447] team0: Port device team_slave_1 added [ 741.573059][T16447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.627519][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.660374][T16447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.848945][T12923] Bluetooth: hci1: command 0x0c1a tx timeout [ 741.905225][ T9657] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 742.056036][ T9657] usb 4-1: device descriptor read/64, error -71 [ 742.137099][T12923] Bluetooth: hci0: command 0x0419 tx timeout [ 742.177882][T16447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.280821][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.311048][T12923] Bluetooth: hci5: command 0x0c1a tx timeout [ 742.369059][ T9657] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 742.564213][T16447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.597371][ T9657] usb 4-1: device descriptor read/64, error -71 [ 742.764310][ T9657] usb usb4-port1: attempt power cycle [ 742.850269][T16609] lo speed is unknown, defaulting to 1000 [ 742.904710][T16633] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3055'. [ 742.980451][T16447] hsr_slave_0: entered promiscuous mode [ 743.006340][T16447] hsr_slave_1: entered promiscuous mode [ 743.020037][T16447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.034470][T16447] Cannot create hsr debugfs directory [ 743.245788][ T9657] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 743.343569][ T9657] usb 4-1: device descriptor read/8, error -71 [ 743.566657][ T13] hsr_slave_0: left promiscuous mode [ 743.580039][ T13] hsr_slave_1: left promiscuous mode [ 743.591372][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 743.600052][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.609088][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.625511][ T9657] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 743.684994][ T9657] usb 4-1: device descriptor read/8, error -71 [ 743.815574][ T9657] usb usb4-port1: unable to enumerate USB device [ 743.900298][T12923] Bluetooth: hci1: command 0x0c1a tx timeout [ 744.225101][T12923] Bluetooth: hci0: command 0x0419 tx timeout [ 744.319815][ T9684] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 744.376426][T12923] Bluetooth: hci5: command 0x0c1a tx timeout [ 744.565033][ T9684] usb 3-1: Invalid ep0 maxpacket: 32 [ 744.636267][T16675] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 744.736611][ T9684] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 745.151597][ T9684] usb 3-1: Invalid ep0 maxpacket: 32 [ 745.159820][ T9684] usb usb3-port1: attempt power cycle [ 745.559317][ T9684] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 745.608386][ T9684] usb 3-1: Invalid ep0 maxpacket: 32 [ 745.765349][ T9684] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 745.812701][ T9684] usb 3-1: Invalid ep0 maxpacket: 32 [ 745.835334][ T9684] usb usb3-port1: unable to enumerate USB device [ 746.084632][T16713] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3071'. [ 746.345433][T12923] Bluetooth: hci0: command 0x0419 tx timeout [ 746.991239][T16723] vxfs: WRONG superblock magic 00000000 at 1 [ 747.000108][T16723] vxfs: WRONG superblock magic 00000000 at 8 [ 747.006470][T16723] vxfs: can't find superblock. [ 747.021106][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.030356][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.262594][T16447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 747.793398][T16447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 747.867797][T16447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 747.903095][T16735] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3077' sets config #-511 [ 748.001470][T16447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.187359][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 748.373059][T16750] tmpfs: Bad value for 'mpol' [ 748.421006][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 748.494246][T16447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.631951][T16447] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.665964][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.673163][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.776254][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.783373][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.030025][T16447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 749.105660][ T9657] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 749.285214][ T9657] usb 1-1: Using ep0 maxpacket: 32 [ 749.309462][ T9657] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 749.344510][ T9657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.369096][ T9657] usb 1-1: config 0 descriptor?? [ 749.420575][ T9657] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 749.647521][T16447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.798373][ T9657] gspca_nw80x: reg_r err -71 [ 749.844003][ T9657] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 749.856331][T16447] veth0_vlan: entered promiscuous mode [ 749.895373][ T9657] usb 1-1: USB disconnect, device number 76 [ 749.916453][T16447] veth1_vlan: entered promiscuous mode [ 750.021683][T16447] veth0_macvtap: entered promiscuous mode [ 750.087977][T16807] Cache volume key already in use (9p,(null),) [ 750.097049][T16447] veth1_macvtap: entered promiscuous mode [ 750.173080][T16447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.213556][T16447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.261038][T16447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.310654][T16447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.338301][T16447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.370254][T16447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.665086][ T9671] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 750.835565][ T9671] usb 1-1: Using ep0 maxpacket: 32 [ 750.952647][ T9671] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 751.006826][ T385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.014670][ T385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.039897][ T9671] usb 1-1: config 0 has no interface number 0 [ 751.089237][T16828] pim6reg: entered allmulticast mode [ 751.118942][ T9671] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 751.144092][ T9671] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.167211][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.187207][ T9671] usb 1-1: Product: syz [ 751.191416][ T9671] usb 1-1: Manufacturer: syz [ 751.197164][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.207950][ T9671] usb 1-1: SerialNumber: syz [ 751.232017][ T9671] usb 1-1: config 0 descriptor?? [ 751.595164][ T9671] mos7840 1-1:0.186: required endpoints missing [ 752.128287][T16844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.211641][T16844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.385185][ T9671] usb 1-1: USB disconnect, device number 77 [ 752.474943][T16854] Cannot find del_set index 0 as target [ 752.942504][ T30] audit: type=1400 audit(2000002114.478:1717): avc: denied { ioctl } for pid=16853 comm="syz.2.3100" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 753.021600][ T10] kernel write not supported for file /71/timerslack_ns (pid: 10 comm: kworker/0:1) [ 753.049197][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3104'. [ 753.515007][ T9686] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 753.538052][ T30] audit: type=1326 audit(2000002115.078:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.576137][ T30] audit: type=1326 audit(2000002115.078:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.601128][ T30] audit: type=1326 audit(2000002115.078:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.625898][ T30] audit: type=1326 audit(2000002115.078:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.693252][ T30] audit: type=1326 audit(2000002115.078:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.725295][ T9686] usb 5-1: Using ep0 maxpacket: 32 [ 753.727341][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.740138][ T9686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.742994][ T30] audit: type=1326 audit(2000002115.078:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.778983][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.787558][ T30] audit: type=1326 audit(2000002115.078:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.798565][ T9686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.811434][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.858757][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.863832][ T30] audit: type=1326 audit(2000002115.078:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 753.903397][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.908206][ T9686] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 753.927814][ T6081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.938700][ T9686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.947087][ T6081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.964602][ T30] audit: type=1326 audit(2000002115.078:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.2.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e058e929 code=0x7fc00000 [ 754.011967][T16893] NILFS (nullb0): couldn't find nilfs on the device [ 754.058269][T16893] netlink: 'syz.0.3110': attribute type 9 has an invalid length. [ 754.357708][ T9686] usb 5-1: config 0 descriptor?? [ 755.122615][ T6081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.625991][ T6081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.754598][T16885] lo speed is unknown, defaulting to 1000 [ 755.837534][ T9686] kye 0003:0458:0087.0017: unknown main item tag 0x0 [ 755.904507][ T9686] kye 0003:0458:0087.0017: unknown main item tag 0x0 [ 755.952967][ T9686] kye 0003:0458:0087.0017: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 755.965698][ T6081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.045240][ T6081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.375322][T12923] Bluetooth: hci3: command tx timeout [ 756.393591][ T6081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.494390][ T6081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.674236][ T9686] usb 5-1: USB disconnect, device number 79 [ 757.051046][T16885] chnl_net:caif_netlink_parms(): no params data found [ 757.121032][T16936] netlink: 'syz.0.3117': attribute type 1 has an invalid length. [ 757.235795][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3117'. [ 757.333238][T16937] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 757.391882][T16949] CIFS: iocharset name too long [ 757.468410][T16943] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 757.479032][T16943] bond5 (unregistering): Released all slaves [ 757.528479][ T6081] bridge_slave_1: left allmulticast mode [ 757.543818][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.556589][ T6081] bridge_slave_0: left allmulticast mode [ 757.564993][ T6081] bridge_slave_0: left promiscuous mode [ 757.570736][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.578287][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 757.645054][ T9671] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 757.694087][ T6081] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 757.717641][ T6081] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 757.725986][ T6081] ip6gre1 (unregistering): left promiscuous mode [ 757.735263][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 757.743530][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 757.759159][ T10] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 757.772909][ T10] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 757.784556][ T10] usb 5-1: config 7 has no interface number 0 [ 757.797042][ T9671] usb 2-1: Using ep0 maxpacket: 16 [ 757.797477][ T10] usb 5-1: config 7 interface 187 has no altsetting 0 [ 757.814453][ T9671] usb 2-1: config 128 has an invalid interface number: 81 but max is 2 [ 757.817526][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 757.840014][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.848055][ T9671] usb 2-1: config 128 has an invalid interface number: 183 but max is 2 [ 757.848083][ T9671] usb 2-1: config 128 has an invalid interface number: 172 but max is 2 [ 757.848103][ T9671] usb 2-1: config 128 has an invalid interface number: 6 but max is 2 [ 757.848121][ T9671] usb 2-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 757.848138][ T9671] usb 2-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 757.848155][ T9671] usb 2-1: config 128 has 4 interfaces, different from the descriptor's value: 3 [ 757.848174][ T9671] usb 2-1: config 128 has no interface number 0 [ 757.848188][ T9671] usb 2-1: config 128 has no interface number 1 [ 757.848202][ T9671] usb 2-1: config 128 has no interface number 2 [ 757.862618][ T10] usb 5-1: Product: syz [ 757.874682][ T9671] usb 2-1: config 128 has no interface number 3 [ 757.888631][ T9657] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 757.904764][ T9671] usb 2-1: config 128 interface 81 altsetting 129 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 757.911317][ T10] usb 5-1: Manufacturer: syz [ 757.929041][ T9671] usb 2-1: config 128 interface 81 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 757.935510][ T10] usb 5-1: SerialNumber: syz [ 757.954610][ T9671] usb 2-1: config 128 interface 81 altsetting 129 endpoint 0xE has invalid wMaxPacketSize 0 [ 758.001217][ T9671] usb 2-1: config 128 interface 81 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 758.032723][ T9671] usb 2-1: config 128 interface 81 altsetting 129 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 758.063716][ T9671] usb 2-1: config 128 interface 81 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 758.074986][ T9671] usb 2-1: config 128 interface 81 altsetting 129 has a duplicate endpoint with address 0x9, skipping [ 758.090121][ T9671] usb 2-1: config 128 interface 183 altsetting 7 has an endpoint descriptor with address 0x6D, changing to 0xD [ 758.101950][ T9671] usb 2-1: config 128 interface 183 altsetting 7 bulk endpoint 0xD has invalid maxpacket 1023 [ 758.106859][ T9657] usb 1-1: config 0 has no interfaces? [ 758.129881][ T9671] usb 2-1: config 128 interface 183 altsetting 7 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 758.130424][ T9657] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.147388][ T9671] usb 2-1: config 128 interface 183 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 758.161995][ T9657] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.168235][ T9671] usb 2-1: config 128 interface 183 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 758.180786][ T9657] usb 1-1: Manufacturer: syz [ 758.192545][ T9671] usb 2-1: config 128 interface 183 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 758.192917][ T9657] usb 1-1: config 0 descriptor?? [ 758.203745][ T9671] usb 2-1: config 128 interface 183 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 758.221091][ T9671] usb 2-1: config 128 interface 183 altsetting 7 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 758.222008][ T10] usb 5-1: Not enough endpoints found in device, aborting! [ 758.258797][ T9671] usb 2-1: config 128 interface 172 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 758.282876][ T9671] usb 2-1: config 128 interface 172 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 758.296483][ T9671] usb 2-1: too many endpoints for config 128 interface 6 altsetting 243: 122, using maximum allowed: 30 [ 758.308063][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has a duplicate endpoint with address 0xF, skipping [ 758.319107][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has a duplicate endpoint with address 0x4, skipping [ 758.320409][ T6081] team0: Port device bridge2 removed [ 758.330643][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 758.330668][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 758.330688][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has a duplicate endpoint with address 0x3, skipping [ 758.330708][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 758.330727][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 758.330750][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has a duplicate endpoint with address 0x8D, skipping [ 758.330770][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has a duplicate endpoint with address 0x4, skipping [ 758.330790][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has a duplicate endpoint with address 0xF, skipping [ 758.330810][ T9671] usb 2-1: config 128 interface 6 altsetting 243 endpoint 0x8 has an invalid bInterval 130, changing to 11 [ 758.437410][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 758.442478][ T9657] usb 5-1: USB disconnect, device number 80 [ 758.448559][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 758.448587][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has a duplicate endpoint with address 0xA, skipping [ 758.448608][ T9671] usb 2-1: config 128 interface 6 altsetting 243 has 13 endpoint descriptors, different from the interface descriptor's value: 122 [ 758.487557][T12923] Bluetooth: hci3: command tx timeout [ 758.491982][ T9671] usb 2-1: config 128 interface 81 has no altsetting 0 [ 758.504990][ T9671] usb 2-1: config 128 interface 183 has no altsetting 0 [ 758.512659][ T9671] usb 2-1: config 128 interface 172 has no altsetting 0 [ 758.528965][ T9671] usb 2-1: config 128 interface 6 has no altsetting 0 [ 758.560496][ T9671] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=e8.fa [ 758.570829][ T9671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.579287][ T9671] usb 2-1: Product: syz [ 758.583672][ T9671] usb 2-1: Manufacturer: syz [ 758.588378][ T9671] usb 2-1: SerialNumber: syz [ 758.594294][T16964] Unknown options in mask 5 [ 758.920205][ T9657] usb 1-1: USB disconnect, device number 78 [ 759.228139][T16970] x_tables: ip_tables: osf match: only valid for protocol 6 [ 759.611389][ T6081] bond1 (unregistering): Released all slaves [ 759.677336][ T9672] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 759.879463][ T9672] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 759.910855][ T9672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.928555][ T9672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.103130][ T9672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 760.153457][ T9672] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 760.169614][ T9672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.193707][ T9672] usb 1-1: config 0 descriptor?? [ 760.301874][ T6081] bond2 (unregistering): Released all slaves [ 760.437667][ T6081] bond3 (unregistering): Released all slaves [ 760.539182][ T5846] Bluetooth: hci3: command tx timeout [ 760.560315][ T6081] bond4 (unregistering): Released all slaves [ 760.577833][ T6081] bond5 (unregistering): Released all slaves [ 760.630086][ T9672] hid (null): invalid report_count 903462111 [ 760.698789][ T9672] waltop 0003:172F:0502.0018: invalid report_count 903462111 [ 760.715739][ T9672] waltop 0003:172F:0502.0018: item 0 4 1 9 parsing failed [ 760.731017][ T9672] waltop 0003:172F:0502.0018: probe with driver waltop failed with error -22 [ 760.823054][ T6081] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 760.846713][ T6081] bond0 (unregistering): Released all slaves [ 760.978044][ T6081] bond6 (unregistering): Released all slaves [ 761.083645][ T6081] bond7 (unregistering): Released all slaves [ 761.105128][T16970] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN NOPTI [ 761.117216][T16970] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 761.125621][T16970] CPU: 0 UID: 0 PID: 16970 Comm: syz.0.3125 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 761.137694][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.147738][T16970] RIP: 0010:htb_qlen_notify+0x2d/0xc0 [ 761.153108][T16970] Code: fa 41 55 41 54 55 48 89 fd 53 48 89 f3 4c 8d ab a8 01 00 00 e8 34 2b 2e f8 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 67 44 8b a3 a8 01 00 00 31 ff 44 [ 761.172716][T16970] RSP: 0018:ffffc90010127328 EFLAGS: 00010206 [ 761.178771][T16970] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000f3a2000 [ 761.186728][T16970] RDX: 0000000000000035 RSI: ffffffff898df54c RDI: ffff88802b612000 [ 761.194685][T16970] RBP: ffff88802b612000 R08: 0000000000000005 R09: 0000000000000000 [ 761.202639][T16970] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce88e00 [ 761.210594][T16970] R13: 00000000000001a8 R14: ffffffff8ce88de0 R15: ffff88802b612000 [ 761.218559][T16970] FS: 00007f48545f66c0(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 761.227474][T16970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 761.234043][T16970] CR2: 00007f5ed0ff5f98 CR3: 000000005b71a000 CR4: 00000000003526f0 [ 761.241999][T16970] Call Trace: [ 761.245270][T16970] [ 761.248187][T16970] qdisc_tree_reduce_backlog+0x221/0x500 [ 761.253822][T16970] sfq_init+0x88a/0x2540 [ 761.258057][T16970] ? __pfx_sfq_init+0x10/0x10 [ 761.262722][T16970] ? qdisc_alloc+0x94f/0xc50 [ 761.267303][T16970] ? __pfx_sfq_init+0x10/0x10 [ 761.271968][T16970] qdisc_create+0x457/0xfc0 [ 761.276462][T16970] tc_modify_qdisc+0x12bb/0x2130 [ 761.281388][T16970] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 761.286666][T16970] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 761.291940][T16970] rtnetlink_rcv_msg+0x3c9/0xe90 [ 761.296891][T16970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.302344][T16970] ? __lock_acquire+0x622/0x1c90 [ 761.307269][T16970] netlink_rcv_skb+0x155/0x420 [ 761.312017][T16970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.317477][T16970] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.322752][T16970] ? netlink_deliver_tap+0x1ae/0xd30 [ 761.328041][T16970] ? is_vmalloc_addr+0x86/0xa0 [ 761.332792][T16970] netlink_unicast+0x53a/0x7f0 [ 761.337542][T16970] ? __pfx_netlink_unicast+0x10/0x10 [ 761.342814][T16970] netlink_sendmsg+0x8d1/0xdd0 [ 761.347561][T16970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.352834][T16970] ____sys_sendmsg+0xa95/0xc70 [ 761.357585][T16970] ? copy_msghdr_from_user+0x10a/0x160 [ 761.363032][T16970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.368313][T16970] ? __pfx_futex_wake_mark+0x10/0x10 [ 761.373582][T16970] ___sys_sendmsg+0x134/0x1d0 [ 761.378250][T16970] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.383445][T16970] ? __lock_acquire+0x622/0x1c90 [ 761.388386][T16970] __sys_sendmsg+0x16d/0x220 [ 761.392969][T16970] ? __pfx___sys_sendmsg+0x10/0x10 [ 761.398076][T16970] ? __x64_sys_futex+0x1e0/0x4c0 [ 761.403011][T16970] do_syscall_64+0xcd/0x4c0 [ 761.407507][T16970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.413381][T16970] RIP: 0033:0x7f485678e929 [ 761.417782][T16970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.437380][T16970] RSP: 002b:00007f48545f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.445778][T16970] RAX: ffffffffffffffda RBX: 00007f48569b6160 RCX: 00007f485678e929 [ 761.453732][T16970] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000c [ 761.461690][T16970] RBP: 00007f4856810b39 R08: 0000000000000000 R09: 0000000000000000 [ 761.469643][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 761.477610][T16970] R13: 0000000000000000 R14: 00007f48569b6160 R15: 00007ffd68681ec8 [ 761.485589][T16970] [ 761.488596][T16970] Modules linked in: [ 761.492529][T16970] ---[ end trace 0000000000000000 ]--- [ 761.497988][T16970] RIP: 0010:htb_qlen_notify+0x2d/0xc0 [ 761.503406][T16970] Code: fa 41 55 41 54 55 48 89 fd 53 48 89 f3 4c 8d ab a8 01 00 00 e8 34 2b 2e f8 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 67 44 8b a3 a8 01 00 00 31 ff 44 [ 761.523032][T16970] RSP: 0018:ffffc90010127328 EFLAGS: 00010206 [ 761.529101][T16970] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000f3a2000 [ 761.537074][T16970] RDX: 0000000000000035 RSI: ffffffff898df54c RDI: ffff88802b612000 [ 761.545054][T16970] RBP: ffff88802b612000 R08: 0000000000000005 R09: 0000000000000000 [ 761.553025][T16970] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce88e00 [ 761.561003][T16970] R13: 00000000000001a8 R14: ffffffff8ce88de0 R15: ffff88802b612000 [ 761.568978][T16970] FS: 00007f48545f66c0(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 761.577905][T16970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 761.584483][T16970] CR2: 00007f5ed0ff5f98 CR3: 000000005b71a000 CR4: 00000000003526f0 [ 761.592463][T16970] Kernel panic - not syncing: Fatal exception in interrupt [ 761.599851][T16970] Kernel Offset: disabled [ 761.604154][T16970] Rebooting in 86400 seconds..