last executing test programs: 3m1.552631011s ago: executing program 4 (id=156): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x0) fanotify_init(0x2, 0x0) (async) fanotify_init(0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x20000000000001bc, &(0x7f00000002c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'ovf\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xfffffffffffffd56) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x4, 0x0, 0x0) 3m1.148823069s ago: executing program 4 (id=158): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005480)=ANY=[@ANYBLOB="1c0000005200010027bd700000007cd5201544a347b7ab49d2f67492"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x80040306, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 2m58.687322876s ago: executing program 4 (id=168): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) (async) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000280)={0x1, [0x0]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000280)={0x1, [0x0]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6, 0x8}}, './file0\x00'}) memfd_secret(0x80000) syz_usb_connect(0x3, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100029802030109023b00027f0110090904ab020002af27cf002406000005240008000d240f0106000000018002000d0904000a017e63abff09060a04400001080200000000000000000000beb1aa2faa0c5014395674fc5b34d652267d64d1a95e1957c8633c77a54f6b51d907f3a51541c5d83da4e44fdc3e3f26618fbe64b349b78cb651ef9fed31ff5ac2d7ae96b84b20b63f225407cb2bdca48bcd07bb7356c8484b1aa03b6410c66fe775b222233ba98a517d70e353ac3170cfba8649069068749648d1318e137c1667"], 0x0) 2m57.723809076s ago: executing program 4 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x17, 0x0}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x200040b4}, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80080, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020) 2m56.683089695s ago: executing program 4 (id=175): r0 = socket$inet6(0xa, 0x0, 0x6) r1 = fsopen(&(0x7f0000000440)='selinuxfs\x00', 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r3 = socket(0xa, 0x3, 0x3a) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000100), 0x8) shutdown(r7, 0x1) ioctl$sock_netdev_private(r6, 0x89f9, &(0x7f00000029c0)="71aef482bdb6877871e0b8c9700db01d9fdec570b63d0830666a0fac6f3949ed51ca22c22d59a2") bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0x4, 0xc, 0x1, 0x2, 0x9004, 0x1, 0x6d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x0, @value, @void, @void, @value}, 0x50) write$cgroup_pressure(r5, 0x0, 0x0) r8 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000002c0)='ro\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000028c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000002880)={&(0x7f0000000480)=@newtaction={0x260, 0x30, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{0x194, 0x1, [@m_vlan={0x54, 0xf, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb20}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x480000, 0x8, 0x8, 0x7, 0x4}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0xa18d6129294f882b}}}}, @m_ctinfo={0x80, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x3b, 0x6, "e26d9f121b81ad32f55469d49f87121cabdd9e026d8531f50e6fff5d85f638342d79b3654ce6d58711f86717edfc4f8df6f881c0525761"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x36e0ae86c273550e}}}}, @m_gact={0xbc, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x4, 0x244e, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x19c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x365, 0x4}}]}, {0x6b, 0x6, "2688a593b82b913ad7259c643929383cfce68f20481f62baf351157d1fc9aa0e750d27c8ccadc467d2a78e3f7e63a0cc26f3a5f76f9378c87c77f3964d5e8f0e1e4ca1032edd02866258cfd6c96e159011c9bd062daef088f2f4f68c285780f09bbdbdca0a9673"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0xb8, 0x1, [@m_gact={0xb4, 0xd, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa5f, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7ff, 0xac6ad7e91a13d1e5, 0x7, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x320, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2467, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3c46, 0x0, 0x2, 0x6, 0x3ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a74, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf75, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x65eb9a7b, 0x2, 0xf9e4, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1fbda29ee29358eb}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x260}}, 0x8000) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r10, 0x0, 0x0, 0x1}}, 0x20) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) getsockopt$MRT(r8, 0x0, 0xcf, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt(r8, 0x0, 0x0, &(0x7f0000002a40)="a8d6f8e737ce9f355c2b5bcddf8c5161745bc40f36e262dc0d76b1fb21b1a849d13f95e165175a901fe64f8e73e63a3e1a74deb623e6bb5f354cc4f1ff0f04c1486c010384f4f42dd91943e47347867300619398947fe0e25748", 0x5a) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="d9f53ff4cb2c5a5be47a2421c778becd7b40ba25d4f608d43b3291251ac9ca5d7ad125e0924b529d841fafd8c5e9032783eb89878435317d552941e383b3ceb469e5467727a9c1", 0x47}, {&(0x7f0000000100)="4e5219cfde7f91345ef794a7c448852f3cf1c1709e5d0f285516963afe840acd63949753c44bde93dbf6be5e80728ac249fe56c4873d3c3b90cf613d589890ecad8b4760d857f5df8056759b51633c932ce6a817e0bc65eda653f328ff65a9834725b3472d124673951ecf6a26ce9ba374e07d", 0x73}, {0x0}], 0x3) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m55.756550777s ago: executing program 4 (id=178): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0x5, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='P', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) socketpair(0xf, 0x804, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x35315852, 0x800000}}) 2m55.158966059s ago: executing program 32 (id=178): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0x5, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='P', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) socketpair(0xf, 0x804, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x35315852, 0x800000}}) 9.073949957s ago: executing program 5 (id=881): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xffdb, 0x5, {0x0}, {}, 0xc, 0x10000}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r2 = dup(r1) fallocate(r2, 0x11, 0x400, 0x74000) r3 = syz_open_procfs(r0, &(0x7f0000000080)='fd\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1ff}}, 0x30) fchdir(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=r3], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000300)=""/153, 0x0, 0x2a, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) 8.178884786s ago: executing program 5 (id=882): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x1000000, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0x1261) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0xff}]}) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@empty, 0x0, r6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9f, 0x67, 0xd, 0x8, 0x55f, 0xa800, 0x2cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x0, 0xe9, 0xe0, 0x3d, 0x2}}]}}]}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382c00fe800000000000000000000000000000ff0200000000000000000000000004013c00000000000000050200c900000000890090780000000000000000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x305, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 8.113109362s ago: executing program 1 (id=883): socket$key(0xf, 0x3, 0x2) syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r0 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000100)=0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xfc, 0x30, 0x1, 0x5000000, 0x0, {}, [{0xe8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x2, 0x7, 0x8}, {0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffff, 0x3}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x78, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x10, 0x1, 0x0, 0x0, 0x0, 0xffffffff}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdf5c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00a4a2de5e00900400"/23, @ANYRES32, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b0400000000000000000200000038000480340001800a000100696e6e65720000002400028008000240000000870800034000000007080004400000000f08000140000000000900010073797a30000000000900020073797a32000000001400000011000100000000e0ffffff000300000a"], 0x8c}}, 0x0) close(r7) 7.072180881s ago: executing program 3 (id=886): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a7f00, 0x1a3) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a7f00, 0x1a3) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000340)) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000340)) 6.449446187s ago: executing program 3 (id=887): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}], 0xf}}], 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000099c0)=0x8, 0x4) recvmsg(r3, &(0x7f0000000300)={0x0, 0xfffffffffffffddb, 0x0}, 0x10001) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS(r0, 0x80047456, 0x0) 5.858237523s ago: executing program 1 (id=889): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) close(0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x439, 0x8070bd2b, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xff000000, 0x0, 0x4000000}, 0x0) 5.756653089s ago: executing program 0 (id=890): r0 = timerfd_create(0x8, 0x80000) clock_gettime(0x0, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0xe0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x9, 0x3, 0x0, 0x69}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x3, 0x2}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44a}}, {0x2f, &(0x7f0000000280)=@string={0x2f, 0x3, "b243774442ddc3e9c84954b6544bb9f2ee2a1925ecdb968c79d3f7c680abdeba56044f815f43866d75fadc94bc"}}]}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sched_setscheduler(r5, 0x6, &(0x7f00000000c0)=0x2800) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000007c0)={0x1, @sliced={0x9, [0x9, 0x401, 0x3, 0x4, 0x1, 0x9764, 0x8000, 0x5, 0x78a0, 0x0, 0xc, 0xffd7, 0x7, 0xd507, 0x4, 0x7ff, 0x8000, 0x3, 0x1, 0x8, 0x6, 0x210, 0xe3d, 0x8, 0xff27, 0xc2, 0x4, 0xf2a, 0x7, 0x6, 0x7ff, 0x0, 0x7, 0x8, 0x1, 0x3, 0x0, 0x3a, 0x1, 0x9ee, 0x6, 0x2, 0x8, 0xfff9, 0xfffc, 0x7, 0x4, 0x3], 0xa}}) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000300)={0x0, 0x0, [0xffffff01, 0xffff, 0x800, 0x1, 0x6, 0x7, 0x579, 0x3]}) 5.690978038s ago: executing program 1 (id=891): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) syz_init_net_socket$ax25(0x3, 0x5, 0xce) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x450500, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=[@t={0x81, 0x8, 0x0, 0x0, @generic}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x286f, 0x800, 0x2, 0x3b8}, &(0x7f0000000340), &(0x7f0000000280)) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0xfffffffff0000000, 0x8000}) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000040)=ANY=[]) 5.162818131s ago: executing program 5 (id=892): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000080)={0x0, 0x401, 0x8, 0x14, 0x1, [], [0x4, 0x6, 0x1000, 0x6], [0x0, 0x3, 0x9], [0x3, 0x3, 0x101, 0x4]}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc, 0x7, 0xf, 0x7, 0x5, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000055}, 0x204c840) 4.766294427s ago: executing program 1 (id=894): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001140)={0x0, @in6={{0xa, 0x4e20, 0x50488247, @mcast2, 0x2}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0xb1, 0xff, 0x0, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x800}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x189000) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r2, 0xc05c6104, &(0x7f00000000c0)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x0, 0x30, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0x80184132, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r7, &(0x7f0000004840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r7, &(0x7f0000004300)={0x2f, 0xffffffffffffffda, r8, {0xdff, 0x0, 0x80, 0xffffffff}}, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="2c000000000000000100000001000000ab4348f05165b6273c26b063be6fd92358c4098bc7ad4769a4befdfb4a3a331ace2d", @ANYRES32, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYRES32=r3, @ANYRES32=r7, @ANYRES16=r0, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4], 0x78, 0x400d0}}, {{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000740)="b3dba3a2fd273186d5a4480bbfd90c33e9dbec65672f6be6cd60b30d627c5f154fd1d8b26e9960f6dec1520c215c071a4b481b0121cb9dbcfb284e39e9ab25cd66f325ce50feded2dd09070818519d4aca55c5925b339a9e105ab5ef4036cdb1d49602d1d7aba1eed9c0b3e1568244ded10a90554d1345e5c65cbcc01b6585cff056b3f59c018fe16b25c6f10439fd17cd87e470913b3744ea9e0bfc9467fdcb9c59a735724bf11e6cbd2f681a13a5fb0d2bc5eed3b2b3b08d08f2309bbe41133fbf50cd", 0xc4}, {&(0x7f0000000840)="0cd10db6703236336a1b7e216a2e3bd1805bbf09fc7c39a0df3af8ca997fbe41144449781b80512b5c98e6a7c5838f922170b49612f40b776aea40757c6f5782aa57752ea163af3318301fcca07cb5345c40c323bef02f838463810856ee86ce", 0x60}], 0x2, 0x0, 0x0, 0x40}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000940)="1f2ab556ea48929c3f7695b87dd451af2d190e5f2889a9ff1aa70ede94a36a3818c85c8bc74a5d6c63803244786e0d245d389bdca3cee8153649c6edb8696e7dbe10d5d852856bdc30e350f42d27ccb186963f7a86149ad695e8d9e7a5c7a4e82f91fb3a7f7871c09346d0658161a16291c0a8fc1596ee93a1cc1acbda38b90e991e461b678009533d405723c3", 0x8d}, {&(0x7f0000000540)="9f3480", 0x3}, {&(0x7f0000000ac0)="224539d76b02a8441d5168c991ffcc68d51c6e47e3264d41bbf10cc95e88d620f6eab52e3bd9334bdbe2c0d0926201524b4a1a1b55c91b5c3a7b9d15825e0098ea553043bff801b04652b167fff8d3adbe22fa179c21d1947ebe21282240e8040871b7bc43c95ab1c8450c96ea38ee8c71", 0x71}, {&(0x7f0000000b40)="1eebc5c785a9e46c8ffa08be6d4c700229de0cc198058bd0bb0c875a107ea463b2cdb7a0d65314052ec3ba32312bcd168d95c1d8845df635eb0a7503c4c7d78956", 0x41}, {&(0x7f0000000bc0)="83bac5d912f7a4ef4166057e1d39a053f432a4ac648f7864e678e09df1f13842126f3ef423576d1916821a4936109c4e1275f9949280a8b685c85454ae714d1e178b182a74932ead65cfb0f9007289492b465a52291c4208538e6affc96f3ca65cebd94d39223b03adc0ba7a44778e4a0d584ab3ffd0d3c73f63a7e49656ecd946e80e86bf6514b502d8530c4cf0875d6f7a3bede3fa6261a5bb62e7b4f22f341b62d1d2d12e34a52d1ae10413185a7173b8b7ecc2a2ff2a184dbb2fd8c31b86", 0xc0}], 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1cc19200000000000100000001000200", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYBLOB="008a418c05d36257b7dd864eed56e93f0000001c00000000000f01000000", @ANYRES32=r11, @ANYRES64=r1, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r7, @ANYRES8=r9, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x1}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="54a127e51d0940", 0x7}, {&(0x7f0000002600)="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", 0x1000}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r9, @ANYRESOCT=r8, @ANYBLOB="00000000592bf932a380eb661f66001800000000", @ANYRES32, @ANYRES32=r7], 0x38, 0x20040000}}], 0x4, 0x24020004) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$VIDIOC_QUERYBUF(r12, 0xc0585609, &(0x7f0000000380)=@multiplanar_fd={0xffffffff, 0xa, 0x4, 0x10000, 0x6, {0x77359400}, {0x5, 0x8, 0x4, 0x3, 0xa0, 0x7, "244e8008"}, 0x3, 0x4, {&(0x7f00000002c0)=[{0x0, 0x20000007, {}, 0x791}, {0x94, 0xe59, {}, 0xd57}]}, 0x10}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x3f1, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001f000000bca3000000000000240300ff80feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4", @ANYRESHEX=r8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xb, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.66308194s ago: executing program 5 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x4112, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/1, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) syz_usbip_server_init(0x1) write$usbip_server(r4, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x9, &(0x7f00000002c0)=[{0x2, 0x7, 0x2, 0x2f02}, {0x8, 0x1, 0x3, 0xfffffff7}, {0x8, 0x96, 0x5, 0xfffff001}, {0x6, 0x5, 0xc, 0x4}, {0x8, 0x7, 0x6, 0x800}, {0x8, 0x8, 0x8, 0x10}, {0x5, 0x3, 0x98, 0x9}, {0x9, 0x6f, 0x9, 0x6}, {0x7, 0x9, 0x7, 0x7f}]}) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r9, 0x2002) syz_open_pts(r9, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYRES32, @ANYRESDEC=r6, @ANYBLOB="593918f00ff671eca719a50c00d8a3dc8df6779a58f1c690d3b6399dcff2c0bff502dc83", @ANYRESHEX=r8, @ANYBLOB="8cdb7f4e4e6d56", @ANYRESOCT=0x0], 0x50}}, 0x4000004) 4.60078197s ago: executing program 1 (id=897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1_macvtap\x00', @multicast}) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0xfffa, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x80, 0x7}}}}}}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.496407283s ago: executing program 3 (id=899): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2, 0x0, 0xffffffff], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mq_notify(r2, &(0x7f0000000300)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x10, 0x1, 0x6, 0x8000, {{0x1f, 0x4, 0x2, 0x23, 0x7c, 0x68, 0x0, 0x81, 0x29, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0xb, 0xfb, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ssrr={0x89, 0xf, 0x98, [@multicast2, @rand_addr=0x64010100, @loopback]}, @timestamp_addr={0x44, 0x34, 0xd9, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0xfffffffc}, {@local, 0x9}, {@remote, 0xff}, {@loopback, 0xa184}, {@local, 0x220}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x3b, 0x0, 0x0, [0x11d, 0x0, 0xad0a, 0x9]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x8000, 0x8, 0xfff, {{0x15, 0x4, 0x1, 0x17, 0x54, 0x67, 0x0, 0xf8, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xe, [@broadcast, @broadcast]}, @lsrr={0x83, 0xf, 0xe8, [@private=0xa010102, @rand_addr=0x64010101, @rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x16, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, @private=0xa010101, @empty]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}]}}}}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r6, 0x0, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x4, 0x3f, {{0xa, 0x4, 0x1, 0xd, 0x28, 0x72, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, {[@lsrr={0x83, 0xf, 0x9a, [@private=0xa018100, @rand_addr=0x64010100, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000001880)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r10, 0x5761, &(0x7f0000000300)) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000001340)=@xdp={0x2c, 0x0, r9, 0x23}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="b8b28225ea772f0daee8c7c9810005340806", 0x12}], 0x1}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000018c0)={'ip6_vti0\x00', r5, 0x2f, 0x6, 0x1, 0x1ff, 0x10, @empty, @private1, 0x80, 0x8, 0xffff3097, 0xf}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000400)={0x1340, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x118c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ea}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#]^$}&-.'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cpu.stat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0a8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "df0646781cfb4377d533f968a104011b11b5a380e0a3f192efbab3efb061ffd0627ef2701787518e50424feae44ee22fa04b65eff8663d3c1cf818fab5412fc1701ac163639317efe25d88fee30a7180c05836ed59e3959550c89c5833c5c23d06ad4b311ab0e0b45b862715f2c2619ab1c83520b80cfe846f504812c4bd7324292d83d31d704c5ae6559c13f9c50c7ef59fe8160da233f43f59"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc3}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "c017a44e47c83f81445d13cc4a016f8b9093f0ca434b1f50fe69de674cd8baf22abe9cc7d3bc652a4a8572f01cde5b655038449ae46ae329c31d0e5267f6e84a6e2d833bb9b61fe24fd8705fdbc0be195e5bba93ba530f92159d95cfbd8571c7a9de3930d802d7aa8bb903a84f391291efbd316812c24a87a8cee86d606465fa160ed1ae21f50addfe82a46952caba31befc3937b9cd71856f19ccfb754f3316e8c63e7e58c61844"}]}]}, 0x1340}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r12, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) 3.608813838s ago: executing program 0 (id=900): socket$kcm(0xa, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x12, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r1, {0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f20"], 0x8) (async) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) socket(0x1, 0x803, 0x0) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4000000000000f3) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000018c0), 0x80, 0x0) (async) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r7, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec01020301090224000100000000090423"], 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) 3.500918034s ago: executing program 0 (id=902): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x8c, @random="48bd00"}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) getdents64(0xffffffffffffffff, 0x0, 0x300) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x40, 0xa, 0x55, {0x55, 0x21, "0e4f75b8320d1a5872c7f4755636375d70852ff757ca8cbd87a0bfb118e7f484cef5bfb5bbfb11741b983b369f9c350ce7c8cb7abca783b8a94f9086296c2c03a823d01a8f0e054d15ff24ef9bec4d1113d052"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.271954473s ago: executing program 5 (id=904): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000002000028008000100", @ANYRES64=r0, @ANYRES32], 0x44}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f00000001c0)={0x7, 0x100008b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x8, 0x0, 0x0, @link_local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r8, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) 2.171758982s ago: executing program 2 (id=906): socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtaction={0x358, 0x30, 0x100, 0x0, 0x0, {}, [{0x344, 0x1, [@m_bpf={0xd4, 0xd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x2, 0xc, 0x72, 0xffffbccf}]}]}, {0x90, 0x6, "232e00c88dadfdc59e6015d96aec212eca76a53a1fba472805ff0844ec855bb1f29104daa4a133cc594e3c11eff05deca36384c08c8bd43ee81f899f9ea1227b7168c62e45d546976f1fcbeaef1f1dfeb5138210d74746c7856f6a3dcdcde369c4db563f1adbda81c60e455d090113ba56b587e1bdff23d98fab64c5bf23ef2648be18168a43eb242d80440b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x1c4, 0x17, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfc3c, 0x1ff, 0x7, 0x50, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="21f2821292e9"}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fffffff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xa}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8001}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fffffff, 0x0, 0x7, 0xa, 0xd}, 0x1}}]}, {0xec, 0x6, "83cd2378c57421bfb9a2dbf3a96c357c12bc9df0ad7bf9d27132b57cd2392c99799425d795f4290bf7d5cf324cb2145960c38eb7e0979b05c07bc2dec57b528f01bffb3eb510c7abcda3746cece2ad5cb0c083788ddb4d3427cb6426589a43e741a95490474512dbb6032722d92f9ff095e53d19362f58ad3825d36939084f5ca8e3261d10965ecf4fa47daaa1dff555262cdb541bf7b7dd6c2322ec72a8a78ee06bd7d48b5c2d620390f1b9d3bbae45c9aaaa62f4b85982943730fd621488d158b44206b339d6191865b5cf5adcba73558b44e7465910896ea82d3c6ade5d161bc101a87cb5da91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0xa8, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x7b, 0x6, "4d2469dc171284d7e933e717be909055d9fbd620150516f09efcb7050ff3215245b139dc19e561b3106bfc2c6daa5d07ba9b3b489f16fa56f88bd7ca46c5de6c267515a821e0d4c114575d6b19bbba15fc8b9f8ce1aaf451de1d3923ca372686404916543d8ddce5ffa47092e0ec1fad298a6ed8ea0845"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) chroot(&(0x7f0000000300)='.\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x1000000, 0x0) 1.662122593s ago: executing program 1 (id=907): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x67, 0xc6, 0xb0, 0x10, 0xeb1a, 0x2875, 0x6f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x160, 0x54, [{{0x9, 0x4, 0x73, 0x0, 0x1, 0x80, 0x25, 0x14, 0x0, [], [{{0x9, 0x5, 0x8e, 0x0, 0x8, 0xb, 0x6, 0x9}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0xfd, 0x81}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x2, 0x6}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x2, 0x1, 0x10}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x76, &(0x7f0000000100)=@string={0x76, 0x3, "0bfaa3f1e92613cab101c778c515d65c3f789787300ad9e54129f715ddc0f2bb86b91079e41563e275e59403e91371bd1673c4c98119e220ed1937124c1f1f5653bd356f8d7a6439d7a33498f59702ad12aea2a731a77b43436d70b737ac4e2b0020d64c1c21fafc80752d2c895902a7f69f7c3a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40c}}]}) 1.420816203s ago: executing program 0 (id=908): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0x9, 0x2000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0xfff9}}}}, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000019000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000d0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) 1.284701075s ago: executing program 0 (id=909): prlimit64(0x0, 0x5, &(0x7f0000000100)={0xb196, 0x7fffffffffffffff}, 0x0) syz_open_dev$swradio(&(0x7f0000001e40), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = open(&(0x7f0000000280)='./bus\x00', 0x15503e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xc000, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = socket$kcm(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x30, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b7030000000080008500000006000000b7080000ff000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\a\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x42, &(0x7f00000000c0), 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x2}, 0x8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x1ac8, 0x4000, 0x9, 0x9, 0x5a188fc, 0x8}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401002cbd6c00fedbdf25080003000100000008004a0001000000080001000000000008004b00130040"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 900.738261ms ago: executing program 2 (id=910): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000280)={0x5, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00003a4000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x1) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) getdents64(r5, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, 0x0, 0x0, 0x4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x9, 0x9) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 820.64742ms ago: executing program 0 (id=911): shutdown(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6(0xa, 0x80000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x33) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000001500), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup2(r3, r3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000500)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080045ab00280000000080029078ac1e0001e00000011100907800"/54], 0x0) listen(r0, 0x5) setsockopt(r5, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) 818.854519ms ago: executing program 2 (id=912): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002100010000000200000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x40fe, 0x1f, 0x12, r4, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) preadv(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000800)=""/21, 0x15}], 0x2, 0x1000, 0x3) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x10, 0x0) 798.340999ms ago: executing program 3 (id=913): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x2000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 410.625015ms ago: executing program 2 (id=914): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000300"/56, @ANYRES32=0x0, @ANYBLOB="010000000000000000000002000000000800030011"], 0x54}}, 0x20000080) 410.312754ms ago: executing program 5 (id=915): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) setgroups(0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009623130b00ffff0027c814f9792b27ee567483"], 0x0}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bind$inet6(r1, &(0x7f0000000f80)={0xa, 0x14, 0x7, @mcast2, 0x7fffffff}, 0x1c) 252.320305ms ago: executing program 3 (id=916): r0 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="de861f5d75429002254e15243c889826b5a32a1327d2f0c42551a1ab8a7864fea43359ca7c8a4cbdfc051170098a78b1be82772577a1dcb406f235c0973fed8a61f5ddd524e5e7360c7d9df084d8b29711990b2e90e538b69db163cd13fed43b6321d2a69d2d3d3abb71ac93e567d00d126f0e580cc386cf3e4b21d95e21f368d9ccb7a2f9", 0x85}, {&(0x7f00000000c0)="3a87fc35bfe50baf51a0d431e90eacf46997d3ce9394f385ee0b704eb61645866dd83b35bb4a1834186a731c074d5c0cb865583efe8ace8e080452226b751f87717ffe", 0x43}, {&(0x7f0000000180)="1efd46cce023774ead49df68c8b0c1395b82088e9357770cba3c7668aa98704e274365f4fb3cabaddf5379f9ce259a8a900aef7f5d08", 0x36}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="6ad6b9b5a98842717316fc9f3de979f6fb656d466996f6e4af2bbbc8d9d0285131b90ecbf9e6c9", 0x27}, {&(0x7f0000001200)="cf4a397f74bf30633c24c17d7301e789fa56efb15498c02c70c9669eda0b2e5bf579247539387af411de5a3bfcddd720760bbd48e286789ab1ecde590e12bc7e91638a002555429399db31a8fe33a5ab11aeb87c773470ea28077731e733fe01977e5f6dc35c3bd4fb548ea139fc8f66d23eb1c9a817af5239a677094de672c2ad66c5aba228e7099529ca61e20d9d5b23bdcc8cb60508795829efb0018b771a5d394c24bdde18e9dd4d0bc292aa2d9755c04855605f437be65c1ef5ea754df295bb3954071e5afe63b4", 0xca}, {&(0x7f0000001300)="88dba4c125df3a3598cf1b942a697ee20bfa2682b225859aabdff6546499a3985d68cb00e707196427c8be035dfc55b433086a40f5c925ddc7ae2f7df985cbd0d45142baa898b444ffac70bb31a3be84a59c90cb7e128d3162a5e37895d4d0aa9260adb1180b3d3fea6355bbb2d0a81b2a0afc9e31c9fa59517f0d", 0x7b}, {&(0x7f0000001380)="2fe2f06816e5bb1f8baeb890b7a59072b27870ae557a31af3f390d459fdda09f37e75415622b73959b2fb1b83daffc4d0d591bfe464e5c99fb2681714c55dbf73d3b95f1f5aea7eb0cab2ac1cdae89d5506cd229af04220a15b75296f105568fea6188caba6c0a57451ecd62cc7e721d764876cd4a659e", 0x77}, {&(0x7f0000001400)="958a8bb050a4761ab70fb378c6d495970f422a56e3a9eef0051a2f029db369da2716ba78b46c0f6877c491bc6f2e5d6ab783fe6d2e7c00875b57d5f0e8e66b5f1470811a9c42410da9e9b02b8f11f6990e579be22cc31ceb472ddf41fe1e1ee51dcdbfb63db37b3bb8445b1849e034b59b395e99211e16411da85d4dee0285343b50d19c2449c68dca56c5c57801f14c8a0a8ed872f740ea8dbb38601e3a934adf1bcddc670ee5b35ffaa9ab69e303d7f939b568433f794215af0adc4fe8cfd4a9a6c91c0a3849eb303b75520ba57c82", 0xd0}], 0x9, &(0x7f00000015c0)=[{0x48, 0x110, 0x3, "a81162edbe5aa9e032d483127e3b5dbd9e8249273cbff87c88761d5f896138cc771aa25aa25e200d145772d8dc9f8916676b147fe7c43127"}, {0x88, 0x116, 0x0, "bd7e19d85420458bfb8e603eecce2a6a6ee2a16fe467646e9ae09122cb0894ec3b83a0604c78f10fabb4f2ad95383d46cba39057de38912db75a9b7f6b64e41914f40dba50aef83fa4c6ecee05203953b7b43961ea20bb968635dec60e3dce7bdf94928dc332c5b773a9e8a945550767acfcf9542e99"}, {0xf0, 0x0, 0xe, "b9faba88875e3ec8153cd075e0f9d37f92f650d6ff7f25928b50f0c527bdf715657cddb14b3c13e90ba2c36023e88c28ba37fe617cecb35374f52cdaa61b05fecd02ac9534af6417f7b90ff93d78c357c9f2a463ea1c93aa453268f86c0dfcd78f8ec7196098b36fcb33c2b5d4ce67a7cb5a98515b6e1b6d72711e2afc22128eec85cc3ca0286595874d832764054a1ca17f4cc8622a70b15e253d6460f7e3e1bc05d3a6c57351c5f6649afe2c224eb3b99e4f1fd26aee398578ff574c58350ddb562e40a782aface4c60e14453ffa7c28571e639ef99ce944bef5ee8cb9"}, {0x38, 0x88, 0x9, "0e4ac69b353c9b39326293ffbc3f334c12cb7fd8912bc1677c1d7d13f071da87a7e44560"}, {0x60, 0xff, 0x6, "7a2910431b1174fe17b89d60b60714b2fa614acfac080e07f1acb19fdb76d36a535506b400114f266dc0630a089a86c5b3401dcabbf152a70d5189d79085072cf04ea5b2f16f17780c0e37"}, {0xf0, 0x111, 0x5, "13625011d4d1c944305c9f12f6847a3e9e04bd9e3c507223b45c93b8069eaee67136a19e952d08a80471d52fb58e9bd0dc600c16ac0a5fd9f6a894fef4c4dd609b21fe792c08f8c5cc224eea6f2580c6d3caa43cf10d5bfd702de7c161126218896eb3c3498dc31a5f6801740b3a5e822851b7b6b7fa422f7383e3859877a5fce2bcb623f9f61c3d53197ac5ca049f6c92a4ca29d7bdd3c2df78ad4edf0105781411cf728c0a0c755b4c829e92e24363b1c50ae5992bfacce64bac8b1ff0fc322031ad52ce6dd6c1a028d04981962996ba46dd82d141432c9ea898"}, {0x30, 0x10f, 0x8, "bc5c5e363301c3aed553607780ef86c74c435f18e345f4068a75"}], 0x378}, 0x51) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth0_vlan\x00', {0x1}, 0xfff7}) 178.681222ms ago: executing program 2 (id=917): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x191, 0xa783d189f140a6d1, 0x1e0, 0x3f, 0x32, 0x1, 0xf, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 53.765933ms ago: executing program 2 (id=918): r0 = socket$inet6(0xa, 0x0, 0x6) r1 = fsopen(&(0x7f0000000440)='selinuxfs\x00', 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r3 = socket(0xa, 0x3, 0x3a) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000100), 0x8) shutdown(r7, 0x1) ioctl$sock_netdev_private(r6, 0x89f9, &(0x7f00000029c0)="71aef482bdb6877871e0b8c9700db01d9fdec570b63d0830666a0fac6f3949ed51ca22c22d59a2") bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0x4, 0xc, 0x1, 0x2, 0x9004, 0x1, 0x6d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x0, @value, @void, @void, @value}, 0x50) write$cgroup_pressure(r5, 0x0, 0x0) r8 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000002c0)='ro\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000028c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000002880)={&(0x7f0000000480)=@newtaction={0x260, 0x30, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{0x194, 0x1, [@m_vlan={0x54, 0xf, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb20}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x480000, 0x8, 0x8, 0x7, 0x4}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0xa18d6129294f882b}}}}, @m_ctinfo={0x80, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x3b, 0x6, "e26d9f121b81ad32f55469d49f87121cabdd9e026d8531f50e6fff5d85f638342d79b3654ce6d58711f86717edfc4f8df6f881c0525761"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x36e0ae86c273550e}}}}, @m_gact={0xbc, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x4, 0x244e, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x19c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x365, 0x4}}]}, {0x6b, 0x6, "2688a593b82b913ad7259c643929383cfce68f20481f62baf351157d1fc9aa0e750d27c8ccadc467d2a78e3f7e63a0cc26f3a5f76f9378c87c77f3964d5e8f0e1e4ca1032edd02866258cfd6c96e159011c9bd062daef088f2f4f68c285780f09bbdbdca0a9673"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0xb8, 0x1, [@m_gact={0xb4, 0xd, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa5f, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7ff, 0xac6ad7e91a13d1e5, 0x7, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x320, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2467, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3c46, 0x0, 0x2, 0x6, 0x3ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a74, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf75, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x65eb9a7b, 0x2, 0xf9e4, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1fbda29ee29358eb}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x260}}, 0x8000) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r10, 0x0, 0x0, 0x1}}, 0x20) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) getsockopt$MRT(r8, 0x0, 0xcf, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt(r8, 0x0, 0x0, &(0x7f0000002a40)="a8d6f8e737ce9f355c2b5bcddf8c5161745bc40f36e262dc0d76b1fb21b1a849d13f95e165175a901fe64f8e73e63a3e1a74deb623e6bb5f354cc4f1ff0f04c1486c010384f4f42dd91943e47347867300619398947fe0e25748", 0x5a) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="d9f53ff4cb2c5a5be47a2421c778becd7b40ba25d4f608d43b3291251ac9ca5d7ad125e0924b529d841fafd8c5e9032783eb89878435317d552941e383b3ceb469e5467727a9c1", 0x47}, {&(0x7f0000000100)="4e5219cfde7f91345ef794a7c448852f3cf1c1709e5d0f285516963afe840acd63949753c44bde93dbf6be5e80728ac249fe56c4873d3c3b90cf613d589890ecad8b4760d857f5df8056759b51633c932ce6a817e0bc65eda653f328ff65a9834725b3472d", 0x65}, {&(0x7f0000000180)="2eb81ee393c03d2e09061b35f9342c0435175ff86001388d0343b9f93a90d15d5e4b959924fd93102ed2c7d489ca96036e2bed27ec87b58ab12cf11dd138c58680ad6a2750f622b4f5d42b5f49f63e44ac814a3cadbd07bd2d68eb0090838dcb86fb489056ebee19b48a7d5f442b9686917aaeb28f3a57ef867c4147af5607090f17e39893d1845cfd5a7a8c9c8ce9fccc317e3ae55d5675eca3ac4ca38a19244245c7da536cf570966fe96f6f6163", 0xaf}], 0x3) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 3 (id=919): io_setup(0x9, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:*'], 0x8) (async) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:*'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x7, 0x70bd26, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x0) r7 = openat$cgroup_devices(r2, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) socket$inet6(0xa, 0x4, 0x54) (async) socket$inet6(0xa, 0x4, 0x54) splice(r0, 0x0, r7, 0x0, 0x8, 0x0) (async) splice(r0, 0x0, r7, 0x0, 0x8, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r8, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r12}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) kernel console output (not intermixed with test programs): lNumber: syz [ 177.235299][ T30] audit: type=1400 audit(1742342979.287:468): avc: denied { watch_sb } for pid=7894 comm="syz.3.488" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 177.280607][ T30] audit: type=1400 audit(1742342979.437:469): avc: denied { create } for pid=7899 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 177.510704][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.865304][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.289753][ T7912] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 178.297587][ T7912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.492'. [ 178.306792][ T7912] batadv0: entered promiscuous mode [ 178.312030][ T7912] batadv0: entered allmulticast mode [ 178.318243][ T7912] bridge0: port 3(batadv0) entered blocking state [ 178.324926][ T7912] bridge0: port 3(batadv0) entered disabled state [ 178.336014][ T7912] bridge0: port 3(batadv0) entered blocking state [ 178.342504][ T7912] bridge0: port 3(batadv0) entered forwarding state [ 178.366451][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.370041][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.378584][ T53] Bluetooth: hci3: command 0x0419 tx timeout [ 178.398433][ T1121] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 178.408301][ T1121] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 179.642566][ T7922] Cannot find add_set index 0 as target [ 179.649566][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.493'. [ 179.708107][ T118] cdc_ncm 1-1:1.0: failed to get mac address [ 179.749258][ T118] cdc_ncm 1-1:1.0: bind() failure [ 179.853752][ T118] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 180.216750][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 180.248599][ T7937] xt_hashlimit: invalid interval [ 180.253678][ T118] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 180.295839][ T118] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 180.347816][ T118] usb 1-1: USB disconnect, device number 12 [ 180.874150][ T30] audit: type=1400 audit(1742343436.233:470): avc: denied { connect } for pid=7957 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.938684][ T30] audit: type=1400 audit(1742343436.233:471): avc: denied { bind } for pid=7957 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.006214][ T30] audit: type=1400 audit(1742343436.263:472): avc: denied { write } for pid=7957 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.067902][ T30] audit: type=1400 audit(1742343436.263:473): avc: denied { getopt } for pid=7957 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.582585][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.508'. [ 181.720486][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 181.720501][ T30] audit: type=1400 audit(1742343437.083:475): avc: denied { write } for pid=7983 comm="syz.3.509" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 181.752847][ T30] audit: type=1400 audit(1742343437.083:476): avc: denied { open } for pid=7983 comm="syz.3.509" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 181.924727][ T79] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.765012][ T79] usb 3-1: Using ep0 maxpacket: 8 [ 182.778802][ T79] usb 3-1: config 5 has an invalid interface number: 162 but max is 0 [ 182.787377][ T79] usb 3-1: config 5 has no interface number 0 [ 182.793545][ T79] usb 3-1: config 5 interface 162 has no altsetting 0 [ 182.803401][ T79] usb 3-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 182.815509][ T79] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.823612][ T79] usb 3-1: Product: syz [ 182.828696][ T79] usb 3-1: Manufacturer: syz [ 182.833780][ T79] usb 3-1: SerialNumber: syz [ 183.070855][ T7996] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 183.793679][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 184.117148][ T7994] IPVS: stopping master sync thread 7996 ... [ 184.482474][ T79] usb-storage 3-1:5.162: USB Mass Storage device detected [ 184.520147][ T79] usb-storage 3-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.14.0-rc7-syzkaller-00050-gfc444ada1310) [ 184.520147][ T79] Please send a copy of this message to and [ 184.620452][ T79] usb 3-1: USB disconnect, device number 17 [ 184.912098][ T8029] batman_adv: batadv0: Adding interface: dummy0 [ 184.918462][ T8029] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.943965][ T8029] batman_adv: batadv0: Interface activated: dummy0 [ 184.992251][ T8030] batadv0: mtu less than device minimum [ 185.002427][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.016766][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.024495][ T30] audit: type=1400 audit(1742343440.343:477): avc: denied { ioctl } for pid=8027 comm="syz.5.520" path="socket:[16979]" dev="sockfs" ino=16979 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.028417][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.079686][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.093755][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.107198][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.121356][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.134899][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.148591][ T8030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.461437][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 185.471359][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 185.531176][ T8034] FAULT_INJECTION: forcing a failure. [ 185.531176][ T8034] name failslab, interval 1, probability 0, space 0, times 0 [ 185.594717][ T8034] CPU: 1 UID: 0 PID: 8034 Comm: syz.2.521 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 185.594745][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.594756][ T8034] Call Trace: [ 185.594761][ T8034] [ 185.594768][ T8034] dump_stack_lvl+0x16c/0x1f0 [ 185.594797][ T8034] should_fail_ex+0x50a/0x650 [ 185.594831][ T8034] ? fs_reclaim_acquire+0xae/0x150 [ 185.594857][ T8034] should_failslab+0xc2/0x120 [ 185.594876][ T8034] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 185.594894][ T8034] ? __alloc_skb+0x2b1/0x380 [ 185.594920][ T8034] __alloc_skb+0x2b1/0x380 [ 185.594942][ T8034] ? __pfx___alloc_skb+0x10/0x10 [ 185.594966][ T8034] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 185.594997][ T8034] netlink_ack+0x15f/0xb80 [ 185.595027][ T8034] netlink_rcv_skb+0x348/0x440 [ 185.595049][ T8034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.595073][ T8034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.595107][ T8034] ? netlink_deliver_tap+0x1ae/0xd30 [ 185.595133][ T8034] netlink_unicast+0x53c/0x7f0 [ 185.595159][ T8034] ? __pfx_netlink_unicast+0x10/0x10 [ 185.595188][ T8034] netlink_sendmsg+0x8b8/0xd70 [ 185.595213][ T8034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.595245][ T8034] ____sys_sendmsg+0xaaf/0xc90 [ 185.595264][ T8034] ? copy_msghdr_from_user+0x10b/0x160 [ 185.595288][ T8034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.595317][ T8034] ___sys_sendmsg+0x135/0x1e0 [ 185.595341][ T8034] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.595374][ T8034] ? __pfx_lock_release+0x10/0x10 [ 185.595398][ T8034] ? trace_lock_acquire+0x14e/0x1f0 [ 185.595426][ T8034] ? __fget_files+0x206/0x3a0 [ 185.595449][ T8034] __sys_sendmsg+0x16e/0x220 [ 185.595473][ T8034] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.595512][ T8034] do_syscall_64+0xcd/0x250 [ 185.595536][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.595559][ T8034] RIP: 0033:0x7fdf52b8d169 [ 185.595573][ T8034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.595589][ T8034] RSP: 002b:00007fdf53a18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.595605][ T8034] RAX: ffffffffffffffda RBX: 00007fdf52da5fa0 RCX: 00007fdf52b8d169 [ 185.595615][ T8034] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 185.595625][ T8034] RBP: 00007fdf53a18090 R08: 0000000000000000 R09: 0000000000000000 [ 185.595635][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.595644][ T8034] R13: 0000000000000000 R14: 00007fdf52da5fa0 R15: 00007ffee05895c8 [ 185.595666][ T8034] [ 185.892083][ T8037] macvlan0: entered promiscuous mode [ 185.940667][ T8037] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 186.055708][ T8037] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 186.100718][ T30] audit: type=1400 audit(1742343441.463:478): avc: denied { read } for pid=8048 comm="syz.2.526" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 186.150031][ T5830] kernel write not supported for file /sg0 (pid: 5830 comm: kworker/0:4) [ 186.189897][ T8051] gre1: entered allmulticast mode [ 186.262947][ T30] audit: type=1400 audit(1742343441.463:479): avc: denied { open } for pid=8048 comm="syz.2.526" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 186.292687][ T30] audit: type=1400 audit(1742343441.533:480): avc: denied { read } for pid=8050 comm="syz.5.527" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 186.323731][ T5830] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.514601][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 186.526921][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.542794][ T5830] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.553595][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.564726][ T5830] usb 1-1: config 0 descriptor?? [ 186.584690][ T79] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.604554][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 186.604647][ T973] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 186.734642][ T79] usb 4-1: Using ep0 maxpacket: 8 [ 186.741078][ T79] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 186.753334][ T79] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 186.769545][ T973] usb 6-1: config 3 has an invalid interface number: 168 but max is 0 [ 186.770207][ T79] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 186.784544][ T973] usb 6-1: config 3 has no interface number 0 [ 186.787266][ T79] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.794322][ T973] usb 6-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 186.801051][ T5866] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 186.801075][ T5866] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 186.801106][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 186.801211][ T79] usb 4-1: Product: syz [ 186.801226][ T79] usb 4-1: Manufacturer: syz [ 186.801240][ T79] usb 4-1: SerialNumber: syz [ 186.802618][ T5866] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 186.820978][ T5830] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 186.822328][ T6473] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 186.831888][ T973] usb 6-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 186.844482][ T5866] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 186.847378][ T973] usb 6-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 186.851486][ T5866] usb 3-1: Product: syz [ 186.854205][ T973] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 186.864249][ T79] usb 4-1: config 0 descriptor?? [ 186.900380][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.911342][ T5866] usb 3-1: Manufacturer: syz [ 186.911360][ T5866] usb 3-1: SerialNumber: syz [ 186.921391][ T5866] usb 3-1: config 0 descriptor?? [ 186.955619][ T8055] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 186.976950][ T5866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.014625][ T79] rc_core: IR keymap rc-streamzap not found [ 187.020618][ T79] Registered IR keymap rc-empty [ 187.027121][ T79] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 187.042435][ T79] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 187.055394][ T6473] usb 2-1: Using ep0 maxpacket: 8 [ 187.056031][ T30] audit: type=1400 audit(1742343442.423:481): avc: denied { ioctl } for pid=8046 comm="syz.0.525" path="socket:[17563]" dev="sockfs" ino=17563 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.182338][ T30] audit: type=1400 audit(1742343442.543:482): avc: denied { ioctl } for pid=8050 comm="syz.5.527" path="socket:[17031]" dev="sockfs" ino=17031 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 187.239030][ T6473] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 187.254507][ T6473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 187.987264][ T8064] Cannot find add_set index 0 as target [ 188.244626][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.258563][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.602794][ T973] usb 6-1: string descriptor 0 read error: -71 [ 188.614230][ T973] keyspan 6-1:3.168: Keyspan 2 port adapter converter detected [ 188.635611][ T973] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 1 [ 188.646525][ T973] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 84 [ 188.654849][ T973] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 2 [ 188.665337][ T973] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 188.677190][ T973] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 88 [ 188.677925][ T6473] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 188.721461][ T10] usb 4-1: USB disconnect, device number 12 [ 188.737301][ T973] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 6 [ 188.749962][ T973] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 188.761894][ T6473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.778191][ T6473] usb 2-1: Product: syz [ 188.782544][ T6473] usb 2-1: Manufacturer: syz [ 188.787825][ T973] usb 6-1: USB disconnect, device number 7 [ 188.802203][ T6473] usb 2-1: SerialNumber: syz [ 188.820987][ T973] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 188.844145][ T6473] usb 2-1: config 0 descriptor?? [ 188.857771][ T973] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 188.858280][ T30] audit: type=1400 audit(1742343444.213:483): avc: denied { ioctl } for pid=8056 comm="syz.2.529" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 188.875734][ T973] keyspan 6-1:3.168: device disconnected [ 188.967284][ T5866] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 189.015228][ T6473] rc_core: IR keymap rc-streamzap not found [ 189.021512][ T6473] Registered IR keymap rc-empty [ 189.031009][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.048442][ T6473] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 189.062667][ T6473] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 189.248180][ T8072] Cannot find add_set index 0 as target [ 189.844983][ T5867] usb 1-1: USB disconnect, device number 13 [ 189.978222][ T8079] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 190.141834][ T5866] usb 2-1: USB disconnect, device number 20 [ 190.244572][ T5867] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 190.395499][ T5867] usb 1-1: device descriptor read/64, error -71 [ 190.644514][ T5867] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 190.737407][ T8083] IPVS: stopping master sync thread 8079 ... [ 190.784583][ T5867] usb 1-1: device descriptor read/64, error -71 [ 190.895000][ T5867] usb usb1-port1: attempt power cycle [ 191.041872][ T30] audit: type=1400 audit(1742343446.403:484): avc: denied { ioctl } for pid=8084 comm="syz.1.534" path="socket:[17064]" dev="sockfs" ino=17064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.228562][ T8090] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 191.285277][ T5867] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.534877][ T5867] usb 1-1: device descriptor read/8, error -71 [ 191.626902][ T5866] usb 3-1: USB disconnect, device number 18 [ 191.805622][ T5867] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 191.889981][ T5867] usb 1-1: device descriptor read/8, error -71 [ 192.036175][ T8099] syz.1.538: attempt to access beyond end of device [ 192.036175][ T8099] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 192.063827][ T5867] usb usb1-port1: unable to enumerate USB device [ 192.173824][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 192.222306][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 192.267694][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 192.399089][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 192.414871][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 192.436245][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 192.576755][ T8118] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 192.795219][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 192.959825][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8104 comm=syz.2.539 [ 193.820499][ T8126] FAT-fs (nullb0): bogus number of reserved sectors [ 193.827339][ T8126] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 193.972597][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.991737][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.939003][ T8140] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 195.186315][ T8143] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 195.192944][ T8143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.202389][ T8143] vhci_hcd vhci_hcd.0: Device attached [ 195.897097][ T5867] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 196.173784][ T30] audit: type=1400 audit(1742343451.533:485): avc: denied { name_bind } for pid=8157 comm="syz.2.550" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 196.428994][ T8161] FAULT_INJECTION: forcing a failure. [ 196.428994][ T8161] name failslab, interval 1, probability 0, space 0, times 0 [ 196.441921][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.2.552 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 196.441941][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.441951][ T8161] Call Trace: [ 196.441956][ T8161] [ 196.441961][ T8161] dump_stack_lvl+0x16c/0x1f0 [ 196.441979][ T8161] should_fail_ex+0x50a/0x650 [ 196.441995][ T8161] ? fs_reclaim_acquire+0xae/0x150 [ 196.442012][ T8161] should_failslab+0xc2/0x120 [ 196.442023][ T8161] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 196.442034][ T8161] ? prepare_creds+0x2e/0x750 [ 196.442049][ T8161] prepare_creds+0x2e/0x750 [ 196.442060][ T8161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.442077][ T8161] lookup_user_key+0x96d/0x12f0 [ 196.442093][ T8161] ? __pfx_lookup_user_key+0x10/0x10 [ 196.442107][ T8161] ? __might_fault+0x13b/0x190 [ 196.442121][ T8161] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 196.442137][ T8161] ? __might_fault+0xe3/0x190 [ 196.442151][ T8161] __do_sys_add_key+0x25a/0x460 [ 196.442162][ T8161] ? __pfx___do_sys_add_key+0x10/0x10 [ 196.442178][ T8161] do_syscall_64+0xcd/0x250 [ 196.442192][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.442206][ T8161] RIP: 0033:0x7fdf52b8d169 [ 196.442215][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.442225][ T8161] RSP: 002b:00007fdf539f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 196.442235][ T8161] RAX: ffffffffffffffda RBX: 00007fdf52da6080 RCX: 00007fdf52b8d169 [ 196.442241][ T8161] RDX: 0000400000000100 RSI: 0000400000000180 RDI: 0000400000000140 [ 196.442246][ T8161] RBP: 00007fdf539f7090 R08: fffffffffffffffe R09: 0000000000000000 [ 196.442252][ T8161] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 196.442258][ T8161] R13: 0000000000000000 R14: 00007fdf52da6080 R15: 00007ffee05895c8 [ 196.442269][ T8161] [ 196.693857][ T79] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 197.026055][ T79] usb 6-1: config 30 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 197.063145][ T79] usb 6-1: config 30 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58880, setting to 1024 [ 197.124374][ T79] usb 6-1: config 30 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.165244][ T79] usb 6-1: New USB device found, idVendor=0223, idProduct=3f07, bcdDevice= 0.00 [ 197.189553][ T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.226139][ T8156] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 197.647871][ T79] hid (null): report_id 29495 is invalid [ 197.649601][ T79] hid-generic 0003:0223:3F07.000A: unknown main item tag 0x6 [ 197.667389][ T79] hid-generic 0003:0223:3F07.000A: report_id 29495 is invalid [ 197.667412][ T79] hid-generic 0003:0223:3F07.000A: item 0 2 1 8 parsing failed [ 197.669179][ T79] hid-generic 0003:0223:3F07.000A: probe with driver hid-generic failed with error -22 [ 197.876946][ T30] audit: type=1400 audit(1742343453.243:486): avc: denied { setopt } for pid=8155 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.912044][ T30] audit: type=1400 audit(1742343453.263:487): avc: denied { read } for pid=8155 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.084557][ T8145] vhci_hcd: connection reset by peer [ 198.139131][ T36] vhci_hcd: stop threads [ 198.146585][ T36] vhci_hcd: release socket [ 198.161791][ T36] vhci_hcd: disconnect device [ 198.319948][ T30] audit: type=1400 audit(1742343453.683:488): avc: denied { bind } for pid=8202 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.358329][ T30] audit: type=1400 audit(1742343453.723:489): avc: denied { write } for pid=8202 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.970735][ T30] audit: type=1400 audit(1742343454.293:490): avc: denied { getopt } for pid=8204 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.978176][ T8203] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 199.013816][ T8203] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 199.223591][ T5822] usb 6-1: USB disconnect, device number 8 [ 199.600335][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.163012][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.180663][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.212469][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.256115][ T5822] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 200.404651][ T5822] usb 6-1: device descriptor read/64, error -71 [ 200.506816][ T973] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.664649][ T5822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 200.694779][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 200.703884][ T973] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 200.719783][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.759624][ T973] usb 3-1: config 0 descriptor?? [ 200.773048][ T973] gspca_main: sunplus-2.14.0 probing 041e:400b [ 200.805461][ T5822] usb 6-1: device descriptor read/64, error -71 [ 200.998689][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.055178][ T5867] vhci_hcd: vhci_device speed not set [ 201.412397][ T973] gspca_sunplus: reg_w_riv err -110 [ 201.417731][ T5822] usb usb6-port1: attempt power cycle [ 201.423226][ T973] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 201.451167][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.505912][ T973] usb 3-1: USB disconnect, device number 19 [ 201.695288][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 201.784890][ T5822] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 201.866755][ T5822] usb 6-1: device descriptor read/8, error -71 [ 202.127656][ T5822] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 202.247302][ T5822] usb 6-1: device descriptor read/8, error -71 [ 202.389166][ T5822] usb usb6-port1: unable to enumerate USB device [ 202.422064][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 203.184557][ T5822] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 203.217813][ T30] audit: type=1400 audit(1742343458.573:491): avc: denied { create } for pid=8280 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 203.389833][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.505099][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.515340][ T5822] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.524846][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.104184][ T5822] usb 4-1: config 0 descriptor?? [ 204.705613][ T5822] usbhid 4-1:0.0: can't add hid device: -71 [ 204.738676][ T5822] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 204.774351][ T5822] usb 4-1: USB disconnect, device number 13 [ 204.957912][ T8318] syz.2.599: attempt to access beyond end of device [ 204.957912][ T8318] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 204.972591][ T8318] syz.2.599: attempt to access beyond end of device [ 204.972591][ T8318] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 204.985533][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 204.995497][ T8318] syz.2.599: attempt to access beyond end of device [ 204.995497][ T8318] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 205.008437][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 205.018787][ T8318] syz.2.599: attempt to access beyond end of device [ 205.018787][ T8318] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 205.032776][ T8318] syz.2.599: attempt to access beyond end of device [ 205.032776][ T8318] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 205.045590][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 205.055840][ T8318] syz.2.599: attempt to access beyond end of device [ 205.055840][ T8318] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 205.068737][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 205.078749][ T8318] syz.2.599: attempt to access beyond end of device [ 205.078749][ T8318] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 205.091695][ T8318] syz.2.599: attempt to access beyond end of device [ 205.091695][ T8318] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 205.104603][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 205.114110][ T8318] syz.2.599: attempt to access beyond end of device [ 205.114110][ T8318] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 205.127170][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 205.136884][ T8318] syz.2.599: attempt to access beyond end of device [ 205.136884][ T8318] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 205.149757][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 205.159946][ T8318] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 205.169416][ T8318] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 205.188512][ T30] audit: type=1400 audit(1742343460.553:492): avc: denied { remount } for pid=8319 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 205.913621][ T8336] sp0: Synchronizing with TNC [ 205.970719][ T8334] [U] è [ 206.345139][ T5867] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 206.524981][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 206.616413][ T5867] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 206.742433][ T5867] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 206.744904][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.800505][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.881253][ T5867] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 206.969301][ T5867] usb 3-1: config 0 has no interface number 0 [ 207.039570][ T5867] usb 3-1: config 0 has no interface number 1 [ 207.111952][ T5867] usb 3-1: config 0 interface 235 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 207.228724][ T5867] usb 3-1: config 0 interface 235 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 207.383165][ T5867] usb 3-1: too many endpoints for config 0 interface 222 altsetting 193: 145, using maximum allowed: 30 [ 207.519191][ T5867] usb 3-1: config 0 interface 222 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 207.519710][ T8350] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.608'. [ 207.542457][ T8350] net_ratelimit: 10 callbacks suppressed [ 207.542472][ T8350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.569346][ T5867] usb 3-1: config 0 interface 235 has no altsetting 0 [ 207.600523][ T5867] usb 3-1: config 0 interface 222 has no altsetting 0 [ 207.623150][ T5867] usb 3-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=b0.1b [ 207.644787][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 207.653367][ T10] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 207.655325][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.670968][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 207.694531][ T10] usb 4-1: can't read configurations, error -61 [ 207.700336][ T5867] usb 3-1: Product: syz [ 207.715383][ T5867] usb 3-1: Manufacturer: syz [ 207.720009][ T5867] usb 3-1: SerialNumber: syz [ 207.750442][ T5867] usb 3-1: config 0 descriptor?? [ 207.844583][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 207.940114][ T30] audit: type=1400 audit(1742343463.303:493): avc: denied { ioctl } for pid=8352 comm="syz.0.610" path="socket:[18246]" dev="sockfs" ino=18246 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 207.988891][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 208.288698][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.465507][ T30] audit: type=1400 audit(1742343463.433:494): avc: denied { ioctl } for pid=8352 comm="syz.0.610" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.490290][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 208.496538][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.513052][ T10] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 208.522737][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 208.539764][ T10] usb 4-1: can't read configurations, error -61 [ 208.552992][ T10] usb usb4-port1: attempt power cycle [ 208.675503][ T5867] mos7840 3-1:0.235: required endpoints missing [ 208.898658][ T5867] mos7840 3-1:0.222: required endpoints missing [ 208.973197][ T5867] usb 3-1: USB disconnect, device number 20 [ 209.294846][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.372765][ T973] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 209.392985][ T10] usb 4-1: device descriptor read/8, error -71 [ 210.034134][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.187890][ T8379] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.196552][ T8379] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.205399][ T8379] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.213864][ T8379] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.225625][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.242364][ T973] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 210.384525][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.430677][ T36] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 210.504540][ T8383] 9pnet: Unknown protocol version 9 [ 210.551956][ T973] usb 1-1: config 0 descriptor?? [ 210.598045][ T8382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.605833][ T8382] IPv6: NLM_F_CREATE should be set when creating new route [ 210.613040][ T8382] IPv6: NLM_F_CREATE should be set when creating new route [ 210.672685][ T30] audit: type=1400 audit(1742343466.033:495): avc: denied { bind } for pid=8381 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.755489][ T30] audit: type=1326 audit(1742343466.103:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faedf98d169 code=0x0 [ 210.834132][ T30] audit: type=1326 audit(1742343466.103:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.3.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faedf98d169 code=0x0 [ 210.895442][ T30] audit: type=1400 audit(1742343466.173:498): avc: denied { name_bind } for pid=8390 comm="syz.1.620" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 211.177140][ T973] usbhid 1-1:0.0: can't add hid device: -71 [ 211.185660][ T973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.214941][ T973] usb 1-1: USB disconnect, device number 18 [ 211.409508][ T8397] erspan0: entered promiscuous mode [ 211.446376][ T8397] vlan2: entered promiscuous mode [ 211.481247][ T973] libceph: connect (1)[c::]:6789 error -101 [ 211.496174][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 211.538343][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 211.549888][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 211.645103][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 211.651218][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 211.776219][ T973] libceph: connect (1)[c::]:6789 error -101 [ 211.788223][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 211.948300][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 212.198726][ T8397] ceph: No mds server is up or the cluster is laggy [ 212.224086][ T8400] ceph: No mds server is up or the cluster is laggy [ 212.224168][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 212.577312][ T30] audit: type=1400 audit(1742343467.933:499): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 212.855811][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.627'. [ 213.675236][ T8426] FAT-fs (nullb0): bogus number of reserved sectors [ 213.681908][ T8426] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 214.276438][ T5867] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 214.536249][ T5867] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.624413][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.686003][ T5867] usb 3-1: config 0 descriptor?? [ 214.716180][ T5867] cp210x 3-1:0.0: cp210x converter detected [ 214.904939][ C1] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 214.954622][ T79] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 215.065753][ T30] audit: type=1400 audit(1742343470.423:500): avc: denied { create } for pid=8437 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 215.112833][ T30] audit: type=1400 audit(1742343470.423:501): avc: denied { sys_admin } for pid=8437 comm="syz.3.631" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 215.185256][ T5867] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 215.193404][ T79] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.220307][ T79] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.259853][ T79] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.292892][ T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.350921][ T79] usb 6-1: config 0 descriptor?? [ 215.420079][ T8443] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 215.438523][ T5867] usb 3-1: cp210x converter now attached to ttyUSB0 [ 215.454831][ T8443] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 215.837127][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 215.854004][ T973] usb 3-1: USB disconnect, device number 21 [ 215.859056][ T5143] Bluetooth: hci0: ACL packet for unknown connection handle 170 [ 215.884128][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.921570][ T973] cp210x 3-1:0.0: device disconnected [ 215.957256][ T79] usbhid 6-1:0.0: can't add hid device: -71 [ 215.963318][ T79] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 215.978973][ T79] usb 6-1: USB disconnect, device number 13 [ 216.164176][ T5143] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 216.166534][ T8460] bio_check_eod: 2 callbacks suppressed [ 216.166551][ T8460] syz.3.636: attempt to access beyond end of device [ 216.166551][ T8460] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 216.258548][ T8458] overlay: Unknown parameter 'func' [ 216.284614][ T8460] MINIX-fs: unable to read superblock [ 216.648098][ T8466] netlink: 'syz.0.640': attribute type 12 has an invalid length. [ 216.659042][ T8466] netlink: 'syz.0.640': attribute type 29 has an invalid length. [ 216.669328][ T8466] netlink: 148 bytes leftover after parsing attributes in process `syz.0.640'. [ 216.679599][ T8466] netlink: 59 bytes leftover after parsing attributes in process `syz.0.640'. [ 217.612054][ T8479] syzkaller0: entered promiscuous mode [ 217.637212][ T8479] syzkaller0: entered allmulticast mode [ 217.820415][ T30] audit: type=1400 audit(1742343473.183:502): avc: denied { bind } for pid=8487 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.847891][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 217.932523][ T30] audit: type=1400 audit(1742343473.183:503): avc: denied { node_bind } for pid=8487 comm="syz.3.645" saddr=fc01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 218.114875][ T8497] "syz.3.645" (8497) uses obsolete ecb(arc4) skcipher [ 218.364911][ T5867] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 218.434537][ T973] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 218.534528][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 218.624251][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 218.634802][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 218.649513][ T973] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 218.662476][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 218.679744][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.799084][ T973] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.864849][ T30] audit: type=1326 audit(1742343474.113:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8518 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe89d8d169 code=0x7ffc0000 [ 218.936181][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.057239][ T973] usb 3-1: Product: syz [ 219.093666][ T5867] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 219.103258][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.108106][ T973] usb 3-1: Manufacturer: syz [ 219.116201][ T5867] usb 6-1: Product: syz [ 219.120428][ T5867] usb 6-1: Manufacturer: syz [ 219.125579][ T5867] usb 6-1: SerialNumber: syz [ 219.138641][ T30] audit: type=1326 audit(1742343474.113:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8518 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe89d8d169 code=0x7ffc0000 [ 219.164366][ T973] usb 3-1: SerialNumber: syz [ 219.171026][ T30] audit: type=1326 audit(1742343474.113:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8518 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7efe89d8d169 code=0x7ffc0000 [ 219.178650][ T5867] usb 6-1: config 0 descriptor?? [ 219.195498][ T973] usb 3-1: config 0 descriptor?? [ 219.225693][ T973] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 219.235484][ T973] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 219.379437][ T30] audit: type=1326 audit(1742343474.113:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8518 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe89d8d169 code=0x7ffc0000 [ 219.733015][ T30] audit: type=1326 audit(1742343474.113:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8518 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe89d8d169 code=0x7ffc0000 [ 220.008305][ T8533] Cannot find add_set index 0 as target [ 220.106184][ T973] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 220.207885][ T973] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 220.444998][ T5867] rc_core: IR keymap rc-streamzap not found [ 220.869277][ T5867] Registered IR keymap rc-empty [ 220.881306][ T5867] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 220.910726][ T5867] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 221.008677][ T5867] usb 6-1: USB disconnect, device number 14 [ 221.247183][ T26] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 221.306439][ T973] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 221.319210][ T973] em28xx 3-1:0.0: No AC97 audio processor [ 221.439988][ T26] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 221.450834][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.464214][ T26] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 221.480058][ T26] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 221.492716][ T26] usb 4-1: Manufacturer: syz [ 221.503244][ T26] usb 4-1: config 0 descriptor?? [ 221.638311][ T26] rc_core: IR keymap rc-hauppauge not found [ 221.645610][ T26] Registered IR keymap rc-empty [ 221.666089][ T26] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 221.710155][ T26] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 221.851292][ T26] usb 4-1: USB disconnect, device number 18 [ 223.114388][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 223.123742][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 223.952426][ T8568] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 224.024602][ C1] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 224.058515][ T8560] IPVS: stopping master sync thread 8568 ... [ 224.118389][ T26] usb 3-1: USB disconnect, device number 22 [ 224.125009][ T26] em28xx 3-1:0.0: Disconnecting em28xx [ 224.136723][ T26] em28xx 3-1:0.0: Freeing device [ 224.269346][ T30] audit: type=1326 audit(1742343479.633:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8575 comm="syz.0.665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe89d8d169 code=0x0 [ 224.291946][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.348862][ T30] audit: type=1400 audit(1742343479.713:510): avc: denied { connect } for pid=8579 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 224.349601][ T30] audit: type=1400 audit(1742343479.713:511): avc: denied { accept } for pid=8579 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 224.371467][ T8583] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 224.495058][ T5866] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 224.670306][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 224.671747][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 224.671795][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 224.673689][ T5866] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 224.673714][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.673733][ T5866] usb 6-1: Product: syz [ 224.673748][ T5866] usb 6-1: Manufacturer: syz [ 224.673766][ T5866] usb 6-1: SerialNumber: syz [ 224.675587][ T5866] usb 6-1: config 0 descriptor?? [ 224.770227][ T5866] rc_core: IR keymap rc-streamzap not found [ 224.770250][ T5866] Registered IR keymap rc-empty [ 224.770767][ T5866] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 224.771611][ T5866] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 225.026841][ T8591] Cannot find add_set index 0 as target [ 225.506673][ T8593] netlink: 52 bytes leftover after parsing attributes in process `syz.0.670'. [ 225.515830][ T8593] unsupported nlmsg_type 40 [ 226.019132][ T30] audit: type=1400 audit(1742343481.373:512): avc: denied { module_request } for pid=8595 comm="syz.3.669" kmod="net-pf-10-proto-1-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 226.189167][ T30] audit: type=1400 audit(1742343481.553:513): avc: denied { getopt } for pid=8596 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.906876][ T8600] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 226.963091][ T973] usb 6-1: USB disconnect, device number 15 [ 227.016339][ T5830] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 227.204847][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 227.265663][ T5830] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 227.284011][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.295722][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 227.309814][ T8620] fuse: Unknown parameter '0xffffffffffffffff' [ 227.317924][ T5830] usb 3-1: config 0 descriptor?? [ 227.329759][ T30] audit: type=1400 audit(1742343482.693:514): avc: denied { mount } for pid=8619 comm="syz.0.676" name="/" dev="ramfs" ino=20565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 227.572921][ T5830] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 228.184587][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.571617][ T30] audit: type=1326 audit(1742343484.933:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faedf98d169 code=0x0 [ 230.184730][ T5836] Bluetooth: hci3: command 0x0419 tx timeout [ 230.214650][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 230.333757][ T30] audit: type=1400 audit(1742343485.693:516): avc: denied { read append } for pid=8666 comm="syz.3.689" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.385574][ T30] audit: type=1800 audit(1742343485.733:517): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.689" name="/" dev="9p" ino=2 res=0 errno=0 [ 230.408279][ T10] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 230.419139][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.435431][ T10] usb 6-1: config 0 has no interface number 0 [ 230.441873][ T10] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 230.464004][ T10] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.491684][ T10] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 230.501571][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.513327][ T10] usb 6-1: Product: syz [ 230.518522][ T10] usb 6-1: Manufacturer: syz [ 230.523408][ T10] usb 6-1: SerialNumber: syz [ 230.532158][ T10] usb 6-1: config 0 descriptor?? [ 230.544791][ T5867] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 230.564128][ T8670] netlink: 'syz.3.690': attribute type 8 has an invalid length. [ 230.595889][ T8670] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 230.694614][ T5867] usb 2-1: device descriptor read/64, error -71 [ 230.701612][ T8673] FAT-fs (nullb0): bogus number of reserved sectors [ 230.708592][ T8673] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 230.884525][ T973] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 230.970937][ T5867] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 230.971573][ T5830] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 231.076666][ T5830] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 231.088681][ T5830] asix 3-1:0.0: probe with driver asix failed with error -71 [ 231.103885][ T5830] usb 3-1: USB disconnect, device number 23 [ 231.114649][ T5867] usb 2-1: device descriptor read/64, error -71 [ 231.135989][ T973] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 231.145381][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.161515][ T973] usb 4-1: config 0 descriptor?? [ 231.235705][ T5867] usb usb2-port1: attempt power cycle [ 231.241238][ T8659] syz.5.686: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 231.260216][ T8659] CPU: 0 UID: 0 PID: 8659 Comm: syz.5.686 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 231.260241][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.260253][ T8659] Call Trace: [ 231.260259][ T8659] [ 231.260272][ T8659] dump_stack_lvl+0x16c/0x1f0 [ 231.260305][ T8659] warn_alloc+0x24d/0x3a0 [ 231.260327][ T8659] ? __pfx_warn_alloc+0x10/0x10 [ 231.260344][ T8659] ? __pfx_stack_trace_save+0x10/0x10 [ 231.260373][ T8659] ? kasan_save_stack+0x42/0x60 [ 231.260390][ T8659] ? kasan_save_stack+0x33/0x60 [ 231.260405][ T8659] ? kasan_save_track+0x14/0x30 [ 231.260420][ T8659] ? __kasan_kmalloc+0xaa/0xb0 [ 231.260435][ T8659] ? xskq_create+0x52/0x1d0 [ 231.260453][ T8659] ? do_sock_setsockopt+0x222/0x480 [ 231.260471][ T8659] ? __sys_setsockopt+0x1a0/0x230 [ 231.260494][ T8659] ? __x64_sys_setsockopt+0xbd/0x160 [ 231.260524][ T8659] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 231.260561][ T8659] ? xskq_create+0xfb/0x1d0 [ 231.260584][ T8659] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 231.260619][ T8659] ? xskq_create+0xfb/0x1d0 [ 231.260637][ T8659] vmalloc_user_noprof+0x6b/0x90 [ 231.260663][ T8659] ? xskq_create+0xfb/0x1d0 [ 231.260679][ T8659] xskq_create+0xfb/0x1d0 [ 231.260698][ T8659] xsk_setsockopt+0x7b7/0xa10 [ 231.260726][ T8659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 231.260763][ T8659] ? selinux_socket_setsockopt+0x6a/0x80 [ 231.260788][ T8659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 231.260827][ T8659] do_sock_setsockopt+0x222/0x480 [ 231.260846][ T8659] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 231.260867][ T8659] ? lock_acquire+0x2f/0xb0 [ 231.260908][ T8659] __sys_setsockopt+0x1a0/0x230 [ 231.260940][ T8659] __x64_sys_setsockopt+0xbd/0x160 [ 231.260964][ T8659] ? do_syscall_64+0x91/0x250 [ 231.260984][ T8659] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.261012][ T8659] do_syscall_64+0xcd/0x250 [ 231.261036][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.261060][ T8659] RIP: 0033:0x7f2c7478d169 [ 231.261075][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.261092][ T8659] RSP: 002b:00007f2c75526038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.261109][ T8659] RAX: ffffffffffffffda RBX: 00007f2c749a5fa0 RCX: 00007f2c7478d169 [ 231.261121][ T8659] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 231.261131][ T8659] RBP: 00007f2c7480e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 231.261141][ T8659] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.261152][ T8659] R13: 0000000000000000 R14: 00007f2c749a5fa0 R15: 00007fffe4b54de8 [ 231.261176][ T8659] [ 231.261246][ T8659] Mem-Info: [ 231.550473][ T8679] ip6t_rpfilter: unknown options [ 231.558551][ T973] kaweth 4-1:0.0: Firmware present in device. [ 231.561062][ T8659] active_anon:15574 inactive_anon:1 isolated_anon:0 [ 231.561062][ T8659] active_file:17164 inactive_file:38622 isolated_file:0 [ 231.561062][ T8659] unevictable:768 dirty:459 writeback:0 [ 231.561062][ T8659] slab_reclaimable:11495 slab_unreclaimable:107170 [ 231.561062][ T8659] mapped:30706 shmem:10651 pagetables:1145 [ 231.561062][ T8659] sec_pagetables:0 bounce:0 [ 231.561062][ T8659] kernel_misc_reclaimable:0 [ 231.561062][ T8659] free:1297368 free_pcp:643 free_cma:0 [ 231.611912][ T8659] Node 0 active_anon:62296kB inactive_anon:4kB active_file:68656kB inactive_file:154412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122776kB dirty:1836kB writeback:0kB shmem:41072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11768kB pagetables:4552kB sec_pagetables:12kB all_unreclaimable? no [ 231.645808][ T8659] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 231.678609][ T8659] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 231.710932][ T8659] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 231.719786][ T8659] Node 0 DMA32 free:1267024kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:62496kB inactive_anon:4kB active_file:68656kB inactive_file:154320kB unevictable:1536kB writepending:1836kB present:3129332kB managed:2547364kB mlocked:0kB bounce:0kB free_pcp:2560kB local_pcp:1012kB free_cma:0kB [ 231.752263][ T5867] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 231.760240][ T973] kaweth 4-1:0.0: Statistics collection: 0 [ 231.762327][ T8659] lowmem_reserve[]: 0 0 0 0 0 [ 231.772994][ T8659] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 231.800343][ T973] kaweth 4-1:0.0: Multicast filter limit: 0 [ 231.800364][ T973] kaweth 4-1:0.0: MTU: 0 [ 231.800378][ T973] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 231.819694][ T8659] lowmem_reserve[]: 0 0 [ 231.819810][ T5867] usb 2-1: device descriptor read/8, error -71 [ 231.830744][ T8659] 0 0 0 [ 231.834625][ T8659] Node 1 Normal free:3907044kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 231.864804][ T8659] lowmem_reserve[]: 0 0 0 0 0 [ 231.975265][ T8659] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.011231][ T8659] Node 0 DMA32: 9*4kB (UME) 815*8kB (ME) 545*16kB (UME) 441*32kB (UME) 285*64kB (UME) 39*128kB (UM) 14*256kB (ME) 10*512kB (ME) 11*1024kB (UME) 5*2048kB (ME) 289*4096kB (UM) = 1266572kB [ 232.044603][ T8659] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 232.082484][ T8659] Node 1 Normal: 207*4kB (UME) 63*8kB (UME) 35*16kB (UME) 190*32kB (UME) 93*64kB (UME) 23*128kB (UME) 16*256kB (UME) 12*512kB (UME) 9*1024kB (UME) 0*2048kB 945*4096kB (M) = 3907044kB [ 232.103043][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 232.135574][ T5867] usb 2-1: device descriptor read/8, error -71 [ 232.143642][ T8659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.156317][ T8659] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.170122][ T8659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.183154][ T8659] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.225382][ T8659] 66439 total pagecache pages [ 232.230387][ T8659] 1 pages in swap cache [ 232.235218][ T8659] Free swap = 124588kB [ 232.239524][ T973] kaweth 4-1:0.0: Error setting SOFS wait [ 232.267284][ T5867] usb usb2-port1: unable to enumerate USB device [ 232.274072][ T973] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 232.314481][ T973] usb 4-1: USB disconnect, device number 19 [ 232.319451][ T8659] Total swap = 124996kB [ 232.341202][ T8659] 2097051 pages RAM [ 232.364158][ T8659] 0 pages HighMem/MovableOnly [ 232.380361][ T8659] 428552 pages reserved [ 232.393880][ T8659] 0 pages cma reserved [ 232.422364][ T5830] usb 6-1: USB disconnect, device number 16 [ 232.735856][ T5867] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 233.017789][ T8706] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 233.028146][ T8706] SELinux: failed to load policy [ 233.034418][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.079187][ T5867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 233.090173][ T8712] netlink: 1272 bytes leftover after parsing attributes in process `syz.5.701'. [ 233.095023][ T30] audit: type=1400 audit(1742343488.453:518): avc: denied { ioctl } for pid=8711 comm="syz.5.701" path="socket:[19910]" dev="sockfs" ino=19910 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 233.100343][ T5867] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 233.142822][ T8712] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.155620][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.225945][ T5867] usb 1-1: config 0 descriptor?? [ 233.300430][ T8715] netlink: 'syz.2.702': attribute type 12 has an invalid length. [ 233.333368][ T8716] loop2: detected capacity change from 0 to 7 [ 233.334533][ T8715] netlink: 'syz.2.702': attribute type 29 has an invalid length. [ 233.348510][ T8715] netlink: 148 bytes leftover after parsing attributes in process `syz.2.702'. [ 233.358409][ T8715] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 233.364980][ T8716] Dev loop2: unable to read RDB block 7 [ 233.370501][ T8715] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 233.380958][ T8716] loop2: AHDI p1 p2 [ 233.387101][ T8716] loop2: partition table partially beyond EOD, truncated [ 233.395966][ T8716] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 233.406721][ T8715] netlink: 31 bytes leftover after parsing attributes in process `syz.2.702'. [ 233.457206][ T6002] udevd[6002]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 233.469074][ T8700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.481974][ T8700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.515512][ T8700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.540799][ T8700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.554778][ T8700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.604613][ T8700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.614224][ T8700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.698'. [ 233.789110][ T5867] Bluetooth: Can't get state to change to load ram patch err [ 233.798421][ T5867] Bluetooth: Loading patch file failed [ 233.804004][ T5867] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 234.187349][ T79] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 234.224718][ T5867] usb 1-1: USB disconnect, device number 19 [ 234.324543][ T8735] Cannot find del_set index 4 as target [ 234.336507][ T8735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.395476][ T79] usb 6-1: Using ep0 maxpacket: 16 [ 234.411241][ T79] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 234.476855][ T8739] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 234.487930][ T8739] audit: out of memory in audit_log_start [ 234.586533][ T79] usb 6-1: config 8 has no interface number 0 [ 234.600012][ T79] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 234.633705][ T79] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.668278][ T79] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 234.698484][ T8743] sg_write: data in/out 215/10 bytes for SCSI command 0xff-- guessing data in; [ 234.698484][ T8743] program syz.1.711 not setting count and/or reply_len properly [ 234.807291][ T79] usb 6-1: config 8 interface 39 has no altsetting 0 [ 234.875669][ T79] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 234.934053][ T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.029887][ T79] usb 6-1: Product: syz [ 235.084249][ T79] usb 6-1: Manufacturer: syz [ 235.119939][ T79] usb 6-1: SerialNumber: syz [ 235.826475][ T79] ipheth 6-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 235.876794][ T8756] FAT-fs (nullb0): bogus number of reserved sectors [ 235.883479][ T8756] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 235.910472][ T79] ipheth 6-1:8.39: Apple iPhone USB Ethernet device attached [ 236.730802][ T5866] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 236.815626][ T5488] ipheth 6-1:8.39: ipheth_rx_submit: usb_submit_urb: -90 [ 236.895850][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.920237][ T8795] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 236.935077][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.958693][ T5866] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 236.989735][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.016631][ T5866] usb 3-1: config 0 descriptor?? [ 237.098454][ T8797] FAT-fs (nullb0): bogus number of reserved sectors [ 237.105546][ T8797] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 237.594011][ T5822] usb 6-1: USB disconnect, device number 17 [ 237.606021][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 237.617999][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 237.631855][ T5866] usb 3-1: USB disconnect, device number 24 [ 237.683444][ T8803] IPVS: stopping master sync thread 8795 ... [ 237.811275][ T5822] ipheth 6-1:8.39: Apple iPhone USB Ethernet now disconnected [ 237.937198][ T8811] input: syz0 as /devices/virtual/input/input34 [ 239.074577][ T5830] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 239.245644][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 239.275081][ T5830] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 239.283548][ T5830] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 239.296333][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.308696][ T5830] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 239.440178][ T5830] usb 2-1: config 0 has no interface number 0 [ 240.009819][ T5830] usb 2-1: config 0 has no interface number 1 [ 240.016009][ T5830] usb 2-1: config 0 interface 235 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 240.027699][ T5830] usb 2-1: config 0 interface 235 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 240.041150][ T5830] usb 2-1: too many endpoints for config 0 interface 222 altsetting 193: 145, using maximum allowed: 30 [ 240.052343][ T5830] usb 2-1: config 0 interface 222 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 240.104490][ T5830] usb 2-1: config 0 interface 235 has no altsetting 0 [ 240.134497][ T5830] usb 2-1: config 0 interface 222 has no altsetting 0 [ 240.199109][ T5830] usb 2-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=b0.1b [ 240.225377][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.239665][ T5830] usb 2-1: Product: syz [ 240.243950][ T5830] usb 2-1: Manufacturer: syz [ 240.249309][ T5830] usb 2-1: SerialNumber: syz [ 240.275471][ T5830] usb 2-1: config 0 descriptor?? [ 240.435334][ T30] audit: type=1400 audit(1742343495.793:519): avc: denied { mount } for pid=8847 comm="syz.2.738" name="/" dev="pstore" ino=3559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 240.460148][ T8849] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 240.507899][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.526818][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.535273][ T973] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.550839][ T30] audit: type=1400 audit(1742343495.913:520): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 240.575034][ T5830] mos7840 2-1:0.235: required endpoints missing [ 240.611617][ T30] audit: type=1400 audit(1742343495.973:521): avc: denied { read } for pid=8853 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.694873][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 240.716817][ T973] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 240.796482][ T5830] mos7840 2-1:0.222: required endpoints missing [ 240.813108][ T973] usb 4-1: config 0 has no interface number 0 [ 240.841440][ T5830] usb 2-1: USB disconnect, device number 25 [ 240.858562][ T973] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.914394][ T973] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 240.930543][ T8861] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 241.036790][ T973] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 241.053490][ T30] audit: type=1400 audit(1742343496.413:522): avc: denied { override_creds } for pid=8855 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 241.055827][ T973] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 241.185604][ T8865] netlink: 'syz.2.741': attribute type 2 has an invalid length. [ 241.259152][ T8865] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 241.334792][ T973] usb 4-1: Product: syz [ 241.383713][ T973] usb 4-1: SerialNumber: syz [ 241.393697][ T8865] netlink: 'syz.2.741': attribute type 2 has an invalid length. [ 241.405258][ T973] usb 4-1: config 0 descriptor?? [ 241.436726][ T973] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 241.465468][ T973] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input35 [ 241.944609][ C1] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 242.021314][ T8882] __nla_validate_parse: 141 callbacks suppressed [ 242.021349][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 242.036629][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.750'. [ 242.388519][ T5866] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 243.072531][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.088695][ T5866] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.098200][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.115921][ T5866] usb 1-1: config 0 descriptor?? [ 243.310854][ T30] audit: type=1400 audit(1742343498.673:523): avc: denied { listen } for pid=8867 comm="syz.5.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.321946][ T8869] capability: warning: `syz.5.746' uses 32-bit capabilities (legacy support in use) [ 243.356726][ T30] audit: type=1400 audit(1742343498.683:524): avc: denied { write } for pid=8867 comm="syz.5.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.379213][ T8891] netlink: 'syz.1.753': attribute type 4 has an invalid length. [ 243.387627][ T8891] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 243.556762][ T5866] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 243.576624][ T5866] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input36 [ 243.730690][ T5866] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 243.974595][ T973] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 243.983262][ T5866] usb 1-1: USB disconnect, device number 20 [ 244.094393][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.104620][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.111728][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.118976][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.126073][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.133129][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.140230][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.147492][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.154611][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.161688][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.169151][ T5830] usb 4-1: USB disconnect, device number 20 [ 244.175327][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 244.204770][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 244.314994][ T5822] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 244.455106][ T5830] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 244.468827][ T973] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 244.480310][ T973] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 244.494829][ T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.602941][ T973] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 244.616052][ T973] usb 6-1: config 0 has no interface number 0 [ 244.622165][ T973] usb 6-1: config 0 has no interface number 1 [ 244.660805][ T973] usb 6-1: config 0 interface 235 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 244.672787][ T973] usb 6-1: config 0 interface 235 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 244.687156][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 244.692860][ T973] usb 6-1: too many endpoints for config 0 interface 222 altsetting 193: 145, using maximum allowed: 30 [ 244.731506][ T5822] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 244.751192][ T5822] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 244.775381][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.786182][ T973] usb 6-1: config 0 interface 222 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 244.829614][ T5822] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 244.840729][ T973] usb 6-1: config 0 interface 235 has no altsetting 0 [ 244.847871][ T5822] usb 3-1: config 0 has no interface number 0 [ 244.854093][ T973] usb 6-1: config 0 interface 222 has no altsetting 0 [ 244.864845][ T5822] usb 3-1: config 0 has no interface number 1 [ 244.870959][ T5822] usb 3-1: config 0 interface 235 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 244.891413][ T5822] usb 3-1: config 0 interface 235 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 244.905715][ T973] usb 6-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=b0.1b [ 244.921325][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.929812][ T5822] usb 3-1: too many endpoints for config 0 interface 222 altsetting 193: 145, using maximum allowed: 30 [ 244.941460][ T973] usb 6-1: Product: syz [ 244.951759][ T973] usb 6-1: Manufacturer: syz [ 244.957175][ T5822] usb 3-1: config 0 interface 222 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 244.972783][ T973] usb 6-1: SerialNumber: syz [ 244.981456][ T973] usb 6-1: config 0 descriptor?? [ 244.989714][ T5822] usb 3-1: config 0 interface 235 has no altsetting 0 [ 245.000327][ T5822] usb 3-1: config 0 interface 222 has no altsetting 0 [ 245.012733][ T5822] usb 3-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=b0.1b [ 245.024410][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.033264][ T5822] usb 3-1: Product: syz [ 245.037891][ T5822] usb 3-1: Manufacturer: syz [ 245.042595][ T5822] usb 3-1: SerialNumber: syz [ 245.052217][ T5822] usb 3-1: config 0 descriptor?? [ 245.219148][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.234280][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.281979][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.300541][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.401409][ T973] mos7840 6-1:0.235: required endpoints missing [ 245.410769][ T5822] mos7840 3-1:0.235: required endpoints missing [ 245.483626][ T973] mos7840 6-1:0.222: required endpoints missing [ 245.498673][ T973] usb 6-1: USB disconnect, device number 18 [ 245.533487][ T5822] mos7840 3-1:0.222: required endpoints missing [ 245.551591][ T5822] usb 3-1: USB disconnect, device number 25 [ 245.864385][ T8940] FAT-fs (nullb0): bogus number of reserved sectors [ 245.871490][ T8940] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 245.904674][ T5866] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 246.110566][ T5866] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 246.168585][ T5866] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 246.236816][ T5866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 246.298789][ T5866] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 246.354602][ T8948] geneve2: entered promiscuous mode [ 246.360266][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 246.367610][ T8948] geneve2: entered allmulticast mode [ 246.393928][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.524836][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 246.545802][ T5866] usb 2-1: language id specifier not provided by device, defaulting to English [ 247.616021][ T5866] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 247.765795][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.794653][ T5866] usb 2-1: Manufacturer: 耦 [ 247.813915][ T5866] usb 2-1: config 0 descriptor?? [ 247.824787][ T5866] hub 2-1:0.0: bad descriptor, ignoring hub [ 247.830724][ T5866] hub 2-1:0.0: probe with driver hub failed with error -5 [ 247.839999][ T5866] input: 耦 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input37 [ 247.888802][ T8961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.927075][ T8959] sch_fq: defrate 2147483647 ignored. [ 248.046573][ T5866] usb 2-1: USB disconnect, device number 26 [ 248.082928][ T30] audit: type=1400 audit(1742343503.443:525): avc: denied { listen } for pid=8965 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 248.117608][ T30] audit: type=1400 audit(1742343503.443:526): avc: denied { accept } for pid=8965 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 248.607668][ T8982] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 248.781902][ T8987] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 249.015498][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 249.024871][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 249.077266][ T8993] netlink: 108 bytes leftover after parsing attributes in process `syz.3.787'. [ 249.087486][ T8993] netlink: 108 bytes leftover after parsing attributes in process `syz.3.787'. [ 249.096871][ T8993] netlink: 108 bytes leftover after parsing attributes in process `syz.3.787'. [ 249.316802][ T8991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=8991 comm=syz.5.788 [ 249.818614][ T8997] FAULT_INJECTION: forcing a failure. [ 249.818614][ T8997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.102718][ T8997] CPU: 0 UID: 0 PID: 8997 Comm: syz.0.789 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 250.102742][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.102752][ T8997] Call Trace: [ 250.102757][ T8997] [ 250.102763][ T8997] dump_stack_lvl+0x16c/0x1f0 [ 250.102796][ T8997] should_fail_ex+0x50a/0x650 [ 250.102823][ T8997] _copy_from_user+0x2e/0xd0 [ 250.102839][ T8997] io_submit_one+0xbc/0x1da0 [ 250.102870][ T8997] ? __pfx_io_submit_one+0x10/0x10 [ 250.102894][ T8997] ? __might_fault+0x13b/0x190 [ 250.102917][ T8997] ? lock_acquire+0x2f/0xb0 [ 250.102938][ T8997] ? __might_fault+0xe3/0x190 [ 250.102959][ T8997] ? __x64_sys_io_submit+0x1b2/0x340 [ 250.102980][ T8997] __x64_sys_io_submit+0x1b2/0x340 [ 250.103004][ T8997] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 250.103036][ T8997] do_syscall_64+0xcd/0x250 [ 250.103057][ T8997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.103077][ T8997] RIP: 0033:0x7efe89d8d169 [ 250.103090][ T8997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.103104][ T8997] RSP: 002b:00007efe8acd6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 250.103119][ T8997] RAX: ffffffffffffffda RBX: 00007efe89fa5fa0 RCX: 00007efe89d8d169 [ 250.103130][ T8997] RDX: 0000400000000780 RSI: 0000000000000002 RDI: 00007efe8ac8c000 [ 250.103138][ T8997] RBP: 00007efe8acd6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.103147][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.103156][ T8997] R13: 0000000000000000 R14: 00007efe89fa5fa0 R15: 00007ffeafced8f8 [ 250.103176][ T8997] [ 250.292688][ T8981] IPVS: stopping master sync thread 8982 ... [ 250.319434][ T30] audit: type=1400 audit(1742343505.683:527): avc: denied { unmount } for pid=6567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 250.743635][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 250.814534][ T973] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 250.834736][ T5830] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 250.965804][ T973] usb 6-1: config 0 has an invalid interface number: 248 but max is 0 [ 250.974296][ T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.984923][ T973] usb 6-1: config 0 has no interface number 0 [ 250.991362][ T973] usb 6-1: config 0 interface 248 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.002848][ T5830] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 251.017076][ T973] usb 6-1: New USB device found, idVendor=067b, idProduct=1234, bcdDevice=80.76 [ 251.026300][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.034773][ T973] usb 6-1: Product: syz [ 251.039049][ T5830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.048354][ T973] usb 6-1: Manufacturer: syz [ 251.052995][ T973] usb 6-1: SerialNumber: syz [ 251.053202][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.076067][ T973] usb 6-1: config 0 descriptor?? [ 251.081247][ T5830] usb 1-1: SerialNumber: syz [ 251.090475][ T973] pl2303 6-1:0.248: required interrupt-in endpoint missing [ 251.246969][ T9014] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 251.320110][ T5867] usb 6-1: USB disconnect, device number 19 [ 251.578798][ T9018] IPVS: stopping master sync thread 9014 ... [ 251.666973][ T5143] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 251.807852][ T5830] cdc_ether 1-1:1.0 eth5: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 252.017967][ T30] audit: type=1400 audit(1742343507.383:528): avc: denied { map } for pid=9021 comm="syz.1.798" path="socket:[22539]" dev="sockfs" ino=22539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 252.182968][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 252.556826][ T5830] usb 1-1: USB disconnect, device number 21 [ 252.638620][ T5830] cdc_ether 1-1:1.0 eth5: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 252.895876][ T9049] FAT-fs (nullb0): bogus number of reserved sectors [ 252.902527][ T9049] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 253.106561][ T9051] netlink: 'syz.1.803': attribute type 30 has an invalid length. [ 253.326599][ T9029] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 253.333159][ T9029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.359034][ T9029] vhci_hcd vhci_hcd.0: Device attached [ 253.558386][ T5830] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 253.604851][ T5866] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 253.648107][ T30] audit: type=1400 audit(1742343509.013:529): avc: denied { mount } for pid=9060 comm="syz.0.805" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 253.678609][ T9066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.804'. [ 253.688029][ T9066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.804'. [ 253.728595][ T9066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.804'. [ 253.744786][ T5830] usb 6-1: Using ep0 maxpacket: 16 [ 253.761998][ T5830] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 253.783918][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.795157][ T5830] usb 6-1: Product: syz [ 253.802617][ T5830] usb 6-1: Manufacturer: syz [ 253.808070][ T5830] usb 6-1: SerialNumber: syz [ 253.815216][ T5830] usb 6-1: config 0 descriptor?? [ 253.825319][ T5830] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 253.853265][ T5830] usb 6-1: Detected FT232H [ 254.025073][ T30] audit: type=1400 audit(1742343509.383:530): avc: denied { setopt } for pid=9028 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.085752][ T5143] Bluetooth: hci3: unexpected event for opcode 0x041c [ 254.116710][ T5830] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 254.125206][ T5830] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 254.132428][ T5830] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 254.141031][ T9056] vhci_hcd: connection closed [ 254.143655][ T13] vhci_hcd: stop threads [ 254.144096][ T5830] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 254.167133][ T5830] usb 6-1: USB disconnect, device number 20 [ 254.175144][ T5866] usb 43-1: device descriptor read/64, error -71 [ 254.179456][ T5830] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 254.191183][ T5830] ftdi_sio 6-1:0.0: device disconnected [ 254.200563][ T13] vhci_hcd: release socket [ 254.213678][ T13] vhci_hcd: disconnect device [ 254.441929][ T5866] vhci_hcd: vhci_device speed not set [ 254.561453][ T9094] batman_adv: batadv0: Adding interface: dummy0 [ 254.567867][ T9094] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.593445][ T9094] batman_adv: batadv0: Interface activated: dummy0 [ 254.645510][ T9095] batadv0: mtu less than device minimum [ 254.654787][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.668903][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.682759][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.696694][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.710616][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.724612][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.738450][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.752397][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.765735][ T9095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.991241][ T30] audit: type=1400 audit(1742343510.343:531): avc: denied { write } for pid=9100 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.015022][ T5867] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 255.265058][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 255.709832][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.716463][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.726435][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 255.740987][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 255.759087][ T5867] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 255.772923][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.781546][ T5867] usb 3-1: Product: syz [ 255.786058][ T5867] usb 3-1: Manufacturer: syz [ 255.792149][ T5867] usb 3-1: SerialNumber: syz [ 255.799144][ T5867] usb 3-1: config 0 descriptor?? [ 256.775669][ T5867] rc_core: IR keymap rc-streamzap not found [ 256.783360][ T5867] Registered IR keymap rc-empty [ 256.791221][ T5867] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 256.812370][ T5867] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 256.869039][ T9089] SET target dimension over the limit! [ 256.892435][ T9123] overlayfs: missing 'lowerdir' [ 257.025493][ T6473] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 257.194560][ T6473] usb 1-1: Using ep0 maxpacket: 8 [ 257.222913][ T6473] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 257.241862][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 257.305978][ T6473] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 257.326349][ T6473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.362190][ T6473] usb 1-1: Product: syz [ 257.390243][ T6473] usb 1-1: Manufacturer: syz [ 257.421462][ T6473] usb 1-1: SerialNumber: syz [ 257.460935][ T6473] usb 1-1: config 0 descriptor?? [ 257.634853][ T6473] rc_core: IR keymap rc-streamzap not found [ 257.667985][ T6473] Registered IR keymap rc-empty [ 257.707219][ T9141] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 257.731415][ T6473] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 257.796951][ T9142] Cannot find add_set index 0 as target [ 257.807374][ T6473] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input39 [ 257.918912][ T9144] FAT-fs (nullb0): bogus number of reserved sectors [ 257.925902][ T9144] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 258.107351][ T5143] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 258.117788][ T5143] Bluetooth: hci3: Injecting HCI hardware error event [ 258.127111][ T5836] Bluetooth: hci3: hardware error 0x00 [ 258.415763][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 258.796061][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.807236][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.991305][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.079560][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.128909][ T6473] usb 3-1: USB disconnect, device number 26 [ 259.198590][ T10] usb 6-1: config 0 descriptor?? [ 259.301578][ T9156] IPVS: stopping master sync thread 9141 ... [ 260.185234][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 260.844587][ T5830] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 260.944345][ T5866] usb 1-1: USB disconnect, device number 22 [ 261.010802][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 261.020405][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 261.031143][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 261.045380][ T5830] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 261.060727][ T10] usb 6-1: USB disconnect, device number 21 [ 261.067286][ T5830] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 261.079964][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.101624][ T5830] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 261.123795][ T5830] usb 4-1: config 0 has no interface number 0 [ 261.130509][ T5830] usb 4-1: config 0 has no interface number 1 [ 261.144655][ T5830] usb 4-1: config 0 interface 235 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 261.164986][ T5830] usb 4-1: config 0 interface 235 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 261.188829][ T5830] usb 4-1: too many endpoints for config 0 interface 222 altsetting 193: 145, using maximum allowed: 30 [ 261.221786][ T5830] usb 4-1: config 0 interface 222 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 261.270697][ T5830] usb 4-1: config 0 interface 235 has no altsetting 0 [ 261.291480][ T5830] usb 4-1: config 0 interface 222 has no altsetting 0 [ 261.581928][ T5830] usb 4-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=b0.1b [ 261.598902][ T30] audit: type=1400 audit(1742343516.963:532): avc: denied { write } for pid=9176 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.618428][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.650384][ T5830] usb 4-1: Product: syz [ 261.684884][ T5830] usb 4-1: Manufacturer: syz [ 261.689521][ T5830] usb 4-1: SerialNumber: syz [ 261.711195][ T5830] usb 4-1: config 0 descriptor?? [ 261.942198][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.178928][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.194156][ T9186] vlan2: entered allmulticast mode [ 262.199715][ T9186] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 262.208931][ T9186] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 262.219755][ T30] audit: type=1400 audit(1742343517.583:533): avc: denied { create } for pid=9187 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 262.261166][ T5830] mos7840 4-1:0.235: required endpoints missing [ 262.271659][ T30] audit: type=1400 audit(1742343517.613:534): avc: denied { write } for pid=9187 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 262.383160][ T9193] __nla_validate_parse: 1 callbacks suppressed [ 262.383177][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'. [ 262.404577][ T30] audit: type=1400 audit(1742343517.613:535): avc: denied { nlmsg_read } for pid=9187 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 262.427096][ T9195] tmpfs: Bad value for 'mpol' [ 262.460109][ T5830] mos7840 4-1:0.222: required endpoints missing [ 262.469472][ T9199] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 262.692281][ T5830] usb 4-1: USB disconnect, device number 21 [ 262.784729][ T30] audit: type=1400 audit(1742343518.003:536): avc: denied { write } for pid=9194 comm="syz.0.843" path="socket:[21828]" dev="sockfs" ino=21828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.972323][ T9206] : entered promiscuous mode [ 263.684770][ T5830] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 263.830757][ T9223] IPVS: stopping master sync thread 9199 ... [ 263.845127][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 263.862358][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.873961][ T5830] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 263.907549][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.929693][ T5830] usb 2-1: config 0 descriptor?? [ 263.941748][ T5830] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 264.123126][ T9230] loop1: detected capacity change from 0 to 9 [ 264.452710][ T30] audit: type=1400 audit(1742343519.813:537): avc: denied { create } for pid=9234 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 264.733576][ T30] audit: type=1400 audit(1742343519.813:538): avc: denied { ioctl } for pid=9234 comm="syz.3.853" path="socket:[23143]" dev="sockfs" ino=23143 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 265.403614][ T5830] gspca_vc032x: reg_w err -71 [ 265.410023][ T5830] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 265.445318][ T5830] usb 2-1: USB disconnect, device number 27 [ 265.494571][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 265.604876][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 265.664621][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 265.676413][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.689292][ T5866] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 265.729773][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.749052][ T5866] usb 4-1: config 0 descriptor?? [ 265.764804][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 265.791492][ T10] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 265.822762][ T10] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 265.843340][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.854843][ T10] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 265.865181][ T10] usb 6-1: config 0 has no interface number 0 [ 265.872244][ T10] usb 6-1: config 0 has no interface number 1 [ 265.879643][ T10] usb 6-1: config 0 interface 235 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 265.906358][ T10] usb 6-1: config 0 interface 235 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 266.024944][ T10] usb 6-1: too many endpoints for config 0 interface 222 altsetting 193: 145, using maximum allowed: 30 [ 266.294210][ T5866] hid (null): invalid report_size 22654 [ 266.377481][ T10] usb 6-1: config 0 interface 222 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 145 [ 266.391378][ T10] usb 6-1: config 0 interface 235 has no altsetting 0 [ 266.401289][ T10] usb 6-1: config 0 interface 222 has no altsetting 0 [ 266.419782][ T5866] asus 0003:0B05:17E0.000C: unknown main item tag 0x3 [ 266.420247][ T9271] netlink: 'syz.1.865': attribute type 3 has an invalid length. [ 266.434656][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 266.442572][ T5866] asus 0003:0B05:17E0.000C: invalid report_size 22654 [ 266.454309][ T10] usb 6-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=b0.1b [ 266.463640][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.491172][ T5866] asus 0003:0B05:17E0.000C: item 0 2 1 7 parsing failed [ 266.532337][ T5866] asus 0003:0B05:17E0.000C: Asus hid parse failed: -22 [ 266.535852][ T10] usb 6-1: Product: syz [ 266.562168][ T10] usb 6-1: Manufacturer: syz [ 266.562490][ T5866] asus 0003:0B05:17E0.000C: probe with driver asus failed with error -22 [ 266.580359][ T10] usb 6-1: SerialNumber: syz [ 266.615142][ T10] usb 6-1: config 0 descriptor?? [ 266.644715][ T5866] usb 4-1: USB disconnect, device number 22 [ 266.772605][ T9285] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 266.875295][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.066561][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.201701][ T10] mos7840 6-1:0.235: required endpoints missing [ 267.219539][ T10] mos7840 6-1:0.222: required endpoints missing [ 267.251116][ T10] usb 6-1: USB disconnect, device number 22 [ 267.303406][ T9292] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 267.347244][ T9292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.395407][ T9297] bond1: (slave gretap1): making interface the new active one [ 267.412099][ T9297] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 267.507232][ T9297] syz.3.870 (9297) used greatest stack depth: 20624 bytes left [ 267.986249][ T9313] IPVS: stopping master sync thread 9285 ... [ 268.258410][ T30] audit: type=1400 audit(1742343523.613:539): avc: denied { search } for pid=5488 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=23222 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 268.400117][ T9320] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.508079][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 268.517740][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 268.670675][ T30] audit: type=1400 audit(1742343524.033:540): avc: denied { execute_no_trans } for pid=9325 comm="syz.3.875" path="/186/file0" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 269.972421][ T30] audit: type=1400 audit(1742343525.323:541): avc: denied { read write } for pid=9351 comm="syz.5.881" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 270.009182][ T30] audit: type=1400 audit(1742343525.333:542): avc: denied { open } for pid=9351 comm="syz.5.881" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 271.004497][ T5866] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 271.252914][ T30] audit: type=1400 audit(1742343526.613:543): avc: denied { sys_chroot } for pid=9372 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 271.293220][ T30] audit: type=1400 audit(1742343526.613:544): avc: denied { setgid } for pid=9372 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 271.314875][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 271.332898][ T9377] syz.5.882: attempt to access beyond end of device [ 271.332898][ T9377] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 271.358784][ T30] audit: type=1400 audit(1742343526.713:545): avc: denied { getopt } for pid=9364 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 271.385201][ T9377] syz.5.882: attempt to access beyond end of device [ 271.385201][ T9377] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 271.442727][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 271.472833][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.484818][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 271.493917][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 271.505534][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 271.520013][ T9377] syz.5.882: attempt to access beyond end of device [ 271.520013][ T9377] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 271.533760][ T5866] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 271.543730][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.601794][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 271.625104][ T5866] hub 3-1:1.0: bad descriptor, ignoring hub [ 271.663596][ T5866] hub 3-1:1.0: probe with driver hub failed with error -5 [ 271.697810][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 271.730453][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 271.749052][ T9377] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 271.777481][ T5866] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 271.811434][ T9377] UDF-fs: Scanning with blocksize 512 failed [ 271.823114][ T5866] cdc_wdm 3-1:1.0: Unknown control protocol [ 271.858037][ T9377] syz.5.882: attempt to access beyond end of device [ 271.858037][ T9377] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 271.887744][ T9377] syz.5.882: attempt to access beyond end of device [ 271.887744][ T9377] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 271.927005][ T5866] usb 3-1: USB disconnect, device number 27 [ 272.002991][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 272.044676][ T26] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 272.080336][ T9377] syz.5.882: attempt to access beyond end of device [ 272.080336][ T9377] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 272.154837][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 272.194086][ T9377] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 272.224245][ T9394] netlink: 'syz.3.886': attribute type 10 has an invalid length. [ 272.234821][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 272.242673][ T9377] UDF-fs: Scanning with blocksize 1024 failed [ 272.247513][ T26] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 272.275523][ T9377] syz.5.882: attempt to access beyond end of device [ 272.275523][ T9377] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 272.308260][ T9394] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 272.310457][ T26] usb 6-1: config 0 has no interface number 0 [ 272.346242][ T9377] syz.5.882: attempt to access beyond end of device [ 272.346242][ T9377] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 272.431586][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 272.463242][ T26] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 2.cb [ 272.463295][ T9377] syz.5.882: attempt to access beyond end of device [ 272.463295][ T9377] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 272.490574][ T5866] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 272.523801][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 272.538155][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.548327][ T9377] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 272.567704][ T26] usb 6-1: Product: syz [ 272.575253][ T26] usb 6-1: Manufacturer: syz [ 272.579866][ T26] usb 6-1: SerialNumber: syz [ 272.622374][ T9377] UDF-fs: Scanning with blocksize 2048 failed [ 272.629104][ T26] usb 6-1: config 0 descriptor?? [ 272.672678][ T9377] syz.5.882: attempt to access beyond end of device [ 272.672678][ T9377] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 272.707787][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 272.734739][ T9377] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 272.744623][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 272.767282][ T9377] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 272.781122][ T9377] UDF-fs: Scanning with blocksize 4096 failed [ 272.804180][ T9377] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 272.830347][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.901869][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 272.934245][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 272.966060][ T26] mdc800 6-1:0.202: probe fails -> wrong Interface [ 272.990718][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 273.011304][ T26] usb 6-1: USB disconnect, device number 23 [ 273.050311][ T5866] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 273.078631][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.290027][ T30] audit: type=1400 audit(1742343528.653:546): avc: denied { read } for pid=9400 comm="syz.3.887" laddr=fe80::13 lport=37327 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.352007][ T9421] tmpfs: Bad value for 'mpol' [ 273.898474][ T5866] usb 3-1: can't set config #1, error -71 [ 273.976542][ T5866] usb 3-1: USB disconnect, device number 28 [ 274.119423][ T30] audit: type=1400 audit(1742343529.483:547): avc: denied { mount } for pid=9427 comm="syz.5.892" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 274.664976][ T5866] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 274.889061][ T9452] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 274.895616][ T9452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.903572][ T9452] vhci_hcd vhci_hcd.0: Device attached [ 275.254724][ T5867] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 275.275625][ T9453] vhci_hcd: connection closed [ 275.277114][ T6696] vhci_hcd: stop threads [ 275.277160][ T5866] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 275.281807][ T6696] vhci_hcd: release socket [ 275.309776][ T5866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.327858][ T6696] vhci_hcd: disconnect device [ 275.334122][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.364525][ T10] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 275.367824][ T5866] usb 2-1: Product: syz [ 275.372042][ T10] usb 43-1: enqueue for inactive port 0 [ 275.382307][ T5866] usb 2-1: Manufacturer: syz [ 275.392423][ T5866] usb 2-1: SerialNumber: syz [ 275.438545][ T5836] Bluetooth: hci2: unexpected event for opcode 0x200f [ 275.446764][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 275.459225][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 275.479358][ T10] vhci_hcd: vhci_device speed not set [ 275.480894][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.504490][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 275.519902][ T5867] usb 4-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00 [ 275.529710][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.540001][ T5867] usb 4-1: config 0 descriptor?? [ 275.611455][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.627768][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.639296][ T9438] overlayfs: failed to resolve '/ ': -2 [ 275.707312][ T5866] cdc_ncm 2-1:1.0: bind() failure [ 275.716658][ T5866] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 275.723510][ T5866] cdc_ncm 2-1:1.1: bind() failure [ 275.734740][ T5866] usb 2-1: USB disconnect, device number 28 [ 275.752252][ T9448] input: syz0 as /devices/virtual/input/input40 [ 275.770801][ T9448] input: failed to attach handler leds to device input40, error: -6 [ 275.876327][ T9472] Cannot find del_set index 4 as target [ 276.734612][ T5822] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 276.812863][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.904'. [ 276.824916][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.904'. [ 276.921031][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.960852][ T5822] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 276.974781][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.990332][ T9479] bio_check_eod: 2 callbacks suppressed [ 276.990342][ T9479] syz.2.906: attempt to access beyond end of device [ 276.990342][ T9479] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 277.009065][ T9479] syz.2.906: attempt to access beyond end of device [ 277.009065][ T9479] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 277.022008][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 277.031642][ T9479] syz.2.906: attempt to access beyond end of device [ 277.031642][ T9479] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 277.045532][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 277.055410][ T9479] syz.2.906: attempt to access beyond end of device [ 277.055410][ T9479] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 277.068271][ T9479] syz.2.906: attempt to access beyond end of device [ 277.068271][ T9479] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 277.081277][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 277.090991][ T9479] syz.2.906: attempt to access beyond end of device [ 277.090991][ T9479] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 277.103946][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 277.114119][ T9479] syz.2.906: attempt to access beyond end of device [ 277.114119][ T9479] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 277.126979][ T9479] syz.2.906: attempt to access beyond end of device [ 277.126979][ T9479] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 277.140080][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 277.150230][ T9479] syz.2.906: attempt to access beyond end of device [ 277.150230][ T9479] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 277.163207][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 277.173094][ T9479] syz.2.906: attempt to access beyond end of device [ 277.173094][ T9479] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 277.185949][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 277.195725][ T9479] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 277.205257][ T9479] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 277.215528][ T5822] usb 1-1: config 0 descriptor?? [ 277.229090][ T30] audit: type=1400 audit(1742343532.593:548): avc: denied { write } for pid=9474 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.323172][ T30] audit: type=1400 audit(1742343532.593:549): avc: denied { bind } for pid=9474 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 277.533983][ T5822] usbhid 1-1:0.0: can't add hid device: -71 [ 277.556895][ T5822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 277.613141][ T5822] usb 1-1: USB disconnect, device number 23 [ 277.647926][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 277.668749][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 277.686081][ T5867] usb 4-1: USB disconnect, device number 23 [ 277.693680][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 277.795778][ C1] net_ratelimit: 10 callbacks suppressed [ 277.795797][ C1] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 277.799125][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 278.230507][ T30] audit: type=1400 audit(1742343533.593:550): avc: denied { open } for pid=9502 comm="syz.2.912" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 278.269571][ T10] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 278.273929][ T9508] loop6: detected capacity change from 0 to 524287999 [ 278.280551][ T9503] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 278.299398][ T10] usb 2-1: config 0 has no interface number 0 [ 278.307047][ C1] blk_print_req_error: 7 callbacks suppressed [ 278.307062][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.314031][ T9503] ref_ctr increment failed for inode: 0x3cb offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88804f518a00 [ 278.322419][ C1] buffer_io_error: 7 callbacks suppressed [ 278.322432][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.339684][ T30] audit: type=1804 audit(1742343533.643:551): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.912" name="/newroot/181/file0" dev="tmpfs" ino=971 res=1 errno=0 [ 278.351363][ T10] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 278.371726][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.387803][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.388318][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.403080][ T10] usb 2-1: Product: syz [ 278.410535][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.419678][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.429206][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.438382][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.448355][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.457501][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.466497][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.475685][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.483717][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.487694][ T10] usb 2-1: Manufacturer: syz [ 278.492861][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.502328][ T10] usb 2-1: SerialNumber: syz [ 278.510440][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.519600][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.527775][ T9508] ldm_validate_partition_table(): Disk read failed. [ 278.553795][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.562963][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.573976][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.583187][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.608993][ T9508] Dev loop6: unable to read RDB block 0 [ 278.623634][ T10] usb 2-1: config 0 descriptor?? [ 278.625002][ T9508] loop6: unable to read partition table [ 278.657012][ T30] audit: type=1400 audit(1742343533.763:552): avc: denied { ioctl } for pid=9502 comm="syz.2.912" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 278.685000][ T9508] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 278.848022][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.864940][ T5866] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 278.875758][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.907760][ T5867] usb 2-1: USB disconnect, device number 29 [ 279.034828][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 279.044275][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.069539][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.093829][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.138314][ T5866] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.153080][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.167248][ T9533] [ 279.169590][ T9533] ====================================================== [ 279.175235][ T5866] usb 6-1: config 0 descriptor?? [ 279.176582][ T9533] WARNING: possible circular locking dependency detected [ 279.188497][ T9533] 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 Not tainted [ 279.195587][ T9533] ------------------------------------------------------ [ 279.202580][ T9533] syz.3.919/9533 is trying to acquire lock: [ 279.208445][ T9533] ffff888022bbac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 279.217736][ T9533] [ 279.217736][ T9533] but task is already holding lock: [ 279.225071][ T9533] ffff888036f96468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 279.233307][ T9533] [ 279.233307][ T9533] which lock already depends on the new lock. [ 279.233307][ T9533] [ 279.243682][ T9533] [ 279.243682][ T9533] the existing dependency chain (in reverse order) is: [ 279.252667][ T9533] [ 279.252667][ T9533] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 279.260025][ T9533] __mutex_lock+0x19b/0xb10 [ 279.265029][ T9533] pipe_lock+0x64/0x80 [ 279.269591][ T9533] iter_file_splice_write+0x1eb/0x10b0 [ 279.275568][ T9533] backing_file_splice_write+0x27c/0x890 [ 279.281717][ T9533] ovl_splice_write+0x38e/0x630 [ 279.287083][ T9533] do_splice+0x146a/0x1f70 [ 279.292015][ T9533] __do_splice+0x327/0x360 [ 279.296952][ T9533] __x64_sys_splice+0x187/0x250 [ 279.302310][ T9533] do_syscall_64+0xcd/0x250 [ 279.307318][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.313712][ T9533] [ 279.313712][ T9533] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 279.321076][ T9533] mnt_want_write+0x6f/0x450 [ 279.326168][ T9533] ovl_create_object+0x12e/0x300 [ 279.331607][ T9533] lookup_open.isra.0+0x11d2/0x1580 [ 279.337325][ T9533] path_openat+0x904/0x2d80 [ 279.342338][ T9533] do_filp_open+0x20c/0x470 [ 279.347345][ T9533] do_sys_openat2+0x17a/0x1e0 [ 279.352532][ T9533] __x64_sys_creat+0xcd/0x120 [ 279.357728][ T9533] do_syscall_64+0xcd/0x250 [ 279.362737][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.369134][ T9533] [ 279.369134][ T9533] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 279.377796][ T9533] down_read+0x9a/0x330 [ 279.382453][ T9533] walk_component+0x342/0x5b0 [ 279.387635][ T9533] path_lookupat+0x17f/0x770 [ 279.392749][ T9533] filename_lookup+0x221/0x5f0 [ 279.398022][ T9533] kern_path+0x35/0x50 [ 279.402594][ T9533] lookup_bdev+0xd9/0x280 [ 279.407427][ T9533] resume_store+0x1d8/0x460 [ 279.412432][ T9533] kobj_attr_store+0x55/0x80 [ 279.417528][ T9533] sysfs_kf_write+0x117/0x170 [ 279.422719][ T9533] kernfs_fop_write_iter+0x33d/0x500 [ 279.428508][ T9533] vfs_write+0x5ae/0x1150 [ 279.433341][ T9533] ksys_write+0x12b/0x250 [ 279.438168][ T9533] do_syscall_64+0xcd/0x250 [ 279.443174][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.449572][ T9533] [ 279.449572][ T9533] -> #0 (&of->mutex){+.+.}-{4:4}: [ 279.456758][ T9533] __lock_acquire+0x249e/0x3c40 [ 279.462115][ T9533] lock_acquire.part.0+0x11b/0x380 [ 279.467729][ T9533] __mutex_lock+0x19b/0xb10 [ 279.472733][ T9533] kernfs_fop_write_iter+0x27b/0x500 [ 279.478516][ T9533] iter_file_splice_write+0x90f/0x10b0 [ 279.484481][ T9533] do_splice+0x146a/0x1f70 [ 279.489400][ T9533] __do_splice+0x327/0x360 [ 279.494320][ T9533] __x64_sys_splice+0x187/0x250 [ 279.499674][ T9533] do_syscall_64+0xcd/0x250 [ 279.504679][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.511083][ T9533] [ 279.511083][ T9533] other info that might help us debug this: [ 279.511083][ T9533] [ 279.521288][ T9533] Chain exists of: [ 279.521288][ T9533] &of->mutex --> sb_writers#6 --> &pipe->mutex [ 279.521288][ T9533] [ 279.533351][ T9533] Possible unsafe locking scenario: [ 279.533351][ T9533] [ 279.540777][ T9533] CPU0 CPU1 [ 279.546118][ T9533] ---- ---- [ 279.551455][ T9533] lock(&pipe->mutex); [ 279.555589][ T9533] lock(sb_writers#6); [ 279.562258][ T9533] lock(&pipe->mutex); [ 279.568906][ T9533] lock(&of->mutex); [ 279.572863][ T9533] [ 279.572863][ T9533] *** DEADLOCK *** [ 279.572863][ T9533] [ 279.580979][ T9533] 2 locks held by syz.3.919/9533: [ 279.585977][ T9533] #0: ffff88807f1fa420 (sb_writers#12){.+.+}-{0:0}, at: __do_splice+0x327/0x360 [ 279.595099][ T9533] #1: ffff888036f96468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 279.603776][ T9533] [ 279.603776][ T9533] stack backtrace: [ 279.609641][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.3.919 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 279.609657][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.609664][ T9533] Call Trace: [ 279.609668][ T9533] [ 279.609674][ T9533] dump_stack_lvl+0x116/0x1f0 [ 279.609691][ T9533] print_circular_bug+0x490/0x760 [ 279.609710][ T9533] check_noncircular+0x31a/0x400 [ 279.609726][ T9533] ? __pfx_check_noncircular+0x10/0x10 [ 279.609742][ T9533] ? lock_acquire.part.0+0x11b/0x380 [ 279.609761][ T9533] ? lockdep_lock+0xc6/0x200 [ 279.609775][ T9533] ? __pfx_lockdep_lock+0x10/0x10 [ 279.609788][ T9533] __lock_acquire+0x249e/0x3c40 [ 279.609807][ T9533] ? __pfx___lock_acquire+0x10/0x10 [ 279.609824][ T9533] ? hlock_class+0x4e/0x130 [ 279.609837][ T9533] lock_acquire.part.0+0x11b/0x380 [ 279.609853][ T9533] ? kernfs_fop_write_iter+0x27b/0x500 [ 279.609869][ T9533] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 279.609885][ T9533] ? rcu_is_watching+0x12/0xc0 [ 279.609901][ T9533] ? trace_lock_acquire+0x14e/0x1f0 [ 279.609914][ T9533] ? kernfs_fop_write_iter+0x27b/0x500 [ 279.609928][ T9533] ? lock_acquire+0x2f/0xb0 [ 279.609943][ T9533] ? kernfs_fop_write_iter+0x27b/0x500 [ 279.609958][ T9533] __mutex_lock+0x19b/0xb10 [ 279.609974][ T9533] ? kernfs_fop_write_iter+0x27b/0x500 [ 279.609988][ T9533] ? __asan_memcpy+0x3c/0x60 [ 279.610006][ T9533] ? kernfs_fop_write_iter+0x27b/0x500 [ 279.610021][ T9533] ? __pfx___mutex_lock+0x10/0x10 [ 279.610038][ T9533] ? __pfx__copy_from_iter+0x10/0x10 [ 279.610053][ T9533] ? __virt_addr_valid+0x5e/0x590 [ 279.610065][ T9533] ? __phys_addr_symbol+0x30/0x80 [ 279.610078][ T9533] ? kernfs_fop_write_iter+0x27b/0x500 [ 279.610092][ T9533] kernfs_fop_write_iter+0x27b/0x500 [ 279.610107][ T9533] iter_file_splice_write+0x90f/0x10b0 [ 279.610129][ T9533] ? __pfx_iter_file_splice_write+0x10/0x10 [ 279.610150][ T9533] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 279.610170][ T9533] ? __do_splice+0x327/0x360 [ 279.610188][ T9533] ? __pfx_iter_file_splice_write+0x10/0x10 [ 279.610207][ T9533] do_splice+0x146a/0x1f70 [ 279.610239][ T9533] ? __pfx_do_splice+0x10/0x10 [ 279.610256][ T9533] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 279.610273][ T9533] ? __pfx_lock_release+0x10/0x10 [ 279.610289][ T9533] ? trace_lock_acquire+0x14e/0x1f0 [ 279.610306][ T9533] __do_splice+0x327/0x360 [ 279.610324][ T9533] ? __pfx___do_splice+0x10/0x10 [ 279.610341][ T9533] ? __fget_files+0x206/0x3a0 [ 279.610355][ T9533] __x64_sys_splice+0x187/0x250 [ 279.610373][ T9533] do_syscall_64+0xcd/0x250 [ 279.610390][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.610407][ T9533] RIP: 0033:0x7faedf98d169 [ 279.610417][ T9533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.610430][ T9533] RSP: 002b:00007faee0785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 279.610443][ T9533] RAX: ffffffffffffffda RBX: 00007faedfba6160 RCX: 00007faedf98d169 [ 279.610451][ T9533] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000007 [ 279.610458][ T9533] RBP: 00007faedfa0e2a0 R08: 0000000000000008 R09: 0000000000000000 [ 279.610465][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.610472][ T9533] R13: 0000000000000001 R14: 00007faedfba6160 R15: 00007ffedb4222c8 [ 279.610483][ T9533] [ 280.172379][ T5866] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 280.180708][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.188256][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.196764][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.203949][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.211236][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.219847][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.227164][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.234450][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.241679][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.249115][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.256401][ T5866] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 280.267203][ T5866] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input41 [ 280.285962][ T5866] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 280.471048][ T5866] usb 6-1: USB disconnect, device number 24 [ 281.144610][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout