last executing test programs: 2m23.344950987s ago: executing program 1 (id=17): read$eventfd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000), 0x8) socket$qrtr(0x2a, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000edffffff0a30000000060a0b040000000000000000020000011c0004801800018007000100727400000c0002800800014000000011"], 0x58}, 0x1, 0x0, 0x0, 0x8044000}, 0x40880) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000400900020073797a31000000000500010007000000100007800c00148008"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYRES8=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000e0000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, &(0x7f0000001340)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001180)) 2m21.6814218s ago: executing program 1 (id=22): socket$netlink(0x10, 0x3, 0x4) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(r2, 0xffffffff) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x22, 0x2, 0x24) close(r5) futex(&(0x7f000000cffc)=0xffffffff, 0x6, 0x4, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x50, r5, 0xc45f5000) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0xe) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r6, 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6, @ANYRES16=r0], 0x0) 2m20.929091833s ago: executing program 1 (id=26): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0x41, 0xfffffffb}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)="00147167cc5745bf66c109b429963bf976a107a35753021bbb55e6bf0f33ba28fdbe58f595feefc4636d1d3006f26963e6248b47749d7d7bcab7ada59b7427976048040c059429fec135235e56d46527cbb6f6f7ee0462dcb36a2f84bdde34ec3e2f7d796b608f1dffc2b03324f7ae3f1a7365c06e8f5b6d289c3219f44171993468aa0fd8deee47314ebf101893ca30667a38bf4e", 0x95, 0xfffffffffffffffd) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) timerfd_create(0x9, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) close_range(r6, 0xffffffffffffffff, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x10200300) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000540)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) close(0x3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r8, r1, 0x0, 0x0, 0x0, 0xfffffffffffffff5, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 2m16.831698763s ago: executing program 1 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, 0x50) 2m16.557569586s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x140004, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m16.355704621s ago: executing program 1 (id=41): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000080)={0x0, &(0x7f0000001e80)}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 2m0.972605289s ago: executing program 32 (id=41): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000080)={0x0, &(0x7f0000001e80)}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 9.844847563s ago: executing program 0 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000008400000300000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007100011800c000100636f756e74657200481900000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c1903801819008008000340000000020c190b"], 0x19dc}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 9.671795597s ago: executing program 0 (id=544): gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) syz_pidfd_open(0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00'}) r5 = open$dir(&(0x7f0000000140)='./cgroup\x00', 0xc0, 0x3) mknodat(r5, &(0x7f0000000180)='./cgroup\x00', 0x8000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 7.696249117s ago: executing program 5 (id=548): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x28c2, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) 5.796652486s ago: executing program 0 (id=551): syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000383a00fe8000000000000000000000000000bbff02f8ffffff0000000000000000000104009078000000006009000000001100fe8000000000000000000000000000aa0000000000000100"/110], 0x0) unshare(0x2000400) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) read$nci(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x89fe, &(0x7f0000000000)) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 5.773879221s ago: executing program 5 (id=553): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180)=0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100003ca12a102c105161e644000000010902120701000000000904"], 0x0) 5.537639158s ago: executing program 4 (id=554): socket$kcm(0x21, 0x2, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 5.407981384s ago: executing program 3 (id=555): syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getgid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002440)={'ip_vti0\x00', &(0x7f00000023c0)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x96e8, 0x0, {{0x10, 0x4, 0x0, 0x20, 0x40, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x1f, 0x7e, [@multicast2, @private=0xa010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast]}, @lsrr={0x83, 0xb, 0xd8, [@broadcast, @broadcast]}]}}}}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x10000001, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000002840)=[{{&(0x7f00000000c0)={0x2, 0x5, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000500)="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", 0xfe}, {&(0x7f0000000ac0)="d86e9161f1370118091646c64632d3b57c541202791113d3bb156bc549b46ceda988d37338e333ab2b5fcf82bf553a68d2e72412dfbf070b57400998c10caa30c87e8b27d471861f7715693de353f8ac3e1495e14c3706c2dd9e4ff99f7a47b4ed1a38b94b7a2a1a29bb5354bfa3aed261fb52540f82885e68fdcff62128753e3a026a87f4f48f79efde2575adc788a02132b1df3ffa449dbe753b4e665a152b78751dd7a27d365be4f02c606c794a4474331609ffce23862f124d1e176f2093468bfd17807c34d2c67380ed5baf8b", 0xcf}, {&(0x7f0000000140)="ea79ccf7ec529bfb52241e118e723838adf92953df94ef76e2442eb0927b8ff44d24420d436095d60679cf551325d4f82bc912893527394617f0ea803ac3b07e7903a0102fbc750452842cc2070692859c6cb170cd146e99a6593f800ed59ab3f71caa6184babf7e265de0e924e1c79f", 0x70}, {&(0x7f0000000280)="65682333bc201fd2cc2cde895c12203ac01a8c882453c48de103e5ecf418ba91594034434fb88772357faaf9c80a6c82a53d81b5fd2d6c037e0892ac15281463c94470599d95c889e9a6625bbad94ae2aad59f2569076736c89940", 0x5b}, {&(0x7f0000000200)="61037ea7a41e4d0a060bf4090ff2c6b1178f2468a0f674fb65fca7b688b0e07fc542417abf062403ec", 0x29}, {&(0x7f00000003c0)="eb92d94a38d2359e280cf9d50dc1167615ad032d60cb85be1b29f9bf72283d4fe0bb616a9312f286d832a693134a81cc6b100457b45a2e3630a8d69007ba4ba26585a1c08baf59dd3884559f7154962f13b64e049626eed7e3df3cc11e3e4f8385654b8eb9ea7fa0f265659897e572a179048c", 0x73}, {&(0x7f0000000340)="5745427f2fab9c6f9b34b76738e18bfbef5049643dcf395aeb9b054c1bbe04573cd924a3cfeb99f660967f3afff692cca42dfb49af14013bdf222833cd3b424f", 0x40}, {&(0x7f0000000700)="e08480edc13ee6db79d12707d46ad59bb1623557d534196fe0e6e2adbb68c94db48fa7eaba2e74d755eec87598094085426d47aa8152a8f6292b7ffc91ba3e915c49c8bb08ab7a178402358e48ca9fe2bcd51b24141cf0adeefc613e2d62af8e07316e83d449b798", 0x68}], 0x8, &(0x7f0000000c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe9dd}, {@empty, 0x7}, {@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@multicast1, 0x7fff}, {@private=0xa010101, 0x80}]}, @end, @end, @rr={0x7, 0x1f, 0xfd, [@local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d00)="4ab4bddc2aeae6a3d46f10e706e161d6e520ad7a4289836c3d8e0958d18108240212a3cbf3071d6ed6f55172075334ccbd1461cc6da95acfd93e84d4fbf5badf00fda2be339701a2cf3bf48f8ab5cc39113d272dac1798588c3bf87f529ea50ebb7e4b68c74743e80302d4f70e99a54b6e8a118071c0e6ea02b440cb9b6a531ad54d", 0x82}, {&(0x7f0000000440)="f0c83179e945e0", 0x7}, {&(0x7f0000000640)="a7431e", 0x3}, {&(0x7f0000000780)="ec5198fd3dba8a46e39b5aeac572c23bbb8c76a70c379d8013031297f5e0", 0x1e}, {&(0x7f0000000dc0)}, {&(0x7f0000000f00)="2e6a6d9fa4891d80ad7d1c28a657ab93a24636fc5cf44814e3fe36c4060bd292b560b1a98d63c695e947aa701fb24df2699bde2fed8150e8a8649a875c454dec6ad98bea149267de84cc7493", 0x4c}, {&(0x7f0000000e00)="a28d1f012d87edc624c3b84a3e782a3de817ef4092a351fd0b9d87e65cce8473bc86f346270adc", 0x27}, {&(0x7f0000000f80)="5fbe8af85e5947", 0x7}, {&(0x7f0000000fc0)="5ea14994623d4f60c30076fffdd48833e8fd31990129306ffa75e7b7f2381b790f", 0x21}], 0x9, &(0x7f00000010c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0xd, 0x1, [{0x5, 0x7, "d9272a5e32"}]}, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "46e00048e659f02b87f7"}]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@rr={0x7, 0x17, 0x5b, [@multicast2, @empty, @broadcast, @multicast2, @empty]}, @timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0xf, [{@remote, 0x81}, {@remote, 0x80000000}, {@multicast2, 0x9e7}]}, @rr={0x7, 0x23, 0xa, [@empty, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010101, @local, @multicast1, @local, @remote, @loopback]}, @ssrr={0x89, 0x7, 0x4f, [@broadcast]}]}}}, @ip_retopts={{0x124, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xf4, 0x1, 0x6, [{@broadcast, 0x5eb}, {@remote, 0xf}]}, @timestamp_addr={0x44, 0x34, 0x27, 0x1, 0xd, [{@multicast1, 0x2}, {@loopback, 0xfffffff8}, {@rand_addr=0x64010101, 0x1}, {@multicast1, 0xa}, {@broadcast, 0xfffffffb}, {@loopback}]}, @timestamp_addr={0x44, 0x1c, 0x5a, 0x1, 0x4, [{@multicast1, 0xa000000}, {@remote}, {@private=0xa010100, 0xfff}]}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0x4, [{@private=0xa010101}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x8}, {@multicast1, 0x2}, {@empty, 0x3}]}, @timestamp={0x44, 0x2c, 0xf3, 0x0, 0xd, [0x7, 0x6, 0x5, 0xa, 0x8001, 0x1afd, 0x80000000, 0xa, 0xf, 0x3]}, @generic={0x86, 0xa, "833f3942abef0317"}, @timestamp={0x44, 0x18, 0xd, 0x0, 0x7, [0x8001, 0x1, 0x6, 0x80000000, 0x9]}, @timestamp={0x44, 0x2c, 0x5f, 0x0, 0x6, [0x40, 0x2, 0xfffffff9, 0x1, 0x4, 0x7, 0x5, 0xf, 0x4, 0x6]}]}}}], 0x1c8}}, {{&(0x7f00000012c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002380)=[{&(0x7f0000001300)="a43e05", 0x3}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="13ffe2a6fa1591664c41637f5cf5f8c23e96eddd2a29364da5aa48c4e683163c3e4d1c50bf34", 0x26}], 0x3, &(0x7f0000002480)=[@ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x32, 0x1, 0x3, [{@multicast2, 0x1}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010102, 0x8}, {@private=0xa010100, 0x5}, {@broadcast, 0x1}, {@empty, 0x9}]}, @lsrr={0x83, 0xb, 0x7a, [@rand_addr=0x64010100, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0x8, [@private=0xa010100, @multicast2, @remote, @local, @remote]}, @ssrr={0x89, 0x1b, 0x45, [@multicast1, @broadcast, @rand_addr=0x64010100, @remote, @private=0xa010102, @local]}, @timestamp_prespec={0x44, 0x34, 0x69, 0x3, 0x7, [{@empty, 0x5}, {@loopback, 0x10000}, {@empty, 0x2}, {@rand_addr=0x64010101, 0x40}, {@private=0xa010100}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x1f, 0xdc, [@loopback, @rand_addr=0x64010100, @remote, @broadcast, @empty, @rand_addr=0x64010102, @local]}, @timestamp={0x44, 0x8, 0x4b, 0x0, 0x1, [0x8]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x96}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xde}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x3c, 0x99, 0x3, 0x1, [{@rand_addr=0x64010100, 0x1a}, {@local, 0x3}, {@empty, 0x7}, {@broadcast, 0xf}, {@empty, 0x7ff}, {@broadcast, 0x1}, {@rand_addr=0x64010101, 0x200}]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x9a, [@multicast2]}, @ssrr={0x89, 0x7, 0x57, [@broadcast]}, @cipso={0x86, 0x1b, 0x0, [{0x6, 0x2}, {0x2, 0x9, "0abec2e7bf5bef"}, {0x2, 0xa, "00335334cb34a660"}]}, @generic={0x7, 0xb, "f2d0eb04d9e3247f39"}, @timestamp={0x44, 0x20, 0x40, 0x0, 0x2, [0xf, 0x10000, 0x80, 0x1, 0x5, 0x79a9cbc1, 0x5]}, @timestamp_addr={0x44, 0x24, 0x6f, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0x9}, {@loopback, 0x7ff}]}]}}}], 0x248}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002700)="549de3df28675978052cec61886c7478030aa24344e79f3d52bb8bbccbc7bd4b9e8456d30a38f95f5a314982e8767bbd501d5da41efd008631d726f289d4b8133efd5de60904c919701d0d9c3b61e322e5a1d61cfa4c40b522c274e053060ebdcc44a539b6b6c311a1d1c0fb83af781a37e85dc8c1ccf83ec87983371f66ca1b7e8a3d4b52e780193f82807f48be2d0ad68f46dd9b7fb64fc7a198fced0c2c83dfed91536bf2ab6d24539f089d97712f9e78128b19c9", 0xb6}], 0x1, &(0x7f0000002800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}], 0x18}}], 0x4, 0x84) read$msr(r1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="bc28", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000e80)="f41c3ebd6e173029c60b494f56898b99ba2f8042ae6606dc07e12554863c58d6c95abb459e856e37d878398a3b3c9de1326c0975c71c07440dcff9bfb93956830841aa430db7e8bc0a25464d8803f5fc101143f806a9d0ecdc03d0f64474f1a39a69943415438953aa2566d5a5a2", 0x6e}], 0x1}}], 0x4, 0x0) 5.28218714s ago: executing program 4 (id=556): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7fffffff, 0x0, 0xb49, 0x9, 0x8, 0x1000, 0x3}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c28, 0x10100, 0x2, 0x250}, &(0x7f0000000500), &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, 0x0, 0x200000c0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x40}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 4.74596045s ago: executing program 3 (id=560): syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000006, 0x300) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munlockall() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioprio_get$pid(0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) 3.762133422s ago: executing program 0 (id=561): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 3.739076733s ago: executing program 3 (id=562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000001bc0)=0x2) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000006c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c70d00000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000005d2ab2b7226480ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a"], 0x150}}, 0x0) 3.541632043s ago: executing program 3 (id=563): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.341137076s ago: executing program 4 (id=564): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101000000"], 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000002f02000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.300361873s ago: executing program 5 (id=565): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000001d00000226bd7000fbdbdf258400050000000000000000000000000000000000000004d32b00000002000000ac14941f000000000000000000000000013500000201040006000000ff010000ff000000ac141426000000000000000000000000000004d53c0000000a000000ac1414bb0000000000000000000000000000000004000200030000000000000023e80000"], 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x200000000, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES16=r4, @ANYRES8=r3, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x3000000000, 0xf}, &(0x7f0000000240)=0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="0800180004000000", @ANYRES32, @ANYBLOB="0800c0000000000004004f8008009e0064010102a5fa1bc096f70000"], 0x1000}], 0x1, 0x0, 0x0, 0x10004800}, 0xc000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0xd000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xf0) r12 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f00000000c0)={0xf0f03c, 0x4}) sendto$inet6(r7, &(0x7f0000000040)="00d8", 0x2, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xcdf}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2.995769758s ago: executing program 4 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 2.804848219s ago: executing program 0 (id=567): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xdaf}}, './file0\x00'}) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') pread64(r6, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r0) 2.249434338s ago: executing program 4 (id=568): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0x41, 0xfffffffb}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)="00147167cc5745bf66c109b429963bf976a107a35753021bbb55e6bf0f33ba28fdbe58f595feefc4636d1d3006f26963e6248b47749d7d7bcab7ada59b7427976048040c059429fec135235e56d46527cbb6f6f7ee0462dcb36a2f84bdde34ec3e2f7d796b608f1dffc2b03324f7ae3f1a7365c06e8f5b6d289c3219f44171993468aa0fd8deee47314ebf101893ca30667a38bf4ec85b3d2a0b17cf9c2c", 0x9e, 0xfffffffffffffffd) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) timerfd_create(0x9, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) close_range(r6, 0xffffffffffffffff, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x10200300) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000540)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) close(0x3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r8, r1, 0x0, 0x0, 0x0, 0xfffffffffffffff5, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 1.534813634s ago: executing program 2 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd4}}, 0x0) 1.500351191s ago: executing program 2 (id=570): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, r0}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000240)={0x30}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(0x0, 0x0, 0x3) gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) recvfrom(r3, &(0x7f0000001680)=""/4121, 0x1019, 0x10001, 0x0, 0x0) 1.423760764s ago: executing program 5 (id=571): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28800, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x80, 0x3, 0x8, @private2, @mcast1, 0x40, 0x7800, 0x3, 0x56b}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x9, 0x0, 0x81, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x8001}}, './file0\x00'}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000240)='GPL\x00', 0xfd4d, 0x5c, &(0x7f0000000300)=""/92, 0x41100, 0x4a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r4, 0x1, r5, r6, r7, r8, r2, 0x1], 0x0, 0x10, 0x1}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000005700)={{0x3, 0x3f, 0x80, {0x3000, 0xeeee8000}}, "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", "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"}) syz_open_dev$dri(0x0, 0x1, 0x0) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write$cgroup_int(r14, &(0x7f0000000180)=0x2, 0x12) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) 1.12286243s ago: executing program 3 (id=572): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x400000, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x4}}) 706.565558ms ago: executing program 3 (id=573): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB]) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32=r4, @ANYBLOB="080006000209"], 0x24}}, 0x4000) fcntl$setstatus(r1, 0x4, 0x42800) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xffffffffffffff2e, 0xf, 0x7fff, 0x4000000002, 0x2, 0x1, 0x1000, 0x1ff}, &(0x7f0000000140)={0x2, 0x3, 0x9, 0x2770, 0x2d2d, 0x4, 0xffff, 0x67ba}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x10]}, 0x8}) r11 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0xf7, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r11, 0x0, 0x0) syz_usb_control_io$sierra_net(r11, &(0x7f0000000100)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="2021080000000811e4ff14eca81fda0a5c032fc6ad6e77482d423e6da6d5d7fed9a58943611e18d8f628cb641cfaa9dbc6ffe12179ade53f254e0c8b940dc44456215f0baaa763ef771ed38e4a263f05fd07cd250cd71ef29c9e2545356f5f02ea98703fdaa6290ae45b14a7907e7c609acecdd19ee42911fce3c56bc8ba24f367f17cd619033099141c"], 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x46, 0x5, 0x5, 0x414a, 0x1, 0x800006, '\x00', r10, r7, 0x0, 0x1, 0x81}, 0x50) 705.463639ms ago: executing program 4 (id=574): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7fffffff, 0x0, 0xb49, 0x9, 0x8, 0x1000, 0x3}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c28, 0x10100, 0x2, 0x250}, &(0x7f0000000500), &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000028c0)=ANY=[@ANYBLOB="38000000000705000000000000000000070000060c00064000000800000000d20c00064000000000000000000900010073797a300000000050e5b256bb3742f2494e8233359cb6d662e1bf057529af9a1a55726de40be5d52e73d9c5b1525d264c27040e23978cbbec9865fe3ae428fa6afe593f5aa82da2ab22913565c4cd9007f076d21c2edff5c89251b1f6288ef605000000000000005867d101cd0b377b4f71"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x40}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 649.735465ms ago: executing program 5 (id=575): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x28c2, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) 622.287182ms ago: executing program 2 (id=576): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 590.077061ms ago: executing program 2 (id=577): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 461.047892ms ago: executing program 0 (id=578): socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) syz_emit_ethernet(0x6f, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450e0061fb1d000007069078ac1414bbac1414bb4e224e22939253a3a9ddddfd447b7653a39f662a5acb07018888656969ab62f25881d8ea140fe2b947bb6a77ccb35acb3067fa65d69924381f0dcfccea399e531d9f42678e7cbf034d3e917106019cdc8c08d90a3f5dd48c77337ea1b9885b65329ae75bdf3aa7ed73d5b198454aba2487987fdbb645c8bed032a80fa5efddce71f5e276affa4905e229362b5c161774cc7a6e1a458d3c0aaaddf5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50016071907800e736211d374637ba913b9a6aaa3f44bb826e55c5030326766564be98a8bc3a5215d4a71767ca0500000000000000fa657c1d8a46b845ce861e0c"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff25ed5860000a898988a800", 0x2e}], 0x1}, 0x0) (fail_nth: 9) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 301.053636ms ago: executing program 2 (id=579): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0xe00000000000000, 0x0, 0x8800}, 0x20044884) 169.499428ms ago: executing program 2 (id=580): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="c8dd4563eb04726c89359c477d52df6e459bbb56a83352ac7cefeddfcee319fdde6f0ffac242dc7bf361c3e12036e9dc72591700645480cfff862b8f81"]}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "5cc46f9b913a74a507714e766af0590ef43fd6da5abc64637d6c5317"}}, 0x0, 0x0, 0x0}, 0x0) (async) chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) fchown(r1, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x5) 0s ago: executing program 5 (id=581): r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ][ T24] usb 4-1: USB disconnect, device number 2 [ 88.464312][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.388637][ T6166] overlayfs: missing 'workdir' [ 90.290416][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 90.290430][ T30] audit: type=1400 audit(1758609577.874:226): avc: denied { read } for pid=6177 comm="syz.0.54" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.738296][ T30] audit: type=1400 audit(1758609577.884:227): avc: denied { open } for pid=6177 comm="syz.0.54" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.112881][ T30] audit: type=1400 audit(1758609578.704:228): avc: denied { create } for pid=6187 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.212144][ T30] audit: type=1400 audit(1758609578.734:229): avc: denied { read } for pid=6187 comm="syz.4.59" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.286069][ T30] audit: type=1400 audit(1758609578.734:230): avc: denied { open } for pid=6187 comm="syz.4.59" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.309385][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.334269][ T30] audit: type=1400 audit(1758609578.734:231): avc: denied { create } for pid=6187 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.357908][ T30] audit: type=1400 audit(1758609578.734:232): avc: denied { read write } for pid=6187 comm="syz.4.59" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.427717][ T30] audit: type=1400 audit(1758609578.734:233): avc: denied { open } for pid=6187 comm="syz.4.59" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.456729][ T30] audit: type=1400 audit(1758609578.744:234): avc: denied { ioctl } for pid=6187 comm="syz.4.59" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.865430][ T6185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.878193][ T30] audit: type=1400 audit(1758609579.364:235): avc: denied { read write } for pid=6196 comm="syz.3.62" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.925804][ T6197] ISOFS: Unable to identify CD-ROM format. [ 93.481228][ T6217] netlink: 'syz.3.66': attribute type 23 has an invalid length. [ 93.576605][ T6223] FAULT_INJECTION: forcing a failure. [ 93.576605][ T6223] name failslab, interval 1, probability 0, space 0, times 1 [ 93.592724][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 93.592747][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.592757][ T6223] Call Trace: [ 93.592762][ T6223] [ 93.592769][ T6223] dump_stack_lvl+0x16c/0x1f0 [ 93.592795][ T6223] should_fail_ex+0x512/0x640 [ 93.592817][ T6223] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 93.592838][ T6223] should_failslab+0xc2/0x120 [ 93.592858][ T6223] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 93.592876][ T6223] ? __alloc_skb+0x2b2/0x380 [ 93.592900][ T6223] __alloc_skb+0x2b2/0x380 [ 93.592919][ T6223] ? __pfx___alloc_skb+0x10/0x10 [ 93.592943][ T6223] ? find_held_lock+0x2b/0x80 [ 93.592967][ T6223] netlink_dump+0x19b/0xd30 [ 93.592992][ T6223] ? __pfx_netlink_dump+0x10/0x10 [ 93.593011][ T6223] ? ip_set_dump_start+0x2e9/0x460 [ 93.593034][ T6223] ? __pfx_ip_set_dump_start+0x10/0x10 [ 93.593049][ T6223] ? __pfx___mutex_lock+0x10/0x10 [ 93.593085][ T6223] __netlink_dump_start+0x6d6/0x990 [ 93.593111][ T6223] ip_set_dump+0x17f/0x210 [ 93.593136][ T6223] ? __pfx_ip_set_dump+0x10/0x10 [ 93.593159][ T6223] ? __pfx_ip_set_dump_start+0x10/0x10 [ 93.593174][ T6223] ? __pfx_ip_set_dump_do+0x10/0x10 [ 93.593191][ T6223] ? __pfx_ip_set_dump_done+0x10/0x10 [ 93.593227][ T6223] nfnetlink_rcv_msg+0x9fc/0x1200 [ 93.593254][ T6223] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 93.593275][ T6223] ? __pfx___schedule+0x10/0x10 [ 93.593321][ T6223] netlink_rcv_skb+0x155/0x420 [ 93.593343][ T6223] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 93.593361][ T6223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.593393][ T6223] ? ns_capable+0xd7/0x110 [ 93.593416][ T6223] nfnetlink_rcv+0x1b3/0x430 [ 93.593433][ T6223] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 93.593456][ T6223] netlink_unicast+0x5aa/0x870 [ 93.593481][ T6223] ? __pfx_netlink_unicast+0x10/0x10 [ 93.593503][ T6223] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 93.593530][ T6223] netlink_sendmsg+0x8d1/0xdd0 [ 93.593552][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.593579][ T6223] ____sys_sendmsg+0xa98/0xc70 [ 93.593603][ T6223] ? copy_msghdr_from_user+0x10a/0x160 [ 93.593621][ T6223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.593654][ T6223] ___sys_sendmsg+0x134/0x1d0 [ 93.593674][ T6223] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.593721][ T6223] __sys_sendmsg+0x16d/0x220 [ 93.593740][ T6223] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.593774][ T6223] do_syscall_64+0xcd/0x4e0 [ 93.593798][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.593814][ T6223] RIP: 0033:0x7f2a2298eec9 [ 93.593827][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.593841][ T6223] RSP: 002b:00007f2a238ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.593857][ T6223] RAX: ffffffffffffffda RBX: 00007f2a22be5fa0 RCX: 00007f2a2298eec9 [ 93.593867][ T6223] RDX: 000000000000c064 RSI: 00002000000023c0 RDI: 0000000000000003 [ 93.593877][ T6223] RBP: 00007f2a238ba090 R08: 0000000000000000 R09: 0000000000000000 [ 93.593886][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.593895][ T6223] R13: 00007f2a22be6038 R14: 00007f2a22be5fa0 R15: 00007ffda899b078 [ 93.593916][ T6223] [ 95.197357][ T6239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.430328][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 95.430359][ T30] audit: type=1400 audit(1758609582.754:245): avc: denied { bind } for pid=6232 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.550082][ T30] audit: type=1400 audit(1758609582.754:246): avc: denied { accept } for pid=6232 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.852757][ T30] audit: type=1400 audit(1758609583.444:247): avc: denied { write } for pid=6244 comm="syz.3.74" path="socket:[10253]" dev="sockfs" ino=10253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.880282][ T6245] Bluetooth: MGMT ver 1.23 [ 96.027523][ T6248] overlayfs: conflicting options: userxattr,redirect_dir=on [ 96.182479][ T30] audit: type=1400 audit(1758609583.774:248): avc: denied { ioctl } for pid=6254 comm="syz.2.77" path="socket:[9368]" dev="sockfs" ino=9368 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.300130][ T30] audit: type=1400 audit(1758609583.804:249): avc: denied { create } for pid=6254 comm="syz.2.77" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.353069][ T30] audit: type=1400 audit(1758609583.804:250): avc: denied { write } for pid=6254 comm="syz.2.77" name="file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.415769][ T6238] kexec: Could not allocate control_code_buffer [ 96.429458][ T30] audit: type=1400 audit(1758609583.804:251): avc: denied { open } for pid=6254 comm="syz.2.77" path="/10/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.497529][ T30] audit: type=1400 audit(1758609583.814:252): avc: denied { ioctl } for pid=6254 comm="syz.2.77" path="/10/file0" dev="tmpfs" ino=87 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.514863][ T6266] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 96.569487][ T6266] team0: Device ipvlan1 failed to register rx_handler [ 96.594864][ T30] audit: type=1400 audit(1758609583.924:253): avc: denied { unlink } for pid=5847 comm="syz-executor" name="file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.493380][ T30] audit: type=1400 audit(1758609585.084:254): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 97.704667][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.87'. [ 98.388040][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 98.650657][ T6302] bridge1: entered promiscuous mode [ 98.879756][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'. [ 99.014744][ T6313] Zero length message leads to an empty skb [ 99.563923][ T6318] FAULT_INJECTION: forcing a failure. [ 99.563923][ T6318] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.593386][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.4.96 Not tainted syzkaller #0 PREEMPT(full) [ 99.593411][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.593421][ T6318] Call Trace: [ 99.593427][ T6318] [ 99.593433][ T6318] dump_stack_lvl+0x16c/0x1f0 [ 99.593460][ T6318] should_fail_ex+0x512/0x640 [ 99.593486][ T6318] _copy_from_user+0x2e/0xd0 [ 99.593511][ T6318] generic_map_update_batch+0x380/0x610 [ 99.593542][ T6318] ? __pfx_generic_map_update_batch+0x10/0x10 [ 99.593569][ T6318] ? __pfx_generic_map_update_batch+0x10/0x10 [ 99.593596][ T6318] bpf_map_do_batch+0x5b4/0x680 [ 99.593616][ T6318] __sys_bpf+0x4cf9/0x4de0 [ 99.593642][ T6318] ? __pfx___sys_bpf+0x10/0x10 [ 99.593665][ T6318] ? ksys_write+0x190/0x250 [ 99.593687][ T6318] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 99.593732][ T6318] ? fput+0x9b/0xd0 [ 99.593755][ T6318] ? ksys_write+0x1ac/0x250 [ 99.593772][ T6318] ? __pfx_ksys_write+0x10/0x10 [ 99.593794][ T6318] __x64_sys_bpf+0x78/0xc0 [ 99.593816][ T6318] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.593838][ T6318] do_syscall_64+0xcd/0x4e0 [ 99.593861][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.593877][ T6318] RIP: 0033:0x7ff450f8eec9 [ 99.593891][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.593906][ T6318] RSP: 002b:00007ff451da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.593924][ T6318] RAX: ffffffffffffffda RBX: 00007ff4511e6090 RCX: 00007ff450f8eec9 [ 99.593935][ T6318] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a [ 99.593945][ T6318] RBP: 00007ff451da3090 R08: 0000000000000000 R09: 0000000000000000 [ 99.593955][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.593964][ T6318] R13: 00007ff4511e6128 R14: 00007ff4511e6090 R15: 00007fff62ae5508 [ 99.593987][ T6318] [ 100.126623][ T5988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.483581][ T5988] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 100.515590][ T5988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.554626][ T5988] usb 5-1: config 0 has no interface number 1 [ 100.575307][ T5846] udevd[5846]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.588495][ T5988] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.637413][ T5988] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 100.770792][ T6331] syz.3.97 (6331) used greatest stack depth: 19752 bytes left [ 100.801746][ T5988] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 101.278116][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 101.311419][ T5988] usb 5-1: Product: syz [ 101.325942][ T5988] usb 5-1: Manufacturer: syz [ 101.345567][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 101.345581][ T30] audit: type=1400 audit(1758609588.934:271): avc: denied { read } for pid=6344 comm="syz.3.104" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.398826][ T5988] usb 5-1: config 0 descriptor?? [ 101.425582][ T30] audit: type=1400 audit(1758609588.934:272): avc: denied { open } for pid=6344 comm="syz.3.104" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.425697][ T5988] usb-storage 5-1:0.127: USB Mass Storage device detected [ 101.669859][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.983441][ T30] audit: type=1400 audit(1758609589.564:273): avc: denied { read write } for pid=6316 comm="syz.4.96" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.171042][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.106'. [ 102.201055][ T5988] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 102.231078][ T30] audit: type=1400 audit(1758609589.564:274): avc: denied { open } for pid=6316 comm="syz.4.96" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.310424][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 102.322025][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 102.333463][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.356161][ T5988] usbhid 5-1:0.127: couldn't find an input interrupt endpoint [ 102.360097][ T5908] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 102.390648][ T5988] usb-storage 5-1:0.0: USB Mass Storage device detected [ 102.395565][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.420432][ T5988] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 102.426296][ T5908] usb 4-1: config 0 descriptor?? [ 102.459979][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.493257][ T5988] usb 5-1: USB disconnect, device number 2 [ 102.535434][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.547898][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.558222][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.566939][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.577921][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 102.601273][ T30] audit: type=1400 audit(1758609590.184:275): avc: denied { mounton } for pid=6361 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.622641][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.640478][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 102.650015][ T24] usb 1-1: config 12 has an invalid interface number: 80 but max is 0 [ 102.663087][ T24] usb 1-1: config 12 has no interface number 0 [ 102.669780][ T24] usb 1-1: config 12 interface 80 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 32 [ 102.687068][ T24] usb 1-1: New USB device found, idVendor=04e8, idProduct=6615, bcdDevice=b8.ab [ 102.697053][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.707081][ T24] usb 1-1: Product: syz [ 102.711705][ T24] usb 1-1: Manufacturer: syz [ 102.716294][ T24] usb 1-1: SerialNumber: syz [ 102.724350][ T6353] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.810966][ T6108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.834568][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 102.882911][ T5908] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 102.938972][ T6108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.953334][ T24] usb 1-1: USB disconnect, device number 2 [ 103.059837][ T6371] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 103.074937][ T6371] Error validating options; rc = [-22] [ 103.335559][ T6108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.350283][ T5908] usb 4-1: USB disconnect, device number 3 [ 103.426692][ T6108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.449053][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.464199][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.473350][ T6361] bridge_slave_0: entered allmulticast mode [ 103.480795][ T6361] bridge_slave_0: entered promiscuous mode [ 103.489163][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.500508][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.508223][ T6361] bridge_slave_1: entered allmulticast mode [ 103.519730][ T6361] bridge_slave_1: entered promiscuous mode [ 103.580583][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.602976][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.644697][ T30] audit: type=1400 audit(1758609591.224:276): avc: denied { search } for pid=5514 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.715571][ T30] audit: type=1400 audit(1758609591.224:277): avc: denied { search } for pid=5514 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.794079][ T30] audit: type=1400 audit(1758609591.224:278): avc: denied { search } for pid=5514 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.818029][ T30] audit: type=1400 audit(1758609591.224:279): avc: denied { read } for pid=5514 comm="dhcpcd" name="n100" dev="tmpfs" ino=2303 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.846462][ T30] audit: type=1400 audit(1758609591.224:280): avc: denied { open } for pid=5514 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2303 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.875601][ T6361] team0: Port device team_slave_0 added [ 103.901956][ T6108] bridge_slave_1: left allmulticast mode [ 103.907826][ T6108] bridge_slave_1: left promiscuous mode [ 103.918952][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.935441][ T6108] bridge_slave_0: left allmulticast mode [ 103.944388][ T6108] bridge_slave_0: left promiscuous mode [ 104.278212][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.610557][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.673178][ T5860] Bluetooth: hci5: command tx timeout [ 104.761492][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.781935][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 104.791273][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.808737][ T24] usb 4-1: config 0 descriptor?? [ 104.814448][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.825778][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 104.848981][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.861340][ T6108] bond0 (unregistering): Released all slaves [ 104.874808][ T6361] team0: Port device team_slave_1 added [ 104.989338][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.002431][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.034456][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.048178][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.058391][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.090575][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.278455][ T6361] hsr_slave_0: entered promiscuous mode [ 105.290260][ T6361] hsr_slave_1: entered promiscuous mode [ 105.303262][ T6361] debugfs: 'hsr0' already exists in 'hsr' [ 105.312812][ T6361] Cannot create hsr debugfs directory [ 105.728033][ T6108] hsr_slave_0: left promiscuous mode [ 105.764549][ T6108] hsr_slave_1: left promiscuous mode [ 105.783202][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.999437][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.018979][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.032801][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.198793][ T6108] veth1_macvtap: left promiscuous mode [ 106.209088][ T6108] veth0_macvtap: left promiscuous mode [ 106.228008][ T6108] veth1_vlan: left promiscuous mode [ 106.234015][ T6108] veth0_vlan: left promiscuous mode [ 106.402309][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 106.538622][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 106.538636][ T30] audit: type=1400 audit(1758609594.124:297): avc: denied { shutdown } for pid=6428 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.569255][ T30] audit: type=1400 audit(1758609594.154:298): avc: denied { read } for pid=6428 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.746296][ T5860] Bluetooth: hci5: command tx timeout [ 107.027017][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 107.083221][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 107.218416][ T30] audit: type=1400 audit(1758609594.804:299): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.758434][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 107.759638][ T6446] FAULT_INJECTION: forcing a failure. [ 107.759638][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.764561][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 107.784174][ T6446] CPU: 0 UID: 0 PID: 6446 Comm: syz.2.122 Not tainted syzkaller #0 PREEMPT(full) [ 107.784195][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.784203][ T6446] Call Trace: [ 107.784209][ T6446] [ 107.784215][ T6446] dump_stack_lvl+0x16c/0x1f0 [ 107.784242][ T6446] should_fail_ex+0x512/0x640 [ 107.784265][ T6446] _copy_to_user+0x32/0xd0 [ 107.784289][ T6446] simple_read_from_buffer+0xcb/0x170 [ 107.784308][ T6446] proc_fail_nth_read+0x197/0x240 [ 107.784327][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.784346][ T6446] ? rw_verify_area+0xcf/0x6c0 [ 107.784369][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.784387][ T6446] vfs_read+0x1e1/0xcf0 [ 107.784404][ T6446] ? __pfx___mutex_lock+0x10/0x10 [ 107.784425][ T6446] ? __pfx_vfs_read+0x10/0x10 [ 107.784446][ T6446] ? __fget_files+0x20e/0x3c0 [ 107.784462][ T6446] ? ipc_obtain_object_check+0x160/0x190 [ 107.784493][ T6446] ksys_read+0x12a/0x250 [ 107.784508][ T6446] ? __pfx_ksys_read+0x10/0x10 [ 107.784529][ T6446] do_syscall_64+0xcd/0x4e0 [ 107.784551][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.784567][ T6446] RIP: 0033:0x7fe7dcd8d8dc [ 107.784579][ T6446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.784594][ T6446] RSP: 002b:00007fe7daff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.784609][ T6446] RAX: ffffffffffffffda RBX: 00007fe7dcfe5fa0 RCX: 00007fe7dcd8d8dc [ 107.784618][ T6446] RDX: 000000000000000f RSI: 00007fe7daff60a0 RDI: 0000000000000004 [ 107.784634][ T6446] RBP: 00007fe7daff6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.784642][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.784651][ T6446] R13: 00007fe7dcfe6038 R14: 00007fe7dcfe5fa0 R15: 00007ffc209dcce8 [ 107.784671][ T6446] [ 107.988854][ T24] usb 4-1: USB disconnect, device number 4 [ 108.281766][ T30] audit: type=1400 audit(1758609595.854:300): avc: denied { setopt } for pid=6454 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.363418][ T30] audit: type=1400 audit(1758609595.934:301): avc: denied { create } for pid=6458 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.564876][ T30] audit: type=1400 audit(1758609595.934:302): avc: denied { listen } for pid=6458 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.675701][ T6468] overlay: Unknown parameter 'dont_measure' [ 109.045123][ T5860] Bluetooth: hci5: command tx timeout [ 109.088712][ T30] audit: type=1400 audit(1758609595.934:303): avc: denied { accept } for pid=6458 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.113480][ T30] audit: type=1400 audit(1758609596.264:304): avc: denied { mount } for pid=6464 comm="syz.4.127" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.329258][ T6361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.343980][ T6361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.368241][ T30] audit: type=1400 audit(1758609596.954:305): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.455868][ T6361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.526211][ T6361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.527118][ T30] audit: type=1400 audit(1758609597.114:306): avc: denied { read write } for pid=6478 comm="syz.2.130" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.934909][ T6496] ALSA: mixer_oss: invalid OSS volume '8' [ 109.941090][ T6496] ALSA: mixer_oss: invalid OSS volume '' [ 110.687394][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.865904][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.065515][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.072609][ T6416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.085565][ T5860] Bluetooth: hci5: command tx timeout [ 111.113040][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.120185][ T6416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.301647][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 112.301661][ T30] audit: type=1400 audit(1758609599.894:309): avc: denied { sys_module } for pid=6361 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.079301][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.336472][ T6545] overlayfs: failed to resolve './file1': -2 [ 113.384969][ T6545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.833996][ T6554] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.142'. [ 113.843383][ T6554] netlink: zone id is out of range [ 113.848510][ T6554] netlink: zone id is out of range [ 113.853705][ T6554] netlink: get zone limit has 8 unknown bytes [ 114.820737][ T6361] veth0_vlan: entered promiscuous mode [ 114.830477][ T5908] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.866017][ T6361] veth1_vlan: entered promiscuous mode [ 114.895974][ T6361] veth0_macvtap: entered promiscuous mode [ 114.974689][ T6361] veth1_macvtap: entered promiscuous mode [ 114.980748][ T5908] usb 4-1: device descriptor read/64, error -71 [ 115.019458][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.031745][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.065853][ T6416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.168707][ T6416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.659365][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.681980][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.707710][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.741202][ T6416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.790292][ T5908] usb 4-1: device descriptor read/64, error -71 [ 115.900736][ T6416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.956348][ T6587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.987964][ T6587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.024306][ T5908] usb usb4-port1: attempt power cycle [ 116.052522][ T30] audit: type=1400 audit(1758609603.624:310): avc: denied { mounton } for pid=6361 comm="syz-executor" path="/root/syzkaller.uYX4gv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 116.189376][ T30] audit: type=1400 audit(1758609603.714:311): avc: denied { mount } for pid=6361 comm="syz-executor" name="/" dev="gadgetfs" ino=8197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 116.256221][ T30] audit: type=1326 audit(1758609603.814:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.0.152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a2298eec9 code=0x0 [ 116.332630][ T30] audit: type=1400 audit(1758609603.924:313): avc: denied { watch watch_reads } for pid=6601 comm="syz.0.152" path="/proc/114/task/115/fd" dev="proc" ino=12449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.398452][ T30] audit: type=1400 audit(1758609603.964:314): avc: denied { write } for pid=6581 comm="syz.2.150" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.429969][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.496577][ T5908] usb 4-1: device descriptor read/8, error -71 [ 116.505239][ T30] audit: type=1400 audit(1758609604.014:315): avc: denied { watch watch_reads } for pid=6606 comm="syz.5.105" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.547597][ T30] audit: type=1400 audit(1758609604.014:316): avc: denied { connect } for pid=6606 comm="syz.5.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.657523][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.105'. [ 116.759979][ T5908] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.795089][ T5908] usb 4-1: device descriptor read/8, error -71 [ 116.851795][ T30] audit: type=1400 audit(1758609604.014:317): avc: denied { write } for pid=6606 comm="syz.5.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.910217][ T5908] usb usb4-port1: unable to enumerate USB device [ 116.949999][ T43] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 117.001772][ T6628] IPv6: addrconf: prefix option has invalid lifetime [ 117.059105][ T30] audit: type=1400 audit(1758609604.644:318): avc: denied { read } for pid=6623 comm="syz.4.153" name="file0" dev="fuse" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 117.083271][ T6631] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.144262][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.164220][ T43] usb 6-1: config 0 has no interface number 0 [ 117.180844][ T43] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 117.218994][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.247205][ T43] usb 6-1: config 0 descriptor?? [ 117.373460][ T43] usb 6-1: selecting invalid altsetting 1 [ 117.471797][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 117.478202][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 117.882900][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.892292][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.996485][ T43] DVB: Unable to find symbol cx22700_attach() [ 118.273190][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 118.302685][ T43] DVB: Unable to find symbol tda10046_attach() [ 118.308857][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 118.497515][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 118.497533][ T30] audit: type=1400 audit(1758609606.074:320): avc: denied { ioctl } for pid=6656 comm="syz.3.161" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11389 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.603371][ T6663] Device name cannot be null; rc = [-22] [ 119.503970][ T5908] usb 6-1: USB disconnect, device number 2 [ 119.666575][ T6636] kvm: pic: level sensitive irq not supported [ 119.666718][ T6636] kvm: pic: non byte read [ 119.889389][ T6682] FAULT_INJECTION: forcing a failure. [ 119.889389][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.902765][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.5.166 Not tainted syzkaller #0 PREEMPT(full) [ 119.902788][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.902798][ T6682] Call Trace: [ 119.902805][ T6682] [ 119.902812][ T6682] dump_stack_lvl+0x16c/0x1f0 [ 119.902839][ T6682] should_fail_ex+0x512/0x640 [ 119.902865][ T6682] _copy_from_user+0x2e/0xd0 [ 119.902891][ T6682] kstrtouint_from_user+0xd6/0x1d0 [ 119.902910][ T6682] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 119.902928][ T6682] ? __lock_acquire+0xb97/0x1ce0 [ 119.902967][ T6682] proc_fail_nth_write+0x83/0x220 [ 119.902988][ T6682] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.903016][ T6682] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.903035][ T6682] vfs_write+0x2a0/0x11d0 [ 119.903057][ T6682] ? __pfx___mutex_lock+0x10/0x10 [ 119.903081][ T6682] ? __pfx_vfs_write+0x10/0x10 [ 119.903106][ T6682] ? __fget_files+0x20e/0x3c0 [ 119.903134][ T6682] ksys_write+0x12a/0x250 [ 119.903153][ T6682] ? __pfx_ksys_write+0x10/0x10 [ 119.903179][ T6682] do_syscall_64+0xcd/0x4e0 [ 119.903204][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.903225][ T6682] RIP: 0033:0x7f761c18d97f [ 119.903239][ T6682] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 119.903255][ T6682] RSP: 002b:00007f761d0a9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 119.903273][ T6682] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f761c18d97f [ 119.903284][ T6682] RDX: 0000000000000001 RSI: 00007f761d0a90a0 RDI: 0000000000000007 [ 119.903293][ T6682] RBP: 00007f761d0a9090 R08: 0000000000000000 R09: 0000000000000000 [ 119.903303][ T6682] R10: 00000000400022ab R11: 0000000000000293 R12: 0000000000000001 [ 119.903314][ T6682] R13: 00007f761c3e6218 R14: 00007f761c3e6180 R15: 00007ffed232aee8 [ 119.903339][ T6682] [ 120.196404][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.509938][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 120.544605][ T43] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 120.580396][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.673736][ T6689] ubi31: attaching mtd0 [ 120.710033][ T6689] ubi31: scanning is finished [ 120.715098][ T30] audit: type=1400 audit(1758609608.244:321): avc: denied { append } for pid=6684 comm="syz.5.168" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.738527][ T6689] ubi31: empty MTD device detected [ 120.912310][ T43] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.925392][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.938398][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.977899][ T43] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 121.005585][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.045493][ T43] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.090904][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.119757][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.119876][ T5908] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 121.142699][ T43] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 121.151565][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.165185][ T43] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.179483][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.193483][ T43] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.214664][ T43] usb 4-1: string descriptor 0 read error: -22 [ 121.225192][ T43] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.246380][ T6689] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 121.254281][ T6689] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 121.264431][ T6689] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 121.272008][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.281214][ T6689] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 121.290146][ T6689] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 121.301042][ T6689] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 121.312837][ T6689] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2512475371 [ 121.330746][ T6689] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 121.429449][ T5908] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.483464][ T5908] usb 3-1: config 0 has no interface number 0 [ 121.503625][ T5908] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 121.546933][ T6693] ubi31: background thread "ubi_bgt31d" started, PID 6693 [ 121.559007][ T43] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.693132][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.720943][ T5908] usb 3-1: config 0 descriptor?? [ 121.785596][ T5908] usb 3-1: selecting invalid altsetting 1 [ 121.824046][ T5908] dvb_ttusb_budget: ttusb_init_controller: error [ 121.831895][ T6667] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 121.839918][ T5908] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 121.905807][ T43] usb 4-1: USB disconnect, device number 9 [ 122.208633][ T30] audit: type=1326 audit(1758609609.754:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.2.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7dcd8eec9 code=0x0 [ 122.288687][ T30] audit: type=1400 audit(1758609609.864:323): avc: denied { getopt } for pid=6688 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 122.292499][ T5908] DVB: Unable to find symbol cx22700_attach() [ 122.410731][ T6705] netlink: 'syz.4.172': attribute type 5 has an invalid length. [ 122.456499][ T6714] sctp: [Deprecated]: syz.5.173 (pid 6714) Use of int in maxseg socket option. [ 122.456499][ T6714] Use struct sctp_assoc_value instead [ 122.534438][ T30] audit: type=1400 audit(1758609610.124:324): avc: denied { getopt } for pid=6713 comm="syz.5.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.578217][ T5908] DVB: Unable to find symbol tda10046_attach() [ 122.608385][ T5908] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 122.796283][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 123.376611][ T30] audit: type=1400 audit(1758609610.964:325): avc: denied { create } for pid=6730 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.642638][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 123.792547][ T30] audit: type=1400 audit(1758609611.164:326): avc: denied { read } for pid=6730 comm="syz.0.177" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.184296][ T43] usb 3-1: USB disconnect, device number 2 [ 124.229987][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.246576][ T30] audit: type=1400 audit(1758609611.174:327): avc: denied { open } for pid=6730 comm="syz.0.177" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.312045][ T30] audit: type=1400 audit(1758609611.174:328): avc: denied { ioctl } for pid=6730 comm="syz.0.177" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.338660][ T30] audit: type=1400 audit(1758609611.234:329): avc: denied { write } for pid=6730 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 124.465374][ T30] audit: type=1400 audit(1758609611.894:330): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 124.981971][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 124.993482][ T5908] usb 6-1: config 4 has an invalid interface number: 185 but max is 2 [ 125.013510][ T5908] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 125.032731][ T30] audit: type=1400 audit(1758609611.934:331): avc: denied { write } for pid=6740 comm="syz.0.180" path="socket:[11627]" dev="sockfs" ino=11627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.067376][ T5908] usb 6-1: config 4 has an invalid interface number: 229 but max is 2 [ 125.101640][ T5908] usb 6-1: config 4 has an invalid interface number: 14 but max is 2 [ 125.117972][ T5908] usb 6-1: config 4 has an invalid interface number: 39 but max is 2 [ 125.127537][ T30] audit: type=1400 audit(1758609612.674:332): avc: denied { read } for pid=6740 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.155353][ T5908] usb 6-1: config 4 has an invalid interface number: 231 but max is 2 [ 125.165509][ T5908] usb 6-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 125.175455][ T5908] usb 6-1: config 4 has no interface number 0 [ 125.183837][ T5908] usb 6-1: config 4 has no interface number 1 [ 125.243087][ T5908] usb 6-1: config 4 has no interface number 2 [ 125.249290][ T5908] usb 6-1: config 4 has no interface number 3 [ 125.258294][ T5908] usb 6-1: config 4 has no interface number 4 [ 125.264737][ T5908] usb 6-1: config 4 interface 185 altsetting 5 has an endpoint descriptor with address 0x1A, changing to 0xA [ 125.279181][ T5908] usb 6-1: config 4 interface 185 altsetting 5 endpoint 0xA has invalid maxpacket 12900, setting to 64 [ 125.293145][ T5908] usb 6-1: config 4 interface 185 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 125.359872][ T5908] usb 6-1: config 4 interface 185 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 125.639681][ T5908] usb 6-1: config 4 interface 185 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 125.700322][ T5908] usb 6-1: config 4 interface 185 altsetting 5 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.739400][ T5908] usb 6-1: config 4 interface 185 altsetting 5 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 125.807931][ T5908] usb 6-1: config 4 interface 229 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 125.885866][ T30] audit: type=1400 audit(1758609613.474:333): avc: denied { bind } for pid=6757 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.909067][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 125.928752][ T30] audit: type=1400 audit(1758609613.474:334): avc: denied { node_bind } for pid=6757 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 126.081971][ T5908] usb 6-1: config 4 interface 229 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 126.287064][ T30] audit: type=1400 audit(1758609613.864:335): avc: denied { setopt } for pid=6760 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.320520][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 126.353345][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 126.391894][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 126.429728][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 126.441387][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.462912][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 126.477911][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 126.494120][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 126.506171][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 126.524053][ T5908] usb 6-1: config 4 interface 229 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 126.547659][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 126.630338][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 126.859861][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 126.912716][ T5908] usb 6-1: config 4 interface 229 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 126.927140][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.937447][ T5908] usb 6-1: config 4 interface 14 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 126.949563][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 126.959710][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 126.969623][ T5908] usb 6-1: config 4 interface 14 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 126.980686][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 126.990802][ T5908] usb 6-1: config 4 interface 14 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 127.002377][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 127.009051][ T5908] usb 6-1: config 4 interface 14 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 127.029831][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 127.039380][ T5908] usb 6-1: config 4 interface 14 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 127.053922][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.076793][ T10] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 127.088446][ T5908] usb 6-1: too many endpoints for config 4 interface 39 altsetting 247: 202, using maximum allowed: 30 [ 127.119916][ T5908] usb 6-1: config 4 interface 39 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 127.137963][ T5908] usb 6-1: config 4 interface 39 altsetting 247 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 127.150701][ T5908] usb 6-1: config 4 interface 39 altsetting 247 has 2 endpoint descriptors, different from the interface descriptor's value: 202 [ 127.167460][ T5908] usb 6-1: too many endpoints for config 4 interface 231 altsetting 163: 212, using maximum allowed: 30 [ 127.177212][ T6789] input: syz1 as /devices/virtual/input/input5 [ 127.179039][ T5908] usb 6-1: config 4 interface 231 altsetting 163 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 127.196178][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has a duplicate endpoint with address 0x3, skipping [ 127.207971][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has an invalid descriptor for endpoint zero, skipping [ 127.219711][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 127.304806][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has a duplicate endpoint with address 0x88, skipping [ 127.346842][ T10] scsi host1: usb-storage 3-1:1.0 [ 127.377461][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has a duplicate endpoint with address 0xF, skipping [ 127.415046][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has a duplicate endpoint with address 0xC, skipping [ 127.429070][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has a duplicate endpoint with address 0x1, skipping [ 127.444879][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 127.539922][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has a duplicate endpoint with address 0x2, skipping [ 127.550991][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has an invalid descriptor for endpoint zero, skipping [ 127.564022][ T5908] usb 6-1: config 4 interface 231 altsetting 163 has 11 endpoint descriptors, different from the interface descriptor's value: 212 [ 127.577720][ T5908] usb 6-1: config 4 interface 185 has no altsetting 0 [ 127.613679][ T5987] usb 3-1: USB disconnect, device number 3 [ 127.648767][ T5908] usb 6-1: config 4 interface 229 has no altsetting 0 [ 127.675092][ T5908] usb 6-1: config 4 interface 14 has no altsetting 0 [ 127.739814][ T5908] usb 6-1: config 4 interface 39 has no altsetting 0 [ 127.795738][ T5908] usb 6-1: config 4 interface 231 has no altsetting 0 [ 127.804716][ T5908] usb 6-1: string descriptor 0 read error: -71 [ 127.820245][ T5908] usb 6-1: New USB device found, idVendor=2f24, idProduct=d274, bcdDevice=65.bb [ 127.829363][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.885202][ T5908] usb 6-1: can't set config #4, error -71 [ 128.279627][ T5908] usb 6-1: USB disconnect, device number 3 [ 128.362318][ T5987] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.584196][ T5987] usb 5-1: config 0 has no interfaces? [ 128.605972][ T5987] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.627231][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.639862][ T5988] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.676894][ T5987] usb 5-1: Product: syz [ 128.682143][ T6814] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 128.726584][ T6814] netlink: 248 bytes leftover after parsing attributes in process `syz.2.199'. [ 128.736206][ T5987] usb 5-1: Manufacturer: syz [ 128.753219][ T5987] usb 5-1: SerialNumber: syz [ 128.770886][ T5987] usb 5-1: config 0 descriptor?? [ 128.890524][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.903974][ T5988] usb 1-1: config 0 has no interfaces? [ 128.909459][ T5988] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.918842][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.928940][ T5988] usb 1-1: config 0 descriptor?? [ 129.162263][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 129.285665][ T6812] FAULT_INJECTION: forcing a failure. [ 129.285665][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 129.299122][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 129.299137][ T30] audit: type=1400 audit(1758609616.874:351): avc: denied { create } for pid=6811 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.372094][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(full) [ 129.372119][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.372130][ T6812] Call Trace: [ 129.372135][ T6812] [ 129.372142][ T6812] dump_stack_lvl+0x16c/0x1f0 [ 129.372169][ T6812] should_fail_ex+0x512/0x640 [ 129.372191][ T6812] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 129.372212][ T6812] should_failslab+0xc2/0x120 [ 129.372236][ T6812] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 129.372254][ T6812] ? __alloc_skb+0x2b2/0x380 [ 129.372278][ T6812] __alloc_skb+0x2b2/0x380 [ 129.372297][ T6812] ? __pfx___alloc_skb+0x10/0x10 [ 129.372319][ T6812] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 129.372347][ T6812] netlink_alloc_large_skb+0x69/0x130 [ 129.372371][ T6812] netlink_sendmsg+0x6a1/0xdd0 [ 129.372402][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.372434][ T6812] ____sys_sendmsg+0xa98/0xc70 [ 129.372461][ T6812] ? copy_msghdr_from_user+0x10a/0x160 [ 129.372482][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.372518][ T6812] ___sys_sendmsg+0x134/0x1d0 [ 129.372541][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.372592][ T6812] __sys_sendmsg+0x16d/0x220 [ 129.372614][ T6812] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.372651][ T6812] do_syscall_64+0xcd/0x4e0 [ 129.372675][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.372692][ T6812] RIP: 0033:0x7f2a2298eec9 [ 129.372706][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.372722][ T6812] RSP: 002b:00007f2a238ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.372739][ T6812] RAX: ffffffffffffffda RBX: 00007f2a22be5fa0 RCX: 00007f2a2298eec9 [ 129.372750][ T6812] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 129.372760][ T6812] RBP: 00007f2a238ba090 R08: 0000000000000000 R09: 0000000000000000 [ 129.372771][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.372781][ T6812] R13: 00007f2a22be6038 R14: 00007f2a22be5fa0 R15: 00007ffda899b078 [ 129.372804][ T6812] [ 129.376343][ T5928] usb 1-1: USB disconnect, device number 3 [ 129.630152][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 129.649963][ T10] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 129.665199][ T10] usb 4-1: config 162 has no interface number 0 [ 129.671492][ T5988] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.679051][ T10] usb 4-1: config 162 interface 166 has no altsetting 0 [ 129.688334][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 129.697585][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.707094][ T10] usb 4-1: Product: syz [ 129.711431][ T10] usb 4-1: Manufacturer: syz [ 129.718706][ T10] usb 4-1: SerialNumber: syz [ 129.820205][ T5988] usb 3-1: Using ep0 maxpacket: 32 [ 129.833106][ T5988] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 129.842034][ T5988] usb 3-1: config 0 has no interface number 0 [ 129.848136][ T5988] usb 3-1: config 0 interface 12 has no altsetting 0 [ 129.856967][ T5988] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 129.866302][ T5988] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 129.874693][ T5988] usb 3-1: Product: syz [ 129.878892][ T5988] usb 3-1: Manufacturer: syz [ 129.883737][ T5988] usb 3-1: SerialNumber: syz [ 129.890438][ T5988] usb 3-1: config 0 descriptor?? [ 129.953592][ T30] audit: type=1400 audit(1758609617.544:352): avc: denied { write } for pid=6801 comm="syz.3.197" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.050018][ T942] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.229041][ T10] appledisplay 4-1:162.166: Could not find int-in endpoint [ 130.237723][ T10] usbhid 4-1:162.166: couldn't find an input interrupt endpoint [ 130.250615][ T10] usb 4-1: USB disconnect, device number 10 [ 130.347708][ T6828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.698144][ T942] usb 6-1: Using ep0 maxpacket: 32 [ 130.714339][ T942] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 130.722781][ T942] usb 6-1: config 0 has no interface number 0 [ 130.730978][ T942] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 130.743513][ T942] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 130.755667][ T942] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 130.766355][ T942] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 130.779311][ T942] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.798351][ T942] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 130.812070][ T942] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 130.829329][ T942] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 130.845840][ T942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.854148][ T942] usb 6-1: Product: syz [ 130.858459][ T942] usb 6-1: Manufacturer: syz [ 130.866017][ T942] usb 6-1: SerialNumber: syz [ 130.874970][ T942] usb 6-1: config 0 descriptor?? [ 130.887837][ T6823] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 130.896414][ T6823] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 130.906057][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.019441][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.048854][ T942] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 130 is not bulk. [ 131.068662][ T942] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 131.121742][ T5988] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 131.153007][ T5988] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 131.170363][ T5988] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 131.191080][ T5988] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 131.292393][ T30] audit: type=1400 audit(1758609618.874:353): avc: denied { create } for pid=6822 comm="syz.5.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 131.360705][ T5988] usb 3-1: USB disconnect, device number 4 [ 131.799835][ T30] audit: type=1400 audit(1758609619.384:354): avc: denied { name_bind } for pid=6822 comm="syz.5.201" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 131.806625][ T1206] usb 5-1: USB disconnect, device number 3 [ 132.110308][ T30] audit: type=1400 audit(1758609619.694:355): avc: denied { connect } for pid=6852 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.282960][ T30] audit: type=1400 audit(1758609619.874:356): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 132.362571][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.372138][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.507172][ T6856] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.206'. [ 132.516452][ T6856] netlink: zone id is out of range [ 132.521575][ T6856] netlink: zone id is out of range [ 132.526680][ T6856] netlink: get zone limit has 8 unknown bytes [ 132.549766][ T30] audit: type=1400 audit(1758609619.934:357): avc: denied { getopt } for pid=6852 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.626881][ T6864] FAULT_INJECTION: forcing a failure. [ 132.626881][ T6864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.952040][ T6864] CPU: 1 UID: 0 PID: 6864 Comm: syz.2.207 Not tainted syzkaller #0 PREEMPT(full) [ 132.952065][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.952074][ T6864] Call Trace: [ 132.952080][ T6864] [ 132.952087][ T6864] dump_stack_lvl+0x16c/0x1f0 [ 132.952114][ T6864] should_fail_ex+0x512/0x640 [ 132.952140][ T6864] _copy_from_iter+0x29f/0x1720 [ 132.952171][ T6864] ? __pfx__copy_from_iter+0x10/0x10 [ 132.952195][ T6864] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.952224][ T6864] copy_page_from_iter+0xde/0x180 [ 132.952252][ T6864] tun_build_skb.constprop.0+0x2e8/0x1500 [ 132.952287][ T6864] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 132.952311][ T6864] ? unwind_get_return_address+0x59/0xa0 [ 132.952332][ T6864] ? arch_stack_walk+0xa6/0x100 [ 132.952367][ T6864] ? _kstrtoull+0x145/0x200 [ 132.952384][ T6864] ? __pfx__kstrtoull+0x10/0x10 [ 132.952409][ T6864] tun_get_user+0x14ae/0x3ce0 [ 132.952445][ T6864] ? __pfx_tun_get_user+0x10/0x10 [ 132.952473][ T6864] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.952507][ T6864] ? find_held_lock+0x2b/0x80 [ 132.952530][ T6864] ? tun_get+0x191/0x370 [ 132.952559][ T6864] tun_chr_write_iter+0xdc/0x210 [ 132.952587][ T6864] vfs_write+0x7d3/0x11d0 [ 132.952606][ T6864] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.952634][ T6864] ? __pfx_vfs_write+0x10/0x10 [ 132.952649][ T6864] ? find_held_lock+0x2b/0x80 [ 132.952684][ T6864] ksys_write+0x12a/0x250 [ 132.952702][ T6864] ? __pfx_ksys_write+0x10/0x10 [ 132.952727][ T6864] do_syscall_64+0xcd/0x4e0 [ 132.952751][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.952769][ T6864] RIP: 0033:0x7fe7dcd8d97f [ 132.952784][ T6864] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.952800][ T6864] RSP: 002b:00007fe7daff6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.952816][ T6864] RAX: ffffffffffffffda RBX: 00007fe7dcfe5fa0 RCX: 00007fe7dcd8d97f [ 132.952827][ T6864] RDX: 000000000000004e RSI: 0000200000000080 RDI: 00000000000000c8 [ 132.952838][ T6864] RBP: 00007fe7daff6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.952847][ T6864] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 132.952857][ T6864] R13: 00007fe7dcfe6038 R14: 00007fe7dcfe5fa0 R15: 00007ffc209dcce8 [ 132.952880][ T6864] [ 132.956815][ T5908] usb 6-1: USB disconnect, device number 4 [ 133.960027][ T5987] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.159881][ T5987] usb 5-1: Using ep0 maxpacket: 32 [ 134.200384][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.274220][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.359969][ T5987] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 134.583476][ T6893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.938411][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.302044][ T6881] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 135.321976][ T5987] usb 5-1: config 0 descriptor?? [ 135.416392][ T30] audit: type=1400 audit(1758609623.004:358): avc: denied { read } for pid=6898 comm="syz.0.217" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.445842][ T30] audit: type=1400 audit(1758609623.004:359): avc: denied { open } for pid=6898 comm="syz.0.217" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.562713][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.583670][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.168002][ T30] audit: type=1400 audit(1758609623.754:360): avc: denied { name_bind } for pid=6871 comm="syz.4.204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 136.419065][ T5987] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x7 [ 136.613095][ T5987] aquacomputer_d5next 0003:0C70:F00D.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0 [ 136.958744][ T6919] capability: warning: `syz.2.220' uses deprecated v2 capabilities in a way that may be insecure [ 136.997695][ T5987] usb 5-1: USB disconnect, device number 4 [ 137.739183][ T6916] fido_id[6916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 138.042547][ T6930] netlink: 'syz.2.222': attribute type 11 has an invalid length. [ 138.169942][ T30] audit: type=1400 audit(1758609625.754:361): avc: denied { mounton } for pid=6936 comm="syz.4.225" path="/49/file0" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.670450][ T30] audit: type=1400 audit(1758609625.754:362): avc: denied { append } for pid=6936 comm="syz.4.225" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.693307][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.787478][ T30] audit: type=1400 audit(1758609625.794:363): avc: denied { read } for pid=6936 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.067778][ T6943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.113570][ T30] audit: type=1400 audit(1758609627.704:364): avc: denied { load_policy } for pid=6951 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 140.249494][ T30] audit: type=1400 audit(1758609627.834:365): avc: denied { write } for pid=6959 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.109366][ T6952] SELinux: failed to load policy [ 142.137939][ T6989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.238'. [ 142.928665][ T7002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.308267][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.928653][ T7019] C: renamed from team_slave_0 (while UP) [ 143.988668][ T7019] netlink: 'syz.5.245': attribute type 3 has an invalid length. [ 143.996565][ T7019] netlink: 152 bytes leftover after parsing attributes in process `syz.5.245'. [ 144.013612][ T7019] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 144.233195][ T30] audit: type=1400 audit(1758609631.814:366): avc: denied { write } for pid=7021 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 144.387437][ T30] audit: type=1400 audit(1758609631.814:367): avc: denied { create } for pid=7014 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.447866][ T30] audit: type=1400 audit(1758609631.844:368): avc: denied { bind } for pid=7014 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.803368][ T7037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.810883][ T7037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.897112][ T7037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.944744][ T7037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.885012][ T7053] netlink: 'syz.2.254': attribute type 7 has an invalid length. [ 146.895424][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 147.958429][ T7060] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 147.966246][ T7060] netlink: 'syz.0.257': attribute type 2 has an invalid length. [ 147.984294][ T7064] Invalid ELF header magic: != ELF [ 147.998113][ T30] audit: type=1400 audit(1758609635.574:369): avc: denied { module_load } for pid=7057 comm="syz.2.256" path="/54/bus" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 148.078907][ T30] audit: type=1400 audit(1758609635.624:370): avc: denied { shutdown } for pid=7057 comm="syz.2.256" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.870727][ T7080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.452099][ T30] audit: type=1400 audit(1758609639.044:371): avc: denied { create } for pid=7096 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.511993][ T7110] FAULT_INJECTION: forcing a failure. [ 151.511993][ T7110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.526830][ T7110] CPU: 0 UID: 0 PID: 7110 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT(full) [ 151.526853][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.526862][ T7110] Call Trace: [ 151.526868][ T7110] [ 151.526874][ T7110] dump_stack_lvl+0x16c/0x1f0 [ 151.526899][ T7110] should_fail_ex+0x512/0x640 [ 151.526924][ T7110] _copy_from_user+0x2e/0xd0 [ 151.526947][ T7110] copy_msghdr_from_user+0x98/0x160 [ 151.526969][ T7110] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 151.526999][ T7110] ___sys_recvmsg+0xdb/0x1a0 [ 151.527020][ T7110] ? __pfx____sys_recvmsg+0x10/0x10 [ 151.527040][ T7110] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 151.527080][ T7110] do_recvmmsg+0x2fe/0x750 [ 151.527104][ T7110] ? __pfx_do_recvmmsg+0x10/0x10 [ 151.527130][ T7110] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 151.527171][ T7110] __x64_sys_recvmmsg+0x22a/0x280 [ 151.527194][ T7110] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.527226][ T7110] do_syscall_64+0xcd/0x4e0 [ 151.527250][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.527266][ T7110] RIP: 0033:0x7fd4ef38eec9 [ 151.527279][ T7110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.527294][ T7110] RSP: 002b:00007fd4f0167038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.527311][ T7110] RAX: ffffffffffffffda RBX: 00007fd4ef5e6090 RCX: 00007fd4ef38eec9 [ 151.527322][ T7110] RDX: 04000000000000a1 RSI: 0000200000001680 RDI: 0000000000000007 [ 151.527333][ T7110] RBP: 00007fd4f0167090 R08: 0000000000000000 R09: 0000000000000000 [ 151.527343][ T7110] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 151.527352][ T7110] R13: 00007fd4ef5e6128 R14: 00007fd4ef5e6090 R15: 00007ffc1051c538 [ 151.527374][ T7110] [ 151.936566][ T30] audit: type=1400 audit(1758609639.064:372): avc: denied { connect } for pid=7096 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.433529][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.275'. [ 152.443691][ T30] audit: type=1400 audit(1758609640.024:373): avc: denied { bind } for pid=7121 comm="syz.5.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.469887][ T5987] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.650949][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 152.663563][ T5987] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 152.708520][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.784025][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.845037][ T7128] ptrace attach of "./syz-executor exec"[7134] was attempted by "./syz-executor exec"[7128] [ 152.872767][ T5987] usb 4-1: Product: syz [ 152.878208][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 152.887657][ T5987] usb 4-1: Manufacturer: syz [ 152.897549][ T5987] usb 4-1: SerialNumber: syz [ 153.007595][ T5987] usb 4-1: config 0 descriptor?? [ 153.228218][ T5987] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 153.629300][ T7143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.282'. [ 153.687166][ T7143] kvm: apic: phys broadcast and lowest prio [ 153.698455][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 153.979549][ T30] audit: type=1400 audit(1758609641.564:374): avc: denied { ioctl } for pid=7146 comm="syz.5.285" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.662672][ T5988] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.702346][ T7156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.717363][ T7156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7156 comm=syz.5.288 [ 154.736953][ T7156] bond_slave_0: entered promiscuous mode [ 154.742766][ T7156] bond_slave_1: entered promiscuous mode [ 154.749397][ T7156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.756825][ T30] audit: type=1400 audit(1758609642.344:375): avc: denied { read } for pid=7161 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.785537][ T30] audit: type=1400 audit(1758609642.344:376): avc: denied { setopt } for pid=7161 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.786254][ T7156] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 154.809479][ T30] audit: type=1400 audit(1758609642.344:377): avc: denied { getopt } for pid=7161 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.839854][ T5988] usb 1-1: Using ep0 maxpacket: 8 [ 154.846319][ T5988] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 154.855219][ T5988] usb 1-1: config 0 has no interface number 0 [ 154.864854][ T5988] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.927827][ T7165] serio: Serial port ptm0 [ 154.960689][ T5988] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 154.973237][ T5988] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.989119][ T5988] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.003369][ T5988] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 155.012455][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.022313][ T5988] usb 1-1: config 0 descriptor?? [ 155.032311][ T5988] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 155.113074][ T5987] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.127980][ T5987] dvbdev: DVB: registering new adapter (Terratec H7) [ 155.128063][ T30] audit: type=1400 audit(1758609642.714:378): avc: denied { block_suspend } for pid=7167 comm="syz.2.291" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.138034][ T5987] usb 4-1: media controller created [ 155.231963][ T30] audit: type=1400 audit(1758609642.824:379): avc: denied { getopt } for pid=7118 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.235703][ T5987] usb read operation failed. (-32) [ 155.260758][ T5987] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 155.398351][ T30] audit: type=1400 audit(1758609642.824:380): avc: denied { ioctl } for pid=7118 comm="syz.3.274" path="socket:[12268]" dev="sockfs" ino=12268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.715995][ T1206] usb 1-1: USB disconnect, device number 4 [ 155.723320][ T1206] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 155.736473][ T5987] usb 4-1: USB disconnect, device number 11 [ 157.534159][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 157.534178][ T30] audit: type=1400 audit(1758609644.854:383): avc: denied { cmd } for pid=7190 comm="syz.3.297" path="socket:[14428]" dev="sockfs" ino=14428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.437927][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 159.000381][ T5987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.223426][ T5987] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 159.275950][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 159.304768][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 159.405280][ T5987] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 159.541096][ T30] audit: type=1400 audit(1758609647.014:384): avc: denied { ioctl } for pid=7222 comm="syz.5.306" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.111834][ T5987] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 160.127538][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.147702][ T5987] usb 5-1: Product: syz [ 160.166073][ T5987] usb 5-1: Manufacturer: syz [ 160.192663][ T5987] usb 5-1: SerialNumber: syz [ 160.266643][ T30] audit: type=1400 audit(1758609647.014:385): avc: denied { write } for pid=7222 comm="syz.5.306" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.268242][ T5987] usb 5-1: config 0 descriptor?? [ 160.360836][ T7208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.368441][ T7208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.377030][ T5987] usb 5-1: ucan: probing device on interface #0 [ 160.567015][ T30] audit: type=1400 audit(1758609647.214:386): avc: denied { set_context_mgr } for pid=7222 comm="syz.5.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 160.723622][ T7230] libceph: resolve '4' (ret=-3): failed [ 160.899990][ T1206] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 160.996869][ T7235] FAULT_INJECTION: forcing a failure. [ 160.996869][ T7235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.012810][ T7235] CPU: 1 UID: 0 PID: 7235 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(full) [ 161.012837][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.012847][ T7235] Call Trace: [ 161.012853][ T7235] [ 161.012860][ T7235] dump_stack_lvl+0x16c/0x1f0 [ 161.012887][ T7235] should_fail_ex+0x512/0x640 [ 161.012912][ T7235] _copy_from_iter+0x29f/0x1720 [ 161.012940][ T7235] ? __alloc_skb+0x200/0x380 [ 161.012962][ T7235] ? __pfx__copy_from_iter+0x10/0x10 [ 161.012989][ T7235] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 161.013020][ T7235] netlink_sendmsg+0x829/0xdd0 [ 161.013047][ T7235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.013080][ T7235] ____sys_sendmsg+0xa98/0xc70 [ 161.013108][ T7235] ? copy_msghdr_from_user+0x10a/0x160 [ 161.013135][ T7235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.013172][ T7235] ___sys_sendmsg+0x134/0x1d0 [ 161.013195][ T7235] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.013246][ T7235] __sys_sendmsg+0x16d/0x220 [ 161.013268][ T7235] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.013306][ T7235] do_syscall_64+0xcd/0x4e0 [ 161.013331][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.013349][ T7235] RIP: 0033:0x7f2a2298eec9 [ 161.013363][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.013380][ T7235] RSP: 002b:00007f2a238ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.013397][ T7235] RAX: ffffffffffffffda RBX: 00007f2a22be5fa0 RCX: 00007f2a2298eec9 [ 161.013409][ T7235] RDX: 0000000000000084 RSI: 0000200000000400 RDI: 0000000000000003 [ 161.013419][ T7235] RBP: 00007f2a238ba090 R08: 0000000000000000 R09: 0000000000000000 [ 161.013429][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.013439][ T7235] R13: 00007f2a22be6038 R14: 00007f2a22be5fa0 R15: 00007ffda899b078 [ 161.013463][ T7235] [ 161.874988][ T1206] usb 6-1: Using ep0 maxpacket: 8 [ 161.880185][ T5987] usb 5-1: ucan: could not read protocol version, ret=-110 [ 161.887450][ T5987] usb 5-1: ucan: probe failed; try to update the device firmware [ 161.903349][ T1206] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 161.912452][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.968227][ T1206] pvrusb2: Hardware description: Terratec Grabster AV400 [ 161.975393][ T1206] pvrusb2: ********** [ 161.979366][ T1206] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 161.993184][ T1206] pvrusb2: Important functionality might not be entirely working. [ 162.060417][ T1206] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 162.087427][ T1206] pvrusb2: ********** [ 162.111810][ T7243] ip6_vti0: entered allmulticast mode [ 162.191732][ T2336] pvrusb2: Invalid write control endpoint [ 162.437703][ T7228] pvrusb2: Invalid write control endpoint [ 162.648472][ T1206] usb 5-1: USB disconnect, device number 5 [ 162.667276][ T5928] usb 6-1: USB disconnect, device number 5 [ 162.683973][ T30] audit: type=1400 audit(1758609650.274:387): avc: denied { write } for pid=7255 comm="syz.3.318" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.754430][ T30] audit: type=1400 audit(1758609650.314:388): avc: denied { read write } for pid=7255 comm="syz.3.318" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 162.787245][ T2336] pvrusb2: Invalid write control endpoint [ 162.806022][ T30] audit: type=1400 audit(1758609650.314:389): avc: denied { open } for pid=7255 comm="syz.3.318" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 162.841612][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 162.905604][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 163.046805][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 163.077632][ T2336] pvrusb2: Device being rendered inoperable [ 163.085791][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 163.130228][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 163.213450][ T2336] pvrusb2: Attached sub-driver cx25840 [ 163.240299][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.284670][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.401098][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 164.285719][ T30] audit: type=1400 audit(1758609651.874:390): avc: denied { bind } for pid=7271 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.733435][ T7297] macvlan0: entered promiscuous mode [ 164.756994][ T7297] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 164.790370][ T7297] netlink: 'syz.4.329': attribute type 2 has an invalid length. [ 164.810634][ T30] audit: type=1400 audit(1758609652.364:391): avc: denied { mounton } for pid=7283 comm="syz.3.327" path="/78/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 164.882450][ T7301] trusted_key: encrypted_key: master key parameter 'use‘:syz' is invalid [ 165.490968][ T30] audit: type=1400 audit(1758609653.084:392): avc: denied { read } for pid=7299 comm="syz.2.330" lport=34457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.125891][ T7313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.333'. [ 166.140498][ T30] audit: type=1400 audit(1758609653.734:393): avc: denied { mounton } for pid=7312 comm="syz.4.333" path="/70/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 166.815461][ T30] audit: type=1400 audit(1758609654.404:394): avc: denied { ioctl } for pid=7329 comm="syz.5.339" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.487335][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 168.506011][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 168.557360][ T7359] netlink: 'syz.2.346': attribute type 13 has an invalid length. [ 168.566340][ T7359] netlink: 'syz.2.346': attribute type 12 has an invalid length. [ 168.607168][ T30] audit: type=1400 audit(1758609656.184:395): avc: denied { checkpoint_restore } for pid=7361 comm="syz.4.347" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.713423][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 168.805945][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 168.869901][ T7359] netlink: 'syz.2.346': attribute type 13 has an invalid length. [ 168.932019][ T7359] netlink: 'syz.2.346': attribute type 12 has an invalid length. [ 168.941697][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 168.950871][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 168.959682][ T7359] netlink: 'syz.2.346': attribute type 13 has an invalid length. [ 168.968533][ T7359] netlink: 'syz.2.346': attribute type 12 has an invalid length. [ 169.180222][ T7370] process 'syz.3.344' launched './file0' with NULL argv: empty string added [ 169.311270][ T30] audit: type=1400 audit(1758609656.804:396): avc: denied { execute_no_trans } for pid=7344 comm="syz.3.344" path="/79/file0" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.421720][ T7373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.965204][ T7376] overlayfs: failed to clone upperpath [ 170.188321][ T7379] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.207752][ T7379] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.499399][ T7411] netlink: 'syz.5.360': attribute type 12 has an invalid length. [ 172.594456][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 173.300760][ T30] audit: type=1400 audit(1758609660.854:397): avc: denied { bind } for pid=7427 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.849608][ T5860] Bluetooth: hci5: link tx timeout [ 175.855769][ T5860] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.339950][ T5987] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.357627][ T7471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.393338][ T30] audit: type=1400 audit(1758609663.934:398): avc: denied { write } for pid=7465 comm="syz.4.379" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 176.500540][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.381'. [ 176.541745][ T5987] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.551757][ T5987] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 176.621103][ T5987] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.640818][ T5987] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.759046][ T5987] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 176.775825][ T5987] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 176.789792][ T5987] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.799003][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.851810][ T5987] usb 1-1: Product: syz [ 176.861725][ T5987] usb 1-1: Manufacturer: syz [ 176.887388][ T7453] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.896421][ T5987] cdc_wdm 1-1:1.0: skipping garbage [ 176.906635][ T5987] cdc_wdm 1-1:1.0: skipping garbage [ 176.916465][ T5987] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 176.944714][ T5987] cdc_wdm 1-1:1.0: Unknown control protocol [ 177.074432][ T30] audit: type=1400 audit(1758609664.634:399): avc: denied { name_bind } for pid=7480 comm="syz.4.383" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 177.109000][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.115735][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.125239][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.131843][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.138589][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.145161][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.151602][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.158167][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.164481][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.171045][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.177245][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.183805][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.189999][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.196556][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.202844][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.209427][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.215623][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.222184][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.230166][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 177.236730][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 177.246266][ T942] usb 1-1: USB disconnect, device number 5 [ 177.246407][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 177.340857][ T30] audit: type=1400 audit(1758609664.694:400): avc: denied { read write } for pid=7449 comm="syz.0.375" name="cdc-wdm0" dev="devtmpfs" ino=2868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 177.374900][ T30] audit: type=1400 audit(1758609664.694:401): avc: denied { open } for pid=7449 comm="syz.0.375" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 177.774765][ T30] audit: type=1400 audit(1758609665.334:402): avc: denied { getopt } for pid=7449 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.775699][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 177.940033][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 177.968705][ T7453] dummy0: entered promiscuous mode [ 177.974221][ T7453] macsec1: entered promiscuous mode [ 178.020530][ T7453] macsec1: entered allmulticast mode [ 178.067793][ T7453] dummy0: entered allmulticast mode [ 178.080174][ T7453] dummy0: left allmulticast mode [ 178.088353][ T7453] dummy0: left promiscuous mode [ 180.300122][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 180.810963][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.824290][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.834296][ T10] usb 4-1: config 0 descriptor?? [ 180.867375][ T10] cp210x 4-1:0.0: cp210x converter detected [ 181.277866][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 181.525572][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 182.639986][ T30] audit: type=1326 audit(1758609670.234:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.0.407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a2298eec9 code=0x0 [ 183.027319][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.409'. [ 183.040581][ T30] audit: type=1400 audit(1758609670.614:404): avc: denied { write } for pid=7556 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 183.096693][ T7563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'. [ 183.120268][ T30] audit: type=1400 audit(1758609670.634:405): avc: denied { ioctl } for pid=7556 comm="syz.0.407" path="socket:[15300]" dev="sockfs" ino=15300 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 183.192901][ T10] usb 4-1: USB disconnect, device number 12 [ 183.202067][ T7568] netlink: 'syz.4.410': attribute type 1 has an invalid length. [ 183.227736][ T7568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.235239][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.391321][ T7574] ubi: mtd0 is already attached to ubi31 [ 183.423630][ T10] cp210x 4-1:0.0: device disconnected [ 184.570454][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 184.593022][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.615793][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.670699][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.692670][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.015316][ T30] audit: type=1400 audit(1758609672.604:406): avc: denied { create } for pid=7591 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.187279][ T7592] overlayfs: failed to clone upperpath [ 185.445016][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 185.759887][ T10] usb 1-1: device descriptor read/64, error -71 [ 186.009871][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 186.159887][ T10] usb 1-1: device descriptor read/64, error -71 [ 186.336612][ T10] usb usb1-port1: attempt power cycle [ 187.081992][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 187.110465][ T10] usb 1-1: device descriptor read/8, error -71 [ 187.539887][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 187.613419][ T10] usb 1-1: device descriptor read/8, error -71 [ 187.750058][ T10] usb usb1-port1: unable to enumerate USB device [ 188.606259][ T7643] batadv_slave_1: entered promiscuous mode [ 188.622447][ T7640] batadv_slave_1: left promiscuous mode [ 189.084315][ T7653] unknown channel width for channel at 909000KHz? [ 189.091090][ T7653] unknown channel width for channel at 909000KHz? [ 189.111687][ T7653] unknown channel width for channel at 909000KHz? [ 189.226048][ T30] audit: type=1400 audit(1758609676.814:407): avc: denied { ioctl } for pid=7662 comm="syz.0.439" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 189.251326][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.377332][ T30] audit: type=1400 audit(1758609676.964:408): avc: denied { connect } for pid=7652 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.135379][ T7669] syz.2.441 uses obsolete (PF_INET,SOCK_PACKET) [ 190.157074][ T30] audit: type=1400 audit(1758609677.744:409): avc: denied { module_request } for pid=7668 comm="syz.2.441" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 190.161220][ T7670] netlink: 100 bytes leftover after parsing attributes in process `syz.0.440'. [ 191.647935][ T7697] CUSE: info not properly terminated [ 191.666318][ T30] audit: type=1400 audit(1758609679.214:410): avc: denied { map } for pid=7693 comm="syz.4.449" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 191.744618][ T30] audit: type=1400 audit(1758609679.214:411): avc: denied { execute } for pid=7693 comm="syz.4.449" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 191.779893][ T30] audit: type=1400 audit(1758609679.234:412): avc: denied { create } for pid=7693 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 191.908077][ T942] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 192.221388][ T942] usb 5-1: config 0 has no interfaces? [ 192.343257][ T942] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 192.358154][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.382101][ T942] usb 5-1: Product: syz [ 192.386393][ T942] usb 5-1: Manufacturer: syz [ 192.414000][ T7709] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 192.562731][ T942] usb 5-1: SerialNumber: syz [ 192.569861][ T942] usb 5-1: config 0 descriptor?? [ 193.905131][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.997749][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.119868][ T7722] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.454'. [ 195.318164][ T5987] usb 5-1: USB disconnect, device number 6 [ 195.879890][ T5908] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.943283][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 195.943299][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 195.943333][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 195.949334][ T5170] Bluetooth: hci0: command 0x0406 tx timeout [ 196.029836][ T5908] usb 4-1: device descriptor read/64, error -71 [ 196.038644][ T7725] ceph: No mds server is up or the cluster is laggy [ 196.038788][ T7738] ceph: No mds server is up or the cluster is laggy [ 196.122336][ T5987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.270003][ T5908] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 196.309929][ T5987] usb 5-1: Using ep0 maxpacket: 8 [ 196.321784][ T5987] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 196.330398][ T5987] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 196.338799][ T5987] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 196.349090][ T5987] usb 5-1: config 250 has no interface number 0 [ 196.355657][ T5987] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 196.369663][ T5987] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 196.381391][ T5987] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.394875][ T5987] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 196.406514][ T5987] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 196.424960][ T5987] usb 5-1: config 250 interface 228 has no altsetting 0 [ 196.434089][ T5987] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 196.444060][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 196.452521][ T5987] usb 5-1: Product: syz [ 196.452586][ T5908] usb 4-1: device descriptor read/64, error -71 [ 196.464214][ T5987] usb 5-1: SerialNumber: syz [ 196.492042][ T5987] hub 5-1:250.228: bad descriptor, ignoring hub [ 196.543856][ T7770] netlink: 'syz.2.468': attribute type 4 has an invalid length. [ 196.600317][ T5908] usb usb4-port1: attempt power cycle [ 196.614897][ T5987] hub 5-1:250.228: probe with driver hub failed with error -5 [ 196.787980][ T5987] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 197.140626][ T5908] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 197.193121][ T5908] usb 4-1: device descriptor read/8, error -71 [ 197.207166][ T30] audit: type=1400 audit(1758609684.794:413): avc: denied { read write } for pid=7751 comm="syz.4.464" name="lp0" dev="devtmpfs" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 197.234765][ T30] audit: type=1400 audit(1758609684.794:414): avc: denied { open } for pid=7751 comm="syz.4.464" path="/dev/usb/lp0" dev="devtmpfs" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 197.440440][ T5908] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 197.482897][ T5908] usb 4-1: device descriptor read/8, error -71 [ 197.600986][ T5908] usb usb4-port1: unable to enumerate USB device [ 197.763749][ T30] audit: type=1400 audit(1758609685.354:415): avc: denied { ioctl } for pid=7789 comm="syz.5.475" path="socket:[16771]" dev="sockfs" ino=16771 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.018309][ T30] audit: type=1400 audit(1758609685.354:416): avc: denied { write } for pid=7789 comm="syz.5.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.403193][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 198.631315][ T30] audit: type=1326 audit(1758609686.224:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ef38eec9 code=0x7ffc0000 [ 198.655514][ T24] usb 5-1: USB disconnect, device number 7 [ 198.704881][ T30] audit: type=1326 audit(1758609686.224:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ef38eec9 code=0x7ffc0000 [ 198.732121][ T30] audit: type=1326 audit(1758609686.224:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4ef38eec9 code=0x7ffc0000 [ 198.804448][ T24] usblp0: removed [ 198.827502][ T30] audit: type=1326 audit(1758609686.224:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ef38eec9 code=0x7ffc0000 [ 198.852955][ T30] audit: type=1326 audit(1758609686.224:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ef38eec9 code=0x7ffc0000 [ 198.893254][ T30] audit: type=1326 audit(1758609686.224:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4ef38d710 code=0x7ffc0000 [ 200.589270][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 201.589967][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 201.971924][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 201.980738][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.001325][ T24] usb 1-1: config 1 has no interface number 1 [ 202.029046][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.058337][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.071899][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.108879][ T24] usb 1-1: Product: syz [ 202.126181][ T24] usb 1-1: Manufacturer: syz [ 202.146561][ T24] usb 1-1: SerialNumber: syz [ 202.192096][ T7829] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.458152][ T24] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 202.560310][ T24] usb 1-1: found format II with max.bitrate = 72, frame size=16384 [ 202.605164][ T24] usb 1-1: 2:1: All rates were zero [ 202.686423][ T24] usb 1-1: USB disconnect, device number 10 [ 202.703834][ T7865] bridge_slave_0: left allmulticast mode [ 202.724001][ T7865] bridge_slave_0: left promiscuous mode [ 202.746000][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.774863][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 202.774885][ T30] audit: type=1400 audit(1758609690.364:484): avc: denied { ioctl } for pid=7869 comm="syz.2.499" path="socket:[17015]" dev="sockfs" ino=17015 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.815889][ T7865] bridge_slave_1: left allmulticast mode [ 202.927546][ T7865] bridge_slave_1: left promiscuous mode [ 202.930953][ T7875] netlink: 'syz.5.497': attribute type 10 has an invalid length. [ 202.948968][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.966379][ T7865] bond0: (slave bond_slave_0): Releasing backup interface [ 203.206680][ T7865] bond_slave_0: left promiscuous mode [ 203.235162][ T7865] bond0: (slave bond_slave_1): Releasing backup interface [ 203.263172][ T7865] bond_slave_1: left promiscuous mode [ 203.304404][ T7865] team0: Port device C removed [ 203.494731][ T7865] team0: Port device team_slave_1 removed [ 203.524253][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.497'. [ 203.533869][ T7865] bond1: (slave macvlan2): Removing an active aggregator [ 203.554123][ T7865] bond1: (slave macvlan2): Releasing backup interface [ 203.953782][ T7894] overlayfs: missing 'workdir' [ 203.990525][ T30] audit: type=1400 audit(1758609691.544:485): avc: denied { listen } for pid=7888 comm="syz.2.502" lport=38541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.182394][ T30] audit: type=1400 audit(1758609691.604:486): avc: denied { accept } for pid=7888 comm="syz.2.502" lport=38541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.204311][ T7868] team0: Mode changed to "loadbalance" [ 204.297017][ T7898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.401312][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.423056][ T7875] team0: Device bond0 failed to register rx_handler [ 204.533781][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 204.700350][ T7910] netlink: 'syz.2.506': attribute type 2 has an invalid length. [ 204.708064][ T7910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.506'. [ 205.423826][ T7917] netlink: 'syz.2.508': attribute type 4 has an invalid length. [ 205.435478][ T7920] netlink: 'syz.4.509': attribute type 2 has an invalid length. [ 205.461056][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.509'. [ 205.674329][ T7935] CUSE: info not properly terminated [ 205.697014][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 205.703978][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 205.729697][ T24] libceph: connect (1)[c::]:6789 error -101 [ 205.736050][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 205.775967][ T30] audit: type=1400 audit(1758609693.364:487): avc: denied { ioctl } for pid=7946 comm="syz.5.517" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 205.929914][ T1206] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.477241][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 206.487380][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 206.500315][ T7933] ceph: No mds server is up or the cluster is laggy [ 206.508932][ T43] libceph: connect (1)[c::]:6789 error -101 [ 206.511369][ T7941] ceph: No mds server is up or the cluster is laggy [ 206.521415][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 206.671816][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 206.954177][ T1206] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 206.963392][ T1206] usb 5-1: config 0 has no interface number 0 [ 206.969489][ T1206] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 207.001763][ T1206] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 207.017911][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.902298][ T1206] usb 5-1: Product: syz [ 207.906487][ T1206] usb 5-1: Manufacturer: syz [ 207.912207][ T1206] usb 5-1: SerialNumber: syz [ 207.928065][ T1206] usb 5-1: config 0 descriptor?? [ 208.306028][ T1206] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 208.333671][ T1206] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 208.380570][ T1206] usb 5-1: USB disconnect, device number 8 [ 208.590530][ T30] audit: type=1400 audit(1758609696.164:488): avc: denied { setopt } for pid=7965 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.031856][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'. [ 209.969845][ T5987] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 210.140074][ T5987] usb 6-1: Using ep0 maxpacket: 8 [ 210.172112][ T5987] usb 6-1: unable to get BOS descriptor or descriptor too short [ 210.196061][ T5987] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 210.222714][ T5987] usb 6-1: config 0 has no interface number 0 [ 210.240039][ T5987] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 210.268606][ T8010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.532'. [ 210.305031][ T5987] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 210.338949][ T5987] usb 6-1: config 0 interface 88 has no altsetting 0 [ 210.365821][ T5987] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 210.384922][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 210.409605][ T5987] usb 6-1: Product: syz [ 210.428850][ T5987] usb 6-1: SerialNumber: syz [ 210.456908][ T5987] usb 6-1: config 0 descriptor?? [ 210.742674][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.810279][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.879364][ T5987] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input7 [ 210.962482][ T8023] FAULT_INJECTION: forcing a failure. [ 210.962482][ T8023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.975972][ T8023] CPU: 0 UID: 0 PID: 8023 Comm: syz.4.536 Not tainted syzkaller #0 PREEMPT(full) [ 210.975995][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.976004][ T8023] Call Trace: [ 210.976010][ T8023] [ 210.976016][ T8023] dump_stack_lvl+0x16c/0x1f0 [ 210.976043][ T8023] should_fail_ex+0x512/0x640 [ 210.976067][ T8023] _copy_to_iter+0x463/0x1710 [ 210.976097][ T8023] ? lockdep_hardirqs_on+0x7c/0x110 [ 210.976117][ T8023] ? __pfx__copy_to_iter+0x10/0x10 [ 210.976145][ T8023] ? simple_copy_to_iter+0x23/0x90 [ 210.976168][ T8023] simple_copy_to_iter+0x46/0x90 [ 210.976184][ T8023] __skb_datagram_iter+0x129/0x900 [ 210.976204][ T8023] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 210.976229][ T8023] skb_copy_datagram_iter+0x40/0x50 [ 210.976248][ T8023] virtio_transport_stream_dequeue+0x1fc/0xbf0 [ 210.976276][ T8023] ? __pfx_virtio_transport_stream_dequeue+0x10/0x10 [ 210.976297][ T8023] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 210.976317][ T8023] ? lockdep_hardirqs_on+0x7c/0x110 [ 210.976337][ T8023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 210.976357][ T8023] ? vsock_connectible_wait_data+0x3af/0x4f0 [ 210.976384][ T8023] __vsock_connectible_recvmsg+0x75e/0xb40 [ 210.976414][ T8023] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 210.976441][ T8023] ? rcu_is_watching+0x12/0xc0 [ 210.976463][ T8023] ? __pfx_autoremove_wake_function+0x10/0x10 [ 210.976497][ T8023] vsock_connectible_recvmsg+0xd0/0xf0 [ 210.976522][ T8023] sock_recvmsg+0x1f9/0x250 [ 210.976549][ T8023] ____sys_recvmsg+0x218/0x6b0 [ 210.976579][ T8023] ? __pfx_____sys_recvmsg+0x10/0x10 [ 210.976614][ T8023] ? __lock_acquire+0x62e/0x1ce0 [ 210.976646][ T8023] ___sys_recvmsg+0x114/0x1a0 [ 210.976667][ T8023] ? __pfx____sys_recvmsg+0x10/0x10 [ 210.976690][ T8023] ? find_held_lock+0x2b/0x80 [ 210.976727][ T8023] do_recvmmsg+0x2fe/0x750 [ 210.976751][ T8023] ? __pfx_do_recvmmsg+0x10/0x10 [ 210.976783][ T8023] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 210.976814][ T8023] ? __fget_files+0x20e/0x3c0 [ 210.976840][ T8023] __x64_sys_recvmmsg+0x22a/0x280 [ 210.976864][ T8023] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 210.976894][ T8023] do_syscall_64+0xcd/0x4e0 [ 210.976919][ T8023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.976936][ T8023] RIP: 0033:0x7ff450f8eec9 [ 210.976951][ T8023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.976968][ T8023] RSP: 002b:00007ff451da3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.976984][ T8023] RAX: ffffffffffffffda RBX: 00007ff4511e6090 RCX: 00007ff450f8eec9 [ 210.976996][ T8023] RDX: 04000000000000a1 RSI: 0000200000001680 RDI: 0000000000000007 [ 210.977007][ T8023] RBP: 00007ff451da3090 R08: 0000000000000000 R09: 0000000000000000 [ 210.977017][ T8023] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 210.977027][ T8023] R13: 00007ff4511e6128 R14: 00007ff4511e6090 R15: 00007fff62ae5508 [ 210.977051][ T8023] [ 211.565682][ T5987] usb 6-1: USB disconnect, device number 6 [ 212.208776][ T6137] udevd[6137]: Error opening device "/dev/input/event4": No such device [ 212.252124][ T6137] udevd[6137]: Unable to EVIOCGABS device "/dev/input/event4" [ 212.282450][ T6137] udevd[6137]: Unable to EVIOCGABS device "/dev/input/event4" [ 214.157445][ T30] audit: type=1400 audit(1758609701.744:489): avc: denied { read } for pid=8055 comm="syz.4.547" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.392560][ T30] audit: type=1400 audit(1758609701.744:490): avc: denied { open } for pid=8055 comm="syz.4.547" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.989910][ T5908] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 215.189460][ T5908] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 215.231158][ T51] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 215.898957][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.140848][ T5908] usb 1-1: config 0 has no interface number 0 [ 216.147637][ T5908] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 216.235372][ T30] audit: type=1400 audit(1758609703.764:491): avc: denied { ioctl } for pid=8068 comm="syz.3.549" path="socket:[16108]" dev="sockfs" ino=16108 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.237000][ T5908] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 216.549070][ T5908] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.565829][ T5908] usb 1-1: config 0 interface 52 has no altsetting 0 [ 216.591489][ T5908] usb 1-1: string descriptor 0 read error: -71 [ 216.597740][ T5908] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 216.631628][ T5908] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 216.656365][ T8080] bridge_slave_0: left allmulticast mode [ 216.663320][ T5908] usb 1-1: config 0 descriptor?? [ 216.674161][ T8080] bridge_slave_0: left promiscuous mode [ 216.680299][ T5908] usb 1-1: can't set config #0, error -71 [ 216.698315][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.712369][ T5908] usb 1-1: USB disconnect, device number 11 [ 216.852879][ T8080] bridge_slave_1: left allmulticast mode [ 216.863251][ T8080] bridge_slave_1: left promiscuous mode [ 216.869518][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.900232][ T8080] bond0: (slave bond_slave_0): Releasing backup interface [ 216.920399][ T8080] bond0: (slave bond_slave_1): Releasing backup interface [ 216.934688][ T8080] team0: Port device team_slave_0 removed [ 216.954583][ T8080] team0: Port device team_slave_1 removed [ 216.961229][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.968695][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.016077][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.024540][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.129832][ T1206] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 217.487971][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 217.536972][ T1206] usb 6-1: config index 0 descriptor too short (expected 1810, got 18) [ 217.548935][ T1206] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 217.619090][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.739434][ T1206] usb 6-1: config 0 descriptor?? [ 217.752547][ T1206] gspca_main: etoms-2.14.0 probing 102c:6151 [ 217.779939][ T30] audit: type=1400 audit(1758609705.364:492): avc: denied { write } for pid=8113 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 217.870598][ T8117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.308749][ T8080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.424187][ T1206] usb 6-1: USB disconnect, device number 7 [ 218.656772][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 218.969827][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 219.047664][ T30] audit: type=1400 audit(1758609706.634:493): avc: denied { setopt } for pid=8126 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.075839][ T8127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.564'. [ 219.162300][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.173227][ T24] usb 4-1: config 0 has no interfaces? [ 219.190060][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 219.231930][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.273631][ T24] usb 4-1: config 0 descriptor?? [ 219.565014][ T8135] sctp: [Deprecated]: syz.5.565 (pid 8135) Use of int in maxseg socket option. [ 219.565014][ T8135] Use struct sctp_assoc_value instead [ 219.987870][ T5928] usb 4-1: USB disconnect, device number 17 [ 220.179169][ T8143] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.567'. [ 220.214509][ T30] audit: type=1400 audit(1758609707.804:494): avc: denied { read write } for pid=8137 comm="syz.0.567" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.507495][ T30] audit: type=1400 audit(1758609707.804:495): avc: denied { open } for pid=8137 comm="syz.0.567" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 221.059369][ T30] audit: type=1400 audit(1758609708.614:496): avc: denied { getopt } for pid=8149 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.500563][ T30] audit: type=1400 audit(1758609708.764:497): avc: denied { ioctl } for pid=8152 comm="syz.5.571" path="socket:[17680]" dev="sockfs" ino=17680 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 222.067563][ T8178] netlink: 10 bytes leftover after parsing attributes in process `syz.0.578'. [ 222.332021][ T5908] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.585814][ T8188] FAULT_INJECTION: forcing a failure. [ 222.585814][ T8188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.586889][ T8188] [ 222.586895][ T8188] ====================================================== [ 222.586901][ T8188] WARNING: possible circular locking dependency detected [ 222.586908][ T8188] syzkaller #0 Not tainted [ 222.586916][ T8188] ------------------------------------------------------ [ 222.586922][ T8188] syz.5.581/8188 is trying to acquire lock: [ 222.586930][ T8188] ffffffff8e4cebc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 222.586973][ T8188] [ 222.586973][ T8188] but task is already holding lock: [ 222.586978][ T8188] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 222.587016][ T8188] [ 222.587016][ T8188] which lock already depends on the new lock. [ 222.587016][ T8188] [ 222.587022][ T8188] [ 222.587022][ T8188] the existing dependency chain (in reverse order) is: [ 222.587027][ T8188] [ 222.587027][ T8188] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 222.587047][ T8188] _raw_spin_lock_nested+0x31/0x40 [ 222.587065][ T8188] raw_spin_rq_lock_nested+0x29/0x130 [ 222.587084][ T8188] task_rq_lock+0xcf/0x490 [ 222.587103][ T8188] cgroup_move_task+0x81/0x2a0 [ 222.587124][ T8188] css_set_move_task+0x288/0x5f0 [ 222.587138][ T8188] cgroup_post_fork+0x201/0x9e0 [ 222.587157][ T8188] copy_process+0x5cfa/0x7690 [ 222.587179][ T8188] kernel_clone+0xfc/0x930 [ 222.587198][ T8188] user_mode_thread+0xc7/0x110 [ 222.587219][ T8188] rest_init+0x23/0x2b0 [ 222.587242][ T8188] start_kernel+0x3ee/0x4d0 [ 222.587261][ T8188] x86_64_start_reservations+0x18/0x30 [ 222.587280][ T8188] x86_64_start_kernel+0x130/0x190 [ 222.587299][ T8188] common_startup_64+0x13e/0x148 [ 222.587317][ T8188] [ 222.587317][ T8188] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 222.587337][ T8188] _raw_spin_lock_irqsave+0x3a/0x60 [ 222.587354][ T8188] try_to_wake_up+0xb7/0x1870 [ 222.587372][ T8188] __wake_up_common+0x135/0x1f0 [ 222.587411][ T8188] __wake_up+0x31/0x60 [ 222.587430][ T8188] tty_port_default_wakeup+0x2a/0x40 [ 222.587453][ T8188] serial8250_tx_chars+0x68e/0x860 [ 222.587475][ T8188] serial8250_handle_irq+0x761/0xcb0 [ 222.587497][ T8188] serial8250_default_handle_irq+0x9a/0x250 [ 222.587521][ T8188] serial8250_interrupt+0xf5/0x1b0 [ 222.587544][ T8188] __handle_irq_event_percpu+0x22c/0x7d0 [ 222.587564][ T8188] handle_irq_event+0xab/0x1e0 [ 222.587582][ T8188] handle_edge_irq+0x3ca/0x9e0 [ 222.587600][ T8188] __common_interrupt+0xcd/0x2f0 [ 222.587621][ T8188] common_interrupt+0xba/0xe0 [ 222.587650][ T8188] asm_common_interrupt+0x26/0x40 [ 222.587666][ T8188] pv_native_safe_halt+0xf/0x20 [ 222.587684][ T8188] default_idle+0x13/0x20 [ 222.587705][ T8188] default_idle_call+0x6d/0xb0 [ 222.587727][ T8188] do_idle+0x391/0x510 [ 222.587745][ T8188] cpu_startup_entry+0x4f/0x60 [ 222.587764][ T8188] start_secondary+0x21d/0x2b0 [ 222.587787][ T8188] common_startup_64+0x13e/0x148 [ 222.587804][ T8188] [ 222.587804][ T8188] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 222.587824][ T8188] _raw_spin_lock_irqsave+0x3a/0x60 [ 222.587841][ T8188] __wake_up+0x1c/0x60 [ 222.587860][ T8188] tty_port_default_wakeup+0x2a/0x40 [ 222.587880][ T8188] serial8250_tx_chars+0x68e/0x860 [ 222.587901][ T8188] serial8250_handle_irq+0x761/0xcb0 [ 222.587923][ T8188] serial8250_default_handle_irq+0x9a/0x250 [ 222.587946][ T8188] serial8250_interrupt+0xf5/0x1b0 [ 222.587969][ T8188] __handle_irq_event_percpu+0x22c/0x7d0 [ 222.587989][ T8188] handle_irq_event+0xab/0x1e0 [ 222.588006][ T8188] handle_edge_irq+0x3ca/0x9e0 [ 222.588023][ T8188] __common_interrupt+0xcd/0x2f0 [ 222.588044][ T8188] common_interrupt+0xba/0xe0 [ 222.588067][ T8188] asm_common_interrupt+0x26/0x40 [ 222.588082][ T8188] pv_native_safe_halt+0xf/0x20 [ 222.588100][ T8188] default_idle+0x13/0x20 [ 222.588121][ T8188] default_idle_call+0x6d/0xb0 [ 222.588143][ T8188] do_idle+0x391/0x510 [ 222.588160][ T8188] cpu_startup_entry+0x4f/0x60 [ 222.588178][ T8188] start_secondary+0x21d/0x2b0 [ 222.588199][ T8188] common_startup_64+0x13e/0x148 [ 222.588216][ T8188] [ 222.588216][ T8188] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 222.588236][ T8188] _raw_spin_lock_irqsave+0x3a/0x60 [ 222.588253][ T8188] serial8250_console_write+0x181/0x1890 [ 222.588276][ T8188] console_flush_all+0x801/0xc60 [ 222.588294][ T8188] console_unlock+0xd8/0x210 [ 222.588312][ T8188] vprintk_emit+0x418/0x6d0 [ 222.588330][ T8188] _printk+0xc7/0x100 [ 222.588342][ T8188] register_console+0xc2d/0x11b0 [ 222.588361][ T8188] univ8250_console_init+0x5f/0x90 [ 222.588382][ T8188] console_init+0x14f/0x680 [ 222.588401][ T8188] start_kernel+0x29f/0x4d0 [ 222.588418][ T8188] x86_64_start_reservations+0x18/0x30 [ 222.588437][ T8188] x86_64_start_kernel+0x130/0x190 [ 222.588455][ T8188] common_startup_64+0x13e/0x148 [ 222.588472][ T8188] [ 222.588472][ T8188] -> #0 (console_owner){-.-.}-{0:0}: [ 222.588492][ T8188] __lock_acquire+0x12a6/0x1ce0 [ 222.588516][ T8188] lock_acquire+0x179/0x350 [ 222.588529][ T8188] console_lock_spinning_enable+0xb0/0xd0 [ 222.588548][ T8188] console_flush_all+0x7aa/0xc60 [ 222.588565][ T8188] console_unlock+0xd8/0x210 [ 222.588582][ T8188] vprintk_emit+0x418/0x6d0 [ 222.588601][ T8188] _printk+0xc7/0x100 [ 222.588613][ T8188] should_fail_ex+0x4e7/0x640 [ 222.588632][ T8188] strncpy_from_user+0x3b/0x2e0 [ 222.588653][ T8188] strncpy_from_user_nofault+0x7f/0x180 [ 222.588673][ T8188] bpf_bprintf_prepare+0xe90/0x13f0 [ 222.588698][ T8188] bpf_trace_printk+0xda/0x190 [ 222.588712][ T8188] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 222.588724][ T8188] bpf_trace_run2+0x236/0x590 [ 222.588740][ T8188] __bpf_trace_contention_begin+0xc9/0x110 [ 222.588764][ T8188] trace_contention_begin.constprop.0+0xde/0x160 [ 222.588782][ T8188] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 222.588802][ T8188] do_raw_spin_lock+0x20e/0x2b0 [ 222.588818][ T8188] raw_spin_rq_lock_nested+0x7e/0x130 [ 222.588837][ T8188] __schedule+0x307/0x5de0 [ 222.588853][ T8188] schedule+0xe7/0x3a0 [ 222.588869][ T8188] exit_to_user_mode_loop+0x67/0x110 [ 222.588885][ T8188] do_syscall_64+0x41c/0x4e0 [ 222.588906][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.588921][ T8188] [ 222.588921][ T8188] other info that might help us debug this: [ 222.588921][ T8188] [ 222.588925][ T8188] Chain exists of: [ 222.588925][ T8188] console_owner --> &p->pi_lock --> &rq->__lock [ 222.588925][ T8188] [ 222.588947][ T8188] Possible unsafe locking scenario: [ 222.588947][ T8188] [ 222.588952][ T8188] CPU0 CPU1 [ 222.588956][ T8188] ---- ---- [ 222.588961][ T8188] lock(&rq->__lock); [ 222.588970][ T8188] lock(&p->pi_lock); [ 222.588981][ T8188] lock(&rq->__lock); [ 222.588991][ T8188] lock(console_owner); [ 222.589001][ T8188] [ 222.589001][ T8188] *** DEADLOCK *** [ 222.589001][ T8188] [ 222.589004][ T8188] 4 locks held by syz.5.581/8188: [ 222.589014][ T8188] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 222.589053][ T8188] #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 222.589090][ T8188] #2: ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 222.589124][ T8188] #3: ffffffff8e5af070 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 222.589163][ T8188] [ 222.589163][ T8188] stack backtrace: [ 222.589171][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.5.581 Not tainted syzkaller #0 PREEMPT(full) [ 222.589190][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.589200][ T8188] Call Trace: [ 222.589205][ T8188] [ 222.589211][ T8188] dump_stack_lvl+0x116/0x1f0 [ 222.589233][ T8188] print_circular_bug+0x275/0x350 [ 222.589258][ T8188] check_noncircular+0x14c/0x170 [ 222.589286][ T8188] __lock_acquire+0x12a6/0x1ce0 [ 222.589315][ T8188] lock_acquire+0x179/0x350 [ 222.589330][ T8188] ? console_lock_spinning_enable+0x9f/0xd0 [ 222.589351][ T8188] ? console_lock_spinning_enable+0x88/0xd0 [ 222.589373][ T8188] console_lock_spinning_enable+0xb0/0xd0 [ 222.589392][ T8188] ? console_lock_spinning_enable+0x9f/0xd0 [ 222.589412][ T8188] console_flush_all+0x7aa/0xc60 [ 222.589434][ T8188] ? __pfx_console_flush_all+0x10/0x10 [ 222.589457][ T8188] ? is_printk_cpu_sync_owner+0x32/0x40 [ 222.589482][ T8188] console_unlock+0xd8/0x210 [ 222.589501][ T8188] ? __pfx_console_unlock+0x10/0x10 [ 222.589521][ T8188] ? do_raw_spin_unlock+0xa0/0x230 [ 222.589540][ T8188] ? _printk+0xc7/0x100 [ 222.589554][ T8188] ? __down_trylock_console_sem+0xb0/0x140 [ 222.589572][ T8188] vprintk_emit+0x418/0x6d0 [ 222.589593][ T8188] ? __pfx_vprintk_emit+0x10/0x10 [ 222.589614][ T8188] ? rb_read_data_buffer.constprop.0+0x18c/0x430 [ 222.589646][ T8188] ? __pfx_bpf_trace_run2+0x10/0x10 [ 222.589665][ T8188] _printk+0xc7/0x100 [ 222.589680][ T8188] ? __pfx__printk+0x10/0x10 [ 222.589695][ T8188] ? __bpf_trace_contention_begin+0xc9/0x110 [ 222.589722][ T8188] ? __pfx____ratelimit+0x10/0x10 [ 222.589747][ T8188] should_fail_ex+0x4e7/0x640 [ 222.589768][ T8188] strncpy_from_user+0x3b/0x2e0 [ 222.589788][ T8188] strncpy_from_user_nofault+0x7f/0x180 [ 222.589809][ T8188] bpf_bprintf_prepare+0xe90/0x13f0 [ 222.589836][ T8188] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 222.589861][ T8188] ? lock_acquire+0x179/0x350 [ 222.589876][ T8188] ? find_held_lock+0x2b/0x80 [ 222.589898][ T8188] ? bpf_trace_run2+0x3e1/0x590 [ 222.589915][ T8188] bpf_trace_printk+0xda/0x190 [ 222.589930][ T8188] ? __pfx_bpf_trace_printk+0x10/0x10 [ 222.589948][ T8188] ? bpf_trace_run2+0x3e1/0x590 [ 222.589969][ T8188] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 222.589983][ T8188] bpf_trace_run2+0x236/0x590 [ 222.590000][ T8188] ? __pfx_bpf_trace_run2+0x10/0x10 [ 222.590022][ T8188] __bpf_trace_contention_begin+0xc9/0x110 [ 222.590048][ T8188] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 222.590075][ T8188] ? __pfx__kstrtoull+0x10/0x10 [ 222.590092][ T8188] ? irqentry_exit+0x3b/0x90 [ 222.590116][ T8188] trace_contention_begin.constprop.0+0xde/0x160 [ 222.590135][ T8188] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 222.590158][ T8188] ? __lock_acquire+0xb97/0x1ce0 [ 222.590183][ T8188] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 222.590209][ T8188] do_raw_spin_lock+0x20e/0x2b0 [ 222.590228][ T8188] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 222.590246][ T8188] ? rcu_qs+0x2b/0xe0 [ 222.590265][ T8188] ? rcu_note_context_switch+0x192/0x1e00 [ 222.590288][ T8188] raw_spin_rq_lock_nested+0x7e/0x130 [ 222.590309][ T8188] ? schedule+0xe7/0x3a0 [ 222.590326][ T8188] __schedule+0x307/0x5de0 [ 222.590345][ T8188] ? ksys_write+0x190/0x250 [ 222.590366][ T8188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.590389][ T8188] ? __pfx___schedule+0x10/0x10 [ 222.590407][ T8188] ? __fget_files+0x20e/0x3c0 [ 222.590427][ T8188] ? fput+0x9b/0xd0 [ 222.590448][ T8188] ? ksys_write+0x1ac/0x250 [ 222.590466][ T8188] schedule+0xe7/0x3a0 [ 222.590484][ T8188] exit_to_user_mode_loop+0x67/0x110 [ 222.590502][ T8188] do_syscall_64+0x41c/0x4e0 [ 222.590525][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.590542][ T8188] RIP: 0033:0x7f761c18d97f [ 222.590554][ T8188] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 222.590570][ T8188] RSP: 002b:00007f761d0a2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 222.590586][ T8188] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 00007f761c18d97f [ 222.590596][ T8188] RDX: 0000000000000001 RSI: 00007f761d0a2090 RDI: 0000000000000007 [ 222.590607][ T8188] RBP: 00007f761d0a2090 R08: 0000000000000000 R09: 00007f761d0a1df7 [ 222.590617][ T8188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 222.590627][ T8188] R13: 00007f761c3e6218 R14: 00007f761c3e6180 R15: 00007ffed232aee8 [ 222.590648][ T8188] [ 223.766287][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.5.581 Not tainted syzkaller #0 PREEMPT(full) [ 223.766307][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.766316][ T8188] Call Trace: [ 223.766321][ T8188] [ 223.766327][ T8188] dump_stack_lvl+0x116/0x1f0 [ 223.766350][ T8188] should_fail_ex+0x512/0x640 [ 223.766369][ T8188] strncpy_from_user+0x3b/0x2e0 [ 223.766391][ T8188] strncpy_from_user_nofault+0x7f/0x180 [ 223.766409][ T8188] bpf_bprintf_prepare+0xe90/0x13f0 [ 223.766434][ T8188] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 223.766455][ T8188] ? lock_acquire+0x179/0x350 [ 223.766469][ T8188] ? find_held_lock+0x2b/0x80 [ 223.766489][ T8188] ? bpf_trace_run2+0x3e1/0x590 [ 223.766503][ T8188] bpf_trace_printk+0xda/0x190 [ 223.766516][ T8188] ? __pfx_bpf_trace_printk+0x10/0x10 [ 223.766530][ T8188] ? bpf_trace_run2+0x3e1/0x590 [ 223.766547][ T8188] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 223.766558][ T8188] bpf_trace_run2+0x236/0x590 [ 223.766572][ T8188] ? __pfx_bpf_trace_run2+0x10/0x10 [ 223.766589][ T8188] __bpf_trace_contention_begin+0xc9/0x110 [ 223.766613][ T8188] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 223.766635][ T8188] ? __pfx__kstrtoull+0x10/0x10 [ 223.766650][ T8188] ? irqentry_exit+0x3b/0x90 [ 223.766669][ T8188] trace_contention_begin.constprop.0+0xde/0x160 [ 223.766685][ T8188] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 223.766705][ T8188] ? __lock_acquire+0xb97/0x1ce0 [ 223.766726][ T8188] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 223.766749][ T8188] do_raw_spin_lock+0x20e/0x2b0 [ 223.766764][ T8188] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.766779][ T8188] ? rcu_qs+0x2b/0xe0 [ 223.766794][ T8188] ? rcu_note_context_switch+0x192/0x1e00 [ 223.766812][ T8188] raw_spin_rq_lock_nested+0x7e/0x130 [ 223.766829][ T8188] ? schedule+0xe7/0x3a0 [ 223.766843][ T8188] __schedule+0x307/0x5de0 [ 223.766858][ T8188] ? ksys_write+0x190/0x250 [ 223.766877][ T8188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.766897][ T8188] ? __pfx___schedule+0x10/0x10 [ 223.766911][ T8188] ? __fget_files+0x20e/0x3c0 [ 223.766927][ T8188] ? fput+0x9b/0xd0 [ 223.766945][ T8188] ? ksys_write+0x1ac/0x250 [ 223.766960][ T8188] schedule+0xe7/0x3a0 [ 223.766975][ T8188] exit_to_user_mode_loop+0x67/0x110 [ 223.766989][ T8188] do_syscall_64+0x41c/0x4e0 [ 223.767010][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.767024][ T8188] RIP: 0033:0x7f761c18d97f [ 223.767035][ T8188] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 223.767048][ T8188] RSP: 002b:00007f761d0a2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 223.767062][ T8188] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 00007f761c18d97f [ 223.767070][ T8188] RDX: 0000000000000001 RSI: 00007f761d0a2090 RDI: 0000000000000007 [ 223.767079][ T8188] RBP: 00007f761d0a2090 R08: 0000000000000000 R09: 00007f761d0a1df7 [ 223.767087][ T8188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 223.767095][ T8188] R13: 00007f761c3e6218 R14: 00007f761c3e6180 R15: 00007ffed232aee8 [ 223.767109][ T8188] [ 224.305763][ T5908] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 224.319903][ T5908] usb 4-1: config 1 has no interface number 0 [ 224.326606][ T5908] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 224.338541][ T5908] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 224.351108][ T5908] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 224.415638][ T5908] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 224.506469][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.514983][ T5908] usb 4-1: Product: syz [ 224.519306][ T5908] usb 4-1: Manufacturer: syz [ 224.525103][ T5908] usb 4-1: SerialNumber: syz [ 224.532161][ T8180] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.658029][ T5908] usb 4-1: Error in usbnet_get_endpoints (-71) [ 224.671032][ T5908] usb 4-1: USB disconnect, device number 18 [ 226.579873][ T5862] Bluetooth: hci5: command 0x0406 tx timeout