last executing test programs: 14.452174323s ago: executing program 1 (id=1489): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}}, '\b\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) read(r6, 0x0, 0x0) 12.656357628s ago: executing program 1 (id=1493): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000], 0x2, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0x1, 0x1000, &(0x7f00002ad000/0x1000)=nil}) pipe2$9p(&(0x7f00000000c0), 0x80000) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48094) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setopts(0x4200, r6, 0x9, 0x798b3f7ed9697b29) io_submit(r0, 0x0, &(0x7f0000000180)) io_cancel(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x800, 0xffffffffffffffff, &(0x7f00000003c0)="8bbc737c056b901468e8eed7de86ed8cecd9fd13e1172afdc0dc69f8bf7b25a6f9fb46482b37bc2837ec46d596ee4605a88e68d30863baf283c1d67930f35bd71d114c5e209007b63ca2a7792c3c54138174c11e9e4e46c2aeeb30e782406567ad976bad2dd7e49916c9c1240352aebf6f93705438e00bc79eb97753cf60fe6c7a2764dfcf9175cea22558a31503b60d0d1e0dd10eb497cc03c9b5ccc51b7bcc415e746bb97f0f2b3393f6231a9f6e322b38f026af9593d2d4167c48a4c5417573315966f98560dbd20327127ceddbc661a24b756cb627", 0xd7, 0x1, 0x0, 0x2, r5}, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000100)=""/106, 0xffffff39) r7 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x905040) read$hidraw(r7, &(0x7f0000000100)=""/106, 0xffffff39) 12.496202024s ago: executing program 2 (id=1495): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xc, @mcast1, 0x8}, 0x18) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x40000000, 0x32314d48, 0x1, @stepwise={0x1, 0x5, 0xa089, 0xc17, 0x10001, 0x9}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000002000000000000000004009500000000000000009980262197f9e670be39c29f229038adcca5f1d3b1ca78c6c22e7a9c3c8d2c1ee50cd30c4fbc2741213c89dfee4f65ff0780996d69006da742c155c2db32c4101444aef4c6e1986ac57df45a0b1debd283626523ec3b64247e453845608a6d3cfa01c765ce295737297b44c81ff28ccd1390bd0da7f74b12e17b153fb657517ec2f551767473001223ea318ead5b64dc513d52d27a6007cabb3ff80903788c8fafdae0e5f8a20324264776b6218a5d92399250fda2c3ad0e07ec8e9a1e735c73ba0c2a2b04a89f4149c1da"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000800)=0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x820901) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 11.965671469s ago: executing program 3 (id=1498): socket$igmp(0x2, 0x3, 0x2) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x1}, 0x0, 0x0, 0x4}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x7, 0x6, 0x1089}) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x10002) r2 = getpid() syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x5f, 0xf4, 0x8a, 0x40, 0x5ac, 0x219, 0x8b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xc, 0x1, 0x0, 0x6, [{{0x9, 0x4, 0x68, 0x5, 0x3, 0x3, 0x93, 0x2, 0x9, [], [{{0x9, 0x5, 0x9, 0x4, 0x8, 0x0, 0x2, 0x1}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x9, 0x2, 0xf}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x1, 0x4, 0x81}}]}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8891) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000200, 0x0, 0x0, 0x400000000230, 0x400000000260], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) 10.619516886s ago: executing program 1 (id=1501): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c091}, 0x0) mount(0x0, 0x0, 0x0, 0x10005, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000540)={@l2={0x1f, 0xfff7, @none, 0x0, 0x1}, {&(0x7f0000000440)=""/168, 0xa8}, &(0x7f0000000500), 0x41}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512da90b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d53319d0ad229e5752548300000000dbc2777df1509516f06f1330cf8c3a8b1ff72e6127b0dd488318b5790bee7ebd4745b7cdd77b85b941092314fd085f028f4e09d63781987af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede3faedc51d29a47fc813ce3d32cfc7a504c271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d04ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b57479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0ef94234db1f00000000000000c20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b35f421c3552772ca7f3e2c25a65f75ca13fb7c8bbd6ff43cb78b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41aad8bda74d66f47cc17d8ba3eec0fd80f82c5f573c6d294d366505000000da0fde0745db06753a7ac7fe13cab6692422a46e9ffe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000170a0103000000000000000002"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20300000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x2b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x37, 0x7b}}}}, [@NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d8, 0x11d, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x6, 0x0, 0xc4ce1fd3130e2205, 0x1, 0x30, 0x4, 0x2, 0x6, 0x1, 0xc, 0x50, 0x30, 0x1, 0x0, 0x3, 0x12, 0x48, 0x30, 0x3, 0x12, 0x3, 0x3, 0x18, 0x3]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0xb, 0x36, 0x16, 0x18, 0x1, 0x16, 0x3, 0x18, 0x6c, 0x6, 0x1c, 0x18, 0x16, 0x1b, 0x1b, 0x3, 0x3, 0x30, 0x30, 0x5]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {0x0, 0x3}, {0x5, 0x3}, {0x6, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x7, 0x6}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x3}, {0x4, 0x6}, {0x4}, {0x4, 0x1}, {0x2, 0x8}, {0x5, 0x7}, {0x5, 0x2}, {0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {}, {0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0x9}, {}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x6}, {0x3, 0x8}, {0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x2}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{}, {0x0, 0x3}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2, 0x4}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x4, 0x3}, {0x1, 0x6}, {0x7, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x4}, {0x5, 0x6}, {0x2}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x2}, {0x2, 0x9}, {0x6, 0x4}, {0x3, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x1}, {0x4, 0x3}, {0x3, 0x9}, {0x1}, {0x2, 0x4}, {0x6, 0x4}, {0x7, 0x8}, {0x2}, {0x7, 0x5}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x1b}, {0x7, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x93}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x24000050}, 0x4084408) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 10.617666163s ago: executing program 0 (id=1502): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x414002, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) rt_sigprocmask(0x3, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x82000a18) rmdir(&(0x7f0000001c00)='./control\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r4, &(0x7f00000000c0)=""/75, 0x4b) r5 = socket(0x1e, 0x4, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x85) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3fc, 0x0, 0x4, 0xaec}, 0x10) close(0x3) 10.103265518s ago: executing program 2 (id=1504): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000000}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}, 0x1c) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600040001ff7f00000000000003003e00ecffffff9402"], 0x78) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1004050, 0x0) 9.651499714s ago: executing program 2 (id=1505): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100), 0x0) 9.446696565s ago: executing program 0 (id=1506): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000380)=""/228, 0xe4}], 0x2, &(0x7f0000000240)}, 0x1ff}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0xbd}, {{&(0x7f00000005c0)=@ax25={{0x3, @rose}, [@netrom, @rose, @default, @remote, @rose, @netrom, @null, @bcast]}, 0x80, &(0x7f0000000e40)=[{&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/150, 0x96}, {&(0x7f0000000800)=""/92, 0x5c}, {&(0x7f0000000d40)=""/117, 0x75}, {&(0x7f0000000dc0)=""/72, 0x48}], 0x5}, 0x8}], 0x3, 0x0, &(0x7f0000000300)={0x0, 0x3938700}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 8.257322246s ago: executing program 0 (id=1508): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0x10f}, {&(0x7f0000000300)="e5e9d0416b5da5e3f397a9a075f28469c5c5b0670a31006b56b9cf02f9f2af9df6b86cb0f7dd36cb255f695f9c2e40c17a6e8185646c163e7f25b2b9f3253ac32e029331af72353d71c6fc9d879a6f6710af70913eedb71ef01f308639f610317d0ebc081a9a6ce5268fc469324897df2cd1252ebd974c66f038e7171a7d89fb62449b50cf552f5d45009bf3d7b8170781a575b8f91432b38e0c816cd2", 0x9d}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) socket$inet_udp(0x2, 0x2, 0x0) 8.223503305s ago: executing program 4 (id=1509): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080) 6.469678772s ago: executing program 4 (id=1510): msgget$private(0x0, 0xafb0e20fef6483ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff9) add_key$keyring(0x0, &(0x7f0000000c40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6.455684491s ago: executing program 3 (id=1511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 6.170355691s ago: executing program 3 (id=1512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000400)='./bus\x00', 0x0) 5.399944556s ago: executing program 1 (id=1513): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x8a25, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x8, 0x5, 0x5, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004040000000000000000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff) 5.397885586s ago: executing program 4 (id=1514): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup2(0xf0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0x3) mq_unlink(&(0x7f0000000080)='eth0\x00') close(0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x208000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000480)={0x0, 0x800, 0x8}, 0xc) 4.109541288s ago: executing program 1 (id=1515): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff000000060040150024003648695df199f5b0ba001fc411a0b598bc593ab6821148a730cc825f307c33a49868c62b2ca654a6613b6aabaa6839cf2a9b1a4b5a1cc29cd349ace50d8ed694e778b96e21f979be99759d1fb21407a12ccbb90b9bb83f617e4c09117e82ce7a4c55f5dd3c76ea0da038b91cabcf6226f9c9923e4523762fc13be5c5b1736f8efb6f783dc80afdf2d6e84a4e921734fbe762621d9f5505b8590fbdfbe3b9eef446eba6050ab14f016ced02687d1893aa5422ff0ea3e747ce764be22afdd25aa2252b7b749f5556ced974e7cb8da2b0c537ac70676f079648f1859a7e0c3b08b022e7dd25cf313a6b27f3361fb6", 0x10f}, {&(0x7f0000000300)="e5e9d0416b5da5e3f397a9a075f28469c5c5b0670a31006b56b9cf02f9f2af9df6b86cb0f7dd36cb255f695f9c2e40c17a6e8185646c163e7f25b2b9f3253ac32e029331af72353d71c6fc9d879a6f", 0x4f}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 4.014002615s ago: executing program 3 (id=1516): msgget$private(0x0, 0xafb0e20fef6483ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff9) add_key$keyring(0x0, &(0x7f0000000c40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.978272369s ago: executing program 0 (id=1517): r0 = syz_open_dev$swradio(&(0x7f0000001e40), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001e80)={0xb, @vbi={0x101, 0x101, 0x7, 0x3447504d, [0x4, 0x7], [0x7, 0xd], 0x108}}) (fail_nth: 2) 3.113993344s ago: executing program 4 (id=1518): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/160, 0xa0}], 0x1}, 0xbd}, {{&(0x7f00000005c0)=@ax25={{0x3, @rose}, [@netrom, @rose, @default, @remote, @rose, @netrom, @null, @bcast]}, 0x80, &(0x7f0000000e40)=[{&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/150, 0x96}, {&(0x7f0000000800)=""/92, 0x5c}, {&(0x7f0000000d40)=""/117, 0x75}, {&(0x7f0000000dc0)=""/72, 0x48}], 0x5}, 0x8}], 0x2, 0x0, &(0x7f0000000300)={0x0, 0x3938700}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 3.101825236s ago: executing program 0 (id=1519): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0x10f}, {&(0x7f0000000300)="e5e9d0416b5da5e3f397a9a075f28469c5c5b0670a31006b56b9cf02f9f2af9df6b86cb0f7dd36cb255f695f9c2e40c17a6e8185646c163e7f25b2b9f3253ac32e029331af72353d71c6fc9d879a6f6710af70913eedb71ef01f308639f610317d0ebc081a9a6ce5268fc469324897df2cd1252ebd97", 0x76}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 2.941936698s ago: executing program 4 (id=1520): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = inotify_init() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x1}, 0xffffff2d) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) 2.339946379s ago: executing program 1 (id=1521): socket$igmp(0x2, 0x3, 0x2) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x1}, 0x0, 0x0, 0x4}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x7, 0x6, 0x1089}) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x10002) r2 = getpid() syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x5f, 0xf4, 0x8a, 0x40, 0x5ac, 0x219, 0x8b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xc, 0x1, 0x0, 0x6, [{{0x9, 0x4, 0x68, 0x5, 0x3, 0x3, 0x93, 0x2, 0x9, [], [{{0x9, 0x5, 0x9, 0x4, 0x8, 0x0, 0x2, 0x1}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x9, 0x2, 0xf}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x1, 0x4, 0x81}}]}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8891) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000200, 0x0, 0x0, 0x400000000230, 0x400000000260], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) 1.893276571s ago: executing program 2 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9f"}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='fscache_invalidate\x00', r3, 0x0, 0x14f}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$clear(0x7, r4) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x4}}, 0x9) syz_emit_vhci(0x0, 0xb1) ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f00000003c0)={0x4, 0x28, [0x7, 0x3, 0x6, 0x4], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}) fsetxattr$security_evm(r5, &(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="028407d1c300002c3ae45d6c9c5a"], 0xe, 0x3) syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff96075cdedb31d118846f189b4cc3f7ffff86dd60a24b9f00302b00fe8000000000000000000000000000bbfe800000000000000002021f00000000f829ea02339166b04d71e657b9df62de1642d762e43bddfe88000000000000000000000000000100000000001890780400"], 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00164271528a8cc459e953f74f10900000b21a9ffa6f56dcca948501056a915442853f4e492a6335a2d3e5a3fb478ab7a94d270dfe9ffdd5ba5a1dc06742c641f86598c247d107fac1c3d8", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf252d00000008002f000300000008002f0011010000"], 0x24}}, 0x40004) r9 = fsmount(r6, 0x0, 0x85) fchdir(r9) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') landlock_restrict_self(r5, 0x0) 1.87447036s ago: executing program 0 (id=1523): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0xb, 0x2, {0x2, 0x24}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.647079883s ago: executing program 3 (id=1524): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x40000) futimesat(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f00000001c0), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfe00}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000c1) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) accept4(r2, 0x0, &(0x7f0000000100), 0x80800) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) lseek(r5, 0x1, 0x0) getdents(r5, 0x0, 0x48) semctl$GETPID(0x0, 0x0, 0xb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x11, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xa80, 0x36, &(0x7f0000000300)=""/54, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x2, 0x8, 0x4}, 0x10, 0x0, r5, 0x0, &(0x7f00000004c0)=[r5], 0x0, 0x10, 0x6, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.469288954s ago: executing program 2 (id=1525): pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0x33308000, 0xffff1000, 0xd, 0x6, 0x1, 0xa, 0xdb, 0x4, 0x0, 0x8, 0x5a}, {0x0, 0x8080000, 0xb, 0x6, 0x3, 0x82, 0x8, 0x3e, 0x6, 0x0, 0xf, 0x8}, {0x8080000, 0x4, 0x10, 0x5b, 0xff, 0x3, 0x1, 0xfe, 0xa1, 0x1, 0x2b, 0x5}, {0x10000, 0xdddd1000, 0x0, 0x7, 0x16, 0x40, 0x3, 0x9, 0x3, 0x7f, 0x0, 0x6}, {0xeeef0000, 0x5000, 0x1f, 0xfb, 0xaa, 0x1, 0x71, 0x0, 0x6, 0x8, 0x14, 0x9}, {0x3000, 0xe6e40000, 0x9, 0x1, 0xf6, 0xb, 0x2, 0x2d, 0x2, 0xfc, 0xde, 0x2}, {0xf000, 0xeeef5000, 0xe, 0xe, 0x2, 0x9, 0x7, 0x0, 0x4, 0xa0, 0x6, 0x8}, {0xffff1000, 0x8080000, 0x0, 0x5, 0x3, 0xff, 0x2, 0x0, 0x2, 0x7, 0xb, 0x8}, {0x2, 0xaa6d}, {0x1000, 0x1}, 0x80000000, 0x0, 0x8080000, 0x566081, 0x6, 0x2801, 0xeeef0000, [0x0, 0x6, 0x80000000, 0x9]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000041303e2200000000000000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x7, "6b733cde7cd2b4a636f622c5ab77d398e85d9ccedff5d44b71ae4298f4757c20", 0x2, 0x0, 0x4, 0x400000, 0x1010234, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x5, &(0x7f0000000000)={0xdfaf, 0xd12}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0x3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0xf, 0xc65d, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x9}) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000400)={&(0x7f00000003c0)=""/42, 0x2a}) mq_unlink(&(0x7f0000000080)='eth0\x00') close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='-\\/\x00\x00\x00\x00\x00\x00\x00\x00']) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x208000, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x3b1040, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000340)=0x10000, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000480)={0x0, 0x800, 0x8}, 0xc) 454.961309ms ago: executing program 2 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x18b801, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003a40)=""/4105, 0x1009}, {&(0x7f0000000140)=""/86, 0x56}], 0x4}, 0x1801}, {{&(0x7f0000000480)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000005a80)=""/83, 0x53}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000002700)=""/238, 0xee}], 0x4, &(0x7f0000002800)=""/129, 0x81}, 0x5}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/16, 0x10}], 0x2, &(0x7f0000000600)}, 0x4}], 0x3, 0x120, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) io_setup(0x7ff, &(0x7f0000000680)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r5, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, r7, {0x8a}}, 0x18) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) 29.542236ms ago: executing program 3 (id=1527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003a40)=""/4105, 0x1009}, {&(0x7f0000000140)=""/86, 0x56}], 0x4}, 0x1801}, {{&(0x7f0000000480)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000005a80)=""/83, 0x53}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000002700)=""/238, 0xee}], 0x4, &(0x7f0000002800)=""/129, 0x81}, 0x5}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/16, 0x10}], 0x2, &(0x7f0000000600)}, 0x4}], 0x3, 0x120, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r5, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, r7, {0x8a}}, 0x18) dup(r6) 0s ago: executing program 4 (id=1528): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x44080) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) kernel console output (not intermixed with test programs): e="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 427.824785][ T30] audit: type=1326 audit(1745933193.551:654): auid=4294967295 uid=0 gid=538976288 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10288 comm="syz.4.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 428.096144][T10312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.309868][ T972] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 428.470351][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 428.484580][ T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 428.684715][T10312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.709504][ T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 428.737901][T10318] veth19: entered promiscuous mode [ 428.743092][T10318] veth19: entered allmulticast mode [ 428.751953][T10319] mkiss: ax0: crc mode is auto. [ 428.759965][ T972] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 428.813519][ T5913] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 428.825367][ T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 428.852928][ T5913] usb 2-1: USB disconnect, device number 36 [ 428.865194][ T972] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 428.875501][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.898897][ T972] usb 1-1: Product: syz [ 428.911012][ T972] usb 1-1: Manufacturer: syz [ 428.916693][T10312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.921885][ T972] usb 1-1: SerialNumber: syz [ 428.999551][ T972] usb 1-1: config 0 descriptor?? [ 429.406650][ T5913] usb 1-1: USB disconnect, device number 36 [ 429.461769][T10312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.637900][T10312] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.690293][T10312] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.746317][T10312] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.774060][T10312] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.193464][T10341] FAULT_INJECTION: forcing a failure. [ 430.193464][T10341] name failslab, interval 1, probability 0, space 0, times 0 [ 430.238891][T10341] CPU: 0 UID: 0 PID: 10341 Comm: syz.1.1252 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 430.238917][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 430.238926][T10341] Call Trace: [ 430.238932][T10341] [ 430.238938][T10341] dump_stack_lvl+0x16c/0x1f0 [ 430.238962][T10341] should_fail_ex+0x512/0x640 [ 430.238981][T10341] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 430.239010][T10341] should_failslab+0xc2/0x120 [ 430.239031][T10341] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 430.239055][T10341] ? __mpol_dup+0x74/0x380 [ 430.239077][T10341] __mpol_dup+0x74/0x380 [ 430.239095][T10341] ? __pfx___mpol_dup+0x10/0x10 [ 430.239121][T10341] mbind_range+0x2ad/0x570 [ 430.239143][T10341] __do_sys_set_mempolicy_home_node+0x458/0x780 [ 430.239171][T10341] ? __pfx___do_sys_set_mempolicy_home_node+0x10/0x10 [ 430.239195][T10341] ? find_held_lock+0x2b/0x80 [ 430.239224][T10341] ? rcu_is_watching+0x12/0xc0 [ 430.239245][T10341] do_syscall_64+0xcd/0x260 [ 430.239265][T10341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.239281][T10341] RIP: 0033:0x7f1ff978e969 [ 430.239295][T10341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.239310][T10341] RSP: 002b:00007f1ffa51b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 430.239325][T10341] RAX: ffffffffffffffda RBX: 00007f1ff99b5fa0 RCX: 00007f1ff978e969 [ 430.239335][T10341] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 430.239343][T10341] RBP: 00007f1ffa51b090 R08: 0000000000000000 R09: 0000000000000000 [ 430.239353][T10341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.239361][T10341] R13: 0000000000000000 R14: 00007f1ff99b5fa0 R15: 00007ffdcf172d88 [ 430.239383][T10341] [ 430.753106][ T3454] Bluetooth: hci5: Frame reassembly failed (-84) [ 432.025918][T10360] syz.3.1256: attempt to access beyond end of device [ 432.025918][T10360] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 432.038893][T10360] qnx4: unable to read the superblock [ 432.289921][ T5869] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 432.449939][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 432.459204][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.470436][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 432.481633][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.497578][ T5869] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 432.555748][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.566856][ T5869] usb 2-1: Product: syz [ 432.573424][ T5869] usb 2-1: Manufacturer: syz [ 432.578067][ T5869] usb 2-1: SerialNumber: syz [ 432.580988][ T5913] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 432.590923][ T5869] usb 2-1: config 0 descriptor?? [ 432.709898][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 432.709984][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 432.729634][T10342] sp0: Synchronizing with TNC [ 432.762056][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.773589][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.786086][ T5913] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 432.796103][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.809586][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 432.809598][ T30] audit: type=1326 audit(1745933199.905:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff978e969 code=0x7ffc0000 [ 432.839472][ T972] usb 2-1: USB disconnect, device number 37 [ 432.849476][ T5913] usb 3-1: config 0 descriptor?? [ 432.859553][ T30] audit: type=1326 audit(1745933199.905:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff978e969 code=0x7ffc0000 [ 432.870605][ T5869] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 433.042599][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 433.049527][ T5869] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 433.060100][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.076358][ T5869] usb 4-1: config 0 descriptor?? [ 433.201889][ T5869] gspca_main: sunplus-2.14.0 probing 041e:400b [ 433.436440][T10371] input: syz1 as /devices/virtual/input/input27 [ 434.510245][ T5869] gspca_sunplus: reg_r err -110 [ 434.677466][ T5869] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 435.047938][ T972] usb 4-1: USB disconnect, device number 33 [ 435.096619][T10389] xt_l2tp: missing protocol rule (udp|l2tpip) [ 435.136649][T10391] __nla_validate_parse: 33 callbacks suppressed [ 435.136660][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.409626][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.419223][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.430003][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.439504][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.448946][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.458381][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.467983][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.477485][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 435.486937][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 436.119894][ T5824] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 436.349046][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 436.357232][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 436.359852][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 436.503949][ T5913] usb 3-1: USB disconnect, device number 46 [ 436.512587][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.527324][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.555877][ T5824] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 436.580364][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.598212][ T5824] usb 1-1: Product: syz [ 436.612743][ T5824] usb 1-1: Manufacturer: syz [ 436.617373][ T5824] usb 1-1: SerialNumber: syz [ 436.639888][ T5870] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 436.648510][ T5824] usb 1-1: config 0 descriptor?? [ 436.672932][ T5824] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 436.682142][T10411] overlayfs: workdir and upperdir must be separate subtrees [ 436.689864][ T5824] gspca_stv06xx: st6422 sensor detected [ 437.249943][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 437.256870][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 437.269417][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 437.281275][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.297699][ T5870] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 437.308226][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.353337][ T5870] usb 5-1: Product: syz [ 437.360011][ T910] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 437.381376][ T5870] usb 5-1: Manufacturer: syz [ 437.381511][ T5870] usb 5-1: SerialNumber: syz [ 437.389986][ T5870] usb 5-1: config 0 descriptor?? [ 437.531684][ T910] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 437.541475][ T910] usb 4-1: config 0 has no interface number 0 [ 437.547619][ T910] usb 4-1: config 0 interface 29 has no altsetting 0 [ 437.558574][ T910] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 437.568326][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.582301][ T910] usb 4-1: Product: syz [ 437.586536][ T910] usb 4-1: Manufacturer: syz [ 437.591689][ T910] usb 4-1: SerialNumber: syz [ 437.599053][ T910] usb 4-1: config 0 descriptor?? [ 437.636615][ T5870] usb 5-1: USB disconnect, device number 41 [ 437.716166][ T30] audit: type=1326 audit(1745933204.735:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 437.746397][ T30] audit: type=1326 audit(1745933204.735:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 437.827070][T10426] FAULT_INJECTION: forcing a failure. [ 437.827070][T10426] name failslab, interval 1, probability 0, space 0, times 0 [ 437.840060][T10426] CPU: 0 UID: 0 PID: 10426 Comm: syz.2.1279 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 437.840083][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 437.840092][T10426] Call Trace: [ 437.840097][T10426] [ 437.840104][T10426] dump_stack_lvl+0x16c/0x1f0 [ 437.840127][T10426] should_fail_ex+0x512/0x640 [ 437.840153][T10426] should_failslab+0xc2/0x120 [ 437.840171][T10426] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 437.840198][T10426] ? __alloc_skb+0x2b2/0x380 [ 437.840225][T10426] __alloc_skb+0x2b2/0x380 [ 437.840248][T10426] ? __pfx___alloc_skb+0x10/0x10 [ 437.840273][T10426] ? find_held_lock+0x2b/0x80 [ 437.840294][T10426] ? br_fdb_find+0xe4/0x240 [ 437.840315][T10426] fdb_notify+0xa4/0x1a0 [ 437.840334][T10426] br_fdb_external_learn_add+0x5f3/0x7d0 [ 437.840359][T10426] __br_fdb_add+0x133/0xd90 [ 437.840384][T10426] br_fdb_add+0x769/0xe30 [ 437.840411][T10426] ? __pfx_br_fdb_add+0x10/0x10 [ 437.840436][T10426] ? __nla_parse+0x40/0x60 [ 437.840462][T10426] rtnl_fdb_add+0x4bc/0xac0 [ 437.840478][T10426] ? __pfx_br_fdb_add+0x10/0x10 [ 437.840499][T10426] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 437.840526][T10426] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 437.840543][T10426] ? rtnl_get_link+0x1a0/0x320 [ 437.840566][T10426] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 437.840582][T10426] rtnetlink_rcv_msg+0x3c6/0xe90 [ 437.840610][T10426] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.840638][T10426] ? __lock_acquire+0xaa4/0x1ba0 [ 437.840669][T10426] netlink_rcv_skb+0x16a/0x440 [ 437.840687][T10426] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.840719][T10426] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.840734][T10426] ? find_held_lock+0x2b/0x80 [ 437.840774][T10426] netlink_unicast+0x53a/0x7f0 [ 437.840794][T10426] ? __pfx_netlink_unicast+0x10/0x10 [ 437.840819][T10426] netlink_sendmsg+0x8d1/0xdd0 [ 437.840840][T10426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.840868][T10426] ____sys_sendmsg+0xa95/0xc70 [ 437.840888][T10426] ? copy_msghdr_from_user+0x10a/0x160 [ 437.840911][T10426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.840943][T10426] ___sys_sendmsg+0x134/0x1d0 [ 437.840969][T10426] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.841025][T10426] __sys_sendmsg+0x16d/0x220 [ 437.841050][T10426] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.841082][T10426] ? rcu_is_watching+0x12/0xc0 [ 437.841108][T10426] do_syscall_64+0xcd/0x260 [ 437.841130][T10426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.841147][T10426] RIP: 0033:0x7f536a58e969 [ 437.841161][T10426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.841176][T10426] RSP: 002b:00007f536b32a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.841192][T10426] RAX: ffffffffffffffda RBX: 00007f536a7b6160 RCX: 00007f536a58e969 [ 437.841203][T10426] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 437.841213][T10426] RBP: 00007f536b32a090 R08: 0000000000000000 R09: 0000000000000000 [ 437.841223][T10426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.841234][T10426] R13: 0000000000000000 R14: 00007f536a7b6160 R15: 00007ffe1f5d49d8 [ 437.841258][T10426] [ 438.289081][ T5824] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 438.308156][ T5824] usb 1-1: USB disconnect, device number 37 [ 438.345470][ T910] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v161 fw v202.51.111 (2 channels) [ 438.567009][ T910] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 438.584345][ T910] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 438.618027][ T910] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 438.778466][ T910] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 438.809014][ T910] usb 4-1: USB disconnect, device number 34 [ 439.583487][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.589894][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.821087][T10451] syzkaller0: entered promiscuous mode [ 439.827922][T10451] syzkaller0: entered allmulticast mode [ 440.616314][T10463] __nla_validate_parse: 28 callbacks suppressed [ 440.616331][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 440.873382][ T5911] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 441.033272][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 441.047191][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 441.063847][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 441.080257][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.106848][ T5911] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 441.115992][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.128562][ T5911] usb 4-1: Product: syz [ 441.140199][ T5911] usb 4-1: Manufacturer: syz [ 441.144823][ T5911] usb 4-1: SerialNumber: syz [ 441.164721][ T5911] usb 4-1: config 0 descriptor?? [ 441.397085][ T30] audit: type=1326 audit(1745933208.495:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.3.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 441.398612][ T910] usb 4-1: USB disconnect, device number 35 [ 441.433425][ T30] audit: type=1326 audit(1745933208.495:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.3.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 442.109237][ T910] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 442.709663][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.733446][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.752797][ T910] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 442.764035][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.776717][ T910] usb 3-1: config 0 descriptor?? [ 442.830043][ T5911] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 442.939964][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 442.949964][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 442.978029][T10467] sp0: Synchronizing with TNC [ 442.990176][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 442.999384][ T5911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 443.007100][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.018586][ T5911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.030679][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.045027][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.059702][ T5911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 443.075111][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.119219][ T5911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.131325][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.144059][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.158039][ T5911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 443.171322][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.292294][ T5911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.307669][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.321751][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.521803][ T910] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71 [ 443.858179][ T5911] usb 1-1: string descriptor 0 read error: -22 [ 443.868875][ T5911] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.872814][ T910] usb 3-1: USB disconnect, device number 47 [ 443.878003][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.939436][ T5911] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 444.303079][ T5913] usb 1-1: USB disconnect, device number 38 [ 444.510797][ T5911] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 444.799875][ T30] audit: type=1400 audit(1745933211.755:712): avc: denied { bind } for pid=10500 comm="syz.4.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 444.821197][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.839844][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.849577][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.900816][ T5911] usb 3-1: config 0 descriptor?? [ 444.941880][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 445.299834][T10508] FAULT_INJECTION: forcing a failure. [ 445.299834][T10508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.313209][T10508] CPU: 0 UID: 0 PID: 10508 Comm: syz.4.1305 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 445.313233][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 445.313241][T10508] Call Trace: [ 445.313244][T10508] [ 445.313248][T10508] dump_stack_lvl+0x16c/0x1f0 [ 445.313266][T10508] should_fail_ex+0x512/0x640 [ 445.313283][T10508] _copy_to_user+0x32/0xd0 [ 445.313299][T10508] simple_read_from_buffer+0xcb/0x170 [ 445.313316][T10508] proc_fail_nth_read+0x197/0x270 [ 445.313332][T10508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.313349][T10508] ? rw_verify_area+0xcf/0x680 [ 445.313362][T10508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.313378][T10508] vfs_read+0x1de/0xc70 [ 445.313395][T10508] ? __pfx___mutex_lock+0x10/0x10 [ 445.313412][T10508] ? __pfx_vfs_read+0x10/0x10 [ 445.313431][T10508] ? __fget_files+0x20e/0x3c0 [ 445.313452][T10508] ksys_read+0x12a/0x240 [ 445.313466][T10508] ? __pfx_ksys_read+0x10/0x10 [ 445.313486][T10508] do_syscall_64+0xcd/0x260 [ 445.313499][T10508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.313510][T10508] RIP: 0033:0x7f134738d37c [ 445.313519][T10508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 445.313529][T10508] RSP: 002b:00007f134816f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.313539][T10508] RAX: ffffffffffffffda RBX: 00007f13475b6080 RCX: 00007f134738d37c [ 445.313546][T10508] RDX: 000000000000000f RSI: 00007f134816f0a0 RDI: 0000000000000005 [ 445.313552][T10508] RBP: 00007f134816f090 R08: 0000000000000000 R09: 0000000000000000 [ 445.313559][T10508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.313565][T10508] R13: 0000000000000000 R14: 00007f13475b6080 R15: 00007ffd8aa15e38 [ 445.313578][T10508] [ 445.619101][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.647685][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.777440][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 445.809191][T10522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1309'. [ 445.825256][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 445.833695][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 446.418861][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 446.500045][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 446.545936][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 446.568220][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 446.587964][T10526] delete_channel: no stack [ 446.634638][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 446.634999][ T5831] Bluetooth: hci0: unexpected event for opcode 0x041c [ 446.936760][ T5911] pwc: recv_control_msg error -32 req 04 val 1500 [ 446.940226][ T30] audit: type=1400 audit(1745933214.035:713): avc: denied { create } for pid=10532 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 446.946026][ T5911] pwc: recv_control_msg error -32 req 02 val 2500 [ 446.977996][ T5911] pwc: recv_control_msg error -32 req 02 val 2400 [ 447.230412][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 447.264645][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 447.285773][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 447.301592][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 447.370620][ T5911] pwc: Registered as video103. [ 447.775285][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 448.145188][T10549] veth11: entered promiscuous mode [ 448.150379][T10549] veth11: entered allmulticast mode [ 448.631189][T10549] mkiss: ax0: crc mode is auto. [ 448.746582][ T5911] usb 3-1: USB disconnect, device number 48 [ 450.065194][T10570] Illegal XDP return value 4294967274 on prog (id 208) dev N/A, expect packet loss! [ 450.429901][ T5824] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 450.637725][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.648176][ T5870] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 450.759923][ T5831] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 450.759987][ T5831] Bluetooth: hci0: Injecting HCI hardware error event [ 450.761609][ T5831] Bluetooth: hci0: hardware error 0x00 [ 450.838440][ T5824] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 450.864142][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.895353][ T5824] usb 2-1: config 0 descriptor?? [ 450.911477][ T5824] pwc: Askey VC010 type 2 USB webcam detected. [ 450.981691][ T5870] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 451.096548][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 451.282423][ T5870] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 451.296151][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.305187][ T5870] usb 4-1: Product: syz [ 451.309366][ T5870] usb 4-1: Manufacturer: syz [ 451.318300][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.332116][ T5870] usb 4-1: SerialNumber: syz [ 451.344645][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.355085][ T5870] usb 4-1: config 0 descriptor?? [ 451.368696][ T5824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 451.376187][ T5824] pwc: recv_control_msg error -32 req 02 val 2700 [ 451.383830][ T5824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 451.405756][ T5824] pwc: recv_control_msg error -32 req 04 val 1000 [ 451.420253][ T5870] usb 4-1: selecting invalid altsetting 0 [ 451.431029][ T5824] pwc: recv_control_msg error -32 req 04 val 1300 [ 451.449285][ T5824] pwc: recv_control_msg error -32 req 04 val 1400 [ 451.468958][ T5824] pwc: recv_control_msg error -32 req 02 val 2000 [ 451.484177][ T5824] pwc: recv_control_msg error -32 req 02 val 2100 [ 451.508384][ T5824] pwc: recv_control_msg error -32 req 04 val 1500 [ 451.526998][ T5824] pwc: recv_control_msg error -32 req 02 val 2500 [ 451.640080][ T30] audit: type=1400 audit(1745933218.735:714): avc: denied { execute } for pid=10578 comm="syz.3.1325" path="/dev/snd/pcmC3D0p" dev="devtmpfs" ino=3459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 451.641435][ T5870] usb 4-1: USB disconnect, device number 36 [ 451.738046][T10552] geneve0: entered allmulticast mode [ 451.798188][ T5824] pwc: recv_control_msg error -71 req 02 val 2600 [ 451.812484][ T5824] pwc: recv_control_msg error -71 req 02 val 2900 [ 451.819651][ T5824] pwc: recv_control_msg error -71 req 02 val 2800 [ 451.827200][ T5824] pwc: recv_control_msg error -71 req 04 val 1100 [ 451.836890][ T5824] pwc: recv_control_msg error -71 req 04 val 1200 [ 451.860757][ T5824] pwc: Registered as video103. [ 451.886030][ T5824] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 451.925120][ T5824] usb 2-1: USB disconnect, device number 38 [ 451.973253][ T5806] udevd[5806]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 452.006150][ T30] audit: type=1400 audit(1745933219.105:715): avc: denied { sqpoll } for pid=10600 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 452.047614][ T30] audit: type=1400 audit(1745933219.145:716): avc: denied { create } for pid=10600 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 452.069398][ T30] audit: type=1400 audit(1745933219.145:717): avc: denied { write } for pid=10600 comm="syz.0.1331" path="socket:[27280]" dev="sockfs" ino=27280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 452.094348][ T30] audit: type=1400 audit(1745933219.145:718): avc: denied { nlmsg_read } for pid=10600 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 452.210566][ T5911] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 452.376967][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.399484][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 452.417531][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.438830][ T5911] usb 5-1: config 0 descriptor?? [ 452.473739][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 453.379707][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 453.388884][T10621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.397342][ T30] audit: type=1400 audit(1745933220.415:719): avc: denied { map } for pid=10603 comm="syz.2.1332" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 453.789017][T10621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.971933][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 453.984006][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 453.991731][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 453.998890][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 454.009244][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 454.019154][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 454.087739][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1337'. [ 454.096973][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1337'. [ 454.339899][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 454.366674][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 454.386885][ T5911] pwc: recv_control_msg error -32 req 04 val 1500 [ 454.407653][ T5911] pwc: recv_control_msg error -32 req 02 val 2500 [ 454.503078][ T5911] pwc: recv_control_msg error -32 req 02 val 2400 [ 454.712121][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 454.784885][ T5871] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 454.792853][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 454.800299][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 454.807111][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 454.814667][ T5911] pwc: Registered as video103. [ 454.821689][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 454.867372][ T5911] usb 5-1: USB disconnect, device number 42 [ 454.961839][ T5871] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.974648][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 454.984743][ T5871] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.994021][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.003265][ T5871] usb 1-1: Product: syz [ 455.007450][ T5871] usb 1-1: Manufacturer: syz [ 455.012369][ T5871] usb 1-1: SerialNumber: syz [ 455.018681][ T5871] usb 1-1: config 0 descriptor?? [ 455.026839][ T5871] usb 1-1: selecting invalid altsetting 0 [ 455.199842][ T910] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 455.255768][ T5824] usb 1-1: USB disconnect, device number 39 [ 455.382201][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 455.563074][ T910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.669247][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 455.679204][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 455.688984][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 455.700483][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 455.710164][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 455.719908][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 455.729713][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 456.049074][ T910] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 456.469941][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.485357][ T910] usb 4-1: config 0 descriptor?? [ 456.497342][ T910] pwc: Askey VC010 type 2 USB webcam detected. [ 456.638971][ T5870] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 456.682369][T10660] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.800178][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 456.844537][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.896960][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.930236][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.019302][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.045802][ T5870] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 457.094841][ T910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 457.109010][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.147453][ T910] pwc: recv_control_msg error -32 req 02 val 2700 [ 457.159448][ T5870] usb 3-1: Product: syz [ 457.167203][T10660] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.167856][ T5870] usb 3-1: Manufacturer: syz [ 457.193707][ T910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 457.207071][ T5870] usb 3-1: SerialNumber: syz [ 457.212635][ T910] pwc: recv_control_msg error -32 req 04 val 1000 [ 457.220668][ T910] pwc: recv_control_msg error -32 req 04 val 1300 [ 457.228120][ T5870] usb 3-1: config 0 descriptor?? [ 457.228912][T10660] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.238737][ T910] pwc: recv_control_msg error -32 req 04 val 1400 [ 457.254341][ T5870] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 457.261518][ T5870] gspca_stv06xx: st6422 sensor detected [ 457.267350][ T910] pwc: recv_control_msg error -32 req 02 val 2000 [ 457.274603][ T910] pwc: recv_control_msg error -32 req 02 val 2100 [ 457.281604][ T910] pwc: recv_control_msg error -32 req 04 val 1500 [ 457.288393][ T910] pwc: recv_control_msg error -32 req 02 val 2500 [ 457.297420][T10660] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.403278][T10660] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.428564][T10660] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.441638][ T30] audit: type=1400 audit(1745933224.545:720): avc: denied { bind } for pid=10667 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 457.475034][T10660] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.703098][ T910] pwc: recv_control_msg error -71 req 02 val 2600 [ 457.711775][ T910] pwc: recv_control_msg error -71 req 02 val 2900 [ 457.718812][T10660] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.935339][ T30] audit: type=1400 audit(1745933225.005:721): avc: denied { lock } for pid=10667 comm="syz.1.1349" path="socket:[28553]" dev="sockfs" ino=28553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 458.162138][ T910] pwc: recv_control_msg error -71 req 02 val 2800 [ 458.169254][ T910] pwc: recv_control_msg error -71 req 04 val 1100 [ 458.176233][ T910] pwc: recv_control_msg error -71 req 04 val 1200 [ 458.185441][ T910] pwc: Registered as video103. [ 458.192172][ T910] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 458.214823][ T910] usb 4-1: USB disconnect, device number 37 [ 458.596660][ T30] audit: type=1326 audit(1745933225.695:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 458.628358][ T30] audit: type=1326 audit(1745933225.695:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 458.675065][ T30] audit: type=1326 audit(1745933225.715:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 458.729931][ T5913] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 458.855791][ T30] audit: type=1326 audit(1745933225.715:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 459.035271][T10689] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 459.517930][T10691] syz.3.1355: attempt to access beyond end of device [ 459.517930][T10691] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 459.530749][T10691] qnx4: unable to read the superblock [ 459.739317][ T5870] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 459.750039][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 459.759205][ T30] audit: type=1326 audit(1745933225.715:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 459.785778][ T5870] usb 3-1: USB disconnect, device number 49 [ 459.838405][ T30] audit: type=1326 audit(1745933225.715:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 459.865498][ T5913] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 459.968576][ T30] audit: type=1326 audit(1745933225.715:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 459.986104][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.000501][ T30] audit: type=1326 audit(1745933225.715:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.4.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 460.748661][ T5913] usb 2-1: config 0 descriptor?? [ 460.777299][ T5913] gspca_main: sunplus-2.14.0 probing 041e:400b [ 460.821109][T10703] virtiofs: Unknown parameter 'always0000000 0 [ 460.821109][T10703] 20 batadv0 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 21 vxcan0 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 22 vxcan1 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 23 veth0 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 24 veth1 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 25 wg0 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 26 wg1 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 27 wg2 : 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 28 veth0_to_bridge: 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 29 bridge_slave_0: 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 30 veth1_to_bridge: 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 31 bridge_slave_1: 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 32 veth0_to_bond: 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 33 bond_slave_0: 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 34 veth1_to_bond: 1 V3 [ 460.821109][T10703] 010000E0 1 0:00000000 0 [ 460.821109][T10703] 35 bond_slave_1: [ 460.825178][T10703] __nla_validate_parse: 36 callbacks suppressed [ 460.825194][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 461.050214][ T5870] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 461.055094][T10708] netlink: 9713 bytes leftover after parsing attributes in process `syz.3.1361'. [ 461.077692][T10708] openvswitch: netlink: Flow key attr not present in new flow. [ 461.212609][ T5870] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 461.227129][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 461.236392][ T5870] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 461.259092][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.268380][ T5870] usb 3-1: Product: syz [ 461.273464][ T5870] usb 3-1: Manufacturer: syz [ 461.278069][ T5870] usb 3-1: SerialNumber: syz [ 461.291892][ T5870] usb 3-1: config 0 descriptor?? [ 461.306703][ T5870] usb 3-1: selecting invalid altsetting 0 [ 461.319365][T10720] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 461.320245][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 461.342998][T10720] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1365'. [ 461.516941][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.554442][ T5870] usb 3-1: USB disconnect, device number 50 [ 461.579103][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 461.671548][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 461.753909][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.769876][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.041096][ T5913] gspca_sunplus: reg_r err -110 [ 462.049902][ T5913] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 462.265998][ T5913] usb 2-1: USB disconnect, device number 39 [ 462.274924][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.989842][ T972] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 462.997652][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 463.138073][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 463.138089][ T30] audit: type=1400 audit(1745933230.235:766): avc: denied { write } for pid=10707 comm="syz.3.1361" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 463.250284][ T972] usb 5-1: device descriptor read/64, error -32 [ 463.289250][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.298171][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 463.319503][ T24] usb 4-1: USB disconnect, device number 38 [ 463.532687][ T972] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 463.609889][ T30] audit: type=1400 audit(1745933230.705:767): avc: denied { read } for pid=10740 comm="syz.1.1372" path="socket:[28766]" dev="sockfs" ino=28766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.703324][ T5913] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 463.804161][ T972] usb 5-1: Using ep0 maxpacket: 8 [ 463.840096][ T972] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.001305][ T972] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 464.024304][ T972] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.137427][ T972] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.169549][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.180736][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.190696][ T972] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.206257][T10747] veth21: entered promiscuous mode [ 464.211443][T10747] veth21: entered allmulticast mode [ 464.650854][ T5913] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 464.661130][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.669130][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.725593][ T5913] usb 1-1: config 0 descriptor?? [ 465.714453][ T972] usb 5-1: usb_control_msg returned -71 [ 465.964776][ T972] usbtmc 5-1:16.0: can't read capabilities [ 466.028254][ T972] usb 5-1: USB disconnect, device number 44 [ 466.298734][T10764] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 466.389402][T10764] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1377'. [ 466.513141][T10772] input: syz1 as /devices/virtual/input/input33 [ 466.609969][ T5870] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 466.703927][ T30] audit: type=1326 audit(1745933233.675:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 467.292623][ T5870] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.09 [ 467.320941][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.332480][ T30] audit: type=1326 audit(1745933233.675:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 467.356218][ T5870] usb 3-1: Product: syz [ 467.376212][ T5870] usb 3-1: Manufacturer: syz [ 467.402013][ T5870] usb 3-1: SerialNumber: syz [ 467.460825][ T30] audit: type=1326 audit(1745933233.675:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 467.504491][ T30] audit: type=1326 audit(1745933233.675:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 467.505120][ T5870] usb 3-1: config 0 descriptor?? [ 467.531823][ T30] audit: type=1326 audit(1745933233.675:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 467.576813][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.594152][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.624529][ T30] audit: type=1326 audit(1745933233.675:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 467.654529][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.712037][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.719187][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.785387][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.798870][ T30] audit: type=1326 audit(1745933233.675:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 467.859712][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.872927][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.890097][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.923672][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.932761][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.948717][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 467.968874][ T30] audit: type=1326 audit(1745933233.685:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5cca7907fc code=0x7ffc0000 [ 468.012633][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.021494][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 468.049241][ T5913] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x0 [ 468.085112][T10778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.101060][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.132745][ T5913] hid-rmi 0003:0461:4E72.0006: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 468.161103][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.192095][ T30] audit: type=1326 audit(1745933233.685:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5cca790734 code=0x7ffc0000 [ 468.214412][ T5824] usb 3-1: USB disconnect, device number 51 [ 468.242915][ T30] audit: type=1326 audit(1745933233.685:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5cca790734 code=0x7ffc0000 [ 468.277242][ T30] audit: type=1326 audit(1745933233.685:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.305297][ T5870] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 468.315500][ T30] audit: type=1326 audit(1745933233.685:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.342176][ T30] audit: type=1326 audit(1745933233.685:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.369819][ T30] audit: type=1326 audit(1745933233.685:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.398244][ T30] audit: type=1326 audit(1745933233.685:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.425121][ T30] audit: type=1326 audit(1745933233.685:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.453507][ T30] audit: type=1326 audit(1745933233.685:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.477077][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 468.485972][ T5870] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 468.505568][ T5870] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 468.517171][ T5870] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 468.540767][ T30] audit: type=1326 audit(1745933233.685:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.3.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 468.582098][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 468.590306][ T5870] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 468.610721][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.614641][T10778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.681155][ T5870] usb 2-1: config 0 descriptor?? [ 468.843511][T10778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.124320][T10778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.386058][T10791] syz.2.1384: attempt to access beyond end of device [ 469.386058][T10791] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 469.399045][T10791] qnx4: unable to read the superblock [ 469.868079][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.876706][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.945054][T10778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.982844][T10778] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.011982][T10778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.099892][ T5913] usb 1-1: USB disconnect, device number 40 [ 470.159528][T10778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.378790][T10804] xt_l2tp: missing protocol rule (udp|l2tpip) [ 470.503422][T10808] veth15: entered promiscuous mode [ 470.508612][T10808] veth15: entered allmulticast mode [ 470.638360][T10808] mkiss: ax0: crc mode is auto. [ 471.110243][ T5824] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 471.536514][ T3557] Bluetooth: hci5: Frame reassembly failed (-84) [ 471.651591][T10824] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.734030][T10824] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.793992][T10824] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.145661][T10824] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.826888][T10843] syz.2.1395: attempt to access beyond end of device [ 472.826888][T10843] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 472.840145][T10843] qnx4: unable to read the superblock [ 472.979955][ T5871] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 473.165136][ T5871] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 473.196840][ T5871] usb 1-1: config 0 has no interface number 0 [ 473.259905][ T5870] usbhid 2-1:0.0: can't add hid device: -71 [ 473.265924][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 473.275907][ T5870] usb 2-1: USB disconnect, device number 40 [ 473.286859][ T5871] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 473.306441][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.317413][ T5871] usb 1-1: Product: syz [ 473.322931][ T5871] usb 1-1: Manufacturer: syz [ 473.327934][ T5871] usb 1-1: SerialNumber: syz [ 473.339424][ T5871] usb 1-1: config 0 descriptor?? [ 473.520787][T10846] veth13: entered promiscuous mode [ 473.525926][T10846] veth13: entered allmulticast mode [ 473.548003][ T5871] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 473.580003][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 473.619584][T10828] sp0: Synchronizing with TNC [ 473.690796][ T5871] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 473.699354][ T5871] dib0700: firmware download failed at 7 with -22 [ 473.948838][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.033012][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.028481][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 475.028495][ T30] audit: type=1326 audit(1745933242.125:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.061881][ T30] audit: type=1326 audit(1745933242.125:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.086305][ T30] audit: type=1326 audit(1745933242.165:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.236232][T10864] syzkaller0: entered promiscuous mode [ 475.241873][T10864] syzkaller0: entered allmulticast mode [ 475.247929][ T30] audit: type=1326 audit(1745933242.165:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.272576][ T30] audit: type=1326 audit(1745933242.165:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.285094][T10864] tmpfs: Unknown parameter 'grpquotaýÿÿÿ' [ 475.296567][ T30] audit: type=1326 audit(1745933242.195:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.326002][ T30] audit: type=1326 audit(1745933242.195:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.369285][ T30] audit: type=1326 audit(1745933242.195:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536a58e969 code=0x7ffc0000 [ 475.395685][ T30] audit: type=1326 audit(1745933242.215:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f536a5907fc code=0x7ffc0000 [ 475.626105][ T30] audit: type=1326 audit(1745933242.215:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f536a590734 code=0x7ffc0000 [ 476.009385][T10870] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 476.016009][T10870] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 476.028844][T10870] vhci_hcd vhci_hcd.0: Device attached [ 476.032727][T10871] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 476.040885][T10871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.057349][T10871] vhci_hcd vhci_hcd.0: Device attached [ 476.057946][T10870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.132973][T10875] vhci_hcd: connection closed [ 476.133240][ T3454] vhci_hcd: stop threads [ 476.149561][T10874] vhci_hcd: connection closed [ 476.150653][ T5871] usb 1-1: USB disconnect, device number 41 [ 476.162696][ T3454] vhci_hcd: release socket [ 476.196322][ T3454] vhci_hcd: disconnect device [ 476.201857][ T5870] vhci_hcd: vhci_device speed not set [ 476.224023][ T3454] vhci_hcd: stop threads [ 476.233340][ T3454] vhci_hcd: release socket [ 476.237872][ T3454] vhci_hcd: disconnect device [ 476.580881][ T5871] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 476.743620][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.754882][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.765056][ T5871] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 476.774345][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.785492][ T5871] usb 1-1: config 0 descriptor?? [ 477.104484][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 477.104559][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 477.268695][T10859] sp0: Synchronizing with TNC [ 477.323525][T10889] input: syz1 as /devices/virtual/input/input34 [ 477.417606][T10891] 9pnet_fd: Insufficient options for proto=fd [ 477.432071][T10824] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.487216][T10888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.497862][T10888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.551494][T10824] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.574318][T10824] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.602617][T10824] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.683001][T10888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.713300][T10888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.751439][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 477.758536][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 477.923288][ T5869] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 478.019422][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.100295][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.107346][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.149884][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.183820][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.208299][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.226959][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.241127][T10888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.256993][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.261704][T10888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 478.265119][ T5871] hid-rmi 0003:0461:4E72.0007: unknown main item tag 0x0 [ 478.383447][ T5871] hid-rmi 0003:0461:4E72.0007: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 478.384670][ T5869] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 478.433460][T10900] veth11: entered promiscuous mode [ 478.438597][T10900] veth11: entered allmulticast mode [ 478.460690][ T5869] usb 2-1: config 0 has no interface number 0 [ 478.486266][ T5869] usb 2-1: too many endpoints for config 0 interface 153 altsetting 48: 49, using maximum allowed: 30 [ 478.509572][ T5869] usb 2-1: config 0 interface 153 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 478.523068][ T5869] usb 2-1: config 0 interface 153 has no altsetting 0 [ 478.535630][ T5869] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 478.545298][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.546509][T10888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.564318][ T5869] usb 2-1: Product: syz [ 478.653450][ T5869] usb 2-1: Manufacturer: syz [ 478.660760][ T5869] usb 2-1: SerialNumber: syz [ 478.668579][T10888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 478.669561][ T5869] usb 2-1: config 0 descriptor?? [ 479.227193][T10907] veth17: entered promiscuous mode [ 479.232852][T10907] veth17: entered allmulticast mode [ 479.241954][T10908] mkiss: ax0: crc mode is auto. [ 479.398277][ T5913] usb 1-1: USB disconnect, device number 42 [ 479.513741][ T5869] sierra 2-1:0.153: Sierra USB modem converter detected [ 479.543611][ T5869] usb 2-1: USB disconnect, device number 41 [ 479.558206][ T5869] sierra 2-1:0.153: device disconnected [ 479.568577][T10888] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 479.583523][T10888] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.611104][T10888] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 479.623784][T10888] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.658870][T10888] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 479.667874][T10888] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.686569][T10888] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 479.698520][T10888] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 479.713472][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 479.815660][T10920] FAULT_INJECTION: forcing a failure. [ 479.815660][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 479.849200][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.2.1414 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 479.849229][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 479.849239][T10920] Call Trace: [ 479.849245][T10920] [ 479.849252][T10920] dump_stack_lvl+0x16c/0x1f0 [ 479.849279][T10920] should_fail_ex+0x512/0x640 [ 479.849300][T10920] ? __kmalloc_noprof+0xbf/0x510 [ 479.849328][T10920] ? io_cache_alloc_new+0x45/0xf0 [ 479.849351][T10920] should_failslab+0xc2/0x120 [ 479.849369][T10920] __kmalloc_noprof+0xd2/0x510 [ 479.849401][T10920] io_cache_alloc_new+0x45/0xf0 [ 479.849426][T10920] __io_prep_rw+0x227/0xf40 [ 479.849454][T10920] ? __pfx___io_prep_rw+0x10/0x10 [ 479.849480][T10920] ? mark_held_locks+0x49/0x80 [ 479.849507][T10920] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 479.849539][T10920] io_prep_rw+0x24/0x220 [ 479.849565][T10920] io_prep_writev+0x23/0xa0 [ 479.849582][T10920] io_submit_sqes+0x825/0x25d0 [ 479.849616][T10920] __do_sys_io_uring_enter+0xd6a/0x1630 [ 479.849639][T10920] ? __fget_files+0x20e/0x3c0 [ 479.849665][T10920] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 479.849688][T10920] ? fput+0x70/0xf0 [ 479.849706][T10920] ? ksys_write+0x1b9/0x240 [ 479.849730][T10920] ? __pfx_ksys_write+0x10/0x10 [ 479.849752][T10920] ? rcu_is_watching+0x12/0xc0 [ 479.849780][T10920] do_syscall_64+0xcd/0x260 [ 479.849802][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.849819][T10920] RIP: 0033:0x7f536a58e969 [ 479.849834][T10920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.849849][T10920] RSP: 002b:00007f536b36c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 479.849866][T10920] RAX: ffffffffffffffda RBX: 00007f536a7b5fa0 RCX: 00007f536a58e969 [ 479.849878][T10920] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 479.849887][T10920] RBP: 00007f536b36c090 R08: 0000000000000000 R09: 0000000000000000 [ 479.849898][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.849908][T10920] R13: 0000000000000000 R14: 00007f536a7b5fa0 R15: 00007ffe1f5d49d8 [ 479.849931][T10920] [ 480.095292][ T5913] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 480.145363][T10925] FAULT_INJECTION: forcing a failure. [ 480.145363][T10925] name failslab, interval 1, probability 0, space 0, times 0 [ 480.224770][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.234607][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.244296][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.253920][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.263544][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.274800][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.284500][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.294176][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.303879][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 480.523178][T10925] CPU: 1 UID: 0 PID: 10925 Comm: syz.4.1415 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 480.523205][T10925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 480.523215][T10925] Call Trace: [ 480.523221][T10925] [ 480.523229][T10925] dump_stack_lvl+0x16c/0x1f0 [ 480.523254][T10925] should_fail_ex+0x512/0x640 [ 480.523275][T10925] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 480.523301][T10925] should_failslab+0xc2/0x120 [ 480.523319][T10925] __kmalloc_cache_noprof+0x6a/0x3e0 [ 480.523343][T10925] ? drm_crtc_queue_sequence_ioctl+0x30a/0xa40 [ 480.523373][T10925] drm_crtc_queue_sequence_ioctl+0x30a/0xa40 [ 480.523404][T10925] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 480.523429][T10925] ? drm_dev_exit+0x41/0x60 [ 480.523450][T10925] drm_ioctl_kernel+0x1f1/0x3e0 [ 480.523474][T10925] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 480.523500][T10925] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 480.523533][T10925] drm_ioctl+0x5c9/0xc30 [ 480.523565][T10925] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 480.523591][T10925] ? __pfx_drm_ioctl+0x10/0x10 [ 480.523626][T10925] ? selinux_file_ioctl+0x180/0x270 [ 480.523651][T10925] ? selinux_file_ioctl+0xb4/0x270 [ 480.523675][T10925] ? __pfx_drm_ioctl+0x10/0x10 [ 480.523701][T10925] __x64_sys_ioctl+0x190/0x200 [ 480.523725][T10925] do_syscall_64+0xcd/0x260 [ 480.523747][T10925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.523765][T10925] RIP: 0033:0x7f134738e969 [ 480.523779][T10925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.523796][T10925] RSP: 002b:00007f1348190038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.523814][T10925] RAX: ffffffffffffffda RBX: 00007f13475b5fa0 RCX: 00007f134738e969 [ 480.523825][T10925] RDX: 0000200000000300 RSI: 00000000c00c643c RDI: 0000000000000003 [ 480.523835][T10925] RBP: 00007f1348190090 R08: 0000000000000000 R09: 0000000000000000 [ 480.523846][T10925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.523856][T10925] R13: 0000000000000000 R14: 00007f13475b5fa0 R15: 00007ffd8aa15e38 [ 480.523879][T10925] [ 480.742473][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.779509][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 480.795656][ T5913] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 480.815090][ T910] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 480.823443][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 480.875482][ T5913] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.926972][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 480.969533][ T910] usb 4-1: Using ep0 maxpacket: 16 [ 480.976392][ T910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.997307][ T910] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.021448][ T910] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 481.044502][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.068852][ T910] usb 4-1: Product: syz [ 481.076917][ T910] usb 4-1: Manufacturer: syz [ 481.078649][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.087439][ T910] usb 4-1: SerialNumber: syz [ 481.095412][ T5913] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 481.109464][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.129448][ T5913] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.143464][ T910] usb 4-1: config 0 descriptor?? [ 481.151304][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.157246][ T910] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 481.278206][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.293442][ T5913] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 481.305562][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.317222][ T5913] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.329278][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.340715][ T5913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.793164][ T910] gspca_stv06xx: st6422 sensor detected [ 481.871134][ T5913] usb 1-1: string descriptor 0 read error: -22 [ 481.877653][ T5913] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 481.885733][T10941] gre0: entered promiscuous mode [ 481.886793][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.904860][T10941] gre0: entered allmulticast mode [ 481.931775][ T5913] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 481.943352][T10941] batadv_slave_1: entered promiscuous mode [ 481.959636][T10940] batadv_slave_1: left promiscuous mode [ 482.169435][ T5869] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 482.320940][ T5913] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 482.329353][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 482.336943][ T5869] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 482.339314][ T5911] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 482.350350][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.370542][ T5869] usb 5-1: config 0 descriptor?? [ 482.388395][ T5869] gspca_main: sunplus-2.14.0 probing 041e:400b [ 482.482280][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.507054][ T5913] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 482.521072][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.533016][ T5911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.546894][ T5913] usb 2-1: config 0 descriptor?? [ 482.556159][ T5911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.575884][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 482.593571][ T5911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.604657][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.827006][ T5911] usb 3-1: usb_control_msg returned -32 [ 482.834523][ T5911] usbtmc 3-1:16.0: can't read capabilities [ 482.902842][ T910] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 482.925864][ T910] usb 4-1: USB disconnect, device number 39 [ 482.988183][T10945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.021588][T10945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.053184][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 483.080355][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 483.088831][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 483.109702][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 483.124408][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 483.137849][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 483.152308][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 483.161850][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 483.171387][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 483.185154][ T5913] pwc: recv_control_msg error -32 req 02 val 2500 [ 483.229977][ T5911] usb 1-1: USB disconnect, device number 43 [ 483.255440][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.331002][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.332176][T10952] veth13: entered promiscuous mode [ 483.345586][T10952] veth13: entered allmulticast mode [ 483.539774][ T5869] gspca_sunplus: reg_r err -110 [ 483.545285][ T5869] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 483.552096][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 483.718432][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 483.765813][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 483.775363][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 483.799162][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 483.820574][ T5913] pwc: Registered as video103. [ 483.838374][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 483.949608][ T5913] usb 2-1: USB disconnect, device number 42 [ 484.022603][ T5871] usb 5-1: USB disconnect, device number 45 [ 484.180879][T10956] veth9: entered promiscuous mode [ 484.186005][T10956] veth9: entered allmulticast mode [ 484.433754][T10968] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 484.433754][T10968] The task syz.1.1426 (10968) triggered the difference, watch for misbehavior. [ 484.439046][ T5869] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 484.454174][T10968] overlay: ./file0 is not a directory [ 484.624777][ T5869] usb 4-1: config 12 has an invalid interface number: 104 but max is 0 [ 484.633435][ T5869] usb 4-1: config 12 has no interface number 0 [ 484.643581][ T5869] usb 4-1: config 12 interface 104 has no altsetting 0 [ 484.652820][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 8.b0 [ 484.665894][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.676653][ T5869] usb 4-1: Product: syz [ 484.684515][ T5869] usb 4-1: Manufacturer: syz [ 484.698161][ T5869] usb 4-1: SerialNumber: syz [ 484.834627][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 484.834640][ T30] audit: type=1400 audit(1745933251.943:852): avc: denied { read } for pid=10977 comm="syz.0.1430" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 484.899226][ T30] audit: type=1400 audit(1745933251.973:853): avc: denied { open } for pid=10977 comm="syz.0.1430" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.723632][ T910] usb 3-1: USB disconnect, device number 53 [ 485.823495][T10997] FAULT_INJECTION: forcing a failure. [ 485.823495][T10997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.931053][T10997] CPU: 1 UID: 0 PID: 10997 Comm: syz.1.1434 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 485.931081][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 485.931091][T10997] Call Trace: [ 485.931097][T10997] [ 485.931104][T10997] dump_stack_lvl+0x16c/0x1f0 [ 485.931132][T10997] should_fail_ex+0x512/0x640 [ 485.931157][T10997] _copy_from_iter+0x2a4/0x15b0 [ 485.931181][T10997] ? avc_has_perm_noaudit+0x149/0x3b0 [ 485.931211][T10997] ? __pfx__copy_from_iter+0x10/0x10 [ 485.931231][T10997] ? avc_has_perm+0x11a/0x1c0 [ 485.931257][T10997] ? __pfx_avc_has_perm+0x10/0x10 [ 485.931289][T10997] ? is_bpf_text_address+0x94/0x1a0 [ 485.931306][T10997] ? kernel_text_address+0x8d/0x100 [ 485.931328][T10997] bcm_sendmsg+0x18c/0x4470 [ 485.931347][T10997] ? sock_has_perm+0x259/0x2f0 [ 485.931365][T10997] ? __pfx_sock_has_perm+0x10/0x10 [ 485.931387][T10997] ? __pfx_bcm_sendmsg+0x10/0x10 [ 485.931409][T10997] ? __might_fault+0xe3/0x190 [ 485.931424][T10997] ? __might_fault+0x13b/0x190 [ 485.931446][T10997] ____sys_sendmsg+0xa95/0xc70 [ 485.931466][T10997] ? copy_msghdr_from_user+0x10a/0x160 [ 485.931491][T10997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.931522][T10997] ___sys_sendmsg+0x134/0x1d0 [ 485.931548][T10997] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.931605][T10997] __sys_sendmsg+0x16d/0x220 [ 485.931630][T10997] ? __pfx___sys_sendmsg+0x10/0x10 [ 485.931662][T10997] ? rcu_is_watching+0x12/0xc0 [ 485.931689][T10997] do_syscall_64+0xcd/0x260 [ 485.931710][T10997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.931727][T10997] RIP: 0033:0x7f1ff978e969 [ 485.931740][T10997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.931756][T10997] RSP: 002b:00007f1ffa51b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.931774][T10997] RAX: ffffffffffffffda RBX: 00007f1ff99b5fa0 RCX: 00007f1ff978e969 [ 485.931785][T10997] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 485.931794][T10997] RBP: 00007f1ffa51b090 R08: 0000000000000000 R09: 0000000000000000 [ 485.931802][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.931811][T10997] R13: 0000000000000000 R14: 00007f1ff99b5fa0 R15: 00007ffdcf172d88 [ 485.931834][T10997] [ 486.165258][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.275546][T11003] __nla_validate_parse: 33 callbacks suppressed [ 486.275560][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 486.296655][T11003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1435'. [ 486.376580][T11006] syz.4.1433: attempt to access beyond end of device [ 486.376580][T11006] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 486.389458][T11006] qnx4: unable to read the superblock [ 486.566833][ T30] audit: type=1400 audit(1745933253.633:854): avc: denied { write } for pid=11004 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.586236][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.749041][ T30] audit: type=1400 audit(1745933253.633:855): avc: denied { read } for pid=11004 comm="syz.1.1437" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.769056][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.114309][T11017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.250871][ T5869] appletouch 4-1:12.104: Could not find int-in endpoint [ 487.268723][ T5869] appletouch 4-1:12.104: probe with driver appletouch failed with error -5 [ 487.290109][ T5869] usbhid 4-1:12.104: couldn't find an input interrupt endpoint [ 487.320277][ T5869] usb 4-1: USB disconnect, device number 40 [ 487.339373][ T5871] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 487.400636][ T30] audit: type=1400 audit(1745933254.503:856): avc: denied { setopt } for pid=11018 comm="syz.4.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 487.409120][T11020] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1443'. [ 487.443088][ T30] audit: type=1400 audit(1745933254.513:857): avc: denied { ioctl } for pid=11018 comm="syz.4.1443" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 487.472903][T11029] 9pnet_fd: Insufficient options for proto=fd [ 487.600220][ T5871] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 487.612140][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 487.624166][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 488.247899][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 488.339118][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.371865][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.401588][ T5871] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 488.417087][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.438509][ T5871] usb 1-1: Product: syz [ 488.442708][ T5871] usb 1-1: Manufacturer: syz [ 488.447286][ T5871] usb 1-1: SerialNumber: syz [ 488.471389][ T5871] usb 1-1: config 0 descriptor?? [ 488.477887][T11016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 488.512826][ T5871] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 488.532877][T11044] loop8: detected capacity change from 0 to 1 [ 488.555377][ T5833] Dev loop8: unable to read RDB block 1 [ 488.566328][ T30] audit: type=1400 audit(1745933255.673:858): avc: denied { append } for pid=11046 comm="syz.2.1452" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 488.566407][T11047] random: crng reseeded on system resumption [ 488.589443][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.597375][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 488.615561][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 488.616529][ T5833] loop8: unable to read partition table [ 488.638765][ T5833] loop8: partition table beyond EOD, truncated [ 488.715304][ T5871] usb 1-1: USB disconnect, device number 44 [ 488.792548][T11044] Dev loop8: unable to read RDB block 1 [ 488.807906][T11044] loop8: unable to read partition table [ 488.818685][T11044] loop8: partition table beyond EOD, truncated [ 488.829581][T11044] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 488.904198][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 488.914043][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 488.923858][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 488.933864][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 488.943437][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 489.656377][ T30] audit: type=1400 audit(1745933256.763:859): avc: denied { setopt } for pid=11062 comm="syz.3.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 490.248410][T10910] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 490.514178][ T972] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 491.125973][T10910] usb 5-1: config 12 has an invalid interface number: 104 but max is 0 [ 491.136573][T10910] usb 5-1: config 12 has no interface number 0 [ 491.229387][T10910] usb 5-1: config 12 interface 104 has no altsetting 0 [ 491.243359][T10910] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 8.b0 [ 491.252980][T10910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.273298][T10910] usb 5-1: Product: syz [ 491.283178][T10910] usb 5-1: Manufacturer: syz [ 491.292756][T10910] usb 5-1: SerialNumber: syz [ 491.338249][ T5870] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 491.451073][T11080] FAULT_INJECTION: forcing a failure. [ 491.451073][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 491.463911][T11080] CPU: 1 UID: 0 PID: 11080 Comm: syz.0.1461 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 491.463934][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 491.463944][T11080] Call Trace: [ 491.463960][T11080] [ 491.463966][T11080] dump_stack_lvl+0x16c/0x1f0 [ 491.463990][T11080] should_fail_ex+0x512/0x640 [ 491.464009][T11080] ? __kmalloc_noprof+0xbf/0x510 [ 491.464039][T11080] ? ovl_fh_to_dentry+0x718/0xa70 [ 491.464060][T11080] should_failslab+0xc2/0x120 [ 491.464077][T11080] __kmalloc_noprof+0xd2/0x510 [ 491.464100][T11080] ? do_handle_open+0x585/0xb70 [ 491.464128][T11080] ovl_fh_to_dentry+0x718/0xa70 [ 491.464148][T11080] ? __pfx_ovl_fh_to_dentry+0x10/0x10 [ 491.464163][T11080] ? __kasan_kmalloc+0xaa/0xb0 [ 491.464178][T11080] ? __kmalloc_noprof+0x223/0x510 [ 491.464194][T11080] ? do_handle_open+0x585/0xb70 [ 491.464208][T11080] ? do_syscall_64+0xcd/0x260 [ 491.464225][T11080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.464240][T11080] exportfs_decode_fh_raw+0x164/0x890 [ 491.464251][T11080] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 491.464267][T11080] ? __pfx_ovl_fh_to_dentry+0x10/0x10 [ 491.464283][T11080] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 491.464310][T11080] do_handle_open+0x75e/0xb70 [ 491.464326][T11080] ? __pfx_do_handle_open+0x10/0x10 [ 491.464344][T11080] ? ksys_write+0x1b9/0x240 [ 491.464364][T11080] ? do_syscall_64+0xcd/0x260 [ 491.464376][T11080] do_syscall_64+0xcd/0x260 [ 491.464389][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.464399][T11080] RIP: 0033:0x7fdb1fb8e969 [ 491.464409][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.464419][T11080] RSP: 002b:00007fdb20ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 491.464430][T11080] RAX: ffffffffffffffda RBX: 00007fdb1fdb5fa0 RCX: 00007fdb1fb8e969 [ 491.464436][T11080] RDX: 0000000000030000 RSI: 0000200000000140 RDI: 0000000000000003 [ 491.464443][T11080] RBP: 00007fdb20ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 491.464449][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.464455][T11080] R13: 0000000000000000 R14: 00007fdb1fdb5fa0 R15: 00007ffd5890b578 [ 491.464468][T11080] [ 491.464664][T11080] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-12) [ 491.538726][ T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.538752][ T972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 491.538793][ T972] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 491.538813][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.549198][ T972] usb 2-1: config 0 descriptor?? [ 491.569696][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 491.626084][ T5870] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 491.828166][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.836211][ T5870] usb 4-1: Product: syz [ 491.842454][ T5870] usb 4-1: Manufacturer: syz [ 491.847091][ T5870] usb 4-1: SerialNumber: syz [ 491.995268][T11086] veth0_vlan: left promiscuous mode [ 492.003440][T11086] veth0_vlan: entered promiscuous mode [ 492.595308][ T5870] usb 4-1: config 0 descriptor?? [ 492.619288][ T5871] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 492.625353][ T5870] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 492.934669][ T972] Bluetooth: Can't get state to change to load ram patch err [ 493.048956][ T972] Bluetooth: Loading patch file failed [ 493.066876][ T972] ath3k 2-1:0.0: probe with driver ath3k failed with error -32 [ 493.113158][T10910] appletouch 5-1:12.104: Could not find int-in endpoint [ 493.124843][ T972] usb 2-1: USB disconnect, device number 43 [ 493.132983][T10910] appletouch 5-1:12.104: probe with driver appletouch failed with error -5 [ 493.142255][T10910] usbhid 5-1:12.104: couldn't find an input interrupt endpoint [ 493.160184][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.164662][T10910] usb 5-1: USB disconnect, device number 46 [ 493.176549][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.220666][ T5871] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 493.231351][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.254631][ T5871] usb 3-1: config 0 descriptor?? [ 493.270320][T11096] overlayfs: workdir and upperdir must be separate subtrees [ 493.438233][ T5911] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 493.767437][T11082] input: syz1 as /devices/virtual/input/input37 [ 493.963520][ T972] usb 4-1: USB disconnect, device number 41 [ 493.979926][ T5911] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.993223][ T5911] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 494.009478][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 494.018864][T11103] __nla_validate_parse: 77 callbacks suppressed [ 494.018875][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.035469][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 494.043563][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.185699][ T5871] usb 3-1: USB disconnect, device number 54 [ 494.191875][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.281567][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.291507][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.302724][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.312403][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.322038][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.331687][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.341437][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.351117][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.360767][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 494.621766][T11093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.631700][ T5911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.198034][ T5911] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 495.307879][ T5871] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 495.371944][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 495.385867][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.417282][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 495.452097][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.488362][ T5911] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 495.499381][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.510363][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.535665][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.617074][ T5911] usb 4-1: Product: syz [ 495.661693][ T5911] usb 4-1: Manufacturer: syz [ 495.679803][ T5871] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 495.739008][ T5911] usb 4-1: SerialNumber: syz [ 495.789569][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.855730][ T5911] usb 4-1: config 0 descriptor?? [ 495.951477][ T5871] usb 2-1: config 0 descriptor?? [ 496.043383][ T30] audit: type=1400 audit(1745933263.144:860): avc: denied { create } for pid=11126 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 496.147425][ T30] audit: type=1326 audit(1745933263.244:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 496.150663][ T5870] usb 1-1: USB disconnect, device number 45 [ 496.174789][ T5911] usb 4-1: USB disconnect, device number 42 [ 496.228844][ T30] audit: type=1326 audit(1745933263.244:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11113 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cca78e969 code=0x7ffc0000 [ 496.577200][T11145] input: syz1 as /devices/virtual/input/input38 [ 496.622965][T11147] 9pnet_fd: Insufficient options for proto=fd [ 496.707633][ T5914] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 496.867707][ T5870] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 496.890337][ T5914] usb 3-1: config 12 has an invalid interface number: 104 but max is 0 [ 496.898698][ T5914] usb 3-1: config 12 has no interface number 0 [ 496.905253][ T5914] usb 3-1: config 12 interface 104 has no altsetting 0 [ 496.931271][ T5914] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 8.b0 [ 496.942401][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.965557][ T5914] usb 3-1: Product: syz [ 496.979454][ T5914] usb 3-1: Manufacturer: syz [ 496.994502][ T5914] usb 3-1: SerialNumber: syz [ 497.041118][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.047484][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 497.062078][ T5870] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 497.071468][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 497.085237][ T5870] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.097197][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.108724][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.118851][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.132863][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 497.153958][ T5870] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 497.163371][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 497.180435][ T5870] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.183930][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.200577][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.215272][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 497.227022][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.228093][ T5870] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 497.246958][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 497.260725][ T5870] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.273094][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.273120][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.273140][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.273185][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.273204][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.281023][T10910] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 497.320562][ T5871] hid-rmi 0003:0461:4E72.0008: unknown main item tag 0x0 [ 497.366938][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.388763][ T5871] hid-rmi 0003:0461:4E72.0008: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 497.389657][ T5870] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 497.454978][ T5870] usb 1-1: string descriptor 0 read error: -22 [ 497.461466][ T5870] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 497.480019][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.509193][ T5870] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 497.538019][T10910] usb 5-1: Using ep0 maxpacket: 32 [ 497.549332][T10910] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 497.558884][T10910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.581233][T10910] usb 5-1: config 0 descriptor?? [ 497.617147][T10910] gspca_main: sunplus-2.14.0 probing 041e:400b [ 497.678133][ T5869] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 497.819187][ T5870] usb 1-1: USB disconnect, device number 46 [ 497.856292][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.914429][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.926965][ T5869] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 497.937529][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.950146][ T5869] usb 4-1: config 0 descriptor?? [ 498.397439][T11162] input: syz1 as /devices/virtual/input/input39 [ 498.800872][T10910] gspca_sunplus: reg_r err -110 [ 498.809112][T10910] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 498.850846][ T5871] usb 5-1: USB disconnect, device number 47 [ 499.137299][ T972] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 499.248345][T10910] usb 2-1: USB disconnect, device number 44 [ 499.308424][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 499.346988][ T5914] appletouch 3-1:12.104: Could not find int-in endpoint [ 499.369455][ T972] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 499.426663][ T5914] appletouch 3-1:12.104: probe with driver appletouch failed with error -5 [ 499.440475][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.477510][ T5914] usbhid 3-1:12.104: couldn't find an input interrupt endpoint [ 499.490323][ T972] usb 1-1: config 0 descriptor?? [ 499.508743][ T972] gspca_main: sunplus-2.14.0 probing 041e:400b [ 499.515900][ T5914] usb 3-1: USB disconnect, device number 55 [ 499.804618][T11170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 499.810957][T11170] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 499.824777][T11170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 499.831646][T11170] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 500.010702][ T5871] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 500.650145][ T972] gspca_sunplus: reg_r err -110 [ 500.911322][ T972] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 501.027904][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.034252][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.383985][T11186] veth15: entered promiscuous mode [ 501.389194][T11186] veth15: entered allmulticast mode [ 501.414185][T11186] mkiss: ax0: crc mode is auto. [ 502.047128][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.061335][ T5870] usb 1-1: USB disconnect, device number 47 [ 502.209195][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 502.221463][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 502.237800][ T5869] usb 4-1: USB disconnect, device number 43 [ 502.326197][T11188] 9pnet_fd: Insufficient options for proto=fd [ 502.328045][ T5871] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 502.366307][T11192] random: crng reseeded on system resumption [ 502.376093][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.395656][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.437665][T11171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.459469][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.528922][T11193] mmap: syz.3.1494 (11193): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 502.581406][ T5871] usb 5-1: USB disconnect, device number 48 [ 502.639479][T11200] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 502.676841][T11200] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.807244][T11200] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 502.826833][T11200] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.955075][T11200] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 502.977692][T11200] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.042921][T11200] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 503.056448][T11200] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.136476][T11200] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 503.144714][T11200] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 503.163769][T11200] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 503.173576][T11200] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 503.209109][T11200] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 503.218356][T11200] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 503.235322][T11200] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 503.243731][T11200] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.371211][ T972] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 504.679527][ T30] audit: type=1400 audit(1745933271.785:863): avc: denied { bind } for pid=11225 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.715046][ T972] usb 4-1: config 12 has an invalid interface number: 104 but max is 0 [ 504.740994][ T972] usb 4-1: config 12 has no interface number 0 [ 504.748653][ T972] usb 4-1: config 12 interface 104 has no altsetting 0 [ 504.797260][ T972] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 8.b0 [ 504.806331][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.842022][ T972] usb 4-1: Product: syz [ 504.858556][T11226] SELinux: syz.1.1501 (11226) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 504.876717][ T972] usb 4-1: Manufacturer: syz [ 504.881340][ T972] usb 4-1: SerialNumber: syz [ 504.908329][T11228] sp0: Synchronizing with TNC [ 504.925215][T11232] xt_l2tp: missing protocol rule (udp|l2tpip) [ 505.126586][ T5914] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 505.365237][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.376005][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 505.387783][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.397958][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 505.412585][ T5914] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 505.429643][ T5914] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 505.437904][ T5914] usb 2-1: Manufacturer: syz [ 505.447019][ T5914] usb 2-1: config 0 descriptor?? [ 505.606547][ T5868] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 505.706467][ T5914] rc_core: IR keymap rc-hauppauge not found [ 505.712531][ T5914] Registered IR keymap rc-empty [ 505.719116][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.745965][T11246] __nla_validate_parse: 72 callbacks suppressed [ 505.745979][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 505.746875][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.787946][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 505.801893][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 505.827008][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.856719][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.889075][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.900221][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.910087][ T5868] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 505.919287][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.926719][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.936546][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.938586][ T5868] usb 3-1: config 0 descriptor?? [ 506.008039][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.017899][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.027327][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.036763][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.046113][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.055463][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.065125][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.076054][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.088210][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 506.717383][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.740053][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.757781][T11226] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.796391][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.968853][T11255] input: syz1 as /devices/virtual/input/input41 [ 506.981553][ T972] appletouch 4-1:12.104: Could not find int-in endpoint [ 507.592851][ T972] appletouch 4-1:12.104: probe with driver appletouch failed with error -5 [ 507.606219][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.614877][ T972] usbhid 4-1:12.104: couldn't find an input interrupt endpoint [ 507.634911][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.645632][ T972] usb 4-1: USB disconnect, device number 44 [ 507.654740][T11226] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.716341][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.886074][ T5914] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 507.975867][ T5869] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 508.373168][T11226] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.398568][ T5914] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 508.413668][T11261] veth19: entered promiscuous mode [ 508.420984][T11261] veth19: entered allmulticast mode [ 508.537113][ T5914] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 508.560183][T11226] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.583639][ T30] audit: type=1326 audit(1745933275.686:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 508.662295][ T30] audit: type=1326 audit(1745933275.686:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 508.787921][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 508.813737][T11226] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.882501][T11267] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 509.481251][T11226] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.496369][T11226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.511279][T11226] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.547966][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.583717][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.586167][ T972] usb 2-1: USB disconnect, device number 45 [ 509.645964][ T30] audit: type=1326 audit(1745933275.686:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 510.689992][ T30] audit: type=1326 audit(1745933275.686:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 510.950904][ T5869] usb 1-1: string descriptor 0 read error: -71 [ 510.975084][ T5869] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 510.994998][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.017413][ T5869] usb 1-1: config 0 descriptor?? [ 511.024729][ T5869] usb 1-1: can't set config #0, error -71 [ 511.066294][ T5869] usb 1-1: USB disconnect, device number 48 [ 511.105960][T11280] __nla_validate_parse: 74 callbacks suppressed [ 511.105977][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 511.376160][ T30] audit: type=1326 audit(1745933275.686:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 511.432940][T11286] FAULT_INJECTION: forcing a failure. [ 511.432940][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 511.462864][ T30] audit: type=1326 audit(1745933275.686:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 511.498615][T11286] CPU: 0 UID: 0 PID: 11286 Comm: syz.0.1517 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 511.498642][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 511.498653][T11286] Call Trace: [ 511.498658][T11286] [ 511.498666][T11286] dump_stack_lvl+0x16c/0x1f0 [ 511.498692][T11286] should_fail_ex+0x512/0x640 [ 511.498714][T11286] ? fs_reclaim_acquire+0xae/0x150 [ 511.498739][T11286] ? tomoyo_encode2+0x100/0x3e0 [ 511.498761][T11286] should_failslab+0xc2/0x120 [ 511.498780][T11286] __kmalloc_noprof+0xd2/0x510 [ 511.498804][T11286] ? d_absolute_path+0x136/0x1a0 [ 511.498838][T11286] tomoyo_encode2+0x100/0x3e0 [ 511.498865][T11286] tomoyo_encode+0x29/0x50 [ 511.498887][T11286] tomoyo_realpath_from_path+0x18f/0x6e0 [ 511.498918][T11286] tomoyo_path_number_perm+0x245/0x580 [ 511.498936][T11286] ? tomoyo_path_number_perm+0x237/0x580 [ 511.498959][T11286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 511.498981][T11286] ? find_held_lock+0x2b/0x80 [ 511.499024][T11286] ? find_held_lock+0x2b/0x80 [ 511.499044][T11286] ? hook_file_ioctl_common+0x145/0x410 [ 511.499075][T11286] ? __fget_files+0x20e/0x3c0 [ 511.499104][T11286] security_file_ioctl+0x9b/0x240 [ 511.499128][T11286] __x64_sys_ioctl+0xb7/0x200 [ 511.499153][T11286] do_syscall_64+0xcd/0x260 [ 511.499175][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.499193][T11286] RIP: 0033:0x7fdb1fb8e969 [ 511.499208][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.499225][T11286] RSP: 002b:00007fdb20ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.499242][T11286] RAX: ffffffffffffffda RBX: 00007fdb1fdb5fa0 RCX: 00007fdb1fb8e969 [ 511.499253][T11286] RDX: 0000200000001e80 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 511.499264][T11286] RBP: 00007fdb20ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 511.499274][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.499284][T11286] R13: 0000000000000000 R14: 00007fdb1fdb5fa0 R15: 00007ffd5890b578 [ 511.499308][T11286] [ 511.499326][T11286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.658466][ T30] audit: type=1326 audit(1745933275.686:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 511.658510][ T30] audit: type=1326 audit(1745933275.686:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 511.658545][ T30] audit: type=1326 audit(1745933275.686:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f13473907fc code=0x7ffc0000 [ 511.746345][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 511.878749][ T30] audit: type=1326 audit(1745933275.686:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1347390734 code=0x7ffc0000 [ 511.907353][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 511.922270][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 511.934414][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 511.946495][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 511.955412][ T30] audit: type=1326 audit(1745933275.686:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1347390734 code=0x7ffc0000 [ 511.987135][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 512.007781][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 512.048662][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 512.057549][ T30] audit: type=1326 audit(1745933275.686:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 512.057652][ T30] audit: type=1326 audit(1745933275.686:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11262 comm="syz.4.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f134738e969 code=0x7ffc0000 [ 512.293332][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 512.565951][ T972] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 512.712552][T11298] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 512.747424][ T972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.754082][ T972] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 512.773475][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.840658][ T972] usb 5-1: config 0 descriptor?? [ 512.928115][ T5868] usbhid 3-1:0.0: can't add hid device: -32 [ 512.946115][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 512.989523][ T5868] usb 3-1: USB disconnect, device number 56 [ 513.050228][ T972] usb 5-1: string descriptor 0 read error: -71 [ 513.079032][ T972] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 513.103224][ T972] usb 5-1: USB disconnect, device number 49 [ 513.126116][ T5911] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 513.277697][ T5911] usb 2-1: config 12 has an invalid interface number: 104 but max is 0 [ 513.289587][ T5911] usb 2-1: config 12 has no interface number 0 [ 513.295849][ T5911] usb 2-1: config 12 interface 104 has no altsetting 0 [ 513.309821][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 8.b0 [ 513.319897][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.328384][ T5911] usb 2-1: Product: syz [ 513.332710][ T5911] usb 2-1: Manufacturer: syz [ 513.337732][ T5911] usb 2-1: SerialNumber: syz [ 513.376011][ T5913] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 513.512415][T11312] netlink: 'syz.2.1525': attribute type 2 has an invalid length. [ 513.525981][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 513.533367][ T5913] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 513.543159][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.820752][T11315] hub 9-0:1.0: USB hub found [ 513.828192][T11315] hub 9-0:1.0: 1 port detected [ 513.860090][T11315] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 514.517774][ T5913] usb 1-1: config 0 descriptor?? [ 514.534661][ T5913] gspca_main: sunplus-2.14.0 probing 041e:400b [ 515.324692][T11328] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 515.336787][T11328] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 515.345180][T11328] CPU: 1 UID: 0 PID: 11328 Comm: syz.4.1528 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 515.357230][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 515.367279][T11328] RIP: 0010:codel_change+0x4b5/0xb40 [ 515.372560][T11328] Code: e0 07 83 c0 03 88 44 24 33 e9 e2 00 00 00 e8 e2 ff 3e f8 49 c7 07 00 00 00 00 e8 d6 ff 3e f8 49 8d 7f 28 48 89 fa 48 c1 ea 03 <0f> b6 0c 2a 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 7b [ 515.392165][T11328] RSP: 0018:ffffc90003edf3e8 EFLAGS: 00010206 [ 515.398227][T11328] RAX: 0000000000000586 RBX: ffff888059d39800 RCX: ffffc9000ba79000 [ 515.406194][T11328] RDX: 0000000000000005 RSI: ffffffff897c312a RDI: 0000000000000028 [ 515.414167][T11328] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 515.422126][T11328] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 515.430082][T11328] R13: 000000000000097d R14: ffff888059d39814 R15: 0000000000000000 [ 515.438041][T11328] FS: 00007f13481906c0(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 515.446967][T11328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.453540][T11328] CR2: 000000110c26d783 CR3: 0000000049f66000 CR4: 00000000003526f0 [ 515.461500][T11328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 515.469453][T11328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 515.477413][T11328] Call Trace: [ 515.480671][T11328] [ 515.483590][T11328] ? __pfx_codel_change+0x10/0x10 [ 515.488599][T11328] ? find_held_lock+0x2b/0x80 [ 515.493260][T11328] ? nla_strcmp+0xff/0x130 [ 515.497680][T11328] ? __pfx_codel_change+0x10/0x10 [ 515.502684][T11328] tc_modify_qdisc+0x74b/0x2100 [ 515.507527][T11328] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 515.512810][T11328] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 515.518091][T11328] rtnetlink_rcv_msg+0x3c6/0xe90 [ 515.523022][T11328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 515.528480][T11328] netlink_rcv_skb+0x16a/0x440 [ 515.533239][T11328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 515.538699][T11328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.543984][T11328] ? netlink_deliver_tap+0x1ae/0xd30 [ 515.549265][T11328] netlink_unicast+0x53a/0x7f0 [ 515.554013][T11328] ? __pfx_netlink_unicast+0x10/0x10 [ 515.559282][T11328] netlink_sendmsg+0x8d1/0xdd0 [ 515.564038][T11328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.569317][T11328] ____sys_sendmsg+0xa95/0xc70 [ 515.574073][T11328] ? copy_msghdr_from_user+0x10a/0x160 [ 515.579521][T11328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.584790][T11328] ___sys_sendmsg+0x134/0x1d0 [ 515.589449][T11328] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.594656][T11328] __sys_sendmsg+0x16d/0x220 [ 515.599250][T11328] ? __pfx___sys_sendmsg+0x10/0x10 [ 515.604352][T11328] ? __x64_sys_futex+0x1e0/0x4c0 [ 515.609270][T11328] ? rcu_is_watching+0x12/0xc0 [ 515.614014][T11328] do_syscall_64+0xcd/0x260 [ 515.618536][T11328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.624423][T11328] RIP: 0033:0x7f134738e969 [ 515.628822][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.648413][T11328] RSP: 002b:00007f1348190038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.656805][T11328] RAX: ffffffffffffffda RBX: 00007f13475b5fa0 RCX: 00007f134738e969 [ 515.664768][T11328] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004 [ 515.672735][T11328] RBP: 00007f1347410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 515.680704][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.688673][T11328] R13: 0000000000000000 R14: 00007f13475b5fa0 R15: 00007ffd8aa15e38 [ 515.696640][T11328] [ 515.699643][T11328] Modules linked in: [ 515.703623][T11328] ---[ end trace 0000000000000000 ]--- [ 515.709100][T11328] RIP: 0010:codel_change+0x4b5/0xb40 [ 515.714372][T11328] Code: e0 07 83 c0 03 88 44 24 33 e9 e2 00 00 00 e8 e2 ff 3e f8 49 c7 07 00 00 00 00 e8 d6 ff 3e f8 49 8d 7f 28 48 89 fa 48 c1 ea 03 <0f> b6 0c 2a 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 7b [ 515.733988][T11328] RSP: 0018:ffffc90003edf3e8 EFLAGS: 00010206 [ 515.740065][T11328] RAX: 0000000000000586 RBX: ffff888059d39800 RCX: ffffc9000ba79000 [ 515.748046][T11328] RDX: 0000000000000005 RSI: ffffffff897c312a RDI: 0000000000000028 [ 515.756020][T11328] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 515.763994][T11328] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 515.771968][T11328] R13: 000000000000097d R14: ffff888059d39814 R15: 0000000000000000 [ 515.779925][T11328] FS: 00007f13481906c0(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 515.788848][T11328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.795404][T11328] CR2: 000000110c26d783 CR3: 0000000049f66000 CR4: 00000000003526f0 [ 515.803361][T11328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 515.811325][T11328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 515.819282][T11328] Kernel panic - not syncing: Fatal exception in interrupt [ 515.826631][T11328] Kernel Offset: disabled [ 515.830929][T11328] Rebooting in 86400 seconds..