last executing test programs: 3m56.206601903s ago: executing program 0 (id=564): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x88440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000180)=[{}], 0x1, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x2, 0x0, "a06a"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000200)) ioperm(0x0, 0x1fb, 0x4) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 3m55.171389586s ago: executing program 0 (id=565): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000800)=[{{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 3m55.121517326s ago: executing program 0 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m53.698959292s ago: executing program 0 (id=574): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x922, 0x12) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioperm(0x0, 0x1fb, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r4, &(0x7f0000000080)='./file0/file0\x00', r4, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0) tkill(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000040)=0x922, 0x12) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000180)=0x1, 0x4) 3m52.307514521s ago: executing program 0 (id=580): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) utimes(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)={{0x77359400}}) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x70bd26, 0x100, {}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000740)={0x1d, r6, 0x3, {0x2, 0x0, 0x2}, 0xfe}, 0x18) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c004}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c00010062"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3m50.87450284s ago: executing program 0 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x2d71, &(0x7f0000000100)={0x0, 0x207b, 0x0, 0x0, 0x40}, &(0x7f0000013000), &(0x7f0000011000)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3e, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000003000)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3, @remote, 0x81}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="0fb78a598adbf3a2cdfda804ec7d51c5e7f3fbf26d6e1a262db3d0c4165da6e632903e344d73edc47272be5a90c54b87f0109282ee4310ad3182f6c52d6700dc739dd3463875beebc6dd2c564ccc77f1aacbf55e3611ca5566c81352fcb44f58e6455a002b09d4c5007e2257913eb819496e1e7ed9f3b60a25ac7b2fa586e904ff6843170d52c97f9cdca36fddf60b4245c5d522f2ee4047c2c5797370c34ced59a2037ed7", 0xa5}, {&(0x7f0000000380)="4fb18dfbb4c6aefb81ce8ecf048c5af71f8c04347accfd8ae2fa2db23cb0d49d82c8594d9e206023fdd735b506204e182d5d35e83f40ce9a472d28eee976a743c7c137a88e410be1ecf89575174026719b3d68a4cbf5c5d6101616e300e678e3bad70b0d0162ad1dc254a1a0ba94d9fcb7b9e6a8805cb6eadeeafa1b0791af242f0337962d531ff3885c4ec989477e0c77895ad957ff1b3748d0321aae97c43f70945f6e77d50d5fdd5ede6991c6d9f47e88c2f34689f7a66443", 0xba}, {&(0x7f0000000180)="25594577fa5750e32af5f092eceaec505a51e9cbd58ba2dae02db17dfc054f1086e105230363c83619d2", 0x2a}], 0x3, &(0x7f00000005c0)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x1, 0x13, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0x1, 0x8, "bb9a3ab7259686df"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0xc6a}, @generic={0x3d, 0x66, "a28392cde7fea28c5dca08d6989131abd0818d9c1490e8d6f891aaa1dbf9c4b4a3e4abf523d4e2eb8655d655f9362e03fd66be07b037bff2eb0f1adaf6cee7574343f3b52fc56cadb6c3ca6068e5c5d3624ce238b110b300b6610c87bd47b4e0c2ccd1f3cd5c"}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x5c, 0xb, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0xfff0, [0x400, 0x5, 0x6, 0xcc42, 0xfffffffffffffffb]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x3, [0x2, 0x81, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x2b, 0x1, '\x00', [@pad1, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x3}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x77}, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x4, [0x5, 0xfffffffffffffeff, 0xfffffffffffffffc]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r5}}}], 0x200}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x8, @remote, 0x1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="19b3c613805b4eb6ffd9076055ea386c53e0615ad65c689a808dcc0b13441464acd3750e6df87f219b7ea0828832b62d8d5066ec9f8e26eb3d08952ebfea44bf14df86faf30475d6fa00658bb3f91f43fc09139fa8471f7bd5b0da6aa2e0c4333bb1cbc5a3625f9dc659f32ede04a4bc3756175abbaf9763a4cabadb9dfcaf92c4402dee97fd78e4d456bea462d40da92eeb4e2ba0fa71afd8d694cf65c8cee6a9f330816920dc9f083125ee96d88f7b24e46bfd1303ed5667ad4da2cc580d71d1d3a4d40a5834d9d842359368921424a9390aefe28709a2affee0c85871", 0xde}, {&(0x7f00000004c0)="7f7c547dd45665aed06eba588beba7ac061db148b4c539800e3b5ebcfcc6c1d681054c28950168301052272ea12f89a50bf379f13b54834ed2a773262083f5867edabfb5ae110fa49326425787f0d57fca5ceec832ce67975a51471eea63aa08", 0x60}, {&(0x7f00000018c0)="97cd1d39ba3d28d651c7856a5343017aaf3c64d23bdce5debf8f025915e98d52228e75edf0efedda09c6f6dadc3a69fce2c2d04d747e524eeadfb77ee9e05c0a31efdbf59742f68a8fd26306878bda78a85266203f87a930180500b681627a7b0ec4f44d28e371d3f93362eaa8865da3c7d4e955efc669d8dc849dc1", 0x7c}, {&(0x7f0000001940)="34cf91efee78f149e8712aa500e509f48279da25b0026829939db30cba1eef083943dfde93f04a14e05ca46b2be5091c757a6fa44629be7f18538c8ff3824b98df326032f510731427eec02dae8ab909cd7d02454561bb6e2d6c4986bfc1de8451d6c550e3498fee143fa3bf77fdab83c4aed54baa19bd6cf099b9f0bb73679aceb91d4339674031f0fa49ca5a40d84c7e878f91ddb166312fec60a69f1d1a5681d6fef363ab433d3ac8f7fb5639764464af8b29f57abdfb011e1d2aa2ad5148d7f462e36ccc1400db81a10c44cf4fcdfc9858db18fd2d70b675d49177e60d86cd7d1d286120a4135d29", 0xea}, {&(0x7f0000001a40)="bf940122c22e3fcafe034d13b4bd679e9c734b00062672b0afe2f548dc8041d51829caa6e367f493b933cde6e521bc6a4012f78b80f2bef906c10c8c68aa5d3ba66d1ba834b48fb76a841979a92b8b141e158a8696560fad774fad15f1e207b3d7ee49abe320b799a35d16e180fb32ff822e8d1326b1db1e88964fd7bf806d2ff9cbce66d9e06800e129584686fe7220f77aff0199053afa7a8777c57c85609cc19118e3837e56c448a39fedecc00ba0db4625751389f8c1ed048d5fd01ce94baa119448bd2a82413553b6645b4cec82d41336f912c09bcd89a10053880ef3aa6d093f110ac3c97bc61d5c1fc5e54b142b03cc64c9b69295562603c27e", 0xfd}, {&(0x7f0000000540)}], 0x7}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="643d0682d3ec2b915de64de624b1371b30baecdd57d9aa9743d806702ec2d674e62e0131df2794ff2ab57533fb95bf5d8bd5b0be5cb9482844f51a8ba0dee712fd81b0f125916961de9d20e82a6c2902b79adb5712ad0b15339a7bb9525a7facfe73e027899a8ea41923c222193cd20f2f8bed46880b25fc170876b107ee4c61de87b22aec8acc3a8c1f01051246b874584af50ab4eaf129572914ef7a703e4b63b8f9a0ca510b78e3e859704b43b57466385cca8ead196f9559e414a27759ce597d5c32f9a957dcab2a2e626a0d0e0dcbd02368f6071ac4ea2d58d8e4ce5d6ab48bf6919a0c79ca671108d8f82e4efc", 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001d00)="3f8ced778154f45b9443fb8855f022249a5bff11695d34fd449ba77a414bcbe882cbd42bb295b0da2d96edb6edfc75044d459521dd6590a64240fb2fdcb28034d9ce7a8271cc5471d85bb8466633304bc00f517be808bd074833a2950d1a5eda6720729f43aa58acf300bae8ef0cd014a9b2a6e67cbf79cd305ce06828040adb63bd43ee6805803065c86358d32baa", 0x8f}, {&(0x7f0000001dc0)="2a000232f9ac46689f943e9397e807e1f93aa939c7d66fdedc646fb3df7506486db49a85d180ebc2b2660f91ad59bf4fd13105546cfb4f18c44f3d4a", 0x3c}, {&(0x7f0000001e00)="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", 0x1000}], 0x3, &(0x7f0000002e40)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x1d, 0x6, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x0, [0xc, 0x7]}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x48}}, {{&(0x7f0000002ec0)={0xa, 0x4e22, 0x3, @empty, 0x7ff}, 0x1c, &(0x7f0000002f00), 0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="680000000000000029000000390000002e0a020900000000f5010000000000000000000000000001ff010000000000000000000000ffffac1414aafe8000000000000000000000000000bb200000000000000029000000360000003c000000000000000502800104010f00"/136], 0x88}}], 0x5, 0x20000800) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000080)={0x40, 0x6}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0xfffffffffffffffe]}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000000)={0xfffffffe, 0x0, &(0x7f0000000040), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000031c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002f00)={&(0x7f0000003140)={0x44, 0x1402, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x448d0}, 0x40805) 3m50.359374699s ago: executing program 32 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x2d71, &(0x7f0000000100)={0x0, 0x207b, 0x0, 0x0, 0x40}, &(0x7f0000013000), &(0x7f0000011000)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3e, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000003000)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3, @remote, 0x81}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="0fb78a598adbf3a2cdfda804ec7d51c5e7f3fbf26d6e1a262db3d0c4165da6e632903e344d73edc47272be5a90c54b87f0109282ee4310ad3182f6c52d6700dc739dd3463875beebc6dd2c564ccc77f1aacbf55e3611ca5566c81352fcb44f58e6455a002b09d4c5007e2257913eb819496e1e7ed9f3b60a25ac7b2fa586e904ff6843170d52c97f9cdca36fddf60b4245c5d522f2ee4047c2c5797370c34ced59a2037ed7", 0xa5}, {&(0x7f0000000380)="4fb18dfbb4c6aefb81ce8ecf048c5af71f8c04347accfd8ae2fa2db23cb0d49d82c8594d9e206023fdd735b506204e182d5d35e83f40ce9a472d28eee976a743c7c137a88e410be1ecf89575174026719b3d68a4cbf5c5d6101616e300e678e3bad70b0d0162ad1dc254a1a0ba94d9fcb7b9e6a8805cb6eadeeafa1b0791af242f0337962d531ff3885c4ec989477e0c77895ad957ff1b3748d0321aae97c43f70945f6e77d50d5fdd5ede6991c6d9f47e88c2f34689f7a66443", 0xba}, {&(0x7f0000000180)="25594577fa5750e32af5f092eceaec505a51e9cbd58ba2dae02db17dfc054f1086e105230363c83619d2", 0x2a}], 0x3, &(0x7f00000005c0)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x1, 0x13, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0x1, 0x8, "bb9a3ab7259686df"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0xc6a}, @generic={0x3d, 0x66, "a28392cde7fea28c5dca08d6989131abd0818d9c1490e8d6f891aaa1dbf9c4b4a3e4abf523d4e2eb8655d655f9362e03fd66be07b037bff2eb0f1adaf6cee7574343f3b52fc56cadb6c3ca6068e5c5d3624ce238b110b300b6610c87bd47b4e0c2ccd1f3cd5c"}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x5c, 0xb, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0xfff0, [0x400, 0x5, 0x6, 0xcc42, 0xfffffffffffffffb]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x3, [0x2, 0x81, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x2b, 0x1, '\x00', [@pad1, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x3}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x77}, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x4, [0x5, 0xfffffffffffffeff, 0xfffffffffffffffc]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r5}}}], 0x200}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x8, @remote, 0x1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="19b3c613805b4eb6ffd9076055ea386c53e0615ad65c689a808dcc0b13441464acd3750e6df87f219b7ea0828832b62d8d5066ec9f8e26eb3d08952ebfea44bf14df86faf30475d6fa00658bb3f91f43fc09139fa8471f7bd5b0da6aa2e0c4333bb1cbc5a3625f9dc659f32ede04a4bc3756175abbaf9763a4cabadb9dfcaf92c4402dee97fd78e4d456bea462d40da92eeb4e2ba0fa71afd8d694cf65c8cee6a9f330816920dc9f083125ee96d88f7b24e46bfd1303ed5667ad4da2cc580d71d1d3a4d40a5834d9d842359368921424a9390aefe28709a2affee0c85871", 0xde}, {&(0x7f00000004c0)="7f7c547dd45665aed06eba588beba7ac061db148b4c539800e3b5ebcfcc6c1d681054c28950168301052272ea12f89a50bf379f13b54834ed2a773262083f5867edabfb5ae110fa49326425787f0d57fca5ceec832ce67975a51471eea63aa08", 0x60}, {&(0x7f00000018c0)="97cd1d39ba3d28d651c7856a5343017aaf3c64d23bdce5debf8f025915e98d52228e75edf0efedda09c6f6dadc3a69fce2c2d04d747e524eeadfb77ee9e05c0a31efdbf59742f68a8fd26306878bda78a85266203f87a930180500b681627a7b0ec4f44d28e371d3f93362eaa8865da3c7d4e955efc669d8dc849dc1", 0x7c}, {&(0x7f0000001940)="34cf91efee78f149e8712aa500e509f48279da25b0026829939db30cba1eef083943dfde93f04a14e05ca46b2be5091c757a6fa44629be7f18538c8ff3824b98df326032f510731427eec02dae8ab909cd7d02454561bb6e2d6c4986bfc1de8451d6c550e3498fee143fa3bf77fdab83c4aed54baa19bd6cf099b9f0bb73679aceb91d4339674031f0fa49ca5a40d84c7e878f91ddb166312fec60a69f1d1a5681d6fef363ab433d3ac8f7fb5639764464af8b29f57abdfb011e1d2aa2ad5148d7f462e36ccc1400db81a10c44cf4fcdfc9858db18fd2d70b675d49177e60d86cd7d1d286120a4135d29", 0xea}, {&(0x7f0000001a40)="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", 0xfd}, {&(0x7f0000000540)}], 0x7}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="643d0682d3ec2b915de64de624b1371b30baecdd57d9aa9743d806702ec2d674e62e0131df2794ff2ab57533fb95bf5d8bd5b0be5cb9482844f51a8ba0dee712fd81b0f125916961de9d20e82a6c2902b79adb5712ad0b15339a7bb9525a7facfe73e027899a8ea41923c222193cd20f2f8bed46880b25fc170876b107ee4c61de87b22aec8acc3a8c1f01051246b874584af50ab4eaf129572914ef7a703e4b63b8f9a0ca510b78e3e859704b43b57466385cca8ead196f9559e414a27759ce597d5c32f9a957dcab2a2e626a0d0e0dcbd02368f6071ac4ea2d58d8e4ce5d6ab48bf6919a0c79ca671108d8f82e4efc", 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001d00)="3f8ced778154f45b9443fb8855f022249a5bff11695d34fd449ba77a414bcbe882cbd42bb295b0da2d96edb6edfc75044d459521dd6590a64240fb2fdcb28034d9ce7a8271cc5471d85bb8466633304bc00f517be808bd074833a2950d1a5eda6720729f43aa58acf300bae8ef0cd014a9b2a6e67cbf79cd305ce06828040adb63bd43ee6805803065c86358d32baa", 0x8f}, {&(0x7f0000001dc0)="2a000232f9ac46689f943e9397e807e1f93aa939c7d66fdedc646fb3df7506486db49a85d180ebc2b2660f91ad59bf4fd13105546cfb4f18c44f3d4a", 0x3c}, {&(0x7f0000001e00)="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", 0x1000}], 0x3, &(0x7f0000002e40)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x1d, 0x6, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x0, [0xc, 0x7]}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x48}}, {{&(0x7f0000002ec0)={0xa, 0x4e22, 0x3, @empty, 0x7ff}, 0x1c, &(0x7f0000002f00), 0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="680000000000000029000000390000002e0a020900000000f5010000000000000000000000000001ff010000000000000000000000ffffac1414aafe8000000000000000000000000000bb200000000000000029000000360000003c000000000000000502800104010f00"/136], 0x88}}], 0x5, 0x20000800) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000080)={0x40, 0x6}) io_uring_enter(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0xfffffffffffffffe]}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000000)={0xfffffffe, 0x0, &(0x7f0000000040), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000031c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002f00)={&(0x7f0000003140)={0x44, 0x1402, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x448d0}, 0x40805) 7.95963845s ago: executing program 1 (id=1483): syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) epoll_create1(0x0) r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x5, @raw_data="2fb04a43cb4edbb2f8c11d55fe7e39d98cc683907ce4751204e83d1785190479f3c5d378bed2c1fc92e0629a4fffd9a52b7a93d12eb198729676b0d892c9c02879d5700ed2ea2a5352518f772c3d9d2809911d42843bd3931a529ac577f811f21e91d3e16bb79748df00c9b6882ccd692b1170aa76a9de8d4bd5f8690cc3edf408d220b7d5916b3eba2d13f751cb46d2cf9034ed3d98a91172eea90e991030a3af605efb6671b50a33e46fdc5695084f7cc34d71ea422e337bf362d643c2827ae8e7f38afa894e0c"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x70, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000620000000000119078000000000000000000004e20004e9078abc66196eba61ac40356147c6e454cd8d936ec7720974996d640e77f48dff2a3ea28a7997b815ff53f54d3aee8c430ef3fdf26822ddc2cb72514b7fb173fe798818a95934a0d"], 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') readv(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/21, 0x15}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0x2, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 7.748891266s ago: executing program 3 (id=1485): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x402902, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='timers\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='timers\x00') close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) 7.720740732s ago: executing program 2 (id=1486): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000340)) 7.703875036s ago: executing program 1 (id=1487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fchdir(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180), 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000000)=0x8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6eb094549002060009b853886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800130006000000"], 0x3c}}, 0x4) 7.070865698s ago: executing program 3 (id=1488): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 7.070343878s ago: executing program 2 (id=1489): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 7.003861995s ago: executing program 4 (id=1490): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) fanotify_init(0x200, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x7, 0xa56, {0x0, r2}, 0x1000, 0x9, 0x1, {0x0, r5, r1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000080)=@l2, &(0x7f0000000000)=0x80) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0xffffd8ee}, 0x4) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030501000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006272696467650000040000800a0001"], 0x40}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, 0x0, &(0x7f0000000340)) 6.396488469s ago: executing program 1 (id=1491): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 5.969533987s ago: executing program 3 (id=1492): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x810) 5.639601227s ago: executing program 3 (id=1493): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x60}]}, 0x30}}, 0x0) 5.594937547s ago: executing program 3 (id=1494): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @null, @netrom={'nr', 0x0}, 0x1, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000ff0000000000000000000000000000000060ecd255ee6dfc8d3266ce90646fddea86ea5fd9408d10fbe9d121d6b7b1963e91f1c4f99ff5cc18317d632e689644a6d03cf2da6c847074bdd2c34130b7a9b6aa8af52d3004b38beaddd9a632922beb0e74fa401853a6b63476d94835bb2395436c152ce210f8a7a7303ae19bb9b34c9b3787a98c5e12dfcb6185b45b61adda1a581ada81cab373993f52", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa20000000000000702"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f040000800700000003000000040000800000000000000000000400040000000000"], 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@hash}, {@dont_measure}, {@uid_lt}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'syz'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r3, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) openat2(r5, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x400400, 0x0, 0x8}, 0x18) 5.594649337s ago: executing program 4 (id=1495): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a0001"], 0xc8}}, 0x4040) r3 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 5.518519974s ago: executing program 1 (id=1496): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f0000000000), 0x8}) syz_open_dev$I2C(0x0, 0xfffffffffffffffd, 0x600002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x185841, 0x23456}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000000000000000000000000000088068ab7bad03792b4a1909fe1a7e564d9aabf2d0b87afc2e4ac021f582b69e20a50b2b92fffc4ef50978b29799e33e682491a0b2616a25db5d84f99f0853a367f67f322c4bfb4e52f15bfb371dd5cdadc3093b42f2f374adff01637e9e5d9", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) 5.517208893s ago: executing program 2 (id=1497): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r1, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r2 = getpid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @remote, {[@timestamp={0x44, 0x4, 0x31, 0x0, 0x9}, @timestamp_addr={0x44, 0x34, 0x13, 0x1, 0x3, [{@broadcast, 0x9e80}, {@broadcast, 0x62d1}, {@broadcast}, {@empty, 0x622}, {@multicast1, 0x9}, {@empty, 0x244c4}]}, @noop, @lsrr={0x83, 0x3, 0xdc}, @end]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xffffffff) accept4(r5, 0x0, 0x0, 0x80000) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.28408049s ago: executing program 4 (id=1499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f0000000240), &(0x7f00000004c0)=""/200}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xf8, 0xc9, @none, 0x2, 0xa, 0x6, 0x5, 0x74, 0x2}}}, 0x14) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) epoll_create(0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) 4.540467583s ago: executing program 5 (id=1500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x808, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$vbi(&(0x7f00000190c0), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @sliced={0x8, [0x8000, 0x101, 0x1, 0x5, 0x10, 0x0, 0x10, 0xf800, 0x0, 0x9, 0x9, 0x3, 0x1, 0x7, 0x40, 0x8000, 0x2, 0x100, 0x9, 0xea, 0x9, 0x1000, 0x2, 0x2, 0x5, 0x9, 0x8000, 0x81, 0x3, 0x1, 0xa, 0xa, 0xffff, 0x7, 0x4b18, 0x100, 0x0, 0x0, 0x22, 0x3, 0x1, 0x1, 0x2, 0x1, 0x7, 0x1ff, 0x3, 0x3], 0x8}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x9, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002202000007aa4"], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x22, 0x2, 0x11, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "100048", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private1, @remote, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x3a}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) close(r0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x3) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000240), 0x0}, 0x20) 4.479494292s ago: executing program 2 (id=1501): close(0x3) 4.387599322s ago: executing program 2 (id=1502): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x60, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x0) io_submit(0x0, 0xfffffffffffffcf9, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x4, 0xda, 0xb0, 0x10, 0xccd, 0x39, 0x4499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0xf8, 0x90, 0x1, [{{0x9, 0x4, 0x6f, 0x8, 0x1, 0x37, 0x6d, 0xbe, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc0, 0x94, 0xa3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) socket$netlink(0x10, 0x3, 0xf) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) syz_usb_ep_write(r0, 0x5, 0x0, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fanotify_init(0x200, 0x0) 3.757241208s ago: executing program 4 (id=1503): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x810) 3.717154925s ago: executing program 5 (id=1504): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x60}]}, 0x30}}, 0x0) 3.670560818s ago: executing program 5 (id=1505): mount(0x0, 0x0, 0x0, 0x1008020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d", 0x60, r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'poly1305\x00'}}) rt_sigqueueinfo(0x0, 0x21, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="a9"], 0x8, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000f00f88)={{0x2}, 0x0, 0x0, 0x8000, 0x0, 0x10000000000, 0x0, 0x0, 0x2}) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x7, 0x5001) msgsnd(r5, &(0x7f0000000900)=ANY=[@ANYRESHEX], 0x1, 0x0) msgrcv(r5, &(0x7f0000000080)={0x0, ""/178}, 0xba, 0x2, 0x2000) 3.654225141s ago: executing program 4 (id=1506): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffd88) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xf1, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x800001, [{0x4, 0x801}]}]}}, 0x0, 0x32, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb206292c4d96927f019fba2ad2987739c5e0d59351755863603e11b1131e4eb02f883ddbe51e0fdd5505dc06662ff71d7"]}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000140)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x20, r8, 0x1, 0x70bd25, 0xfff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000540)=[@iv={0xc8, 0x117, 0x2, 0xb3, "35ad2f86d8587f4b2bac4d97e46c4f2fad7b84a298871fe5db7be0eb91c164854590829992611cf9d591e5e07fca9186ad8e337fd17645fb8a08608c212081f782d1dd90e6fad9aebe62ca5414131f88a765cce54e9cf95fd50be1996fd32eb16f3e534c711249b4716790e67b2dcd8e0db39ed4143cd7546834945d44829bca0ed3126efa692f346215f908ad348e50a2818ef917d5c293acef4292c55333eca095dd46f870ed0aaaf60b62c685a37d6bd9ba"}], 0xc8}], 0x1, 0x800) 3.172983881s ago: executing program 5 (id=1507): io_setup(0x542, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_setup(0x8, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) creat(0x0, 0x0) (async, rerun: 64) readlink(0x0, &(0x7f0000001200)=""/4096, 0x1000) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') (rerun: 32) getdents(r2, &(0x7f0000002cc0)=""/4133, 0x1025) (async) getdents(r2, 0x0, 0x0) (async) io_submit(r0, 0x0, 0x0) 2.90758075s ago: executing program 5 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0x7}, 0x1c) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x8000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000900)="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", 0x13c, r4) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000600)="c2c593319eec7ec974aa7dd037167658454253c4f930db57c5b3e699b0c521579ef1d7cf6b976b08050a8a2dec6dc9d55ec3221b1beb4a72c76a39a725dd6a18cd31f0bcc79513d3f542c1128486bf539dd667cb1a646746873b47576d754ae8e66e858804f92552aff0f29c44ae4f6d2f0e3483f5e62f5b6a89209c6ff9831533a10d29dc11f019ce879f0f301702f6852ca3adff08340aed30e1023e720f5026eeded2eada9fc2cc0b5c57ace00f73fc1e2ddf59009bf4c829009308518b4156a5853cc9ff9c0b97", 0xc9, r4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10) io_pgetevents(0x0, 0x5b, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 2.220166291s ago: executing program 1 (id=1509): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a0001"], 0xc8}}, 0x4040) r3 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 2.138472104s ago: executing program 3 (id=1510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f0000000240), &(0x7f00000004c0)=""/200}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xf8, 0xc9, @none, 0x2, 0xa, 0x6, 0x5, 0x74, 0x2}}}, 0x14) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) epoll_create(0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) 2.063294828s ago: executing program 5 (id=1511): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f0000000240), &(0x7f00000004c0)=""/200}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xf8, 0xc9, @none, 0x2, 0xa, 0x6, 0x5, 0x74, 0x2}}}, 0x14) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) epoll_create(0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) 1.309972044s ago: executing program 2 (id=1512): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e61, 0x8cc6, 0x5, &(0x7f0000000100)={[0x4]}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}}}, 0x2e) r2 = io_uring_setup(0x1cd5, &(0x7f0000000440)={0x0, 0x1, 0x40, 0x0, 0xfffffffe}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000300)) r3 = io_uring_setup(0x89a, &(0x7f0000000580)={0x0, 0xa096, 0x80, 0x3, 0xc2}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x1e, 0x20000002, r4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)=0x800002) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffd37) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x6) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 1.292177292s ago: executing program 1 (id=1513): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000040)={0x7}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0000000400000000000200264cdaef00800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x79cb, 0x0, 0x0, 0x0, "4b17e675bb3208c27ff338260a943c6acab1a8"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b406000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x526d, 0x4) 0s ago: executing program 4 (id=1514): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x5}, 0x3b) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40000042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x203220, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000001c0)=0x1490e, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x2a}, 0x10) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$kcm(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): rlapping lowerdir path [ 352.033325][ T5866] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 352.178629][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.255334][ T5866] usb 5-1: Product: syz [ 352.292319][ T5866] usb 5-1: Manufacturer: syz [ 352.316265][ T5866] usb 5-1: SerialNumber: syz [ 352.336918][ T5866] usb 5-1: config 0 descriptor?? [ 352.349617][ T5866] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 352.358347][ T5866] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 352.719320][ T5866] usb 5-1: USB disconnect, device number 21 [ 352.760031][ T9713] fuse: Unknown parameter 'group_i00000000000000000000' [ 352.857236][ T9720] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 352.883275][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.890363][ T9720] CIFS mount error: No usable UNC path provided in device string! [ 352.890363][ T9720] [ 352.902135][ T9720] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 352.983644][ T9724] vlan2: entered promiscuous mode [ 352.988749][ T9724] vlan2: entered allmulticast mode [ 353.420330][ T9728] sch_fq: defrate 1023 ignored. [ 353.615188][ T29] audit: type=1326 audit(1734296365.248:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.5.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7fc00000 [ 353.881677][ T29] audit: type=1326 audit(1734296365.248:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.5.1013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x0 [ 353.911097][ T29] audit: type=1326 audit(1734296365.498:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.5.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee8b785d19 code=0x7fc00000 [ 353.950119][ T9737] FAULT_INJECTION: forcing a failure. [ 353.950119][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 353.963265][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.2.1017 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 353.973942][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 353.983999][ T9737] Call Trace: [ 353.987277][ T9737] [ 353.990208][ T9737] dump_stack_lvl+0x16c/0x1f0 [ 353.994899][ T9737] should_fail_ex+0x497/0x5b0 [ 353.999588][ T9737] ? fs_reclaim_acquire+0xae/0x150 [ 354.004717][ T9737] should_failslab+0xc2/0x120 [ 354.009406][ T9737] __kmalloc_cache_noprof+0x68/0x410 [ 354.014699][ T9737] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.019899][ T9737] alloc_fs_context+0x57/0x9c0 [ 354.024661][ T9737] __x64_sys_fsopen+0xeb/0x240 [ 354.029423][ T9737] do_syscall_64+0xcd/0x250 [ 354.033907][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.039778][ T9737] RIP: 0033:0x7f71b0b85d19 [ 354.044180][ T9737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.063774][ T9737] RSP: 002b:00007f71b1a58038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 354.072182][ T9737] RAX: ffffffffffffffda RBX: 00007f71b0d75fa0 RCX: 00007f71b0b85d19 [ 354.080235][ T9737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 354.088189][ T9737] RBP: 00007f71b1a58090 R08: 0000000000000000 R09: 0000000000000000 [ 354.096146][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.104102][ T9737] R13: 0000000000000001 R14: 00007f71b0d75fa0 R15: 00007fff8852eb88 [ 354.112069][ T9737] [ 354.115173][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.262772][ T9747] batadv0 speed is unknown, defaulting to 1000 [ 354.297757][ T29] audit: type=1400 audit(1734296365.888:985): avc: denied { setopt } for pid=9746 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 354.536912][ T9757] FAULT_INJECTION: forcing a failure. [ 354.536912][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 354.549855][ T9757] CPU: 1 UID: 0 PID: 9757 Comm: syz.3.1021 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 354.560528][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 354.570590][ T9757] Call Trace: [ 354.573866][ T9757] [ 354.576794][ T9757] dump_stack_lvl+0x16c/0x1f0 [ 354.581478][ T9757] should_fail_ex+0x497/0x5b0 [ 354.586169][ T9757] should_failslab+0xc2/0x120 [ 354.590852][ T9757] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 354.596230][ T9757] ? trace_lock_acquire+0x14e/0x1f0 [ 354.601440][ T9757] ? skb_clone+0x190/0x3f0 [ 354.605888][ T9757] skb_clone+0x190/0x3f0 [ 354.610132][ T9757] dev_queue_xmit_nit+0x38f/0xbc0 [ 354.615168][ T9757] ? netif_skb_features+0x3b0/0xd50 [ 354.620375][ T9757] dev_hard_start_xmit+0x283/0x7b0 [ 354.625499][ T9757] __dev_queue_xmit+0x7f0/0x43e0 [ 354.630455][ T9757] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.635855][ T9757] ? __asan_memcpy+0x3c/0x60 [ 354.640446][ T9757] ? __asan_memcpy+0x3c/0x60 [ 354.645036][ T9757] ? __skb_clone+0x570/0x760 [ 354.649641][ T9757] netlink_deliver_tap+0xa87/0xd30 [ 354.654767][ T9757] netlink_unicast+0x5e1/0x7f0 [ 354.659539][ T9757] ? __pfx_netlink_unicast+0x10/0x10 [ 354.664842][ T9757] netlink_sendmsg+0x8b8/0xd70 [ 354.669619][ T9757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.674920][ T9757] ____sys_sendmsg+0xaaf/0xc90 [ 354.679691][ T9757] ? copy_msghdr_from_user+0x10b/0x160 [ 354.685153][ T9757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.690458][ T9757] ___sys_sendmsg+0x135/0x1e0 [ 354.695135][ T9757] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.700344][ T9757] ? __pfx_lock_release+0x10/0x10 [ 354.705371][ T9757] ? trace_lock_acquire+0x14e/0x1f0 [ 354.710590][ T9757] ? __fget_files+0x206/0x3a0 [ 354.715276][ T9757] __sys_sendmsg+0x16e/0x220 [ 354.719865][ T9757] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.724994][ T9757] do_syscall_64+0xcd/0x250 [ 354.729506][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.735410][ T9757] RIP: 0033:0x7f34eb985d19 [ 354.739823][ T9757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.759432][ T9757] RSP: 002b:00007f34e97f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.767849][ T9757] RAX: ffffffffffffffda RBX: 00007f34ebb76160 RCX: 00007f34eb985d19 [ 354.775817][ T9757] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 354.783787][ T9757] RBP: 00007f34e97f6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.791756][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.799729][ T9757] R13: 0000000000000000 R14: 00007f34ebb76160 R15: 00007fffc2bb3728 [ 354.807716][ T9757] [ 355.348793][ T29] audit: type=1400 audit(1734296366.978:986): avc: denied { bind } for pid=9765 comm="syz.5.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 355.373579][ T29] audit: type=1400 audit(1734296367.018:987): avc: denied { getopt } for pid=9765 comm="syz.5.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 355.392855][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.305260][ T5893] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 356.496669][ T9773] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 356.497056][ T29] audit: type=1400 audit(1734296368.138:988): avc: denied { read } for pid=9765 comm="syz.5.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 357.022785][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 357.029241][ T5893] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 357.037655][ T5893] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 357.048042][ T5893] usb 3-1: config 179 has no interface number 0 [ 357.179844][ T9781] befs: (nbd5): No write support. Marking filesystem read-only [ 357.187876][ T9781] syz.5.1028: attempt to access beyond end of device [ 357.187876][ T9781] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 357.230326][ T5893] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.244333][ T5893] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 357.354447][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 357.563581][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.750624][ T9788] ubi0: attaching mtd0 [ 357.768891][ T9788] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 357.768969][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 357.808165][ T46] usb 2-1: config index 0 descriptor too short (expected 3346, got 18) [ 357.816456][ T46] usb 2-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 357.825490][ T46] usb 2-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 357.835851][ T46] usb 2-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 357.900817][ T9788] x_tables: ip_tables: osf match: only valid for protocol 6 [ 357.903916][ T46] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 357.917741][ T46] usb 2-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 357.925974][ T46] usb 2-1: Product: syz [ 357.930140][ T46] usb 2-1: Manufacturer: syz [ 357.934807][ T46] usb 2-1: SerialNumber: syz [ 358.707477][ T29] audit: type=1326 audit(1734296370.348:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 359.356591][ T29] audit: type=1326 audit(1734296370.348:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 359.380437][ T29] audit: type=1326 audit(1734296370.348:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 359.386151][ T9800] netlink: 'syz.5.1034': attribute type 23 has an invalid length. [ 359.449476][ T5893] usb 2-1: USB disconnect, device number 21 [ 359.469751][ T29] audit: type=1326 audit(1734296370.348:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 359.493044][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.637874][ T29] audit: type=1326 audit(1734296370.348:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 359.661201][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.760446][ T29] audit: type=1326 audit(1734296370.378:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 359.837579][ T9804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.866905][ T29] audit: type=1326 audit(1734296370.378:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 359.936858][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1035'. [ 359.951751][ T29] audit: type=1326 audit(1734296370.378:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a2185d19 code=0x7ffc0000 [ 360.072998][ T9804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9804 comm=syz.5.1035 [ 360.140048][ T29] audit: type=1326 audit(1734296370.378:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9774 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58a218591b code=0x7ffc0000 [ 360.163298][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.278071][ T5893] usb 3-1: USB disconnect, device number 37 [ 360.291280][ T9813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.326614][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 360.346324][ T9813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9813 comm=syz.4.1037 [ 360.364630][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1037'. [ 360.481487][ T9819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1040'. [ 360.557234][ T9822] FAULT_INJECTION: forcing a failure. [ 360.557234][ T9822] name failslab, interval 1, probability 0, space 0, times 0 [ 360.570888][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.2.1039 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 360.581558][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 360.591606][ T9822] Call Trace: [ 360.594883][ T9822] [ 360.597788][ T9822] dump_stack_lvl+0x16c/0x1f0 [ 360.602444][ T9822] should_fail_ex+0x497/0x5b0 [ 360.607105][ T9822] ? fs_reclaim_acquire+0xae/0x150 [ 360.612200][ T9822] should_failslab+0xc2/0x120 [ 360.616851][ T9822] __kmalloc_noprof+0xcb/0x510 [ 360.621606][ T9822] io_alloc_async_data+0x9d/0x150 [ 360.626639][ T9822] io_msg_alloc_async+0x82/0x390 [ 360.631553][ T9822] io_sendmsg_prep+0x42d/0x680 [ 360.636297][ T9822] io_submit_sqes+0x853/0x25c0 [ 360.641042][ T9822] __do_sys_io_uring_enter+0xd43/0x1620 [ 360.646567][ T9822] ? __fget_files+0x206/0x3a0 [ 360.651218][ T9822] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 360.657177][ T9822] ? fput+0x67/0x440 [ 360.661047][ T9822] ? ksys_write+0x1ba/0x250 [ 360.665526][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 360.670351][ T9822] do_syscall_64+0xcd/0x250 [ 360.674834][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.680706][ T9822] RIP: 0033:0x7f71b0b85d19 [ 360.685108][ T9822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.704688][ T9822] RSP: 002b:00007f71b1a37038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 360.713074][ T9822] RAX: ffffffffffffffda RBX: 00007f71b0d76080 RCX: 00007f71b0b85d19 [ 360.721017][ T9822] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 360.729140][ T9822] RBP: 00007f71b1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 360.737095][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.745049][ T9822] R13: 0000000000000000 R14: 00007f71b0d76080 R15: 00007fff8852eb88 [ 360.753013][ T9822] [ 360.756124][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.101693][ T5893] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 362.251657][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 362.296688][ T9848] FAULT_INJECTION: forcing a failure. [ 362.296688][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 362.301672][ T5893] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 362.320227][ T5893] usb 5-1: config 0 has no interface number 0 [ 362.326729][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 362.337657][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 362.348377][ T9848] CPU: 1 UID: 0 PID: 9848 Comm: syz.2.1048 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 362.349360][ T5893] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 362.359918][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 362.359932][ T9848] Call Trace: [ 362.359939][ T9848] [ 362.359948][ T9848] dump_stack_lvl+0x16c/0x1f0 [ 362.359978][ T9848] should_fail_ex+0x497/0x5b0 [ 362.360004][ T9848] ? fs_reclaim_acquire+0xae/0x150 [ 362.360035][ T9848] should_failslab+0xc2/0x120 [ 362.360058][ T9848] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 362.360080][ T9848] ? __d_alloc+0x31/0xaa0 [ 362.360106][ T9848] __d_alloc+0x31/0xaa0 [ 362.360131][ T9848] d_alloc+0x4a/0x1e0 [ 362.360154][ T9848] d_alloc_parallel+0xe9/0x12b0 [ 362.360190][ T9848] ? __pfx_d_alloc_parallel+0x10/0x10 [ 362.360217][ T9848] ? lockdep_init_map_type+0x16d/0x7d0 [ 362.360241][ T9848] ? lockdep_init_map_type+0x16d/0x7d0 [ 362.371539][ T5893] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 362.381536][ T9848] __lookup_slow+0x194/0x460 [ 362.381568][ T9848] ? __pfx___lookup_slow+0x10/0x10 [ 362.381597][ T9848] ? lookup_one_unlocked+0x133/0x160 [ 362.381633][ T9848] ? d_lookup+0xe9/0x180 [ 362.381663][ T9848] lookup_one_unlocked+0x142/0x160 [ 362.381688][ T9848] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 362.384947][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 362.387865][ T9848] ovl_lookup_single+0x201/0xf90 [ 362.392777][ T5893] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 362.397152][ T9848] ? __pfx_ovl_lookup_single+0x10/0x10 [ 362.402246][ T5893] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 362.406868][ T9848] ? hlock_class+0x4e/0x130 [ 362.412814][ T5893] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26159, setting to 1024 [ 362.416842][ T9848] ? mark_lock+0xb5/0xc60 [ 362.420964][ T5893] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 362.424915][ T9848] ovl_lookup_layer+0x3a9/0x4a0 [ 362.424941][ T9848] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 362.424959][ T9848] ? find_held_lock+0x2d/0x110 [ 362.424984][ T9848] ? hlock_class+0x4e/0x130 [ 362.425007][ T9848] ? __lock_acquire+0x15a9/0x3c40 [ 362.425029][ T9848] ovl_lookup+0x4ae/0x21f0 [ 362.425059][ T9848] ? __pfx_ovl_lookup+0x10/0x10 [ 362.425082][ T9848] ? lock_acquire.part.0+0x11b/0x380 [ 362.425101][ T9848] ? find_held_lock+0x2d/0x110 [ 362.425129][ T9848] ? d_alloc+0x176/0x1e0 [ 362.425151][ T9848] ? __pfx_lock_release+0x10/0x10 [ 362.425171][ T9848] ? do_raw_spin_lock+0x12d/0x2c0 [ 362.425200][ T9848] ? do_raw_spin_unlock+0x172/0x230 [ 362.425225][ T9848] ? _raw_spin_unlock+0x28/0x50 [ 362.425249][ T9848] lookup_one_qstr_excl+0x11d/0x190 [ 362.425272][ T9848] ? mnt_want_write+0x161/0x450 [ 362.425300][ T9848] do_renameat2+0x5ae/0xdd0 [ 362.425328][ T9848] ? __pfx_do_renameat2+0x10/0x10 [ 362.425349][ T9848] ? lock_acquire+0x2f/0xb0 [ 362.425372][ T9848] ? __virt_addr_valid+0x5e/0x590 [ 362.425396][ T9848] ? __phys_addr_symbol+0x30/0x80 [ 362.425432][ T9848] ? getname_flags.part.0+0x1c5/0x550 [ 362.425463][ T9848] __x64_sys_rename+0x7d/0xa0 [ 362.425487][ T9848] do_syscall_64+0xcd/0x250 [ 362.425518][ T9848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.430340][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.435671][ T9848] RIP: 0033:0x7f71b0b85d19 [ 362.435691][ T9848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.435710][ T9848] RSP: 002b:00007f71b1a58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 362.725462][ T9848] RAX: ffffffffffffffda RBX: 00007f71b0d75fa0 RCX: 00007f71b0b85d19 [ 362.733422][ T9848] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000020000180 [ 362.741379][ T9848] RBP: 00007f71b1a58090 R08: 0000000000000000 R09: 0000000000000000 [ 362.749334][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.757289][ T9848] R13: 0000000000000000 R14: 00007f71b0d75fa0 R15: 00007fff8852eb88 [ 362.765254][ T9848] [ 362.809635][ T5893] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 362.824458][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.835862][ T5893] usb 5-1: Product: syz [ 362.840028][ T5893] usb 5-1: Manufacturer: syz [ 362.855232][ T5893] usb 5-1: SerialNumber: syz [ 362.865868][ T5893] usb 5-1: config 0 descriptor?? [ 362.897144][ T9838] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.906017][ T9838] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.932950][ T5893] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 362.950818][ T5893] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 362.975098][ T5893] scsi host1: microtekX6 [ 363.188995][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 363.189022][ T29] audit: type=1400 audit(1734296374.788:1022): avc: denied { bind } for pid=9857 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 363.381704][ T46] usb 5-1: USB disconnect, device number 22 [ 364.208755][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 364.661806][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 364.829662][ T5893] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.918178][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.938873][ T9878] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 364.946580][ T5893] usb 6-1: Product: syz [ 364.963807][ T29] audit: type=1400 audit(1734296376.608:1023): avc: denied { execmod } for pid=9880 comm="syz.3.1059" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 364.977193][ T9882] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 364.996344][ T29] audit: type=1400 audit(1734296376.618:1024): avc: denied { mount } for pid=9879 comm="syz.1.1056" name="/" dev="pstore" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 365.031896][ T5893] usb 6-1: Manufacturer: syz [ 365.042034][ T5893] usb 6-1: SerialNumber: syz [ 365.054673][ T5893] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 365.186846][ T5863] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 365.505080][ T9888] netlink: 'syz.1.1056': attribute type 10 has an invalid length. [ 365.541570][ T9888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.564519][ T9898] nvme_fabrics: unknown parameter or missing value 'ú0Ç)fzHÎÜ$' in ctrl creation request [ 365.566084][ T29] audit: type=1400 audit(1734296377.208:1025): avc: denied { map } for pid=9879 comm="syz.1.1056" path="socket:[24988]" dev="sockfs" ino=24988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 365.598940][ T29] audit: type=1400 audit(1734296377.228:1026): avc: denied { read } for pid=9879 comm="syz.1.1056" path="socket:[24988]" dev="sockfs" ino=24988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 365.655201][ T29] audit: type=1400 audit(1734296377.298:1027): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 365.761849][ T46] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 365.957710][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 365.990843][ T46] usb 4-1: config 0 has an invalid interface number: 210 but max is 0 [ 365.992604][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 366.008595][ T9904] batadv0 speed is unknown, defaulting to 1000 [ 366.014365][ T46] usb 4-1: config 0 has no interface number 0 [ 366.028899][ T46] usb 4-1: config 0 interface 210 has no altsetting 0 [ 366.109495][ T46] usb 4-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=42.3d [ 366.167318][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.237380][ T46] usb 4-1: Product: syz [ 366.241567][ T46] usb 4-1: Manufacturer: syz [ 366.266463][ T46] usb 4-1: SerialNumber: syz [ 366.273892][ T46] usb 4-1: config 0 descriptor?? [ 366.338113][ T9908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1065'. [ 366.421312][ T9914] batadv0 speed is unknown, defaulting to 1000 [ 366.490454][ T29] audit: type=1400 audit(1734296378.128:1028): avc: denied { ioctl } for pid=9885 comm="syz.3.1061" path="socket:[24983]" dev="sockfs" ino=24983 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 366.490480][ T46] dvb-usb: found a 'Pinnacle PCTV 282e' in warm state. [ 366.527503][ T5863] usb 6-1: Service connection timeout for: 256 [ 366.541412][ T5863] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 366.566309][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.600357][ T46] dvbdev: DVB: registering new adapter (Pinnacle PCTV 282e) [ 366.604702][ T5863] ath9k_htc: Failed to initialize the device [ 366.609273][ T46] usb 4-1: media controller created [ 366.639311][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.659243][ T5863] usb 6-1: ath9k_htc: USB layer deinitialized [ 366.719012][ T46] DVB: Unable to find symbol dib7000p_attach() [ 366.726096][ T46] dvb-usb: no frontend was attached by 'Pinnacle PCTV 282e' [ 366.732344][ T9919] xt_CT: No such helper "syz1" [ 366.792282][ T46] rc_core: IR keymap rc-dib0700-rc5 not found [ 366.801296][ T46] Registered IR keymap rc-empty [ 366.809960][ T46] dvb-usb: could not initialize remote control. [ 366.838469][ T46] dvb-usb: Pinnacle PCTV 282e successfully initialized and connected. [ 367.238403][ T9906] usb 6-1: USB disconnect, device number 6 [ 367.511176][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 367.864481][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.063894][ T9949] vlan2: entered promiscuous mode [ 368.069073][ T9949] vlan2: entered allmulticast mode [ 368.901759][ T5128] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.129062][ T46] usb 4-1: USB disconnect, device number 32 [ 369.288061][ T9958] serio: Serial port ptm0 [ 369.341265][ T9958] ebt_among: src integrity fail: 30a [ 369.401724][ T46] dvb-usb: Pinnacle PCTV 282e successfully deinitialized and disconnected. [ 369.454826][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 369.599798][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 369.609008][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 370.568713][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 370.629808][ T29] audit: type=1400 audit(1734296382.268:1029): avc: denied { write } for pid=9965 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 370.652222][ T5863] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.670357][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 370.684403][ T5863] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 370.697067][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.706482][ T5863] usb 6-1: config 0 descriptor?? [ 370.713218][ T5863] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 370.736699][ T9977] xt_CT: No such helper "syz1" [ 370.810299][ T29] audit: type=1400 audit(1734296382.448:1030): avc: denied { map } for pid=9980 comm="syz.1.1084" path="socket:[24386]" dev="sockfs" ino=24386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.832921][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 370.892259][ T29] audit: type=1400 audit(1734296382.448:1031): avc: denied { read } for pid=9980 comm="syz.1.1084" path="socket:[24386]" dev="sockfs" ino=24386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 371.254507][ T29] audit: type=1400 audit(1734296382.898:1032): avc: denied { create } for pid=9993 comm="syz.3.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.498574][T10001] ip6t_REJECT: ECHOREPLY is not supported [ 372.636457][T10003] vlan2: entered promiscuous mode [ 372.641653][T10003] vlan2: entered allmulticast mode [ 373.083268][ T29] audit: type=1326 audit(1734296384.728:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34eb985d19 code=0x0 [ 373.284448][ T5863] usb 6-1: USB disconnect, device number 7 [ 373.326375][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 373.483255][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 373.492299][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 373.513278][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 373.527030][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.557965][ T8] usb 2-1: Product: syz [ 373.574918][ T8] usb 2-1: Manufacturer: syz [ 373.596172][ T8] usb 2-1: SerialNumber: syz [ 373.602767][ T8] usb 2-1: config 0 descriptor?? [ 373.624007][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 373.682070][ T5865] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 373.791880][ T29] audit: type=1400 audit(1734296385.418:1034): avc: denied { create } for pid=10024 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 373.811799][ T29] audit: type=1400 audit(1734296385.418:1035): avc: denied { write } for pid=10024 comm="syz.3.1096" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 373.969020][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 373.979340][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 373.986188][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.997576][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.009025][ T5865] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 374.018204][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.048308][ T5865] usb 3-1: config 0 descriptor?? [ 374.175302][T10029] ubi0: attaching mtd0 [ 374.179381][T10029] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 374.190206][T10029] x_tables: ip_tables: osf match: only valid for protocol 6 [ 374.500968][T10035] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 374.566810][T10033] xt_CT: No such helper "syz1" [ 374.602673][ T5865] elan 0003:04F3:0755.000F: failed to start in urb: -90 [ 374.613054][ T5865] elan 0003:04F3:0755.000F: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 374.795716][ T1529] usb 3-1: USB disconnect, device number 38 [ 374.818122][ T29] audit: type=1400 audit(1734296386.458:1036): avc: denied { getopt } for pid=10043 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.574577][ T8] gspca_zc3xx: reg_w_i err -71 [ 375.629246][T10047] serio: Serial port ptm1 [ 375.687053][T10048] ebt_among: src integrity fail: 30a [ 375.784533][ T29] audit: type=1326 audit(1734296387.428:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.2.1107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71b0b85d19 code=0x0 [ 376.191707][ T8] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 376.375437][ T8] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 376.410005][ T8] usb 2-1: USB disconnect, device number 22 [ 376.491676][ T1529] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 376.647544][ T1529] usb 4-1: Using ep0 maxpacket: 16 [ 376.656349][ T1529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.675780][ T1529] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 376.730042][ T1529] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.760932][ T1529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.937532][ T1529] usb 4-1: config 0 descriptor?? [ 376.949426][ T1529] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 377.660382][T10083] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 377.675479][T10082] ubi0: attaching mtd0 [ 377.679623][T10082] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 377.692753][T10082] x_tables: ip_tables: osf match: only valid for protocol 6 [ 377.916342][T10089] FAULT_INJECTION: forcing a failure. [ 377.916342][T10089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.931258][T10089] CPU: 1 UID: 0 PID: 10089 Comm: syz.4.1116 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 377.942002][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 377.952033][T10089] Call Trace: [ 377.955295][T10089] [ 377.958215][T10089] dump_stack_lvl+0x16c/0x1f0 [ 377.962879][T10089] should_fail_ex+0x497/0x5b0 [ 377.967556][T10089] _copy_from_user+0x2e/0xd0 [ 377.972140][T10089] drm_ioctl+0x501/0xc00 [ 377.976377][T10089] ? __pfx_vgem_fence_signal_ioctl+0x10/0x10 [ 377.982341][T10089] ? __pfx_drm_ioctl+0x10/0x10 [ 377.987091][T10089] ? __pfx_lock_release+0x10/0x10 [ 377.992110][T10089] ? selinux_file_ioctl+0x180/0x270 [ 377.997296][T10089] ? selinux_file_ioctl+0xb4/0x270 [ 378.002400][T10089] ? __pfx_drm_ioctl+0x10/0x10 [ 378.007155][T10089] __x64_sys_ioctl+0x190/0x200 [ 378.011912][T10089] do_syscall_64+0xcd/0x250 [ 378.016413][T10089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.022295][T10089] RIP: 0033:0x7f367f985d19 [ 378.026696][T10089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.046290][T10089] RSP: 002b:00007f3680809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.054693][T10089] RAX: ffffffffffffffda RBX: 00007f367fb75fa0 RCX: 00007f367f985d19 [ 378.062651][T10089] RDX: 0000000020000000 RSI: 00000000c0106442 RDI: 0000000000000004 [ 378.070605][T10089] RBP: 00007f3680809090 R08: 0000000000000000 R09: 0000000000000000 [ 378.078560][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.086522][T10089] R13: 0000000000000000 R14: 00007f367fb75fa0 R15: 00007ffdaff53358 [ 378.094491][T10089] [ 378.151221][T10091] xt_CT: No such helper "syz1" [ 378.264813][ T1290] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.276032][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.092615][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 379.101923][T10098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1118'. [ 379.690629][T10114] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 379.716229][ T8] usb 4-1: USB disconnect, device number 33 [ 379.920275][T10125] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 380.324254][T10128] ubi0: attaching mtd0 [ 380.328347][T10128] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 380.339182][T10128] x_tables: ip_tables: osf match: only valid for protocol 6 [ 380.382288][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 380.391959][T10129] batadv0 speed is unknown, defaulting to 1000 [ 380.463735][ T9906] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 380.594841][ T5128] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 380.622148][ T9906] usb 4-1: Using ep0 maxpacket: 16 [ 380.649392][ T9906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.684677][ T9906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.772850][ T9906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.795665][T10135] input: syz1 as /devices/virtual/input/input15 [ 380.808801][ T9906] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.838455][ T9906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.869207][ T9906] usb 4-1: config 0 descriptor?? [ 380.900587][T10137] serio: Serial port ptm0 [ 380.958899][T10142] ebt_among: src integrity fail: 30a [ 381.098919][T10145] xt_CT: No such helper "syz1" [ 381.211721][ T1529] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 381.334639][ T5901] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 381.344611][ T9906] microsoft 0003:045E:07DA.0010: report is too long [ 381.351366][ T9906] microsoft 0003:045E:07DA.0010: item 0 4 0 8 parsing failed [ 381.359348][ T9906] microsoft 0003:045E:07DA.0010: parse failed [ 381.365962][ T9906] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 381.371640][ T1529] usb 2-1: Using ep0 maxpacket: 16 [ 381.381857][ T1529] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.392078][ T1529] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 381.405030][ T1529] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.415135][ T1529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.425083][ T1529] usb 2-1: config 0 descriptor?? [ 381.432528][ T1529] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 381.501691][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 381.508409][ T5901] usb 5-1: config index 0 descriptor too short (expected 3346, got 18) [ 381.516778][ T5901] usb 5-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 381.526062][ T5901] usb 5-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 381.536615][ T5901] usb 5-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 381.553653][ T5901] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 381.558668][ T9906] usb 4-1: USB disconnect, device number 34 [ 381.569237][ T5901] usb 5-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 381.569260][ T5901] usb 5-1: Product: syz [ 381.588328][ T5901] usb 5-1: Manufacturer: syz [ 381.592997][ T5901] usb 5-1: SerialNumber: syz [ 381.775791][ T29] audit: type=1400 audit(1734296393.418:1038): avc: denied { connect } for pid=10154 comm="syz.2.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 381.912187][T10159] FAULT_INJECTION: forcing a failure. [ 381.912187][T10159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.945750][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.5.1141 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 381.956531][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 381.966584][T10159] Call Trace: [ 381.969858][T10159] [ 381.972790][T10159] dump_stack_lvl+0x16c/0x1f0 [ 381.977477][T10159] should_fail_ex+0x497/0x5b0 [ 381.982168][T10159] _copy_to_user+0x32/0xd0 [ 381.986596][T10159] simple_read_from_buffer+0xd0/0x160 [ 381.991984][T10159] proc_fail_nth_read+0x198/0x270 [ 381.997019][T10159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.002579][T10159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.008132][T10159] vfs_read+0x1df/0xbe0 [ 382.012287][T10159] ? __fget_files+0x1fc/0x3a0 [ 382.016964][T10159] ? __pfx___mutex_lock+0x10/0x10 [ 382.021994][T10159] ? __pfx_vfs_read+0x10/0x10 [ 382.026673][T10159] ? __fget_files+0x206/0x3a0 [ 382.031346][T10159] ksys_read+0x12b/0x250 [ 382.035574][T10159] ? __pfx_ksys_read+0x10/0x10 [ 382.040326][T10159] do_syscall_64+0xcd/0x250 [ 382.044820][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.050700][T10159] RIP: 0033:0x7fee8b78472c [ 382.055118][T10159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.074711][T10159] RSP: 002b:00007fee8c59a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.083109][T10159] RAX: ffffffffffffffda RBX: 00007fee8b975fa0 RCX: 00007fee8b78472c [ 382.091064][T10159] RDX: 000000000000000f RSI: 00007fee8c59a0a0 RDI: 0000000000000005 [ 382.099019][T10159] RBP: 00007fee8c59a090 R08: 0000000000000000 R09: 0000000000000000 [ 382.106974][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.114928][T10159] R13: 0000000000000000 R14: 00007fee8b975fa0 R15: 00007ffcb621d788 [ 382.123590][T10159] [ 382.126696][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.140356][ T29] audit: type=1326 audit(1734296393.778:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.168104][ T29] audit: type=1326 audit(1734296393.778:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.191542][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.198592][ T29] audit: type=1326 audit(1734296393.808:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.222071][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.229126][ T29] audit: type=1326 audit(1734296393.808:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.253270][ T29] audit: type=1326 audit(1734296393.808:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.276705][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.295369][ T29] audit: type=1326 audit(1734296393.808:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.319151][ T29] audit: type=1326 audit(1734296393.808:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.343590][ T29] audit: type=1326 audit(1734296393.808:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367f985d19 code=0x7ffc0000 [ 382.367878][ T29] audit: type=1326 audit(1734296393.808:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f367f98591b code=0x7ffc0000 [ 382.461250][ T5865] usb 5-1: USB disconnect, device number 23 [ 382.502793][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.532597][T10172] geneve1: entered allmulticast mode [ 382.877820][T10172] input: syz1 as /devices/virtual/input/input16 [ 383.303771][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.512751][ T5865] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 383.733319][ T5865] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.742682][ T5865] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 383.755118][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.773929][ T5865] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.787900][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1151'. [ 383.788891][ T5865] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.806719][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.827854][ T5865] usb 5-1: Product: syz [ 383.840086][ T5865] usb 5-1: Manufacturer: syz [ 383.856028][ T5865] cdc_wdm 5-1:1.0: skipping garbage [ 383.861451][ T5865] cdc_wdm 5-1:1.0: skipping garbage [ 383.867918][ T5865] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 383.904882][ T9906] usb 2-1: USB disconnect, device number 23 [ 384.100526][ T9906] usb 5-1: USB disconnect, device number 24 [ 384.481432][T10205] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 384.814356][ T5128] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 384.831055][ T5128] Bluetooth: hci0: Injecting HCI hardware error event [ 384.845645][ T5128] Bluetooth: hci0: hardware error 0x00 [ 385.426781][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 385.438435][T10227] batadv0 speed is unknown, defaulting to 1000 [ 386.085419][ T5901] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 386.410803][T10232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1165'. [ 386.430106][ T5865] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 386.480191][T10239] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 386.602780][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 386.616148][ T5865] usb 6-1: config index 0 descriptor too short (expected 3346, got 18) [ 386.625713][ T5865] usb 6-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 386.632765][ T5901] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 386.712691][T10241] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 387.196271][ T5865] usb 6-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 387.203186][ T5901] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 387.203884][ T5865] usb 6-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 387.252534][ T5128] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 387.311675][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 387.319960][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.343026][ T5865] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 387.352124][ T5865] usb 6-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 387.360334][ T5865] usb 6-1: Product: syz [ 387.463606][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.488757][ T5901] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.517628][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.529562][ T5865] usb 6-1: Manufacturer: syz [ 387.541791][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.542031][ T5865] usb 6-1: SerialNumber: syz [ 387.549794][ T5901] usb 4-1: Product: syz [ 387.549812][ T5901] usb 4-1: Manufacturer: syz [ 387.586662][ T5901] cdc_wdm 4-1:1.0: skipping garbage [ 387.592088][ T5901] cdc_wdm 4-1:1.0: skipping garbage [ 387.601508][ T5901] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 387.965291][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 387.965353][ T46] usb 4-1: USB disconnect, device number 35 [ 387.967245][ T29] audit: type=1326 audit(1734296399.608:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.001443][ T29] audit: type=1326 audit(1734296399.608:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.025457][ T29] audit: type=1326 audit(1734296399.608:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.049092][ T29] audit: type=1326 audit(1734296399.608:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.072958][ T29] audit: type=1326 audit(1734296399.608:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.096491][ T29] audit: type=1326 audit(1734296399.608:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.102424][ T5901] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 388.120404][ T29] audit: type=1326 audit(1734296399.608:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.152064][ T29] audit: type=1326 audit(1734296399.608:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 388.175799][ T29] audit: type=1326 audit(1734296399.608:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee8b78591b code=0x7ffc0000 [ 388.200042][ T29] audit: type=1326 audit(1734296399.608:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.5.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee8b78591b code=0x7ffc0000 [ 388.273031][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.294509][ T5819] usb 6-1: USB disconnect, device number 8 [ 388.305812][ T5901] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 388.319592][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.328957][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.343771][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.352987][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.360972][ T5901] usb 3-1: Product: syz [ 388.365258][ T5901] usb 3-1: Manufacturer: syz [ 388.373494][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 388.378710][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 388.385213][ T5901] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 388.605665][T10266] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1176'. [ 388.615515][T10266] unsupported nlmsg_type 40 [ 388.620573][T10265] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1176'. [ 388.653130][ T5901] usb 3-1: USB disconnect, device number 39 [ 388.978424][T10274] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1178'. [ 389.411737][ T9906] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 390.132819][ T9906] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.141979][ T9906] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 390.161320][ T9906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.180074][ T9906] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.195414][ T9906] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.204819][ T9906] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.212858][ T9906] usb 5-1: Product: syz [ 390.217168][ T9906] usb 5-1: Manufacturer: syz [ 390.406871][T10296] serio: Serial port ptm0 [ 390.415139][ T9906] cdc_wdm 5-1:1.0: skipping garbage [ 390.420377][ T9906] cdc_wdm 5-1:1.0: skipping garbage [ 390.425793][ T9906] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 390.464823][T10296] ebt_among: src integrity fail: 30a [ 390.620369][ T8] usb 5-1: USB disconnect, device number 25 [ 390.711933][ T9906] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 390.761747][ T5901] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 390.832640][T10306] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1190'. [ 390.861945][ T9906] usb 4-1: Using ep0 maxpacket: 16 [ 390.873257][ T9906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.884056][ T9906] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 390.897654][ T9906] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.907213][ T9906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.916603][ T9906] usb 4-1: config 0 descriptor?? [ 390.921827][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 390.923818][ T9906] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 390.932018][ T5901] usb 6-1: config index 0 descriptor too short (expected 3346, got 18) [ 391.252463][ T9906] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 391.478580][ T5901] usb 6-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 391.487526][ T5901] usb 6-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 391.498204][ T5901] usb 6-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 391.511197][ T5901] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 391.520281][ T5901] usb 6-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 391.524391][ T9906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.530172][ T5901] usb 6-1: Product: syz [ 391.540853][ T9906] usb 3-1: not running at top speed; connect to a high speed hub [ 391.557877][ T9906] usb 3-1: config 4 has an invalid interface number: 111 but max is 0 [ 391.566328][ T9906] usb 3-1: config 4 has no interface number 0 [ 391.570705][ T5901] usb 6-1: Manufacturer: syz [ 391.577043][ T5901] usb 6-1: SerialNumber: syz [ 391.587296][ T9906] usb 3-1: config 4 interface 111 has no altsetting 0 [ 391.608498][ T9906] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 391.618424][ T9906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.631541][ T9906] usb 3-1: Product: syz [ 391.635925][ T9906] usb 3-1: Manufacturer: syz [ 391.640818][ T9906] usb 3-1: SerialNumber: syz [ 391.659000][T10315] fuse: Bad value for 'fd' [ 391.823877][T10317] ubi0: attaching mtd0 [ 391.827997][T10317] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 391.838499][T10317] x_tables: ip_tables: osf match: only valid for protocol 6 [ 392.637824][ T5901] usb 6-1: USB disconnect, device number 9 [ 393.114377][T10340] befs: (nbd4): No write support. Marking filesystem read-only [ 393.122594][T10340] syz.4.1199: attempt to access beyond end of device [ 393.122594][T10340] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 393.853051][ T5901] usb 4-1: USB disconnect, device number 36 [ 393.897543][ T9906] pvrusb2: Hardware description: Terratec Grabster AV400 [ 393.916269][ T9906] pvrusb2: ********** [ 393.941971][ T9906] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 393.957540][ T9906] pvrusb2: Important functionality might not be entirely working. [ 393.965591][ T9906] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 393.971848][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 393.977317][ T9906] pvrusb2: ********** [ 393.990056][ T9906] usb 3-1: selecting invalid altsetting 0 [ 394.003276][ T2327] pvrusb2: control-write URB failure, status=-71 [ 394.019810][ T2327] pvrusb2: Device being rendered inoperable [ 394.023248][ T9906] usb 3-1: USB disconnect, device number 40 [ 394.036253][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 394.069415][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 394.161893][T10352] xt_CT: No such helper "syz1" [ 394.210453][T10357] fuse: Bad value for 'fd' [ 394.475713][T10363] ubi0: attaching mtd0 [ 394.479847][T10363] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 394.494514][T10363] x_tables: ip_tables: osf match: only valid for protocol 6 [ 395.212233][ T5893] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 395.451641][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 395.792361][ T5893] usb 6-1: config index 0 descriptor too short (expected 3346, got 18) [ 395.805436][ T5893] usb 6-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 395.814609][ T5893] usb 6-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 395.825798][ T5893] usb 6-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 396.184540][ T5893] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 396.194008][ T5893] usb 6-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 396.202313][ T5893] usb 6-1: Product: syz [ 396.207143][ T5893] usb 6-1: Manufacturer: syz [ 396.211797][ T5893] usb 6-1: SerialNumber: syz [ 396.325965][T10386] fuse: Invalid rootmode [ 396.466850][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 396.490330][ T29] audit: type=1326 audit(1734296408.108:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 396.723201][ T46] usb 6-1: USB disconnect, device number 10 [ 396.737085][ T29] audit: type=1326 audit(1734296408.108:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 396.770389][ T29] audit: type=1326 audit(1734296408.108:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 396.797929][ T5865] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 396.926107][ T29] audit: type=1326 audit(1734296408.108:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 396.960617][ T29] audit: type=1326 audit(1734296408.108:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 397.408697][ T29] audit: type=1326 audit(1734296408.108:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 398.025559][T10404] ubi0: attaching mtd0 [ 398.029629][T10404] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 398.039702][T10404] x_tables: ip_tables: osf match: only valid for protocol 6 [ 398.049987][ T29] audit: type=1326 audit(1734296408.108:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 398.073456][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.088409][ T29] audit: type=1326 audit(1734296408.108:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 398.112361][ T29] audit: type=1326 audit(1734296408.108:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee8b78591b code=0x7ffc0000 [ 398.135708][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.142338][ T29] audit: type=1326 audit(1734296408.108:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10368 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee8b78591b code=0x7ffc0000 [ 398.371739][ T5893] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 398.457434][ T5865] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 398.470363][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.479391][ T5865] usb 5-1: Product: syz [ 398.484224][ T5865] usb 5-1: Manufacturer: syz [ 398.488884][ T5865] usb 5-1: SerialNumber: syz [ 398.497513][ T5865] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 398.801632][ T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 399.091791][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 399.141870][ T5893] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 399.153600][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.164042][ T5893] usb 4-1: Product: syz [ 399.168218][ T5893] usb 4-1: Manufacturer: syz [ 399.173008][ T5893] usb 4-1: SerialNumber: syz [ 399.183649][ T5893] r8152-cfgselector 4-1: Unknown version 0x0000 [ 399.190147][ T5893] r8152-cfgselector 4-1: config 0 descriptor?? [ 399.199773][ T5863] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.231710][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 399.231731][ T9906] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 399.242106][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.260763][ T46] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 399.270029][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.278745][ T46] usb 6-1: Product: syz [ 399.283777][ T46] usb 6-1: Manufacturer: syz [ 399.288415][ T46] usb 6-1: SerialNumber: syz [ 399.299065][ T46] usb 6-1: config 0 descriptor?? [ 399.322466][ T5901] usb 5-1: USB disconnect, device number 26 [ 399.359897][ T46] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 399.367159][ T46] gspca_stv06xx: st6422 sensor detected [ 399.392998][ T9906] usb 3-1: Using ep0 maxpacket: 16 [ 399.404160][ T9906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.415556][ T9906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.427636][ T9906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.440853][ T9906] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 399.449935][ T9906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.463288][ T9906] usb 3-1: config 0 descriptor?? [ 399.617166][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.625908][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.313920][ T5863] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 400.321147][ T5863] ath9k_htc: Failed to initialize the device [ 400.340291][ T5901] usb 5-1: ath9k_htc: USB layer deinitialized [ 400.374388][ T9906] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0011/input/input18 [ 400.387353][ T8] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 400.405314][T10425] FAULT_INJECTION: forcing a failure. [ 400.405314][T10425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.418537][T10425] CPU: 0 UID: 0 PID: 10425 Comm: syz.4.1226 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 400.429300][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 400.439379][T10425] Call Trace: [ 400.442660][T10425] [ 400.445589][T10425] dump_stack_lvl+0x16c/0x1f0 [ 400.450284][T10425] should_fail_ex+0x497/0x5b0 [ 400.454978][T10425] _copy_to_user+0x32/0xd0 [ 400.459417][T10425] simple_read_from_buffer+0xd0/0x160 [ 400.461605][T10429] fuse: Invalid rootmode [ 400.464792][T10425] proc_fail_nth_read+0x198/0x270 [ 400.474074][T10425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.479628][T10425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.485167][T10425] vfs_read+0x1df/0xbe0 [ 400.489316][T10425] ? __fget_files+0x1fc/0x3a0 [ 400.493978][T10425] ? __pfx___mutex_lock+0x10/0x10 [ 400.498993][T10425] ? __pfx_vfs_read+0x10/0x10 [ 400.503661][T10425] ? __fget_files+0x206/0x3a0 [ 400.508328][T10425] ksys_read+0x12b/0x250 [ 400.512556][T10425] ? __pfx_ksys_read+0x10/0x10 [ 400.517309][T10425] do_syscall_64+0xcd/0x250 [ 400.521805][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.527691][T10425] RIP: 0033:0x7f367f98472c [ 400.532090][T10425] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 400.551687][T10425] RSP: 002b:00007f3680809030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.560084][T10425] RAX: ffffffffffffffda RBX: 00007f367fb75fa0 RCX: 00007f367f98472c [ 400.568040][T10425] RDX: 000000000000000f RSI: 00007f36808090a0 RDI: 0000000000000003 [ 400.575997][T10425] RBP: 00007f3680809090 R08: 0000000000000000 R09: 0000000000000000 [ 400.583954][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.591911][T10425] R13: 0000000000000000 R14: 00007f367fb75fa0 R15: 00007ffdaff53358 [ 400.599895][T10425] [ 400.602914][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.614646][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.633472][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.651877][ T9906] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 400.673699][ T9906] usb 3-1: USB disconnect, device number 41 [ 400.934427][T10431] xt_l2tp: invalid flags combination: c [ 401.209412][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 401.440811][ T46] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 401.455603][ T46] usb 6-1: USB disconnect, device number 11 [ 401.483908][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 401.870321][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 401.870336][ T29] audit: type=1400 audit(1734296413.508:1196): avc: denied { create } for pid=10446 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 401.931787][ T46] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 401.950349][ T29] audit: type=1400 audit(1734296413.508:1197): avc: denied { sys_admin } for pid=10446 comm="syz.3.1234" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 402.132248][T10463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10463 comm=syz.2.1238 [ 402.151977][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 402.158514][ T46] usb 6-1: config index 0 descriptor too short (expected 3346, got 18) [ 402.167403][ T46] usb 6-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 402.176320][ T46] usb 6-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 402.186796][ T46] usb 6-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 402.199821][ T46] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 402.208896][ T9906] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 402.240487][ T29] audit: type=1400 audit(1734296413.878:1198): avc: denied { append } for pid=10462 comm="syz.2.1238" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 402.277336][ T46] usb 6-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 402.317192][ T46] usb 6-1: Product: syz [ 402.336104][ T46] usb 6-1: Manufacturer: syz [ 402.350745][ T46] usb 6-1: SerialNumber: syz [ 402.693989][ T29] audit: type=1326 audit(1734296414.328:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.5.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 402.722355][ T29] audit: type=1326 audit(1734296414.328:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.5.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 403.042160][ T9906] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 403.050355][ T9906] usb 4-1: config 0 has no interface number 0 [ 403.057759][ T29] audit: type=1326 audit(1734296414.328:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.5.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 403.097333][ T8] usb 6-1: USB disconnect, device number 12 [ 403.104194][ T9906] usb 4-1: config 0 interface 112 has no altsetting 0 [ 403.210948][ T29] audit: type=1326 audit(1734296414.328:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.5.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 403.245356][ T29] audit: type=1326 audit(1734296414.328:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.5.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 403.268825][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.280622][ T29] audit: type=1326 audit(1734296414.328:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.5.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 403.574067][ T9906] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=e0.0c [ 403.817579][ T29] audit: type=1326 audit(1734296414.328:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.5.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 403.817836][ T9906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.841047][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.855609][ T9906] usb 4-1: Product: syz [ 403.859822][ T9906] usb 4-1: Manufacturer: syz [ 403.864650][ T9906] usb 4-1: SerialNumber: syz [ 403.879653][ T9906] usb 4-1: config 0 descriptor?? [ 403.896936][T10487] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1248'. [ 404.177001][T10492] mkiss: ax0: crc mode is auto. [ 404.505528][ T9906] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.112/input/input19 [ 404.532179][ T5174] bcm5974 4-1:0.112: could not read from device [ 404.540565][ T5174] bcm5974 4-1:0.112: could not read from device [ 404.571047][ T5174] bcm5974 4-1:0.112: could not read from device [ 404.584371][ T9906] usb 4-1: USB disconnect, device number 38 [ 404.598589][ T5174] bcm5974 4-1:0.112: could not read from device [ 404.833862][T10505] ptm ptm16: ldisc open failed (-12), clearing slot 16 [ 405.355631][T10519] fuse: Bad value for 'fd' [ 405.639283][T10527] siw: device registration error -23 [ 406.435082][ T5819] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 406.736809][T10538] siw: device registration error -23 [ 407.002128][ T9906] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 407.189832][ T9906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.238020][ T9906] usb 4-1: not running at top speed; connect to a high speed hub [ 407.246896][ T9906] usb 4-1: config 4 has an invalid interface number: 111 but max is 0 [ 407.274305][ T9906] usb 4-1: config 4 has no interface number 0 [ 407.303453][ T9906] usb 4-1: config 4 interface 111 has no altsetting 0 [ 407.335303][ T9906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 407.347018][ T9906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.358063][ T9906] usb 4-1: Product: syz [ 407.359987][T10542] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1261'. [ 407.362546][ T9906] usb 4-1: Manufacturer: syz [ 407.373684][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.380965][ T9906] usb 4-1: SerialNumber: syz [ 407.389508][T10542] openvswitch: netlink: Flow key attr not present in new flow. [ 407.398447][ T5819] usb 2-1: not running at top speed; connect to a high speed hub [ 407.407846][ T5819] usb 2-1: config 4 has an invalid interface number: 111 but max is 0 [ 407.416137][ T5819] usb 2-1: config 4 has no interface number 0 [ 407.431626][ T5819] usb 2-1: config 4 interface 111 has no altsetting 0 [ 407.442545][ T5819] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 407.454809][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.463024][ T5819] usb 2-1: Product: syz [ 407.467826][ T5819] usb 2-1: Manufacturer: syz [ 407.472600][ T5819] usb 2-1: SerialNumber: syz [ 407.542794][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 407.542803][ T29] audit: type=1400 audit(1734296419.178:1233): avc: denied { setattr } for pid=10544 comm="syz.2.1263" name="" dev="pipefs" ino=27874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 407.571057][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.640451][ T29] audit: type=1400 audit(1734296419.278:1234): avc: denied { write } for pid=10544 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 408.153537][T10553] kvm: apic: phys broadcast and lowest prio [ 408.328237][T10560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.369131][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1269'. [ 408.390800][T10560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10560 comm=syz.5.1269 [ 408.567274][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1269'. [ 409.631533][ T9906] pvrusb2: Hardware description: Terratec Grabster AV400 [ 409.638789][ T9906] pvrusb2: ********** [ 409.645567][ T9906] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 409.656056][ T9906] pvrusb2: Important functionality might not be entirely working. [ 409.664016][ T9906] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 410.625358][ T9906] pvrusb2: ********** [ 410.630702][ T9906] usb 4-1: selecting invalid altsetting 0 [ 410.641267][ T9906] usb 4-1: USB disconnect, device number 39 [ 410.647995][ T9906] pvrusb2: Device being rendered inoperable [ 410.648350][ T5819] pvrusb2: Hardware description: Terratec Grabster AV400 [ 410.661033][ T5819] pvrusb2: ********** [ 410.665544][ T5819] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 410.675836][ T5819] pvrusb2: Important functionality might not be entirely working. [ 410.683970][ T5819] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 410.695506][ T5819] pvrusb2: ********** [ 410.699711][ T5819] usb 2-1: selecting invalid altsetting 0 [ 410.833460][T10572] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 410.845218][ T5819] usb 2-1: USB disconnect, device number 24 [ 410.862847][ T5819] pvrusb2: Device being rendered inoperable [ 411.120809][ T29] audit: type=1400 audit(1734296422.728:1235): avc: denied { append } for pid=10573 comm="syz.3.1272" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.314809][ T29] audit: type=1400 audit(1734296422.728:1236): avc: denied { lock } for pid=10573 comm="syz.3.1272" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.527435][T10581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1274'. [ 411.917528][T10585] siw: device registration error -23 [ 411.927108][T10584] siw: device registration error -23 [ 412.201656][ T5819] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 412.209293][ T46] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 412.217943][ T29] audit: type=1400 audit(1734296423.858:1237): avc: denied { bind } for pid=10589 comm="syz.4.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.290535][ T29] audit: type=1400 audit(1734296423.928:1238): avc: denied { setattr } for pid=10589 comm="syz.4.1279" name="file0" dev="tmpfs" ino=1327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 412.364224][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.382110][ T5819] usb 4-1: not running at top speed; connect to a high speed hub [ 412.940725][ T5819] usb 4-1: config 4 has an invalid interface number: 111 but max is 0 [ 412.949137][ T5819] usb 4-1: config 4 has no interface number 0 [ 412.956121][ T5819] usb 4-1: config 4 interface 111 has no altsetting 0 [ 412.971476][ T5819] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 412.991202][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 413.204468][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 413.220397][ T46] usb 2-1: config 4 has an invalid interface number: 111 but max is 0 [ 413.238701][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.253142][ T46] usb 2-1: config 4 has no interface number 0 [ 413.276168][ T46] usb 2-1: config 4 interface 111 has no altsetting 0 [ 413.283468][ T5819] usb 4-1: Product: syz [ 413.290767][ T5819] usb 4-1: Manufacturer: syz [ 413.295538][ T5819] usb 4-1: SerialNumber: syz [ 413.306201][ T46] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 413.315365][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.323560][ T46] usb 2-1: Product: syz [ 413.327795][ T46] usb 2-1: Manufacturer: syz [ 413.333525][ T46] usb 2-1: SerialNumber: syz [ 413.541759][ T1529] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 413.549634][ T5901] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 413.732748][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 413.739470][ T1529] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 413.755232][ T1529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 413.775444][ T5901] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 413.787061][ T1529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 413.798520][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 413.807072][ T5901] usb 6-1: Product: syz [ 413.811342][ T1529] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.825324][ T5901] usb 6-1: Manufacturer: syz [ 413.830018][ T5901] usb 6-1: SerialNumber: syz [ 413.850385][ T5901] usb 6-1: config 0 descriptor?? [ 413.855887][ T1529] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.944570][ T1529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.313366][ T1529] usb 5-1: config 0 descriptor?? [ 414.471252][T10598] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 415.462033][ T9906] usb 6-1: USB disconnect, device number 13 [ 415.532841][ T46] pvrusb2: Hardware description: Terratec Grabster AV400 [ 415.546345][ T46] pvrusb2: ********** [ 415.555094][ T46] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 415.568019][ T5819] pvrusb2: Hardware description: Terratec Grabster AV400 [ 415.585393][ T5819] pvrusb2: ********** [ 415.589423][ T46] pvrusb2: Important functionality might not be entirely working. [ 415.602869][ T5819] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 415.613038][ T46] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 415.624465][ T5819] pvrusb2: Important functionality might not be entirely working. [ 415.632478][ T46] pvrusb2: ********** [ 415.636488][ T5819] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 415.648613][ T46] usb 2-1: selecting invalid altsetting 0 [ 415.656805][ T5819] pvrusb2: ********** [ 415.661119][ T5819] usb 4-1: selecting invalid altsetting 0 [ 415.804629][ T2327] pvrusb2: control-write URB failure, status=-71 [ 415.822173][ T2327] pvrusb2: Device being rendered inoperable [ 415.835151][ T5819] usb 4-1: USB disconnect, device number 40 [ 415.891735][T10629] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 416.542382][ T5819] pvrusb2: Device being rendered inoperable [ 416.581551][ T46] usb 2-1: USB disconnect, device number 25 [ 416.590859][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 416.601019][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 417.021736][ T29] audit: type=1400 audit(1734296428.618:1239): avc: denied { watch } for pid=10634 comm="syz.2.1288" path="/271/bus" dev="overlay" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 417.111901][ T1529] usbhid 5-1:0.0: can't add hid device: -71 [ 417.118371][ T1529] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 417.189448][ T29] audit: type=1400 audit(1734296428.618:1240): avc: denied { watch_sb watch_reads } for pid=10634 comm="syz.2.1288" path="/271/bus" dev="overlay" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 417.215477][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.251855][ T1529] usb 5-1: USB disconnect, device number 27 [ 417.253906][T10648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10648 comm=syz.1.1294 [ 417.598171][ T29] audit: type=1400 audit(1734296429.238:1241): avc: denied { setopt } for pid=10640 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 418.173120][ T29] audit: type=1400 audit(1734296429.818:1242): avc: denied { bind } for pid=10667 comm="syz.3.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 418.198476][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1298'. [ 418.219102][T10666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'. [ 418.551046][T10681] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 418.571687][ T1529] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 419.274273][ T1529] usb 2-1: Using ep0 maxpacket: 16 [ 419.283256][ T1529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.299647][ T1529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.891661][ T1529] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 419.900726][ T1529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.914993][ T1529] usb 2-1: config 0 descriptor?? [ 419.942051][T10691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1307'. [ 420.126810][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.138172][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.423144][ T1529] elan 0003:04F3:0755.0012: failed to start in urb: -90 [ 420.447400][ T1529] elan 0003:04F3:0755.0012: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 420.635221][ T1529] usb 2-1: USB disconnect, device number 26 [ 420.902907][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1313'. [ 420.912006][T10705] netlink: 'syz.4.1313': attribute type 7 has an invalid length. [ 420.919728][T10705] netlink: 'syz.4.1313': attribute type 8 has an invalid length. [ 420.927686][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 420.944503][T10705] gretap0: entered promiscuous mode [ 420.951475][T10705] batadv_slave_1: entered promiscuous mode [ 421.482804][T10719] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 421.662672][T10722] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 422.088793][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1320'. [ 422.105609][T10728] bridge: RTM_NEWNEIGH with invalid ether address [ 422.421811][ T1529] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 422.441695][ T5901] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 422.469957][T10739] lo speed is unknown, defaulting to 1000 [ 422.503925][T10739] lo speed is unknown, defaulting to 1000 [ 422.521910][T10739] lo speed is unknown, defaulting to 1000 [ 422.543131][ T29] audit: type=1400 audit(1734296434.188:1243): avc: denied { ioctl } for pid=10736 comm="syz.4.1324" path="socket:[28447]" dev="sockfs" ino=28447 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 422.596023][ T1529] usb 4-1: Using ep0 maxpacket: 16 [ 422.602481][ T1529] usb 4-1: config index 0 descriptor too short (expected 3346, got 18) [ 422.610791][ T1529] usb 4-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 422.621614][ T5901] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.633610][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.641691][ T1529] usb 4-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 422.657540][ T1529] usb 4-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 422.669934][ T1529] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 422.671964][ T5863] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 422.679117][ T5901] usb 2-1: config 0 descriptor?? [ 422.695463][ T1529] usb 4-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 422.705745][ T5901] cp210x 2-1:0.0: cp210x converter detected [ 422.712222][ T1529] usb 4-1: Product: syz [ 422.716547][ T1529] usb 4-1: Manufacturer: syz [ 422.721325][ T1529] usb 4-1: SerialNumber: syz [ 422.748703][ T29] audit: type=1400 audit(1734296434.388:1244): avc: denied { read } for pid=10736 comm="syz.4.1324" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.846720][ T5863] usb 6-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 422.866509][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.886454][ T5863] usb 6-1: Product: syz [ 422.894261][ T5863] usb 6-1: Manufacturer: syz [ 422.910822][ T5863] usb 6-1: SerialNumber: syz [ 422.921542][ T5863] usb 6-1: config 0 descriptor?? [ 422.947131][ T5863] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 423.054727][ T5901] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 423.062446][ T5901] cp210x 2-1:0.0: querying part number failed [ 423.069511][ T29] audit: type=1326 audit(1734296434.698:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.093112][ T29] audit: type=1326 audit(1734296434.698:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.118495][ T29] audit: type=1326 audit(1734296434.698:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.144633][ T29] audit: type=1326 audit(1734296434.698:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.168506][ T29] audit: type=1326 audit(1734296434.698:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.192083][ T29] audit: type=1326 audit(1734296434.698:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.215688][ T29] audit: type=1326 audit(1734296434.698:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.239474][ T29] audit: type=1326 audit(1734296434.698:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10729 comm="syz.3.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb985d19 code=0x7ffc0000 [ 423.265239][ T5901] usb 2-1: cp210x converter now attached to ttyUSB0 [ 423.283572][ T8] usb 4-1: USB disconnect, device number 41 [ 423.373193][ T5865] lo speed is unknown, defaulting to 1000 [ 423.380845][T10739] infiniband sz1: set active [ 423.387322][T10739] infiniband sz1: added lo [ 423.412164][ T9906] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 423.459638][T10739] RDS/IB: sz1: added [ 423.489287][T10739] smc: adding ib device sz1 with port count 1 [ 423.561776][ T9906] usb 3-1: Using ep0 maxpacket: 16 [ 423.589484][ T9906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.595008][T10739] smc: ib device sz1 port 1 has pnetid [ 423.612824][ T9906] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 423.614865][ T5901] lo speed is unknown, defaulting to 1000 [ 423.638384][ T9906] usb 3-1: can't read configurations, error -71 [ 423.669776][T10739] lo speed is unknown, defaulting to 1000 [ 424.543152][T10739] lo speed is unknown, defaulting to 1000 [ 424.664548][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 425.028115][T10739] lo speed is unknown, defaulting to 1000 [ 425.264102][T10739] lo speed is unknown, defaulting to 1000 [ 425.280180][ T5901] usb 6-1: USB disconnect, device number 14 [ 425.376105][T10739] lo speed is unknown, defaulting to 1000 [ 425.516199][T10769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1333'. [ 425.546658][T10769] bridge: RTM_NEWNEIGH with invalid ether address [ 425.568623][T10772] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 426.128233][ T5901] usb 2-1: USB disconnect, device number 27 [ 426.265195][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 426.282741][T10780] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 426.287102][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 426.303639][T10770] batadv0 speed is unknown, defaulting to 1000 [ 426.334941][ T5901] cp210x 2-1:0.0: device disconnected [ 426.383777][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1331'. [ 426.392695][T10766] batadv0 speed is unknown, defaulting to 1000 [ 426.969261][T10804] kernel read not supported for file /blkio.bfq.group_wait_time (pid: 10804 comm: syz.1.1344) [ 427.567360][T10811] hsr0: entered promiscuous mode [ 427.588610][T10811] vlan4: entered promiscuous mode [ 427.602154][T10811] vlan4: entered allmulticast mode [ 427.624948][T10811] hsr0: entered allmulticast mode [ 427.632191][T10811] hsr_slave_0: entered allmulticast mode [ 427.644489][T10811] hsr_slave_1: entered allmulticast mode [ 427.774014][T10817] 9pnet_fd: Insufficient options for proto=fd [ 427.859237][T10821] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 427.880574][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1348'. [ 427.889472][T10814] batadv0 speed is unknown, defaulting to 1000 [ 427.957527][T10821] 8021q: adding VLAN 0 to HW filter on device bond11 [ 428.182340][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 429.696854][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 429.706265][T10853] batadv0 speed is unknown, defaulting to 1000 [ 430.422511][ T5901] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 430.629343][ T5901] usb 2-1: device descriptor read/64, error -71 [ 430.768100][T10872] ubi0: attaching mtd0 [ 430.772301][T10872] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 430.794759][T10872] x_tables: ip_tables: osf match: only valid for protocol 6 [ 431.253416][ T5901] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 431.348820][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 431.348836][ T29] audit: type=1400 audit(1734296442.988:1280): avc: denied { bind } for pid=10876 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.432515][ T5901] usb 2-1: device descriptor read/64, error -71 [ 431.637539][ T5901] usb usb2-port1: attempt power cycle [ 431.673036][ T29] audit: type=1400 audit(1734296443.318:1281): avc: denied { ioctl } for pid=10879 comm="syz.4.1369" path="socket:[29741]" dev="sockfs" ino=29741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 431.696941][T10884] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1370'. [ 431.754565][T10885] ubi0: attaching mtd0 [ 431.758687][T10885] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 431.772982][T10885] x_tables: ip_tables: osf match: only valid for protocol 6 [ 432.573353][ T5901] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 432.602188][ T5901] usb 2-1: device descriptor read/8, error -71 [ 432.630238][T10890] serio: Serial port ptm0 [ 432.684960][T10890] ebt_among: src integrity fail: 30a [ 432.774888][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'. [ 432.851749][ T5901] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 432.874093][ T5901] usb 2-1: device descriptor read/8, error -71 [ 432.936219][ T9906] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 433.005175][ T5901] usb usb2-port1: unable to enumerate USB device [ 433.151604][ T9906] usb 3-1: Using ep0 maxpacket: 16 [ 433.189990][ T9906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.200377][ T9906] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 433.214874][ T9906] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.243374][ T9906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.317355][ T9906] usb 3-1: config 0 descriptor?? [ 433.374353][ T9906] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 434.074391][T10912] syz.4.1378: attempt to access beyond end of device [ 434.074391][T10912] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 434.092046][T10912] syz.4.1378: attempt to access beyond end of device [ 434.092046][T10912] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 434.105491][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 434.122918][T10912] syz.4.1378: attempt to access beyond end of device [ 434.122918][T10912] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 434.136733][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 434.190130][T10912] syz.4.1378: attempt to access beyond end of device [ 434.190130][T10912] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 434.209860][T10912] syz.4.1378: attempt to access beyond end of device [ 434.209860][T10912] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 434.224203][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 434.237678][T10912] syz.4.1378: attempt to access beyond end of device [ 434.237678][T10912] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 434.253069][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 434.269745][T10912] syz.4.1378: attempt to access beyond end of device [ 434.269745][T10912] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 434.284809][T10912] syz.4.1378: attempt to access beyond end of device [ 434.284809][T10912] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 434.301631][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 434.480558][T10912] syz.4.1378: attempt to access beyond end of device [ 434.480558][T10912] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 434.681054][T10908] block nbd4: shutting down sockets [ 434.751865][ T29] audit: type=1400 audit(1734296446.378:1282): avc: denied { accept } for pid=10921 comm="syz.1.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.794070][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 434.816555][T10912] syz.4.1378: attempt to access beyond end of device [ 434.816555][T10912] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 435.539927][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 435.551111][T10912] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 435.560860][T10912] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 435.703290][T10942] serio: Serial port ptm1 [ 435.723270][T10944] serio: Serial port ptm2 [ 435.759396][T10942] ebt_among: src integrity fail: 30a [ 435.789026][T10944] ebt_among: src integrity fail: 30a [ 435.847579][ T8] usb 3-1: USB disconnect, device number 44 [ 436.059568][T10953] befs: (nbd2): No write support. Marking filesystem read-only [ 436.671816][ T46] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 436.755371][T10954] vivid-000: kernel_thread() failed [ 436.921831][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 436.936705][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.991889][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 437.014610][ T46] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 437.015394][ T5863] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 437.023745][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.047870][ T46] usb 5-1: config 0 descriptor?? [ 437.056193][ T46] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 437.491788][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 437.532810][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.543080][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 437.556242][ T5863] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 437.567132][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.576608][T10965] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1393'. [ 437.589940][ T5863] usb 4-1: config 0 descriptor?? [ 437.597475][ T5863] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 437.812082][ T1529] usb 4-1: USB disconnect, device number 42 [ 438.121905][T10971] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 438.682427][ T1529] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 439.057332][ T5901] usb 5-1: USB disconnect, device number 28 [ 439.112140][ T1529] usb 4-1: Using ep0 maxpacket: 16 [ 439.119027][ T1529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.119865][ T29] audit: type=1400 audit(1734296450.758:1283): avc: denied { relabelfrom } for pid=10980 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 439.130256][ T1529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.130281][ T1529] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.130314][ T1529] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.130335][ T1529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.150204][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.178021][T10982] syzkaller0: entered promiscuous mode [ 439.183262][ T29] audit: type=1400 audit(1734296450.758:1284): avc: denied { relabelto } for pid=10980 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 439.222977][T10982] syzkaller0: entered allmulticast mode [ 439.244731][ T1529] usb 4-1: config 0 descriptor?? [ 439.531688][ T5865] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 439.703180][ T1290] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.711629][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 439.718486][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 439.718701][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.731900][ T8] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 439.749700][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.756732][ T1529] microsoft 0003:045E:07DA.0013: report is too long [ 439.765588][ T1529] microsoft 0003:045E:07DA.0013: item 0 4 0 8 parsing failed [ 439.773407][ T1529] microsoft 0003:045E:07DA.0013: parse failed [ 439.779511][ T1529] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 439.816569][ T5865] usb 2-1: config 0 descriptor?? [ 439.891732][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 439.898644][ T8] usb 6-1: config index 0 descriptor too short (expected 3346, got 18) [ 439.907220][ T8] usb 6-1: config 212 has too many interfaces: 127, using maximum allowed: 32 [ 439.934993][ T8] usb 6-1: config 212 has an invalid descriptor of length 16, skipping remainder of the config [ 439.955751][ T8] usb 6-1: config 212 has 0 interfaces, different from the descriptor's value: 127 [ 439.976561][ T9906] usb 4-1: USB disconnect, device number 43 [ 439.996628][ T8] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 9.ad [ 440.006233][ T8] usb 6-1: New USB device strings: Mfr=252, Product=2, SerialNumber=3 [ 440.037282][ T8] usb 6-1: Product: syz [ 440.041458][ T8] usb 6-1: Manufacturer: syz [ 440.061091][ T8] usb 6-1: SerialNumber: syz [ 440.414497][ T29] audit: type=1326 audit(1734296452.058:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.449842][ T29] audit: type=1326 audit(1734296452.058:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.473760][ T29] audit: type=1326 audit(1734296452.088:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.497455][ T5865] video4linux radio48: keene_cmd_set failed (-71) [ 440.506821][ T5865] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 440.516282][ T5865] usb 2-1: USB disconnect, device number 32 [ 440.526688][ T29] audit: type=1326 audit(1734296452.088:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.563023][ T29] audit: type=1326 audit(1734296452.088:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.586476][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.601100][ T29] audit: type=1326 audit(1734296452.088:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.627842][ T29] audit: type=1326 audit(1734296452.088:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.651302][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.663591][ T29] audit: type=1326 audit(1734296452.088:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.5.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8b785d19 code=0x7ffc0000 [ 440.687059][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.744711][ T1529] usb 6-1: USB disconnect, device number 15 [ 442.064305][T11011] ubi0: attaching mtd0 [ 442.068437][T11011] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 442.089625][T11011] x_tables: ip_tables: osf match: only valid for protocol 6 [ 442.819059][T11017] 9pnet_fd: Insufficient options for proto=fd [ 443.052105][ T46] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 443.223367][ T46] usb 3-1: config 1 has an invalid interface number: 16 but max is 0 [ 443.241803][ T46] usb 3-1: config 1 has no interface number 0 [ 443.249596][ T46] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=53.f1 [ 443.259091][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.271983][ T46] usb 3-1: Product: syz [ 443.276274][ T46] usb 3-1: Manufacturer: syz [ 443.281187][ T46] usb 3-1: SerialNumber: syz [ 443.287652][T11028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1413'. [ 443.535981][ T5863] usb 3-1: USB disconnect, device number 45 [ 443.852591][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1415'. [ 444.700779][T11057] netlink: 816 bytes leftover after parsing attributes in process `syz.2.1419'. [ 444.836448][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 445.196775][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 445.196790][ T29] audit: type=1400 audit(1734296456.838:1317): avc: denied { connect } for pid=11068 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 445.377496][T11076] FAULT_INJECTION: forcing a failure. [ 445.377496][T11076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.392219][T11076] CPU: 0 UID: 0 PID: 11076 Comm: syz.3.1428 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 445.402984][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 445.413014][T11076] Call Trace: [ 445.416270][T11076] [ 445.419184][T11076] dump_stack_lvl+0x16c/0x1f0 [ 445.423845][T11076] should_fail_ex+0x497/0x5b0 [ 445.428508][T11076] _copy_from_user+0x2e/0xd0 [ 445.433094][T11076] do_sock_getsockopt+0x5f6/0x800 [ 445.438096][T11076] ? trace_lock_acquire+0x130/0x1f0 [ 445.441773][ T46] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 445.443272][T11076] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 445.443299][T11076] ? lock_acquire+0x2f/0xb0 [ 445.460824][T11076] ? __fget_files+0x40/0x3a0 [ 445.465393][T11076] ? __fget_files+0x206/0x3a0 [ 445.470048][T11076] __sys_getsockopt+0x12f/0x260 [ 445.474883][T11076] __x64_sys_getsockopt+0xbd/0x160 [ 445.479971][T11076] ? do_syscall_64+0x91/0x250 [ 445.484626][T11076] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.489803][T11076] do_syscall_64+0xcd/0x250 [ 445.494296][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.500190][T11076] RIP: 0033:0x7f34eb985d19 [ 445.504580][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.524163][T11076] RSP: 002b:00007f34ec6ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 445.532550][T11076] RAX: ffffffffffffffda RBX: 00007f34ebb75fa0 RCX: 00007f34eb985d19 [ 445.540495][T11076] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004 [ 445.548443][T11076] RBP: 00007f34ec6ff090 R08: 0000000020000340 R09: 0000000000000000 [ 445.556404][T11076] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 445.564351][T11076] R13: 0000000000000000 R14: 00007f34ebb75fa0 R15: 00007fffc2bb3728 [ 445.572304][T11076] [ 445.575315][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.633857][ T46] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 445.642641][ T46] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 445.653215][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 445.662263][ T46] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.258481][ T46] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.267735][ T46] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.275977][ T46] usb 6-1: Product: syz [ 446.280891][ T46] usb 6-1: Manufacturer: syz [ 446.314276][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 446.338415][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 446.351286][ T46] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 446.440421][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 446.521743][ T29] audit: type=1400 audit(1734296458.078:1318): avc: denied { ioctl } for pid=11083 comm="syz.2.1430" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 446.583055][T11065] 9pnet_fd: Insufficient options for proto=fd [ 446.603921][ T46] usb 6-1: USB disconnect, device number 16 [ 446.961738][ T5819] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 447.051908][ T5865] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 447.131606][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 447.140255][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.162262][ T5819] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 447.200342][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.211769][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 447.225422][ T5819] usb 2-1: config 0 descriptor?? [ 447.229548][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.243037][ T5819] pxrc 2-1:0.0: Could not find endpoint [ 447.270143][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.303769][T11109] batadv0 speed is unknown, defaulting to 1000 [ 447.319936][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.336314][T11109] lo speed is unknown, defaulting to 1000 [ 447.347765][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.366220][ T5865] usb 4-1: Product: syz [ 447.370386][ T5865] usb 4-1: Manufacturer: syz [ 447.387560][ T5865] usb 4-1: SerialNumber: syz [ 447.394589][ T5865] usb 4-1: config 0 descriptor?? [ 447.406909][ T5865] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.428009][ T5865] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 447.434510][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.461806][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.494156][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.522361][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.547026][ T9906] usb 2-1: USB disconnect, device number 33 [ 448.005072][ T5865] em28xx 4-1:0.0: chip ID is em2870 [ 448.971181][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 449.121747][ T46] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 449.731644][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 449.743523][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.754674][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.765630][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.778525][ T46] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.787633][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.797205][ T46] usb 3-1: config 0 descriptor?? [ 450.007634][T11159] serio: Serial port ptm0 [ 450.064261][T11159] ebt_among: src integrity fail: 30a [ 450.132277][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1459'. [ 450.272160][ T9906] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 450.321852][ T1529] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 450.371616][ T46] microsoft 0003:045E:07DA.0014: report is too long [ 450.379648][ T46] microsoft 0003:045E:07DA.0014: item 0 4 0 8 parsing failed [ 450.391254][ T46] microsoft 0003:045E:07DA.0014: parse failed [ 450.501889][ T1529] usb 2-1: Using ep0 maxpacket: 16 [ 450.557409][ T9906] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 450.557826][ T1529] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.582415][ T46] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 450.623847][ T1529] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 450.638669][ T1529] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.649538][ T1529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.704994][ T9906] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 450.716854][ T9906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 450.728930][ T9906] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.760543][ T1529] usb 2-1: config 0 descriptor?? [ 450.780149][ T46] usb 3-1: USB disconnect, device number 46 [ 450.835353][ T1529] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 450.845532][ T9906] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 450.872183][ T9906] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 450.891749][ T9906] usb 5-1: Product: syz [ 450.901877][ T9906] usb 5-1: Manufacturer: syz [ 450.927125][ T1529] usb 4-1: USB disconnect, device number 44 [ 450.932079][ T9906] cdc_wdm 5-1:1.0: skipping garbage [ 450.938255][ T9906] cdc_wdm 5-1:1.0: skipping garbage [ 450.961876][ T9906] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 451.102345][ T1529] em28xx 4-1:0.0: Disconnecting em28xx [ 451.111958][ T1529] em28xx 4-1:0.0: Freeing device [ 451.131815][ T5901] usb 2-1: USB disconnect, device number 34 [ 451.353279][T11178] siw: device registration error -23 [ 451.925174][T11163] 9pnet_fd: Insufficient options for proto=fd [ 452.418802][ T5819] usb 5-1: USB disconnect, device number 29 [ 452.608098][T11184] ubi0: attaching mtd0 [ 452.612271][T11184] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 452.623884][T11184] x_tables: ip_tables: osf match: only valid for protocol 6 [ 453.761753][ T1529] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 454.166615][T11192] mac80211_hwsim hwsim10 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 454.371628][ T1529] usb 4-1: device not accepting address 45, error -71 [ 454.425137][ T29] audit: type=1400 audit(1734296465.828:1319): avc: denied { name_connect } for pid=11203 comm="syz.3.1471" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 454.478052][T11213] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1472'. [ 454.555498][T11198] sp0: Synchronizing with TNC [ 454.577794][T11198] trusted_key: encrypted_key: insufficient parameters specified [ 454.612730][T11221] all: renamed from hsr0 (while UP) [ 455.798322][ T29] audit: type=1400 audit(1734296467.418:1320): avc: denied { listen } for pid=11238 comm="syz.4.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.832844][ T29] audit: type=1326 audit(1734296467.478:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.2.1481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71b0b85d19 code=0x0 [ 456.551375][ T8442] wlan0: Trigger new scan to find an IBSS to join [ 457.611051][ T29] audit: type=1400 audit(1734296469.238:1322): avc: denied { accept } for pid=11231 comm="syz.5.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.682072][ T29] audit: type=1400 audit(1734296469.288:1323): avc: denied { setopt } for pid=11266 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 457.862172][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.989770][T11267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11267 comm=syz.1.1487 [ 458.327940][ T29] audit: type=1400 audit(1734296469.968:1324): avc: denied { override_creds } for pid=11268 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 458.535208][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.799561][T11284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.809158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.918375][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.299956][T11302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.308561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.334520][T11300] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 459.381295][ T29] audit: type=1326 audit(1734296471.018:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.2.1497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71b0b85d19 code=0x0 [ 460.010908][T11313] infiniband sz1: set active [ 460.036659][T11313] syz_tun: left allmulticast mode [ 460.041810][T11313] syz_tun: left promiscuous mode [ 460.047898][T11313] bridge0: port 1(syz_tun) entered disabled state [ 460.108455][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.247716][ T9906] lo speed is unknown, defaulting to 1000 [ 460.342396][T11318] delete_channel: no stack [ 460.346962][T11318] delete_channel: no stack [ 460.520441][ T8446] wlan0: Trigger new scan to find an IBSS to join [ 460.651835][ T5819] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 460.816084][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.962385][ T5819] usb 3-1: not running at top speed; connect to a high speed hub [ 461.003323][ T5819] usb 3-1: config 4 has an invalid interface number: 111 but max is 0 [ 461.011590][ T5819] usb 3-1: config 4 has no interface number 0 [ 461.017732][ T5819] usb 3-1: config 4 interface 111 has no altsetting 0 [ 461.075342][T11331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1506'. [ 461.091175][ T5819] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 461.100298][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.109942][ T5819] usb 3-1: Product: syz [ 461.120685][ T5819] usb 3-1: Manufacturer: syz [ 461.141806][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.161966][ T5819] usb 3-1: SerialNumber: syz [ 461.265226][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1505'. [ 461.545035][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.346153][ T8446] wlan0: Creating new IBSS network, BSSID e6:69:34:8f:49:80 [ 463.420944][T11357] bond0: (slave wlan1): Releasing backup interface [ 463.452995][ T1529] net_ratelimit: 1 callbacks suppressed [ 463.453010][ T1529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.469846][ T5819] pvrusb2: Hardware description: Terratec Grabster AV400 [ 463.476900][ T5819] pvrusb2: ********** [ 463.481820][ T5819] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 463.492111][ T5819] pvrusb2: Important functionality might not be entirely working. [ 463.499906][ T5819] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 463.511463][ T5819] pvrusb2: ********** [ 464.215306][ T5819] usb 3-1: selecting invalid altsetting 0 [ 464.221308][ T2327] pvrusb2: control-write URB failure, status=-71 [ 464.227711][ T2327] pvrusb2: Device being rendered inoperable [ 464.233976][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 464.247011][ T5819] usb 3-1: USB disconnect, device number 47 [ 464.252958][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 464.512153][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.262236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.661537][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 568.668499][ C1] rcu: 0-...0: (1 GPs behind) idle=8fb4/1/0x4000000000000000 softirq=35833/35834 fqs=43 [ 568.679324][ C1] rcu: hardirqs softirqs csw/system [ 568.685724][ C1] rcu: number: 0 0 0 [ 568.692125][ C1] rcu: cputime: 0 0 0 ==> 27950(ms) [ 568.699918][ C1] rcu: (detected by 1, t=10505 jiffies, g=33757, q=379 ncpus=2) [ 568.707627][ C1] Sending NMI from CPU 1 to CPUs 0: [ 568.707649][ C0] NMI backtrace for cpu 0 [ 568.707658][ C0] CPU: 0 UID: 0 PID: 11363 Comm: syz.2.1512 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 568.707675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 568.707683][ C0] RIP: 0010:rcu_is_watching+0xd/0xc0 [ 568.707707][ C0] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 3b 4b 84 7e 1e a1 a9 09 48 c7 c3 68 7f 03 00 83 f8 07 89 c5 0f 87 82 00 00 [ 568.707724][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00000083 [ 568.707735][ C0] RAX: 0000000000000001 RBX: 1ffff92000000fac RCX: ffffffff8176a9e9 [ 568.707745][ C0] RDX: fffffbfff20be58b RSI: 0000000000000008 RDI: ffffffff905f2c50 [ 568.707754][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20be58a [ 568.707762][ C0] R10: ffffffff905f2c57 R11: 0000000000000003 R12: ffff8880b862ca18 [ 568.707771][ C0] R13: ffff8880b862cc00 R14: ffff8880b862ca00 R15: ffffffff8940e410 [ 568.707781][ C0] FS: 00007f71b1a376c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 568.707796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.707806][ C0] CR2: 000000110c342498 CR3: 00000000722ae000 CR4: 00000000003526f0 [ 568.707815][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.707823][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 568.707832][ C0] Call Trace: [ 568.707837][ C0] [ 568.707843][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 568.707859][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 568.707873][ C0] ? nmi_handle+0x1ac/0x5d0 [ 568.707892][ C0] ? rcu_is_watching+0xd/0xc0 [ 568.707910][ C0] ? default_do_nmi+0x6a/0x160 [ 568.707923][ C0] ? exc_nmi+0x170/0x1e0 [ 568.707935][ C0] ? end_repeat_nmi+0xf/0x53 [ 568.707953][ C0] ? __pfx_advance_sched+0x10/0x10 [ 568.707969][ C0] ? lock_release+0xa9/0x6f0 [ 568.707984][ C0] ? rcu_is_watching+0xd/0xc0 [ 568.708001][ C0] ? rcu_is_watching+0xd/0xc0 [ 568.708019][ C0] ? rcu_is_watching+0xd/0xc0 [ 568.708037][ C0] [ 568.708041][ C0] [ 568.708045][ C0] lock_release+0x4e2/0x6f0 [ 568.708060][ C0] ? __hrtimer_run_queues+0x53d/0xae0 [ 568.708078][ C0] ? __pfx_lock_release+0x10/0x10 [ 568.708094][ C0] ? timerqueue_del+0x83/0x150 [ 568.708114][ C0] ? __pfx_advance_sched+0x10/0x10 [ 568.708126][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 568.708142][ C0] __hrtimer_run_queues+0x53d/0xae0 [ 568.708162][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 568.708179][ C0] ? read_tsc+0x9/0x20 [ 568.708198][ C0] hrtimer_interrupt+0x392/0x8e0 [ 568.708220][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 568.708237][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 568.708252][ C0] [ 568.708256][ C0] [ 568.708261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.708278][ C0] RIP: 0010:kasan_addr_to_slab+0x3a/0x80 [ 568.708295][ C0] Code: 08 31 c0 5b c3 cc cc cc cc 48 89 df e8 3f 5b 4e ff 48 ba 00 00 00 00 00 ea ff ff 48 c1 e8 0c 48 c1 e0 06 48 01 d0 48 8b 50 08 c2 01 75 2e 66 90 80 78 33 f5 75 ca 5b c3 cc cc cc cc a9 ff 0f [ 568.708307][ C0] RSP: 0018:ffffc900048ff1d8 EFLAGS: 00000282 [ 568.708318][ C0] RAX: ffffea000072c140 RBX: ffff88801cb05e08 RCX: ffffc9000d1cd000 [ 568.708327][ C0] RDX: ffffea000072c101 RSI: ffffffff814adad6 RDI: 0000000000000007 [ 568.708336][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 568.708344][ C0] R10: 0000000000000000 R11: 0000000000000002 R12: ffffffff8b1fd1e0 [ 568.708353][ C0] R13: ffff888012171050 R14: ffff88801217140c R15: ffffc900048ff9a0 [ 568.708363][ C0] ? __pfx_mt_free_rcu+0x10/0x10 [ 568.708378][ C0] ? __phys_addr+0xc6/0x150 [ 568.708396][ C0] ? kasan_addr_to_slab+0x21/0x80 [ 568.708411][ C0] __kasan_record_aux_stack+0xe/0xd0 [ 568.708430][ C0] ? __pfx_mt_free_rcu+0x10/0x10 [ 568.708443][ C0] __call_rcu_common.constprop.0+0x99/0x7a0 [ 568.708462][ C0] mas_wr_node_store+0xddd/0x1610 [ 568.708482][ C0] ? __pfx_mas_wr_node_store+0x10/0x10 [ 568.708505][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 568.708521][ C0] mas_wr_store_entry+0x101c/0x24b0 [ 568.708540][ C0] ? trace_ma_write+0x193/0x210 [ 568.708555][ C0] mas_store_prealloc+0x77e/0x1690 [ 568.708575][ C0] ? __pfx_mas_store_prealloc+0x10/0x10 [ 568.708592][ C0] ? _raw_spin_unlock+0x28/0x50 [ 568.708605][ C0] ? __split_huge_pmd+0x24b/0x330 [ 568.708625][ C0] ? vma_iter_store+0x9bf/0xe30 [ 568.708642][ C0] vma_complete+0x89e/0xda0 [ 568.708658][ C0] ? vma_prepare+0x3f3/0x690 [ 568.708671][ C0] ? init_multi_vma_prep+0x108/0x260 [ 568.708687][ C0] __split_vma+0xcd8/0x1160 [ 568.708704][ C0] ? __pfx___split_vma+0x10/0x10 [ 568.708728][ C0] vms_gather_munmap_vmas+0x38b/0x1730 [ 568.708746][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 568.708762][ C0] ? mas_walk+0x6a6/0x910 [ 568.708780][ C0] __mmap_region+0x31d/0x2670 [ 568.708799][ C0] ? __pfx___mmap_region+0x10/0x10 [ 568.708815][ C0] ? hlock_class+0x4e/0x130 [ 568.708833][ C0] ? mark_lock+0xb5/0xc60 [ 568.708851][ C0] ? find_held_lock+0x2d/0x110 [ 568.708878][ C0] ? mm_get_unmapped_area+0x95/0xe0 [ 568.708899][ C0] ? shmem_get_unmapped_area+0x183/0xa20 [ 568.708917][ C0] ? cap_mmap_addr+0x53/0x320 [ 568.708932][ C0] mmap_region+0x127/0x320 [ 568.708947][ C0] do_mmap+0xc00/0xfc0 [ 568.708962][ C0] vm_mmap_pgoff+0x1ba/0x360 [ 568.708978][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 568.708992][ C0] ? update_audio_tstamp+0x2df/0x850 [ 568.709010][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 568.709023][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 568.709037][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 568.709050][ C0] ? rcu_is_watching+0x12/0xc0 [ 568.709068][ C0] __x64_sys_mmap+0x125/0x190 [ 568.709084][ C0] do_syscall_64+0xcd/0x250 [ 568.709100][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.709117][ C0] RIP: 0033:0x7f71b0b85d19 [ 568.709128][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.709140][ C0] RSP: 002b:00007f71b1a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 568.709152][ C0] RAX: ffffffffffffffda RBX: 00007f71b0d76080 RCX: 00007f71b0b85d19 [ 568.709161][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 568.709170][ C0] RBP: 00007f71b0c01a20 R08: ffffffffffffffff R09: 0000000000000000 [ 568.709179][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 568.709187][ C0] R13: 0000000000000000 R14: 00007f71b0d76080 R15: 00007fff8852eb88 [ 568.709200][ C0] [ 568.709644][ C1] rcu: rcu_preempt kthread starved for 1725 jiffies! g33757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 569.366326][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 569.376289][ C1] rcu: RCU grace-period kthread stack dump: [ 569.382163][ C1] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 569.393914][ C1] Call Trace: [ 569.397185][ C1] [ 569.400113][ C1] __schedule+0xe58/0x5ad0 [ 569.404531][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 569.409738][ C1] ? __pfx___schedule+0x10/0x10 [ 569.414585][ C1] ? schedule+0x298/0x350 [ 569.418914][ C1] ? __pfx_lock_release+0x10/0x10 [ 569.423936][ C1] ? lock_acquire+0x2f/0xb0 [ 569.428439][ C1] ? schedule+0x1fd/0x350 [ 569.432770][ C1] schedule+0xe7/0x350 [ 569.436837][ C1] schedule_timeout+0x124/0x280 [ 569.441687][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 569.447051][ C1] ? __pfx_process_timeout+0x10/0x10 [ 569.452344][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 569.458153][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 569.463627][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 569.468412][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 569.473705][ C1] ? rcu_gp_init+0xc82/0x1630 [ 569.478390][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 569.483599][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 569.489407][ C1] rcu_gp_kthread+0x271/0x380 [ 569.494088][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 569.499288][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.504494][ C1] ? __kthread_parkme+0x148/0x220 [ 569.509522][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 569.514719][ C1] kthread+0x2c1/0x3a0 [ 569.518787][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.523984][ C1] ? __pfx_kthread+0x10/0x10 [ 569.528596][ C1] ret_from_fork+0x45/0x80 [ 569.533018][ C1] ? __pfx_kthread+0x10/0x10 [ 569.537620][ C1] ret_from_fork_asm+0x1a/0x30 [ 569.542402][ C1] [ 569.545413][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 569.551724][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 569.562040][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 569.572092][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 569.577384][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 95 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 3c b4 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 569.596993][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 569.603076][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b292679 [ 569.611048][ C1] RDX: 0000000000000001 RSI: ffff888144285000 RDI: ffff888144285064 [ 569.619015][ C1] RBP: ffff888144285064 R08: 0000000000000001 R09: ffffed10170e6fed [ 569.626981][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff888148288800 [ 569.634946][ C1] R13: ffffffff8ee16120 R14: 0000000000000001 R15: 0000000000000000 [ 569.642915][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 569.651840][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.658420][ C1] CR2: 00007ffe94faaa48 CR3: 0000000028ddc000 CR4: 00000000003526f0 [ 569.666395][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 569.674363][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 569.682326][ C1] Call Trace: [ 569.685599][ C1] [ 569.688439][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 569.694771][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 569.699970][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 569.705437][ C1] ? timekeeping_advance+0x72e/0xa90 [ 569.710723][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 569.716362][ C1] ? __asan_memcpy+0x3c/0x60 [ 569.720956][ C1] ? rcu_is_watching+0x12/0xc0 [ 569.725733][ C1] ? update_process_times+0x178/0x2d0 [ 569.731105][ C1] ? __pfx_update_process_times+0x10/0x10 [ 569.736823][ C1] ? update_wall_time+0x1c/0x40 [ 569.741671][ C1] ? tick_nohz_handler+0x376/0x530 [ 569.746800][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 569.752260][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 569.757639][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 569.763357][ C1] ? read_tsc+0x9/0x20 [ 569.767449][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 569.772580][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 569.778743][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 569.784550][ C1] [ 569.787476][ C1] [ 569.790401][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 569.796564][ C1] ? ct_kernel_exit+0x139/0x190 [ 569.801417][ C1] ? acpi_safe_halt+0x1a/0x20 [ 569.806101][ C1] acpi_idle_enter+0xc5/0x160 [ 569.810785][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 569.815809][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 569.821622][ C1] cpuidle_enter+0x4e/0xa0 [ 569.826043][ C1] do_idle+0x310/0x3f0 [ 569.830110][ C1] ? __pfx_do_idle+0x10/0x10 [ 569.834703][ C1] cpu_startup_entry+0x4f/0x60 [ 569.839463][ C1] start_secondary+0x222/0x2b0 [ 569.844222][ C1] ? __pfx_start_secondary+0x10/0x10 [ 569.849514][ C1] common_startup_64+0x13e/0x148 [ 569.854480][ C1]