last executing test programs: 4m31.228756801s ago: executing program 0 (id=40): bpf$MAP_CREATE(0x1100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffe3ffff00000000000000000000000000000001000000005da0f3a1b6595a236cc22d5e5e4e26dae2c8c2afcee40b920d5cd9a54af481ffbda0c862a87b4e95ce4aecfa9a4f950bbc3848ffcc4c10ea8ab1b255e727f6"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200006400300000b035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x800) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000bc0), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x18, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2400000000000000290000003200000002"], 0x28}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000002c0)) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x114, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x92}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x54}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x16}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c080}, 0x2ef2a89afacc59f6) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, 0x0) 4m31.040280228s ago: executing program 0 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x155c, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r5}, 0x0, 0x0, 0x0) 4m29.698859861s ago: executing program 0 (id=43): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x10, 0x4, 0x287}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m29.484809175s ago: executing program 0 (id=44): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000001}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1000009ee8, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m29.081090161s ago: executing program 0 (id=47): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x0, @private2, 0x5}]}, &(0x7f0000000240)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="010026bd7000fbdbdf25170000000c00060001000000010000000c000600000000000000000018af4137a1bef2f9e2317e1357b10dcd58d6d67ec32dc42aefe07492a2d6845a91391f9537010f94d8c712362939c6403367b37d4d225c10518eef67d8b35ebaccad918d44b8629f47a8194aae1e457cc9e1e05ebe9feced79f1e888c5c2eeb72520ace83fdbda159e3747a3efbceb1d534ddfe582a0c5213c316231732e84bd9e12113220b32f"], 0x2c}, 0x1, 0x0, 0x0, 0x2800a000}, 0x8010) write(r0, &(0x7f0000000400)="2dddb589abf0c0a50fd53da31923d711e9d74ebe2455b0fa25f8b396cc8ea5e84ccea203c751fe4b03dcc0fa0ef3818c67254526a4453eaca76b3f33d2746c1b4135b4a13679d0a819e3028d1afe9bac1306e8c8570f8680bacff4b21ef49b11ce066fa71fb2cead", 0x68) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f0000000100)=@assoc_value={r2, 0x200}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x88) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x8, @remote}, 0x1c) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) fsmount(r6, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0) accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) 4m28.406749865s ago: executing program 0 (id=50): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xfffffffffffffffe, 0x0}) io_uring_enter(r5, 0x3516, 0x95ff, 0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x20040000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000100)=""/174, 0xae, 0x0, &(0x7f00000001c0)=""/184, 0xb8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 4m28.16810564s ago: executing program 32 (id=50): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xfffffffffffffffe, 0x0}) io_uring_enter(r5, 0x3516, 0x95ff, 0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x20040000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000100)=""/174, 0xae, 0x0, &(0x7f00000001c0)=""/184, 0xb8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 1m38.67597846s ago: executing program 4 (id=664): gettid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0xc8}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xbac6f8b1) 1m37.360163381s ago: executing program 4 (id=675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1m37.173929621s ago: executing program 4 (id=676): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x800, 0x6, 0x0, 0x3, 0x1, 0x3}, 0x0, &(0x7f0000000240)={0x8, 0xffffffff00000000, 0xffff, 0x1, 0xd53b, 0xfffffffffffffff7, 0x0, 0xfffffffffffff800}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 1m35.040971007s ago: executing program 4 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) (async) syz_pidfd_open(r1, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x7a98, 0x0, 0x8, 0x0, 0x0) (async) io_uring_enter(r2, 0x7a98, 0x0, 0x8, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1m33.358401372s ago: executing program 4 (id=683): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x3ff, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000000080)="85378cdb1fff0dd9b277541dd1460d751a03d334f7630277cca86f1f87857c5174e0659dd2393eda19b16c977507bf7fe6840c8dd82df152846f73e3931416ee15fff91535cd54ca2f2ddd2b6b4bbba7b8fcc87b7966def8d299a9c1970d07265b0b7974ab2da1e88b9cf43ca3faf744b4", 0x71, 0x4000090, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRESDEC=r0], 0x20) socket$inet_tcp(0x2, 0x1, 0x0) 1m32.780466674s ago: executing program 4 (id=687): prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_tcp(0x0, &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x800010, &(0x7f00000004c0)=ANY=[@ANYBLOB=',afid=0x0000000000000004,afid=0x000000000000000b,loose,version=9']) 1m32.432971174s ago: executing program 33 (id=687): prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_tcp(0x0, &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x800010, &(0x7f00000004c0)=ANY=[@ANYBLOB=',afid=0x0000000000000004,afid=0x000000000000000b,loose,version=9']) 15.172002084s ago: executing program 5 (id=944): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="b9800000c00f3235010000000f30c4839d6a8700800000736665660f388158002e0f0198f5c2000066ba4300b02aeec4030941b5003000009d3666400f21b866b859000f00d8c4a26d3793a965d9fb", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15.029066539s ago: executing program 5 (id=945): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000540), 0x2000) close(r0) socket(0x40000000002, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0xb5588ef82e871e69) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') 13.093498298s ago: executing program 5 (id=949): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x20, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007fc0)}, &(0x7f0000000100)=0x10) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x4, 0x0, 0x4) 10.672945471s ago: executing program 1 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc00000008001100fc00000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.533025594s ago: executing program 2 (id=960): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="1455f200", @ANYRES64, @ANYBLOB="00001d00e000030000000000000000000000000008"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='gs2.[-.^\x00'], 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800}) r7 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000000)=0x2f9d) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 9.443795069s ago: executing program 5 (id=961): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xc8, 0x59, 0xa9, 0x10, 0x421, 0x418, 0x27b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1b, 0x2f, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) chdir(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r6 = io_uring_setup(0x39b1, &(0x7f0000000140)={0x0, 0x732d, 0x8, 0x1, 0x307}) io_uring_setup(0x6178, &(0x7f0000000240)={0x0, 0x1d4c, 0x8000, 0x3, 0x39a, 0x0, r6}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x20000810) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)={[{0x2b, 'net_cls'}, {0x2b, 'rlimit'}, {0x2b, 'io'}, {0x2b, 'net_prio'}, {0x0, 'memory'}, {0x2b, 'cpuacct'}, {0x2d, 'net_prio'}]}, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffff56}, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r4, r3}, 0xc) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 9.127417814s ago: executing program 1 (id=962): syz_open_dev$swradio(0x0, 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000480)={0x1000, r1, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x1d, 0x75, &(0x7f00000004c0)="fa5a4c91f512ca568d94a64a2331a2c5f66545eb2d3d8ac11523d49e4f", &(0x7f0000000540)=""/117, 0x7d1, 0x0, 0x1000, 0x50, &(0x7f0000001e00)="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", &(0x7f00000006c0)="4ea32229f30a8610e384ee417cca7a5a2910b2146478defd93f4d4a59a3f2fb06e0802ac38c6b8ffaf4848c205fc950656529904dbd5d574d26862549b024b8aa31207274142ee4f0427dfa2a75b5192", 0x3, 0x0, 0x40}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000001d000000000b00e69e7f9600", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000077ceb5d48500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000900)=[{r1}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x106, 0x1}}, 0x20) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000018c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000006b0d"], 0x80}, 0x1, 0x0, 0x0, 0x404c054}, 0x1) syz_open_dev$vim2m(&(0x7f0000000380), 0x3ff, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18009099869f36dd000000000000000000009500000000d2"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000320001002abd7000fedbdb2505000000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 8.90152509s ago: executing program 2 (id=965): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f0000000700)=""/151, 0x97}, {&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f0000000600)=""/56, 0x38}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f0000000a80)=""/196, 0xc4}], 0x8, &(0x7f0000000c40)=""/75, 0x4b}, 0x2100) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'vlan1\x00', &(0x7f0000000340)=@ethtool_dump={0x3e, 0xf, 0x7, 0x5f, "585f4086325cc00e2ee87366582a7edef395855eb02cfad7e6eb34bcc515d349e11b3fb560bc5b723def288f79a0f18136c3a4ae5cce5dd0af3cacf13e16a4277abfd7975c80f0d1b2a0f4e1f415cf2f94ba2d56e3000b33bb9fb61f967a1a"}}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003180)='/sys/power/sync_on_suspend', 0x242, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readlink(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 7.764507591s ago: executing program 1 (id=966): r0 = gettid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000010100c0"]) sched_setscheduler(0x0, 0x3, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 6.857631592s ago: executing program 2 (id=969): r0 = gettid() unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000380)=0x1e) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0xffffff46, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x110b}, @flat=@weak_handle={0x77682a85, 0x1001}, @fda={0x66646185, 0x6, 0x0, 0x200003e}}, &(0x7f0000000300)}, 0x400}], 0x7c, 0x0, 0x0}) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) 6.770416058s ago: executing program 1 (id=970): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000002000000b5000040"]) listen(r1, 0x4) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x3000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.641149878s ago: executing program 6 (id=972): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000060"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x4, 0xe9, 0xb1, 0x40, 0x1f71, 0x3301, 0xce1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x1a, 0x6d}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delnexthop={0x50, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r4 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c000280f7fd0100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100"], 0xc8}}, 0x0) fallocate(r4, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa3f58dc55767b1b9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.74375927s ago: executing program 1 (id=974): r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0xc8}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xbac6f8b1) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) 4.730958148s ago: executing program 3 (id=976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000240)={0x0, 0x2}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r2, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x6c, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0xa481, 0xffff2d37, 0x1dd1, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x81, 0x3, 0x24, 0xffffffff, 0xfffffff8, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x803, 0x7fff, 0x4c74, 0x8eff, 0x8, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x143, 0x3, 0x7, 0x100003c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x807, 0xfffffff7, 0x8, 0x4, 0xbf9, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0x400, 0x9, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x69, 0x0, 0x7, 0x9, 0x2f, 0x8000, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x7, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x4, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0x2, 0x0, 0xffffffff, 0x8004, 0x10002, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xea9, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x7, 0xffff, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x1ff, 0x2, 0xf, 0x6, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x7, 0xa2, 0x10000007, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x2, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x10009, 0x5, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x934, 0x1, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x2, 0x8001, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x803, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x5, 0x2000006, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x9, 0x80000009, 0x3, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x62a9, 0xfbff3441, 0x100fff]}, 0x45c) mount$fuse(0x0, 0x0, 0x0, 0x58008, &(0x7f0000000080)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xfffff4e9}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x45, 0x0, "1e6c1c2a0033af1199d01e93a0c5d3b12a1acf7a58ceadd43298708a8a7470c3f8f6c087c01f22e3d2edcd1b0349e7cf54e1131821607b899e64075662acd23741b42c43cb101a83af7caf5d5af2940b"}, 0xd8) 4.301781789s ago: executing program 5 (id=977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x43}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, &(0x7f0000000580)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x100082) ioctl$VIDIOC_SUBDEV_S_EDID(r7, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x6, '\x00', &(0x7f0000000040)=0x9}) setsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000240)=0x38000000, 0x4) mkdir(0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x94) 3.900249361s ago: executing program 3 (id=978): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x20, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007fc0)}, &(0x7f0000000100)=0x10) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x4, 0x0, 0x4) 3.834303628s ago: executing program 1 (id=979): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msgget$private(0x0, 0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x541b, 0xe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b22, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) 3.743250379s ago: executing program 5 (id=980): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4404c0d0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioperm(0x7, 0x81, 0x2) clock_settime(0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000000c0)=0xd, 0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) ppoll(&(0x7f0000000400)=[{r0, 0x18}, {r1, 0x4008}], 0x2, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)={[0x3]}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff11", 0x22}], 0x1}, 0x9cdc2384056b48b8) syz_usb_control_io$uac1(r4, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r3}) 3.586271561s ago: executing program 2 (id=981): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8100) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast1, @local}, &(0x7f0000000480)=0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, 0x8}, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xab, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xadd0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x7fff}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x5, 0x9, 0xb, 0x0, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x8c, &(0x7f0000000380)=""/140, 0x41100, 0x40, '\x00', r4, @fallback=0xb, r5, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x3, 0x4, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000800)=[0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r8, r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f0000000840)=[{0x0, 0x2, 0x3, 0x4}], 0x10, 0x8, @void, @value}, 0x94) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x400142, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r13, 0xffffffff80000601, r14, &(0x7f00000029c0)={0x8001, 0x100000001, 0x0, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002a00)='./binderfs2/custom0\x00', 0x0, 0x0) r15 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getuid() setresuid(r14, r16, r15) sendmsg$sock(r11, &(0x7f0000002dc0)={&(0x7f0000002b40)=@caif=@rfm={0x25, 0x9, "67c3c037b4f2cc1f88acc6116072c891"}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002bc0)="539c86e986b59d42646b15d01f831a5502be0c3fdc1146aa9cd3d292b749692628afbcc40221aac7191d2d6eec3b1f02296a1a3afbe617598e2dfe289dfc969a94084cd5dd8eb43208f43248d5c1b2790d0488675dbafc79047555c624f43aa3bb9ccaa1baf99bc414ab6a9f4c51643bd1e3afd218c4d42fa843aa223d66b2de1fd745377b095dc48f8cce7c0e0420a8d3aec12586b4054f1ecf8f3edc460d5237b568888f4fadc21bdb8c931029eae15ab7b034863e257a1077c8a4a71688de1a1b1023c19619b4e784", 0xca}, {&(0x7f0000002cc0)="f9411545c3a525a7c3e6fbe4ea0b0f7f9e8b375ab5919a7c1085f8eb4837786b7d5cf347134f20c1378d8fff2fd3c5010ad39e06a42fe445907bfd85", 0x3c}], 0x2, &(0x7f0000002d40)=[@txtime={{0x18, 0x1, 0x3d, 0x85}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xe23d}}], 0x48}, 0x40805) setresuid(r14, r16, r15) socket$inet6(0xa, 0x5, 0x100) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000002e00)={0x80000001, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002e40)={r18, 0x0, 0x8}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002ec0)={&(0x7f0000002e80)='filemap_set_wb_err\x00', r3, 0x0, 0x6}, 0x18) setgid(r17) syz_usb_connect(0x4, 0x666, &(0x7f0000002f00)={{0x12, 0x1, 0x250, 0x3e, 0x66, 0x49, 0xbd5d368c5e5b5abc, 0x1b3d, 0x11e, 0xb31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x654, 0x2, 0x1, 0x2, 0x10, 0x4, [{{0x9, 0x4, 0xf6, 0xb, 0x6, 0xd, 0x69, 0x88, 0x7, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0186516f84cc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xd, 0x9, 0xe9}, {0x6, 0x24, 0x1a, 0x6, 0x8e5b82cbc940fcc0}, [@mdlm={0x15}, @mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x8, 0x80}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x514}, {0xd, 0x24, 0xf, 0x1, 0xe0, 0x1, 0xfffe, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0xd8c0}, @acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0xa, 0x3, 0x200, 0xc, 0x4, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x608, 0x72, 0xe, 0x5f}}, {{0x9, 0x5, 0x65e4fd1a0deeeedc, 0x3, 0x40, 0x6, 0x1, 0x7f, [@generic={0x60, 0x30, "144cdbc3aa35623bd7f29a13693cdf198f2b365f16ff76935e1f2227048834a4f4d7e6640e7c23ef429b96332af2e2d26dcd7b34a1ca84a60cc5ed173d985df83d00c6af0e58d29eca5668184be98db199c3926599850b952162692fa1a2"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2b, 0x7ff}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x3, 0xd, 0x5}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x5, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xf15b}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x8, 0x3, 0xc, [@generic={0xe3, 0x7, "f455a3c3b3e961a43bb49d8f56a6cb039cbd7d6f21d5e57dba13032bc79d62b9ed1db2a436033650227ef22a9af9fb467821aa0541919364eafcc3297f07201a597cfb4e2c99afb76ef05151cc0d55d0741552ce65afffe7b8251e68012044e3de270f6f7226533ed78210ee34165b4c9d2d56cea2ae7de8e0c5b35e70c77b01929f94bffca160f7f6b906b7f39cc279432dc954f6784ef6047a36e3269e2d79ef739f76757239448445e022ec44fa64883049d4a2a38aa77e1733727132ceea6ced3ecf983f891f75d6633ba2ebd11cf5fc5e39df9c2ec4aab5b5cdc6838d232c"}, @generic={0x13, 0x7, "40dd74c8afff3440738371e29a58d6fdb1"}]}}]}}, {{0x9, 0x4, 0x79, 0x7a, 0x9, 0x38, 0x70, 0xcb, 0x1, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "eb"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x1, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0xfd25, 0x13}, @mdlm={0x15, 0x24, 0x12, 0x9}]}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0x7, 0x7b, [@generic={0x9e, 0x8, "e8c89e645b1bd5793b78ab5240e26a0ee127eeaaaaba6bc0545a57d65272c0c72ac1da93b6be9c28d3beb2df73cdc471eda8817843cf3f304407ec54718bf7ca2a443bf83df8d0578cea600224d30817ab79a8f7d91bc7f15fea7768846fdbd8a104ecec73fefa5fadd0a8bc9ef98f72c5f77c8d9b9c394c11efd0cec74124ac75338ddd52fac6da7fec25a433377ef423962069d5a40c5797d59254"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x2, 0xd, 0xd, [@generic={0x77, 0x21, "35f4d31648d96c7d8000dd33b1e8357bf5161cdf29c84207ab92cee0a34c3216e863e920ffd3e7420c2aa8caee8b1d1fb1e1638dfa395c5918078e51f92678b99a0d32435babece9f51c1cc02b2838bfaf66001e4939881e717ce2a262615d387c20e9f022db16c595ecea3b3d6e84f0aac9fbae10"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x4}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x5, 0x5, 0xd1, [@generic={0xe7, 0xe, "ee059e8e1faa7109b495b29629b9943e07deca03a108671ec5cbbc5b909cd2bb57416e6551f45f5ee9b87c5f170fdb1ace5dd4552c3a791cfbc3368428f5f8d279648b7548370b3e07bd651c9c260c3eb4797ad102293332ac9b6dc7dec7b982f6431fcd640fc22741c6f1c5a944a41651209d4cb4ea46eaa5de54381514beeebb5dc380699df0495450ec37e24e33ad4fa5f1258c0bf5716f955142e4e31a3bf0799e2b146434cd19a0f4e65bd9c848f46abb80aa9ee2dee7923613c0788f6394e59f9791e56c14e694feff02d853cfdf67a69fb6a4ab16d3710c017c2af974c4b831b8d7"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x4}]}}, {{0x9, 0x5, 0xe, 0x1, 0x7bf, 0x8f, 0x5, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x1ce, 0x97, 0x1, 0x2, [@generic={0x21, 0xa, "7dbd1d9fba8ab4f65ebfbb145cc9ad79bb5d773422463e8b08f693d8ff18a3"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x3, 0x3, 0x0, [@generic={0x24, 0x30, "01d66fdb72f6a872bdadc22b3c6dc38133c44dfb2361af6268cde1a4bb8e370271b2"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x6, 0x4, 0x8, [@generic={0x63, 0x31, "ae0ad539b4ccd555f4b4f60842b360dd7b5d99c6fd3263011328d5951b0a1b0d53936123a570a6331fc6948eca59f3817a8ff2d80fb9c17a98045bd2c913044d702cd30761f96164397e8709d40769c44a2c7eb21036d898f361c266d3e9557dcf"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x8, 0x4f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf5, 0x1}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x4, 0xe4, 0x1, [@generic={0x93, 0x1, "9f8296498419305bae73a3974b2c6e3c832e70c67fb4808847c80f0961ad712612a1d66cd961b9111c0c25e8367f9505e287efa9946de3918a86bb3e510bae2fa292613ccda9b6c54db76f9ab880e2c16d4f470e0557128dc519c556e353aeb43d86eb0ac9ba43c37160fc3157e39e78e7a827d498f35eeaedbb3901da4a1cbc0790d2950bf453684532c1aab046a8e97a"}, @generic={0x6c, 0xb, "21c12e60d44ab2fae588be49c892a482fa641b2a270fc3ff048d21b8e58fd9a45a9fe050b56b9bd021458a6b021580650296b5fcf5f0029a795c17cba513dedb22e6e573208b9c1b8e7d03f8932bed1a1127c4f3471198f011ec1604d0af64bb91de50ae0f8f00942324"}]}}]}}]}}]}}, &(0x7f0000003780)={0xa, &(0x7f0000003580)={0xa, 0x6, 0x310, 0x1, 0x7f, 0x7, 0x40, 0xc}, 0x58, &(0x7f00000035c0)={0x5, 0xf, 0x58, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x7, 0x1, 0xff}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x6, 0xf000, 0xfff9, [0xff0030, 0xff3f00, 0xc0, 0xc0, 0x30, 0xc0f0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x9, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x9, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a56ebd6f8906f64c262bd0f2840aaf2a"}]}, 0x5, [{0x4, &(0x7f0000003640)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000003680)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000036c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000003700)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x2c09}}]}) 2.827897732s ago: executing program 3 (id=982): r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x10, 0x13290, 0x0, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000ac0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)='./file0\x00', 0x22, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) socket$kcm(0x25, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000100066ee8b2eaa1dff50dd3600000000", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.471974183s ago: executing program 6 (id=983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, "fee8a294f8a0e9ffff0d9683dda1af1ea89de2b7fb0a01040000000008000003000200000000003f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0xc9, 0x4, '\x00', 0x20000000a30}) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000040)={0xd4, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.427718458s ago: executing program 3 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa10, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000004) 1.41848472s ago: executing program 2 (id=985): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.417151981s ago: executing program 6 (id=986): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000b0000000210000000000000", @ANYRES32, @ANYBLOB="00000d01000000ef00f700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000b0000000210000000000000", @ANYRES32, @ANYBLOB="00000d01000000ef00f700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="03751d01180000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x1000) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000001300)) (async) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000001300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x4348, &(0x7f00000012c0)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb) clock_settime(0x1ed5d7403, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='cachefiles_unlink\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r5, r5, 0x0) (async) close_range(r5, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0) shutdown(r6, 0x1) 917.522372ms ago: executing program 6 (id=987): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="b9800000c00f3235010000000f30c4839d6a8700800000736665660f388158002e0f0198f5c2000066ba4300b02aeec4030941b5003000009d3666400f21b866b859000f00d8c4a26d3793a965d9fb", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 867.423183ms ago: executing program 3 (id=988): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r4, @ANYBLOB="1455f200", @ANYRES64=r4, @ANYBLOB="00001d00e000030000000000000000000000000008"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='gs2.[-.^\x00'], 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r7, 0x0, 0x0, 0x0, 0x80800}) r10 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r10, 0x89e0, &(0x7f0000000000)=0x2f9d) io_uring_enter(r7, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 545.518876ms ago: executing program 6 (id=989): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) 459.074071ms ago: executing program 6 (id=990): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) setsockopt(r1, 0x5, 0x40, &(0x7f0000000480)="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", 0x1000) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000001980)={0x1f, 0x0, @none, 0x3ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) keyctl$chown(0x4, r6, 0xee00, 0x0) 128.348062ms ago: executing program 3 (id=991): r0 = gettid() unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000380)=0x1e) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0xffffff46, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x110b}, @flat=@weak_handle={0x77682a85, 0x1001}, @fda={0x66646185, 0x6, 0x0, 0x200003e}}, &(0x7f0000000300)}, 0x400}], 0x7c, 0x0, 0x0}) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) 0s ago: executing program 2 (id=992): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x20, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007fc0)}, &(0x7f0000000100)=0x10) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x4, 0x0, 0x4) kernel console output (not intermixed with test programs): 1: unable to enumerate USB device [ 171.953290][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 171.953304][ T29] audit: type=1326 audit(1738212350.108:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 171.990079][ T29] audit: type=1326 audit(1738212350.108:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.084701][ T974] usb 6-1: config 0 interface 0 has no altsetting 0 [ 172.279927][ T29] audit: type=1326 audit(1738212350.108:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.331860][ T29] audit: type=1326 audit(1738212350.108:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.332248][ T974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.355626][ T29] audit: type=1326 audit(1738212350.118:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.390506][ T29] audit: type=1326 audit(1738212350.118:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.413708][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.419924][ T29] audit: type=1326 audit(1738212350.118:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.443111][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.449258][ T29] audit: type=1326 audit(1738212350.118:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.882130][ T29] audit: type=1326 audit(1738212350.118:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 172.889804][ T974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.026120][ T974] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.033862][ T974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.043579][ T974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.058423][ T974] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.068251][ T974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.077445][ T974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.088723][ T974] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.114378][ T974] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 173.125382][ T974] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 173.139538][ T974] usb 6-1: Product: syz [ 173.145031][ T974] usb 6-1: Manufacturer: syz [ 173.155321][ T974] usb 6-1: SerialNumber: syz [ 173.170736][ T974] usb 6-1: config 0 descriptor?? [ 173.188294][ T974] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 173.208258][ T29] audit: type=1326 audit(1738212350.118:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 173.244902][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.388'. [ 173.527277][ T7467] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 173.965480][ T25] usb 6-1: USB disconnect, device number 4 [ 173.975229][ T25] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 174.995748][ T7478] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 175.011449][ T7478] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 175.286630][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.412893][ T5822] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.493034][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 175.539848][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 175.552518][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 175.558776][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 175.626617][ T25] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 175.713948][ T5822] usb 6-1: config index 0 descriptor too short (expected 165, got 72) [ 175.778327][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.206051][ T5822] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.218898][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.228941][ T25] usb 5-1: config 0 descriptor?? [ 176.234714][ T5822] usb 6-1: Product: syz [ 176.240963][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 176.247195][ T5822] usb 6-1: Manufacturer: syz [ 176.253085][ T5822] usb 6-1: SerialNumber: syz [ 176.261527][ T5822] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.287608][ T5920] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.417388][ T7500] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 176.539956][ T974] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.709783][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 176.716212][ T974] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 176.730784][ T5822] usb 6-1: USB disconnect, device number 5 [ 176.731083][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.056761][ T7508] overlayfs: failed to resolve './file0': -2 [ 177.184826][ T25] gspca_vc032x: reg_w err -110 [ 177.210662][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.221515][ T974] usb 3-1: config 0 descriptor?? [ 177.228649][ T974] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 177.239661][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.250620][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.258642][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.272476][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.277814][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.283248][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.289504][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.294922][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.301496][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.306827][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.312201][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.317527][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.322972][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.348936][ T5920] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 177.349862][ T9] usb 2-1: device descriptor read/64, error -71 [ 177.356004][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.368746][ T5920] ath9k_htc: Failed to initialize the device [ 177.376652][ T5822] usb 6-1: ath9k_htc: USB layer deinitialized [ 177.383779][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.389075][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.396476][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.402311][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.407824][ T25] gspca_vc032x: Unknown sensor... [ 177.413661][ T25] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 177.423589][ T25] usb 5-1: USB disconnect, device number 12 [ 177.533793][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 177.533809][ T29] audit: type=1400 audit(1738212356.228:531): avc: denied { watch watch_reads } for pid=7509 comm="syz.3.408" path="/82" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.550862][ T7512] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 177.681253][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 177.949801][ T9] usb 2-1: device descriptor read/64, error -71 [ 178.062060][ T9] usb usb2-port1: attempt power cycle [ 178.094978][ T7520] netlink: 'syz.4.411': attribute type 4 has an invalid length. [ 178.107380][ T7520] netlink: 'syz.4.411': attribute type 4 has an invalid length. [ 178.219366][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.412'. [ 178.238383][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.412'. [ 179.129144][ T974] gspca_sonixj: reg_w1 err -110 [ 179.134764][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.143522][ T29] audit: type=1400 audit(1738212357.838:532): avc: denied { create } for pid=7495 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.170318][ T974] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 179.220280][ T9] usb 2-1: device descriptor read/8, error -71 [ 179.307737][ T7541] mkiss: ax0: crc mode is auto. [ 179.499888][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.520499][ T974] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.533898][ T9] usb 2-1: device descriptor read/8, error -71 [ 179.653103][ T9] usb usb2-port1: unable to enumerate USB device [ 179.706975][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 179.714867][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.727172][ T974] usb 5-1: config 0 has no interfaces? [ 179.739255][ T974] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 179.755120][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.003999][ T5822] usb 3-1: USB disconnect, device number 4 [ 181.016268][ T974] usb 5-1: config 0 descriptor?? [ 181.087913][ T7560] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.115076][ T7560] bond0: (slave lo): Error: Device can not be enslaved while up [ 181.136954][ T7562] netlink: 'syz.1.422': attribute type 4 has an invalid length. [ 181.167044][ T7564] can: request_module (can-proto-0) failed. [ 181.173648][ T7567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.423'. [ 181.197622][ T7568] netlink: 'syz.1.422': attribute type 4 has an invalid length. [ 181.209788][ T7566] wg1 speed is unknown, defaulting to 1000 [ 181.216181][ T7566] wg1 speed is unknown, defaulting to 1000 [ 181.869747][ T5822] usb 5-1: USB disconnect, device number 13 [ 181.932217][ T7566] wg1 speed is unknown, defaulting to 1000 [ 181.954715][ T7566] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.013736][ T29] audit: type=1400 audit(1738212360.698:533): avc: denied { shutdown } for pid=7557 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.023179][ T7566] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 182.307861][ T7580] wg1 speed is unknown, defaulting to 1000 [ 182.458602][ T7571] wg1 speed is unknown, defaulting to 1000 [ 182.485819][ T7566] wg1 speed is unknown, defaulting to 1000 [ 182.495357][ T7566] wg1 speed is unknown, defaulting to 1000 [ 182.565435][ T7566] wg1 speed is unknown, defaulting to 1000 [ 182.596036][ T7566] wg1 speed is unknown, defaulting to 1000 [ 182.727473][ T7566] wg1 speed is unknown, defaulting to 1000 [ 182.739039][ T29] audit: type=1400 audit(1738212361.418:534): avc: denied { create } for pid=7585 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.744656][ T7566] wg1 speed is unknown, defaulting to 1000 [ 183.196548][ T29] audit: type=1400 audit(1738212361.888:535): avc: denied { bind } for pid=7592 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.250882][ T7588] wg1 speed is unknown, defaulting to 1000 [ 183.295458][ T29] audit: type=1400 audit(1738212361.888:536): avc: denied { name_bind } for pid=7592 comm="syz.4.430" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 183.317163][ T29] audit: type=1400 audit(1738212361.888:537): avc: denied { node_bind } for pid=7592 comm="syz.4.430" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 183.338682][ T29] audit: type=1400 audit(1738212361.898:538): avc: denied { accept } for pid=7592 comm="syz.4.430" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.359209][ T29] audit: type=1400 audit(1738212361.898:539): avc: denied { write } for pid=7592 comm="syz.4.430" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=36504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.389818][ T5920] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 183.404844][ T29] audit: type=1400 audit(1738212361.898:540): avc: denied { read } for pid=7592 comm="syz.4.430" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=36504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.431067][ T29] audit: type=1400 audit(1738212361.978:541): avc: denied { getopt } for pid=7592 comm="syz.4.430" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.488493][ T29] audit: type=1400 audit(1738212361.978:542): avc: denied { ioctl } for pid=7592 comm="syz.4.430" path="socket:[15102]" dev="sockfs" ino=15102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.569655][ T5920] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.706925][ T5920] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.766437][ T5920] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.780884][ T5920] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 183.796071][ T5920] usb 3-1: Product: syz [ 183.800626][ T5920] usb 3-1: Manufacturer: syz [ 183.824427][ T5920] hub 3-1:4.0: USB hub found [ 184.012557][ T7599] netlink: 76 bytes leftover after parsing attributes in process `syz.1.431'. [ 184.022350][ T7592] dccp_close: ABORT with 32 bytes unread [ 184.051221][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.431'. [ 184.094674][ T29] audit: type=1400 audit(1738212362.778:543): avc: denied { mount } for pid=7598 comm="syz.1.431" name="/" dev="rpc_pipefs" ino=15122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 184.252877][ T5920] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 184.320846][ T5920] usb 3-1: USB disconnect, device number 5 [ 185.249652][ T7622] wg1 speed is unknown, defaulting to 1000 [ 185.314093][ T7616] wg1 speed is unknown, defaulting to 1000 [ 186.259787][ T5822] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.411465][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 186.734603][ T5822] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 186.759747][ T5822] usb 3-1: config 0 has no interface number 0 [ 186.792495][ T5822] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.844392][ T5822] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.897692][ T5822] usb 3-1: config 0 interface 41 has no altsetting 0 [ 186.911532][ T5822] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 186.921402][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.950390][ T7640] wg1 speed is unknown, defaulting to 1000 [ 186.978466][ T5822] usb 3-1: Product: syz [ 186.982957][ T5822] usb 3-1: Manufacturer: syz [ 186.990931][ T5822] usb 3-1: SerialNumber: syz [ 186.997068][ T5822] usb 3-1: config 0 descriptor?? [ 187.002689][ T7631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.011316][ T5822] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 187.263511][ T7651] netlink: del zone limit has 8 unknown bytes [ 187.317611][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 187.326866][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 188.089029][ T7660] fuse: Unknown parameter 'pcr' [ 188.095532][ T7660] netlink: 'syz.5.449': attribute type 11 has an invalid length. [ 188.104129][ T7660] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.449'. [ 188.140907][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 188.140921][ T29] audit: type=1400 audit(1738212366.838:547): avc: denied { ioctl } for pid=7659 comm="syz.5.449" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 188.349135][ T29] audit: type=1326 audit(1738212367.038:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.376234][ T29] audit: type=1326 audit(1738212367.038:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.404697][ T29] audit: type=1326 audit(1738212367.058:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.433625][ T29] audit: type=1326 audit(1738212367.058:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.518952][ T29] audit: type=1326 audit(1738212367.058:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.563760][ T29] audit: type=1326 audit(1738212367.058:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.594849][ T29] audit: type=1326 audit(1738212367.058:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.621565][ T29] audit: type=1326 audit(1738212367.058:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.644893][ T29] audit: type=1326 audit(1738212367.058:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048958cda9 code=0x7ffc0000 [ 188.879229][ T5864] usb 3-1: USB disconnect, device number 6 [ 190.489366][ T7705] netlink: 'syz.2.462': attribute type 4 has an invalid length. [ 190.544989][ T7706] netlink: 'syz.2.462': attribute type 4 has an invalid length. [ 190.775966][ T7714] wg1 speed is unknown, defaulting to 1000 [ 191.084056][ T7714] binder: 7712:7714 ioctl c0306201 20004a40 returned -14 [ 191.345984][ T7732] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 193.029952][ T51] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 193.680602][ T51] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 193.688803][ T51] usb 3-1: config 0 has no interface number 0 [ 193.741029][ T51] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 193.760239][ T51] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 193.782814][ T51] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 193.807537][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.834282][ T51] usb 3-1: config 0 descriptor?? [ 193.875661][ T7744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.891468][ T51] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input9 [ 193.914684][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.921034][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.976194][ T7756] wg1 speed is unknown, defaulting to 1000 [ 194.149821][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 194.149837][ T29] audit: type=1400 audit(1738212372.838:634): avc: denied { append } for pid=7743 comm="syz.2.474" name="event4" dev="devtmpfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.221035][ T7756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.477'. [ 194.242472][ T5864] usb 3-1: USB disconnect, device number 7 [ 194.242579][ C1] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 194.538739][ T7769] ======================================================= [ 194.538739][ T7769] WARNING: The mand mount option has been deprecated and [ 194.538739][ T7769] and is ignored by this kernel. Remove the mand [ 194.538739][ T7769] option from the mount to silence this warning. [ 194.538739][ T7769] ======================================================= [ 194.614135][ T7773] fuse: Bad value for 'rootmode' [ 195.444154][ T29] audit: type=1400 audit(1738212374.138:635): avc: denied { mounton } for pid=7788 comm="syz.4.486" path="/proc/299/cgroup" dev="proc" ino=16490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 195.937147][ T29] audit: type=1326 audit(1738212374.328:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 196.290669][ T29] audit: type=1326 audit(1738212374.328:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 196.318746][ T29] audit: type=1326 audit(1738212374.328:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 196.521625][ T29] audit: type=1326 audit(1738212374.328:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 196.780954][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 197.146385][ T29] audit: type=1326 audit(1738212374.328:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 197.269372][ T7802] wg1 speed is unknown, defaulting to 1000 [ 197.449393][ T7817] wg1 speed is unknown, defaulting to 1000 [ 197.522363][ T29] audit: type=1326 audit(1738212374.338:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 197.675101][ T7813] wg1 speed is unknown, defaulting to 1000 [ 197.769641][ T7818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 197.806276][ T29] audit: type=1326 audit(1738212374.338:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 197.893048][ T29] audit: type=1326 audit(1738212374.338:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 198.138416][ T7834] kAFS: No cell specified [ 198.322661][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'. [ 198.383805][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'. [ 198.422586][ T7842] netlink: 'syz.5.500': attribute type 4 has an invalid length. [ 198.462682][ T7842] netlink: 'syz.5.500': attribute type 4 has an invalid length. [ 198.600123][ T51] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 198.639770][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 198.679638][ T7855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.503'. [ 198.703716][ T7851] can: request_module (can-proto-0) failed. [ 198.830992][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 198.931698][ T51] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 198.934197][ T9] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 198.949722][ T51] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 199.059765][ T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.074781][ T9] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 199.097377][ T51] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 199.119883][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 199.124220][ T51] usb 5-1: config 1 has no interface number 0 [ 199.136788][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 199.158879][ T51] usb 5-1: config 1 interface 1 has no altsetting 0 [ 199.166759][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.197353][ T51] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 199.208732][ T9] usb 4-1: Product: syz [ 199.222671][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.228022][ T9] usb 4-1: Manufacturer: syz [ 199.258107][ T51] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 199.259659][ T9] usb 4-1: SerialNumber: syz [ 199.276171][ T51] usb 5-1: selecting invalid altsetting 0 [ 199.295733][ T51] snd_usb_pod 5-1:1.1: set_interface failed [ 199.317913][ T51] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 199.336399][ T51] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 199.347306][ T7859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.505'. [ 199.523117][ T25] usb 5-1: USB disconnect, device number 14 [ 199.703960][ T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 199.767660][ T7870] process 'syz.5.508' launched './file2' with NULL argv: empty string added [ 199.777507][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 199.777519][ T29] audit: type=1400 audit(1738212378.468:653): avc: denied { execute_no_trans } for pid=7868 comm="syz.5.508" path="/94/file2" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.842711][ T51] usb 2-1: device descriptor read/64, error -71 [ 199.932735][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 200.089812][ T51] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.141819][ T7874] wg1 speed is unknown, defaulting to 1000 [ 200.211631][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 200.231488][ T51] usb 2-1: device descriptor read/64, error -71 [ 200.238236][ T29] audit: type=1400 audit(1738212378.928:654): avc: denied { bind } for pid=7873 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.479912][ T29] audit: type=1400 audit(1738212379.148:655): avc: denied { mount } for pid=7876 comm="syz.2.511" name="/" dev="autofs" ino=16121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 200.633595][ T29] audit: type=1400 audit(1738212379.148:656): avc: denied { read } for pid=7876 comm="syz.2.511" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.752531][ C0] usblp0: nonzero write bulk status received: -71 [ 200.759485][ T9] usb 4-1: USB disconnect, device number 9 [ 200.795534][ T29] audit: type=1400 audit(1738212379.148:657): avc: denied { open } for pid=7876 comm="syz.2.511" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.828604][ T9] usblp0: removed [ 200.937395][ T29] audit: type=1400 audit(1738212379.148:658): avc: denied { ioctl } for pid=7876 comm="syz.2.511" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.065860][ T29] audit: type=1400 audit(1738212379.428:659): avc: denied { read write } for pid=7839 comm="syz.3.499" name="lp0" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 201.119008][ T51] usb usb2-port1: attempt power cycle [ 201.344370][ T29] audit: type=1400 audit(1738212379.428:660): avc: denied { open } for pid=7839 comm="syz.3.499" path="/dev/usb/lp0" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 201.730046][ T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 201.871580][ T51] usb 2-1: device descriptor read/8, error -71 [ 202.177389][ T29] audit: type=1400 audit(1738212380.868:661): avc: denied { read append } for pid=7896 comm="syz.3.517" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.222293][ T51] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 202.265721][ T29] audit: type=1400 audit(1738212380.898:662): avc: denied { open } for pid=7896 comm="syz.3.517" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.314938][ T51] usb 2-1: device descriptor read/8, error -71 [ 202.440100][ T51] usb usb2-port1: unable to enumerate USB device [ 202.462429][ T7902] can: request_module (can-proto-0) failed. [ 202.469835][ T5868] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 202.495976][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 202.659785][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 202.672390][ T5868] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.797907][ T5868] usb 4-1: config 0 has no interface number 0 [ 203.761161][ T5868] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.770362][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.780378][ T5868] usb 4-1: Product: syz [ 203.784582][ T5868] usb 4-1: Manufacturer: syz [ 203.789180][ T5868] usb 4-1: SerialNumber: syz [ 203.812141][ T5868] usb 4-1: config 0 descriptor?? [ 203.840554][ T5868] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.927061][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.516'. [ 203.968352][ T7917] can: request_module (can-proto-0) failed. [ 203.976611][ T7922] FAULT_INJECTION: forcing a failure. [ 203.976611][ T7922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.989929][ T7922] CPU: 0 UID: 0 PID: 7922 Comm: syz.5.523 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 203.989954][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 203.989963][ T7922] Call Trace: [ 203.989967][ T7922] [ 203.989971][ T7922] dump_stack_lvl+0x16c/0x1f0 [ 203.989990][ T7922] should_fail_ex+0x50a/0x650 [ 203.990005][ T7922] _copy_to_user+0x32/0xd0 [ 203.990020][ T7922] simple_read_from_buffer+0xd0/0x160 [ 203.990034][ T7922] proc_fail_nth_read+0x198/0x270 [ 203.990046][ T7922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.990061][ T7922] ? rw_verify_area+0xcf/0x680 [ 203.990073][ T7922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.990085][ T7922] vfs_read+0x1df/0xbf0 [ 203.990098][ T7922] ? __fget_files+0x1fc/0x3a0 [ 203.990106][ T7922] ? __pfx___mutex_lock+0x10/0x10 [ 203.990121][ T7922] ? __pfx_vfs_read+0x10/0x10 [ 203.990137][ T7922] ? __fget_files+0x206/0x3a0 [ 203.990148][ T7922] ksys_read+0x12b/0x250 [ 203.990161][ T7922] ? __pfx_ksys_read+0x10/0x10 [ 203.990177][ T7922] do_syscall_64+0xcd/0x250 [ 203.990186][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.990200][ T7922] RIP: 0033:0x7f98f2f8b7bc [ 203.990207][ T7922] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.990216][ T7922] RSP: 002b:00007f98f3dd6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.990225][ T7922] RAX: ffffffffffffffda RBX: 00007f98f31a6080 RCX: 00007f98f2f8b7bc [ 203.990231][ T7922] RDX: 000000000000000f RSI: 00007f98f3dd60a0 RDI: 0000000000000006 [ 203.990236][ T7922] RBP: 00007f98f3dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.990241][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.990246][ T7922] R13: 0000000000000001 R14: 00007f98f31a6080 R15: 00007fff7308f048 [ 203.990257][ T7922] [ 204.479047][ T5868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 204.491751][ T5868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 205.336443][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'. [ 205.696559][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 205.961245][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 205.993444][ T25] usb 4-1: USB disconnect, device number 10 [ 206.063901][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.134345][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 206.182929][ T25] quatech2 4-1:0.51: device disconnected [ 206.276844][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.530'. [ 206.629411][ T7949] netlink: 216 bytes leftover after parsing attributes in process `syz.4.531'. [ 206.684725][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.531'. [ 206.721949][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 206.807218][ T7951] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 206.871379][ T7953] can: request_module (can-proto-0) failed. [ 206.877937][ T7953] netlink: 32 bytes leftover after parsing attributes in process `syz.5.532'. [ 207.063578][ T5864] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 207.209800][ T5822] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 207.229810][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 207.278390][ T5864] usb 5-1: config 2 interface 0 has no altsetting 0 [ 207.295188][ T5864] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 207.314734][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.339756][ T5864] usb 5-1: Product: syz [ 207.354689][ T5864] usb 5-1: Manufacturer: syz [ 207.364556][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 207.369466][ T5864] usb 5-1: SerialNumber: syz [ 207.380036][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 207.389399][ T5822] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.401066][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.418303][ T5822] usb 6-1: config 0 descriptor?? [ 207.630213][ T7970] netlink: 300 bytes leftover after parsing attributes in process `syz.2.538'. [ 209.198509][ T5864] usb 5-1: USB disconnect, device number 15 [ 209.372916][ T7988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.541'. [ 209.600431][ T5822] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 209.662562][ T5822] asix 6-1:0.0: probe with driver asix failed with error -71 [ 209.704763][ T5822] usb 6-1: USB disconnect, device number 6 [ 209.996251][ T7998] can: request_module (can-proto-0) failed. [ 210.007033][ T7998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.544'. [ 210.108632][ T8001] netlink: 'syz.4.545': attribute type 4 has an invalid length. [ 210.219913][ T8001] netlink: 'syz.4.545': attribute type 4 has an invalid length. [ 211.988845][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.551'. [ 212.215514][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.553'. [ 212.631098][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.556'. [ 212.649243][ T8031] can: request_module (can-proto-0) failed. [ 212.750343][ T5868] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.180292][ T5868] usb 6-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 213.194605][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.240567][ T5868] usb 6-1: Product: syz [ 213.378601][ T5868] usb 6-1: Manufacturer: syz [ 213.389595][ T5868] usb 6-1: SerialNumber: syz [ 213.398083][ T8048] wg1 speed is unknown, defaulting to 1000 [ 213.502247][ T5868] usb 6-1: config 0 descriptor?? [ 213.535335][ T5868] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 213.578714][ T8041] wg1 speed is unknown, defaulting to 1000 [ 214.775628][ T8027] input: syz1 as /devices/virtual/input/input10 [ 214.801104][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 214.801119][ T29] audit: type=1400 audit(1738212393.496:665): avc: denied { connect } for pid=8026 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.879656][ T29] audit: type=1400 audit(1738212393.566:666): avc: denied { setopt } for pid=8026 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.900935][ T29] audit: type=1400 audit(1738212393.566:667): avc: denied { bind } for pid=8026 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.941868][ T29] audit: type=1400 audit(1738212393.586:668): avc: denied { write } for pid=8026 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.967969][ T29] audit: type=1400 audit(1738212393.616:669): avc: denied { read } for pid=8026 comm="syz.5.554" path="socket:[17619]" dev="sockfs" ino=17619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.035045][ T5868] pwc: Failed to set LED on/off time (-71) [ 215.053235][ T5868] pwc: send_video_command error -71 [ 215.058592][ T5868] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 215.099857][ T5868] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 215.127092][ T5868] usb 6-1: USB disconnect, device number 7 [ 216.470820][ T8090] netlink: 32 bytes leftover after parsing attributes in process `syz.1.569'. [ 216.529055][ T8086] can: request_module (can-proto-0) failed. [ 216.800050][ T29] audit: type=1326 audit(1738212395.476:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 217.272045][ T29] audit: type=1326 audit(1738212395.476:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 217.726583][ T29] audit: type=1326 audit(1738212395.486:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 217.789948][ T8099] wg1 speed is unknown, defaulting to 1000 [ 217.938833][ T29] audit: type=1326 audit(1738212395.486:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 218.008544][ T29] audit: type=1326 audit(1738212395.486:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 218.900244][ T8120] Process accounting resumed [ 219.237256][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.581'. [ 219.249864][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 219.409871][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 219.433585][ T9] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 219.448467][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 219.458785][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.472754][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.482023][ T9] usb 4-1: Product: 廂䣛 [ 219.487242][ T9] usb 4-1: Manufacturer: 铂䎾棾引烥탵ꂠꨈ൒䛌땅歞垴푮ì”é±à¼½î†¡ì¿Ÿä³î¼¹ê´â¹Œé¸á©†ã¨“鷳瓳績陹䉋梲è°ì¶¾æ›ˆê‰°ê—ªë—Œæ…¯å¿‘똬↣⊩텫ܶ篜쮂㸅릥✺鴥탉빶唊⻔킷郤⭻䱾讎釰렟㵚㌿쇒綕䦻ݠ⽰՚륿梼憡⻹굮⠥㋿逄瀿䬘㻇竲雿â‡ë„Žïˆ¯ï–™æ‡„⢻ꮗኟ뿳î‘燴䮼è‹ï´¼åŽ¢î–¦é´ Ü–ổ [ 219.543261][ T9] usb 4-1: SerialNumber: syz [ 219.569997][ T8120] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.766315][ T8138] can: request_module (can-proto-0) failed. [ 219.782241][ T8138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.585'. [ 219.803948][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 219.862977][ T9] usb 4-1: USB disconnect, device number 11 [ 219.901037][ T5864] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 220.329944][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 220.337857][ T5864] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 220.360049][ T5864] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 220.389067][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 220.553464][ T5864] usb 5-1: config 1 has no interface number 0 [ 220.586033][ T5864] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.858852][ T5864] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 220.877198][ T8142] wg1 speed is unknown, defaulting to 1000 [ 220.918896][ T5864] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 220.945556][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.029782][ T5864] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 222.141288][ T8160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.345105][ T5864] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 222.468893][ T5822] usb 5-1: USB disconnect, device number 16 [ 222.489550][ T5822] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 222.502104][ T8162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.529076][ T8164] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 222.569241][ T8164] netlink: 'syz.2.591': attribute type 4 has an invalid length. [ 222.998980][ T8180] input: syz1 as /devices/virtual/input/input11 [ 223.091040][ T8180] fuse: Bad value for 'fd' [ 223.115396][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 223.115406][ T29] audit: type=1400 audit(1738212401.806:686): avc: denied { append } for pid=8183 comm="syz.4.599" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 223.409814][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 223.459291][ T29] audit: type=1400 audit(1738212402.146:687): avc: denied { write } for pid=8187 comm="syz.5.600" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.479710][ T8188] 9pnet_fd: Insufficient options for proto=fd [ 223.508583][ T8188] [U] [ 223.511491][ T8188] [U] [ 223.514188][ T8188] [U] [ 223.516864][ T8188] [U] [ 223.519539][ T8188] [U] [ 223.522218][ T8188] [U] [ 223.524892][ T8188] [U] [ 223.527570][ T8188] [U] [ 223.565928][ T29] audit: type=1400 audit(1738212402.256:688): avc: denied { create } for pid=8187 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 223.590643][ T8188] [U] [ 223.593374][ T8188] [U] [ 223.596069][ T8188] [U] [ 223.639796][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 223.657699][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.676069][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 223.711398][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.731674][ T8191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 223.760575][ T25] usb 2-1: config 0 descriptor?? [ 223.779051][ T25] hub 2-1:0.0: bad descriptor, ignoring hub [ 223.798978][ T25] hub 2-1:0.0: probe with driver hub failed with error -5 [ 223.989999][ T5822] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 223.991713][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.038961][ T29] audit: type=1400 audit(1738212402.666:689): avc: denied { map } for pid=8179 comm="syz.1.598" path="socket:[17905]" dev="sockfs" ino=17905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.178744][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.182751][ T29] audit: type=1400 audit(1738212402.666:690): avc: denied { read } for pid=8179 comm="syz.1.598" path="socket:[17905]" dev="sockfs" ino=17905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.259803][ T5822] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 224.278397][ T5822] usb 6-1: config 5 has no interface number 0 [ 224.278817][ T8197] netlink: 'syz.2.603': attribute type 4 has an invalid length. [ 224.293594][ T5822] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 224.335695][ T5822] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 224.337007][ T8197] netlink: 'syz.2.603': attribute type 4 has an invalid length. [ 224.372870][ T5868] usb 2-1: USB disconnect, device number 16 [ 224.491226][ T5822] usb 6-1: config 5 interface 123 has no altsetting 0 [ 224.500612][ T5822] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 224.510445][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.518444][ T5822] usb 6-1: Product: syz [ 224.522802][ T5822] usb 6-1: Manufacturer: syz [ 224.527404][ T5822] usb 6-1: SerialNumber: syz [ 225.542231][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'. [ 225.692375][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 225.702418][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.5.600'. [ 226.575952][ T8187] [U] [ 226.679161][ T5822] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 226.775925][ T5822] usb 6-1: USB disconnect, device number 8 [ 226.833607][ T8216] syz.4.610: attempt to access beyond end of device [ 226.833607][ T8216] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 226.848341][ T8216] EXT4-fs (nbd4): unable to read superblock [ 227.315671][ T8222] wg1 speed is unknown, defaulting to 1000 [ 227.433735][ T8228] can: request_module (can-proto-0) failed. [ 227.442385][ T8228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 228.189763][ T5864] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 228.363771][ T29] audit: type=1326 audit(1738212407.046:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.860042][ T29] audit: type=1326 audit(1738212407.046:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.883955][ T29] audit: type=1326 audit(1738212407.046:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.899821][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 228.908118][ T29] audit: type=1326 audit(1738212407.046:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.922373][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.935788][ T29] audit: type=1326 audit(1738212407.046:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.935904][ T29] audit: type=1326 audit(1738212407.046:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.936013][ T29] audit: type=1326 audit(1738212407.046:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.936125][ T29] audit: type=1326 audit(1738212407.046:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.936211][ T29] audit: type=1326 audit(1738212407.056:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 228.936240][ T29] audit: type=1326 audit(1738212407.056:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8236 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda58f8cda9 code=0x7ffc0000 [ 229.584248][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.595405][ T5864] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 229.604877][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.807459][ T5864] usb 6-1: config 0 descriptor?? [ 230.342130][ T8256] wg1 speed is unknown, defaulting to 1000 [ 230.578632][ T5864] hid-multitouch 0003:1FD2:6007.0003: item 0 2 0 8 parsing failed [ 230.590313][ T5864] hid-multitouch 0003:1FD2:6007.0003: probe with driver hid-multitouch failed with error -22 [ 231.125682][ T8270] wg1 speed is unknown, defaulting to 1000 [ 231.236358][ T9] usb 6-1: USB disconnect, device number 9 [ 231.443185][ T8279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.626'. [ 231.475586][ T8275] can: request_module (can-proto-0) failed. [ 231.746472][ T8256] binder: 8255:8256 ioctl c0306201 20004a40 returned -14 [ 233.324670][ T8297] wg1 speed is unknown, defaulting to 1000 [ 233.371301][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.632'. [ 233.501850][ T8292] wg1 speed is unknown, defaulting to 1000 [ 234.833534][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 234.833550][ T29] audit: type=1400 audit(1738212413.526:715): avc: denied { load_policy } for pid=8316 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 234.862404][ T8317] SELinux: policydb version -1896723025 does not match my version range 15-34 [ 234.876435][ T8317] SELinux: failed to load policy [ 235.993968][ T8325] binder: BINDER_SET_CONTEXT_MGR already set [ 236.004796][ T8325] binder: 8324:8325 ioctl 4018620d 20000140 returned -16 [ 236.043820][ T8325] binder: 8324:8325 ioctl c06864ce 20000400 returned -22 [ 236.866807][ T5898] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 237.079938][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 237.097954][ T5898] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 237.186626][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.194797][ T8344] bridge0: port 3(erspan0) entered blocking state [ 237.194857][ T8344] bridge0: port 3(erspan0) entered disabled state [ 237.195042][ T8344] erspan0: entered allmulticast mode [ 237.195720][ T8344] erspan0: entered promiscuous mode [ 237.223464][ T8344] bridge0: port 3(erspan0) entered blocking state [ 237.230096][ T8344] bridge0: port 3(erspan0) entered forwarding state [ 237.245861][ T5898] usb 4-1: config 0 descriptor?? [ 237.315702][ T5898] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 238.650757][ T29] audit: type=1400 audit(1738212417.336:716): avc: denied { setopt } for pid=8366 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.993436][ T29] audit: type=1400 audit(1738212417.686:717): avc: denied { bind } for pid=8366 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.170935][ T5898] gspca_sonixj: i2c_w8 err -71 [ 239.189761][ T5898] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 239.242290][ T5898] usb 4-1: USB disconnect, device number 12 [ 239.310365][ T8376] netlink: 'syz.5.656': attribute type 8 has an invalid length. [ 239.355814][ T8375] warning: `syz.2.655' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 239.375256][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 239.647656][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'. [ 239.849584][ T8394] can: request_module (can-proto-0) failed. [ 239.874793][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.662'. [ 240.107301][ T8397] netlink: 300 bytes leftover after parsing attributes in process `syz.5.658'. [ 241.011097][ T29] audit: type=1400 audit(1738212932.680:718): avc: denied { bind } for pid=8419 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.031208][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.112770][ T29] audit: type=1326 audit(1738212932.767:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.2.668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x0 [ 241.135485][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.210294][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'. [ 241.319641][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 241.328976][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 241.622090][ T29] audit: type=1400 audit(1738212933.272:720): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 242.308479][ T8445] No such timeout policy "syz0" [ 242.640691][ T8449] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 243.542618][ T8449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.652427][ T8455] FAULT_INJECTION: forcing a failure. [ 243.652427][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 244.020102][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.2.677 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 244.020126][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.020137][ T8455] Call Trace: [ 244.020142][ T8455] [ 244.020149][ T8455] dump_stack_lvl+0x16c/0x1f0 [ 244.020181][ T8455] should_fail_ex+0x50a/0x650 [ 244.020204][ T8455] ? fs_reclaim_acquire+0xae/0x150 [ 244.020230][ T8455] should_failslab+0xc2/0x120 [ 244.020250][ T8455] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 244.020268][ T8455] ? __alloc_skb+0x2b1/0x380 [ 244.020288][ T8455] __alloc_skb+0x2b1/0x380 [ 244.020304][ T8455] ? __pfx___alloc_skb+0x10/0x10 [ 244.020323][ T8455] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 244.020354][ T8455] netlink_alloc_large_skb+0x69/0x130 [ 244.020372][ T8455] netlink_sendmsg+0x689/0xd70 [ 244.020392][ T8455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.020416][ T8455] ____sys_sendmsg+0xaaf/0xc90 [ 244.020439][ T8455] ? copy_msghdr_from_user+0x10b/0x160 [ 244.020458][ T8455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.020491][ T8455] ___sys_sendmsg+0x135/0x1e0 [ 244.020511][ T8455] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.020538][ T8455] ? __pfx_lock_release+0x10/0x10 [ 244.020561][ T8455] ? trace_lock_acquire+0x14e/0x1f0 [ 244.020587][ T8455] ? __fget_files+0x206/0x3a0 [ 244.020609][ T8455] __sys_sendmsg+0x16e/0x220 [ 244.020627][ T8455] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.020660][ T8455] do_syscall_64+0xcd/0x250 [ 244.020678][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.020701][ T8455] RIP: 0033:0x7fd58a58cda9 [ 244.020716][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.020731][ T8455] RSP: 002b:00007fd58b3af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.020754][ T8455] RAX: ffffffffffffffda RBX: 00007fd58a7a6080 RCX: 00007fd58a58cda9 [ 244.020765][ T8455] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 244.020774][ T8455] RBP: 00007fd58b3af090 R08: 0000000000000000 R09: 0000000000000000 [ 244.020784][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.020793][ T8455] R13: 0000000000000000 R14: 00007fd58a7a6080 R15: 00007ffd67c92258 [ 244.020815][ T8455] [ 244.248601][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.700407][ T29] audit: type=1400 audit(1738212936.151:721): avc: denied { bind } for pid=8460 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.526001][ T29] audit: type=1400 audit(1738212937.049:722): avc: denied { write } for pid=8460 comm="syz.3.679" path="socket:[19021]" dev="sockfs" ino=19021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.551156][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.639891][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.643854][ T29] audit: type=1326 audit(1738212939.123:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz.2.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x0 [ 247.675199][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.684248][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.770991][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.798718][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.839509][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.097679][ T8517] wg1 speed is unknown, defaulting to 1000 [ 248.213393][ T8541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.696'. [ 248.256508][ T8536] netlink: 'syz.5.697': attribute type 4 has an invalid length. [ 248.267874][ T8533] can: request_module (can-proto-0) failed. [ 248.355844][ T8536] netlink: 'syz.5.697': attribute type 4 has an invalid length. [ 248.437818][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.693'. [ 248.479883][ T8523] wg1 speed is unknown, defaulting to 1000 [ 248.889040][ T8517] chnl_net:caif_netlink_parms(): no params data found [ 249.111165][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'. [ 249.156044][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'. [ 249.509724][ T8570] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 249.591379][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.608520][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.630201][ T8517] bridge_slave_0: entered allmulticast mode [ 249.653566][ T8517] bridge_slave_0: entered promiscuous mode [ 249.665691][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.689005][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.704638][ T8517] bridge_slave_1: entered allmulticast mode [ 249.743947][ T8517] bridge_slave_1: entered promiscuous mode [ 249.778187][ T8574] can: request_module (can-proto-0) failed. [ 250.146878][ T5827] Bluetooth: hci0: command tx timeout [ 250.239646][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.344611][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.521430][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 251.128849][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 251.233694][ T8517] team0: Port device team_slave_0 added [ 251.265785][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 251.276103][ T8517] team0: Port device team_slave_1 added [ 251.287704][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 251.298733][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 251.407771][ T9] usb 6-1: config 1 has no interface number 0 [ 251.418302][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.425816][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.452146][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.472202][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 251.571138][ T8517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.618142][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 251.752210][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.763479][ T8588] netlink: 'syz.2.706': attribute type 21 has an invalid length. [ 251.843298][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 252.148679][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.176100][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.218080][ T8517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.241504][ T5827] Bluetooth: hci0: command tx timeout [ 252.305525][ T8517] hsr_slave_0: entered promiscuous mode [ 252.331564][ T8517] hsr_slave_1: entered promiscuous mode [ 252.340801][ T8517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.364443][ T8517] Cannot create hsr debugfs directory [ 252.370435][ T8605] netlink: 'syz.3.709': attribute type 4 has an invalid length. [ 252.409815][ T8602] netlink: 'syz.3.709': attribute type 4 has an invalid length. [ 252.857330][ T8613] netlink: 'syz.3.712': attribute type 4 has an invalid length. [ 252.865127][ T8517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.472530][ T8517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.594809][ T8517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.633991][ T8517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.768270][ T9] snd_usb_pod 6-1:1.1: set_interface failed [ 253.775217][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 253.782432][ T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 253.798351][ T9] usb 6-1: USB disconnect, device number 10 [ 254.421289][ T5827] Bluetooth: hci0: command tx timeout [ 254.492528][ T8627] lo: entered allmulticast mode [ 254.499736][ T8627] tunl0: entered allmulticast mode [ 254.507146][ T8627] gre0: entered allmulticast mode [ 254.517572][ T8629] can: request_module (can-proto-0) failed. [ 254.518076][ T8627] gretap0: entered allmulticast mode [ 254.529404][ T8627] erspan0: entered allmulticast mode [ 254.535540][ T8627] ip_vti0: entered allmulticast mode [ 254.541555][ T8627] ip6_vti0: entered allmulticast mode [ 254.547525][ T8627] sit0: entered allmulticast mode [ 254.552982][ T8627] ip6tnl0: entered allmulticast mode [ 254.560034][ T8627] ip6gre0: entered allmulticast mode [ 254.566072][ T8627] syz_tun: entered allmulticast mode [ 254.571707][ T8627] ip6gretap0: entered allmulticast mode [ 254.578609][ T8627] bridge0: entered allmulticast mode [ 254.594923][ T8627] vcan0: entered allmulticast mode [ 254.613478][ T8627] bond0: entered allmulticast mode [ 254.624735][ T8627] bond_slave_0: entered allmulticast mode [ 254.630530][ T8627] bond_slave_1: entered allmulticast mode [ 254.697219][ T8627] team0: entered allmulticast mode [ 254.703777][ T8627] team_slave_0: entered allmulticast mode [ 254.711884][ T8627] team_slave_1: entered allmulticast mode [ 254.827390][ T8627] dummy0: entered allmulticast mode [ 254.865793][ T8634] can: request_module (can-proto-0) failed. [ 254.873953][ T8627] nlmon0: entered allmulticast mode [ 254.941481][ T8627] caif0: entered allmulticast mode [ 254.966446][ T8627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.995219][ T8629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.716'. [ 255.006847][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.5.717'. [ 255.053440][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.064645][ T8517] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.131657][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.138755][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.459898][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.467018][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.658006][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664318][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.720417][ T5827] Bluetooth: hci0: command tx timeout [ 257.285433][ T8517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.174101][ T29] audit: type=1326 audit(1738212949.298:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 258.600555][ T29] audit: type=1326 audit(1738212949.298:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 259.600191][ T29] audit: type=1326 audit(1738212949.298:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 259.720331][ T29] audit: type=1326 audit(1738212949.308:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 259.802043][ T29] audit: type=1326 audit(1738212949.308:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 259.879641][ T8693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.729'. [ 259.967795][ T8517] veth0_vlan: entered promiscuous mode [ 260.509588][ T8688] can: request_module (can-proto-0) failed. [ 260.546258][ T8682] wg1 speed is unknown, defaulting to 1000 [ 260.583068][ T29] audit: type=1326 audit(1738212949.308:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 260.621452][ T8517] veth1_vlan: entered promiscuous mode [ 260.855084][ T29] audit: type=1326 audit(1738212949.308:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 260.878894][ T29] audit: type=1326 audit(1738212949.308:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 260.922686][ T29] audit: type=1326 audit(1738212949.318:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 260.942599][ T8517] veth0_macvtap: entered promiscuous mode [ 261.590495][ T8517] veth1_macvtap: entered promiscuous mode [ 261.648351][ T29] audit: type=1326 audit(1738212949.318:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741498cda9 code=0x7ffc0000 [ 261.717470][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.728221][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.742745][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.753467][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.780069][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.804561][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.846900][ T8710] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 261.864024][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.896482][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.898202][ T8713] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 261.926571][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.933197][ T8715] loop5: detected capacity change from 0 to 8 [ 261.950631][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.959923][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.968118][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.977364][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.977500][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.992565][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.002184][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.004259][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.020376][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.058433][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.067658][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.077354][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.091840][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.098536][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.101014][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.116369][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.131330][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.140472][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.149131][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.158266][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.167625][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.176732][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.184553][ T8715] ldm_validate_partition_table(): Disk read failed. [ 262.191487][ T3476] loop: Write error at byte offset 1, length 4096. [ 262.198830][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 262.208342][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 262.218032][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.225923][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.226681][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.236883][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.247190][ T8715] Dev loop5: unable to read RDB block 0 [ 262.255501][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.271038][ T8715] loop5: unable to read partition table [ 262.277963][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.278953][ T8715] loop5: partition table beyond EOD, truncated [ 262.296044][ T8715] loop_reread_partitions: partition scan of loop5 (3Ÿ ¾‚³˜) failed (rc=-5) [ 262.300127][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.318992][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.330588][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.330607][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.330629][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.330641][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.331389][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.383286][ T8517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.392050][ T8517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.402347][ T8517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.411091][ T8517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.565895][ T5864] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 262.578047][ T8315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.604540][ T8315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.796741][ T5864] usb 4-1: device descriptor read/64, error -71 [ 262.972211][ T8730] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 263.883827][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 264.164341][ T5864] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 264.173408][ T8315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.226196][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 264.235975][ T8315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.366215][ T5864] usb 4-1: device descriptor read/64, error -71 [ 264.384810][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 264.384823][ T29] audit: type=1400 audit(1738212955.683:739): avc: denied { mounton } for pid=8517 comm="syz-executor" path="/root/syzkaller.YP5qAc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 264.480129][ T5864] usb usb4-port1: attempt power cycle [ 264.508114][ T8734] wg1 speed is unknown, defaulting to 1000 [ 264.532307][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 264.544120][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.554473][ T8740] netlink: 'syz.5.741': attribute type 3 has an invalid length. [ 264.565304][ T8740] netlink: 'syz.5.741': attribute type 3 has an invalid length. [ 264.573167][ T25] usb 3-1: Product: syz [ 264.578529][ T25] usb 3-1: Manufacturer: syz [ 264.583512][ T25] usb 3-1: SerialNumber: syz [ 264.634231][ T8727] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 264.823994][ T5864] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 264.863227][ T29] audit: type=1400 audit(1738212956.159:740): avc: denied { ioctl } for pid=8726 comm="syz.2.739" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 264.895453][ T9] usb 3-1: USB disconnect, device number 8 [ 264.914360][ T5864] usb 4-1: device descriptor read/8, error -71 [ 265.695153][ T5864] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 265.925950][ T5864] usb 4-1: device not accepting address 16, error -71 [ 265.934011][ T8764] netlink: 32 bytes leftover after parsing attributes in process `syz.5.745'. [ 265.952585][ T5864] usb usb4-port1: unable to enumerate USB device [ 265.960012][ T8763] netlink: 'syz.2.747': attribute type 4 has an invalid length. [ 266.106059][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 266.115012][ T8767] netlink: 'syz.3.746': attribute type 21 has an invalid length. [ 266.684874][ T8770] netlink: 'syz.2.747': attribute type 4 has an invalid length. [ 266.923614][ T8760] can: request_module (can-proto-0) failed. [ 268.001328][ T29] audit: type=1400 audit(1738212959.270:741): avc: denied { name_bind } for pid=8784 comm="syz.2.753" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 268.032618][ T29] audit: type=1400 audit(1738212959.300:742): avc: denied { listen } for pid=8784 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.040688][ T8789] overlayfs: conflicting options: metacopy=off,verity=on [ 268.353905][ T974] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 268.361852][ T5868] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 268.579378][ T974] usb 6-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=9c.bb [ 268.611806][ T5868] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 268.661729][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.701469][ T5868] usb 3-1: config 0 has no interface number 0 [ 268.759235][ T5868] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.773241][ T974] usb 6-1: config 0 descriptor?? [ 268.791994][ T974] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 268.800836][ T5868] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 268.816044][ T974] dvb-usb: bulk message failed: -22 (3/0) [ 268.846685][ T5868] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 268.860248][ T974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.870794][ T5868] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 268.882895][ T5868] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.896219][ T974] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 268.904541][ T974] usb 6-1: media controller created [ 268.920783][ T5868] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 269.071110][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.082264][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.438386][ T5868] usb 3-1: config 0 descriptor?? [ 269.748323][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.759'. [ 269.757476][ T8810] netlink: 'syz.6.759': attribute type 21 has an invalid length. [ 270.410489][ T974] dvb-usb: bulk message failed: -22 (6/0) [ 270.427514][ T8787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.447811][ T974] dvb-usb: bulk message failed: -22 (6/0) [ 270.716419][ T974] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 270.729868][ T974] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 270.743463][ T5868] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 270.758127][ T974] dvb-usb: schedule remote query interval to 150 msecs. [ 270.765084][ T974] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 270.959550][ T974] dvb-usb: bulk message failed: -22 (1/0) [ 271.199055][ T974] dvb-usb: error while querying for an remote control event. [ 271.348303][ T25] usb 6-1: USB disconnect, device number 11 [ 271.399042][ T8822] netlink: 'syz.5.763': attribute type 4 has an invalid length. [ 271.558193][ T8822] netlink: 'syz.5.763': attribute type 4 has an invalid length. [ 271.566546][ T8815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.760'. [ 272.234083][ T8814] syzkaller0: entered allmulticast mode [ 272.250517][ T5976] usb 3-1: USB disconnect, device number 9 [ 272.259052][ T25] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 272.269636][ T5976] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 273.385832][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 273.394908][ T8852] netlink: 'syz.3.771': attribute type 21 has an invalid length. [ 273.411316][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 273.588194][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 273.620684][ T25] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 273.662160][ T25] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 273.769472][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 273.787801][ T25] usb 3-1: config 1 has no interface number 0 [ 273.795708][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.815976][ T25] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 273.835537][ T25] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 273.869146][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.887449][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 274.098801][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 274.791878][ T25] usb 3-1: USB disconnect, device number 10 [ 274.794613][ T8865] netlink: 'syz.6.775': attribute type 4 has an invalid length. [ 274.812608][ T8865] netlink: 'syz.6.775': attribute type 4 has an invalid length. [ 274.905219][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 277.371821][ T8872] netlink: 40 bytes leftover after parsing attributes in process `syz.6.778'. [ 277.407673][ T8891] wg1 speed is unknown, defaulting to 1000 [ 278.440167][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'. [ 280.224199][ T8931] can: request_module (can-proto-0) failed. [ 280.236281][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.5.794'. [ 280.662207][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 280.959291][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.998525][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.057886][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.060935][ T5868] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 281.067483][ T25] usb 4-1: config 0 descriptor?? [ 281.214909][ T8944] netlink: 'syz.5.797': attribute type 4 has an invalid length. [ 281.229165][ T8944] netlink: 'syz.5.797': attribute type 4 has an invalid length. [ 281.271897][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 281.288572][ T5868] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 281.297926][ T5868] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 281.309935][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 281.319623][ T5868] usb 3-1: config 1 has no interface number 0 [ 281.326160][ T5868] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.337446][ T974] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 281.348015][ T5868] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 281.369272][ T5868] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 281.396527][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.431352][ T5868] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 281.503427][ T974] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.522023][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.543224][ T974] usb 7-1: config 0 descriptor?? [ 281.571027][ T974] cp210x 7-1:0.0: cp210x converter detected [ 281.649031][ T25] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 281.767695][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input13 [ 282.021214][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.063115][ T5868] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 282.118526][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.147606][ T25] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 282.152111][ T974] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 282.263800][ T29] audit: type=1400 audit(1738212973.478:743): avc: denied { write } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.304789][ T5868] usb 3-1: USB disconnect, device number 11 [ 282.311287][ T5868] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 282.444151][ T29] audit: type=1400 audit(1738212973.478:744): avc: denied { remove_name } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.498503][ T974] usb 7-1: cp210x converter now attached to ttyUSB0 [ 282.522150][ T8953] wg1 speed is unknown, defaulting to 1000 [ 282.589385][ T29] audit: type=1400 audit(1738212973.478:745): avc: denied { add_name } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.714890][ T974] usb 7-1: USB disconnect, device number 2 [ 282.823209][ T974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.882285][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033f0b000: rx timeout, send abort [ 282.953016][ T974] cp210x 7-1:0.0: device disconnected [ 283.174309][ T5920] usb 4-1: USB disconnect, device number 17 [ 283.392982][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033f0b000: abort rx timeout. Force session deactivation [ 284.656844][ T8977] wg1 speed is unknown, defaulting to 1000 [ 285.386632][ T29] audit: type=1400 audit(1738212976.602:746): avc: denied { sqpoll } for pid=8982 comm="syz.6.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 285.540342][ T29] audit: type=1400 audit(1738212976.622:747): avc: denied { ioctl } for pid=8982 comm="syz.6.806" path="socket:[22810]" dev="sockfs" ino=22810 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 286.255542][ T8996] bridge0: port 3(erspan0) entered blocking state [ 286.266282][ T8996] bridge0: port 3(erspan0) entered disabled state [ 286.282431][ T8996] erspan0: entered promiscuous mode [ 286.289961][ T8996] bridge0: port 3(erspan0) entered blocking state [ 286.296551][ T8996] bridge0: port 3(erspan0) entered forwarding state [ 286.660291][ T25] IPVS: starting estimator thread 0... [ 286.672121][ T29] audit: type=1400 audit(1738212977.850:748): avc: denied { setopt } for pid=9011 comm="syz.6.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.741842][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.6.814'. [ 286.749369][ T29] audit: type=1800 audit(1738212977.850:749): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.814" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 286.802653][ T9014] IPVS: using max 35 ests per chain, 84000 per kthread [ 287.010539][ T29] audit: type=1400 audit(1738212978.219:750): avc: denied { create } for pid=9018 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 287.275322][ T29] audit: type=1400 audit(1738212978.489:751): avc: denied { setopt } for pid=9029 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.433360][ T29] audit: type=1400 audit(1738212978.638:752): avc: denied { read } for pid=9029 comm="syz.1.818" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 287.492258][ T9037] netlink: 68 bytes leftover after parsing attributes in process `syz.1.818'. [ 287.566311][ T29] audit: type=1400 audit(1738212978.638:753): avc: denied { open } for pid=9029 comm="syz.1.818" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 287.738875][ T9024] team0 (unregistering): Port device team_slave_0 removed [ 287.765481][ T9024] team0 (unregistering): Port device team_slave_1 removed [ 287.829339][ T9037] bridge0: port 3(erspan0) entered disabled state [ 287.836213][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.845003][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.926092][ T9030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.932289][ T9030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 288.109684][ T9030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.134858][ T9030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 288.160804][ T9030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.177717][ T9030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 288.191648][ T9030] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.253886][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 288.263146][ T9059] netlink: 'syz.3.824': attribute type 21 has an invalid length. [ 288.345434][ T9030] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 288.697699][ T9030] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 288.723484][ T9030] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 288.772212][ T9030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.783299][ T9030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 288.885253][ T9030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 289.977323][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 290.137532][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 290.238365][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 290.244735][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 290.907998][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 291.329096][ T5920] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 291.741168][ T5920] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.899302][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.069918][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 292.220213][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 292.300292][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 292.306423][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 292.455728][ T5920] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 292.464826][ T5920] usb 2-1: Product: syz [ 292.469826][ T5920] usb 2-1: Manufacturer: syz [ 292.518551][ T5920] hub 2-1:4.0: bad descriptor, ignoring hub [ 292.524612][ T5920] hub 2-1:4.0: probe with driver hub failed with error -5 [ 292.637851][ T5920] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 292.942804][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 293.432116][ T5920] usb 2-1: USB disconnect, device number 17 [ 293.505823][ T9146] bridge0: port 3(erspan0) entered blocking state [ 293.739301][ T9146] bridge0: port 3(erspan0) entered disabled state [ 293.757392][ T9146] erspan0: entered allmulticast mode [ 293.766342][ T9146] erspan0: entered promiscuous mode [ 293.776716][ T9146] bridge0: port 3(erspan0) entered blocking state [ 293.783223][ T9146] bridge0: port 3(erspan0) entered forwarding state [ 294.029869][ T9160] binder: 9158:9160 ioctl c0285700 20000040 returned -22 [ 294.061358][ T9160] binder: 9158:9160 ioctl 7b2 20000140 returned -22 [ 294.402858][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 294.412010][ T9169] netlink: 'syz.1.848': attribute type 21 has an invalid length. [ 295.055403][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 295.061450][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 295.653806][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 296.114444][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 296.642130][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.653186][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.662279][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.672551][ T25] usb 6-1: config 0 descriptor?? [ 296.833337][ T9178] wg1 speed is unknown, defaulting to 1000 [ 296.953589][ T9192] netlink: 'syz.3.853': attribute type 10 has an invalid length. [ 296.961537][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.853'. [ 296.972303][ T9192] ipvlan1: entered promiscuous mode [ 296.978322][ T9192] ipvlan1: entered allmulticast mode [ 296.983686][ T9192] veth0_vlan: entered allmulticast mode [ 296.998508][ T9192] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 297.155171][ T5920] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 297.195365][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 298.204682][ T25] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 298.255012][ T25] usb 6-1: USB disconnect, device number 12 [ 298.320414][ T5920] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 298.338679][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.356049][ T5920] usb 3-1: Product: syz [ 298.360244][ T5920] usb 3-1: Manufacturer: syz [ 298.364833][ T5920] usb 3-1: SerialNumber: syz [ 298.376704][ T5920] usb 3-1: config 0 descriptor?? [ 298.401560][ T5920] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 298.586252][ T25] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 299.094267][ T5920] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 299.101853][ T25] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.116460][ T5920] sq905c 3-1:0.0: Get version command failed [ 299.122492][ T5920] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 299.153490][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 299.171986][ T25] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 299.277936][ T5920] usb 3-1: USB disconnect, device number 12 [ 299.288621][ T25] usb 6-1: Product: syz [ 299.305513][ T25] usb 6-1: Manufacturer: syz [ 299.316954][ T25] hub 6-1:4.0: bad descriptor, ignoring hub [ 299.322883][ T25] hub 6-1:4.0: probe with driver hub failed with error -5 [ 300.284424][ T25] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 300.344366][ T25] usb 6-1: USB disconnect, device number 13 [ 300.576092][ T9222] bridge0: port 3(erspan0) entered blocking state [ 300.583010][ T9222] bridge0: port 3(erspan0) entered disabled state [ 300.596642][ T9222] bridge0: port 3(erspan0) entered blocking state [ 300.603259][ T9222] bridge0: port 3(erspan0) entered forwarding state [ 302.342500][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 302.392323][ T9242] wg1 speed is unknown, defaulting to 1000 [ 302.500077][ T9236] tmpfs: Bad value for 'mpol' [ 302.801019][ T9250] xt_connbytes: Forcing CT accounting to be enabled [ 302.807905][ T9250] Cannot find add_set index 0 as target [ 303.374788][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.478377][ T5868] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.497945][ T5868] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.507952][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.518029][ T5868] usb 7-1: SerialNumber: syz [ 303.785813][ T5868] usb 7-1: 0:2 : does not exist [ 303.808453][ T5868] usb 7-1: unit 5: unexpected type 0x09 [ 304.104255][ T5868] usb 7-1: USB disconnect, device number 3 [ 304.238426][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 304.287923][ T29] audit: type=1400 audit(1738212995.482:754): avc: denied { execute } for pid=9262 comm="syz.3.873" path="/selinux/access" dev="selinuxfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 304.350691][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.494821][ T29] audit: type=1400 audit(1738212995.482:755): avc: denied { write } for pid=9262 comm="syz.3.873" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 304.538878][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.637175][ T29] audit: type=1400 audit(1738212995.642:756): avc: denied { write } for pid=9265 comm="syz.3.874" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.993123][ T29] audit: type=1400 audit(1738212995.712:757): avc: denied { shutdown } for pid=9270 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.053263][ T29] audit: type=1400 audit(1738212996.222:758): avc: denied { setattr } for pid=9274 comm="syz.6.877" path="/dev/mixer" dev="devtmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 306.551017][ T9266] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 306.631791][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 307.132788][ T9296] netlink: 'syz.5.882': attribute type 11 has an invalid length. [ 307.203939][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.882'. [ 307.238487][ T9296] hsr_slave_1 (unregistering): left promiscuous mode [ 307.958144][ T9266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.965008][ T9266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.980687][ T9266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.988431][ T9266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.206022][ T29] audit: type=1400 audit(1738212999.400:759): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 308.298080][ T5976] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 308.534061][ T5976] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.553796][ T5976] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 308.633010][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 309.151006][ T5976] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 309.160255][ T5976] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 309.178831][ T5976] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 309.619600][ T5976] usb 7-1: string descriptor 0 read error: -71 [ 309.674984][ T5976] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 309.690260][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 309.716108][ T9323] wg1 speed is unknown, defaulting to 1000 [ 309.719464][ T5976] usb 7-1: can't set config #1, error -71 [ 309.746979][ T29] audit: type=1400 audit(1738213000.930:760): avc: denied { bind } for pid=9327 comm="syz.6.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 309.748247][ T5976] usb 7-1: USB disconnect, device number 4 [ 309.826958][ T9317] wg1 speed is unknown, defaulting to 1000 [ 309.877994][ T9329] vlan2: entered allmulticast mode [ 309.883239][ T9329] xfrm0: entered allmulticast mode [ 309.954476][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 310.044950][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 310.045029][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 310.046079][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 310.699875][ T9331] binder: 9322:9331 ioctl c0306201 20004a40 returned -14 [ 312.424792][ T29] audit: type=1400 audit(1738213003.619:761): avc: denied { write } for pid=9362 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 312.440894][ T5920] hid (null): unknown global tag 0xc [ 312.460497][ T29] audit: type=1400 audit(1738213003.619:762): avc: denied { read write } for pid=9362 comm="syz.1.901" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 312.466247][ T5920] hid (null): unknown global tag 0xe [ 312.500177][ T29] audit: type=1400 audit(1738213003.619:763): avc: denied { open } for pid=9362 comm="syz.1.901" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 312.512752][ T5920] hid (null): unknown global tag 0xd [ 312.523399][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.558493][ T5920] hid (null): unknown global tag 0xd [ 312.588582][ T5920] hid-generic 0010:FFFFFFF9:007F.0005: unknown main item tag 0x4 [ 312.606621][ T5920] hid-generic 0010:FFFFFFF9:007F.0005: unknown global tag 0xc [ 312.630439][ T5920] hid-generic 0010:FFFFFFF9:007F.0005: item 0 2 1 12 parsing failed [ 312.673610][ T5920] hid-generic 0010:FFFFFFF9:007F.0005: probe with driver hid-generic failed with error -22 [ 313.041139][ T9379] FAULT_INJECTION: forcing a failure. [ 313.041139][ T9379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.071603][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.1.905 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 313.071629][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 313.071639][ T9379] Call Trace: [ 313.071643][ T9379] [ 313.071649][ T9379] dump_stack_lvl+0x16c/0x1f0 [ 313.071669][ T9379] should_fail_ex+0x50a/0x650 [ 313.071684][ T9379] _copy_from_user+0x2e/0xd0 [ 313.071698][ T9379] copy_msghdr_from_user+0x99/0x160 [ 313.071709][ T9379] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 313.071724][ T9379] ___sys_sendmsg+0xff/0x1e0 [ 313.071734][ T9379] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.071748][ T9379] ? __pfx_lock_release+0x10/0x10 [ 313.071761][ T9379] ? trace_lock_acquire+0x14e/0x1f0 [ 313.071775][ T9379] ? __fget_files+0x206/0x3a0 [ 313.071787][ T9379] __sys_sendmsg+0x16e/0x220 [ 313.071797][ T9379] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.071805][ T9379] ? __pfx___schedule+0x10/0x10 [ 313.071824][ T9379] do_syscall_64+0xcd/0x250 [ 313.071833][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.071846][ T9379] RIP: 0033:0x7fda58f8cda9 [ 313.071855][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.071863][ T9379] RSP: 002b:00007fda59dfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.071872][ T9379] RAX: ffffffffffffffda RBX: 00007fda591a5fa0 RCX: 00007fda58f8cda9 [ 313.071878][ T9379] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 313.071883][ T9379] RBP: 00007fda59dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 313.071888][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.071893][ T9379] R13: 0000000000000000 R14: 00007fda591a5fa0 R15: 00007ffcc84f6698 [ 313.071904][ T9379] [ 313.249086][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.457140][ T974] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 313.535539][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.908'. [ 313.602650][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 313.613439][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.907'. [ 313.624376][ T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.634784][ T974] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.660759][ T974] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.670330][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.688044][ T974] usb 4-1: Product: syz [ 313.696737][ T974] usb 4-1: Manufacturer: syz [ 313.706993][ T974] usb 4-1: SerialNumber: syz [ 313.771184][ T29] audit: type=1326 audit(1738213004.958:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.5.909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f2f8cda9 code=0x0 [ 314.134042][ T9395] dvmrp0: entered allmulticast mode [ 314.486404][ T9402] netlink: 'syz.6.912': attribute type 4 has an invalid length. [ 314.575767][ T9407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.913'. [ 314.588537][ T9404] can: request_module (can-proto-0) failed. [ 314.890015][ T9419] netlink: 32 bytes leftover after parsing attributes in process `syz.5.915'. [ 314.914481][ T9416] can: request_module (can-proto-0) failed. [ 315.336884][ T974] cdc_ncm 4-1:1.0: bind() failure [ 315.359746][ T974] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 315.386278][ T974] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 315.424860][ T974] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 315.445441][ T5920] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 315.457264][ T9432] wg1 speed is unknown, defaulting to 1000 [ 315.472362][ T974] usb 4-1: USB disconnect, device number 18 [ 315.644505][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 315.663768][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.692743][ T9441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.951038][ T5920] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 315.994203][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 316.008755][ T5920] usb 3-1: Product: syz [ 316.022804][ T5920] usb 3-1: SerialNumber: syz [ 316.052609][ T5920] usb 3-1: config 0 descriptor?? [ 317.039909][ T9452] wg1 speed is unknown, defaulting to 1000 [ 317.223717][ T9433] binder: 9431:9433 ioctl c0306201 20004a40 returned -14 [ 317.314953][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.321384][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.433578][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'. [ 318.442576][ T9471] netlink: 'syz.5.925': attribute type 21 has an invalid length. [ 318.957975][ T974] usb 3-1: USB disconnect, device number 13 [ 319.238732][ T9477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.927'. [ 319.267392][ T9476] netlink: 32 bytes leftover after parsing attributes in process `syz.5.928'. [ 319.276692][ T9473] can: request_module (can-proto-0) failed. [ 319.698032][ T9481] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20000 [ 319.724668][ T29] audit: type=1400 audit(1738213010.907:765): avc: denied { create } for pid=9479 comm="syz.6.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 319.783497][ T5830] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 320.048596][ T29] audit: type=1400 audit(1738213011.207:766): avc: denied { append } for pid=9478 comm="syz.3.930" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 320.518718][ T9481] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 320.615213][ T974] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 320.723981][ T9494] wg1 speed is unknown, defaulting to 1000 [ 321.600491][ T974] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 321.609688][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.648675][ T974] usb 7-1: Product: syz [ 321.681439][ T974] usb 7-1: Manufacturer: syz [ 321.693394][ T9504] FAULT_INJECTION: forcing a failure. [ 321.693394][ T9504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.700811][ T974] usb 7-1: SerialNumber: syz [ 321.720390][ T29] audit: type=1400 audit(1738213012.906:767): avc: denied { map } for pid=9501 comm="syz.2.935" path="socket:[25002]" dev="sockfs" ino=25002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.731746][ T9504] CPU: 1 UID: 0 PID: 9504 Comm: syz.1.936 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 321.731770][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.731779][ T9504] Call Trace: [ 321.731784][ T9504] [ 321.731789][ T9504] dump_stack_lvl+0x16c/0x1f0 [ 321.731816][ T9504] should_fail_ex+0x50a/0x650 [ 321.731838][ T9504] _copy_from_user+0x2e/0xd0 [ 321.731860][ T9504] copy_msghdr_from_user+0x99/0x160 [ 321.731877][ T9504] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 321.731909][ T9504] ___sys_sendmsg+0xff/0x1e0 [ 321.731925][ T9504] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.731950][ T9504] ? __pfx_lock_release+0x10/0x10 [ 321.731969][ T9504] ? trace_lock_acquire+0x14e/0x1f0 [ 321.731993][ T9504] ? __fget_files+0x206/0x3a0 [ 321.732013][ T9504] __sys_sendmsg+0x16e/0x220 [ 321.732029][ T9504] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.732058][ T9504] do_syscall_64+0xcd/0x250 [ 321.732074][ T9504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.732094][ T9504] RIP: 0033:0x7fda58f8cda9 [ 321.732105][ T9504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.732120][ T9504] RSP: 002b:00007fda59dfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.732134][ T9504] RAX: ffffffffffffffda RBX: 00007fda591a5fa0 RCX: 00007fda58f8cda9 [ 321.732144][ T9504] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 321.732153][ T9504] RBP: 00007fda59dfb090 R08: 0000000000000000 R09: 0000000000000000 [ 321.732161][ T9504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.732170][ T9504] R13: 0000000000000000 R14: 00007fda591a5fa0 R15: 00007ffcc84f6698 [ 321.732188][ T9504] [ 322.006332][ T974] usb 7-1: config 0 descriptor?? [ 322.013926][ T974] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 005 [ 323.126346][ T974] (null): failure setting delay to 10us [ 323.324144][ T974] i2c-tiny-usb 7-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 323.340373][ T974] usb 7-1: USB disconnect, device number 5 [ 323.438964][ T29] audit: type=1400 audit(1738213014.626:768): avc: denied { read } for pid=9520 comm="syz.1.940" name="file0" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 323.512474][ T9523] can: request_module (can-proto-0) failed. [ 323.519690][ T9523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.941'. [ 324.103062][ T9536] wg1 speed is unknown, defaulting to 1000 [ 325.688819][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 326.194530][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'. [ 326.235492][ T9559] netlink: 'syz.5.949': attribute type 21 has an invalid length. [ 326.621110][ T9536] binder: BINDER_SET_CONTEXT_MGR already set [ 326.627847][ T9536] binder: 9535:9536 ioctl 4018620d 20004a80 returned -16 [ 326.696337][ T9538] binder: 9535:9538 ioctl c0306201 20004a40 returned -14 [ 328.316601][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 328.334865][ T9586] can: request_module (can-proto-0) failed. [ 328.520127][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 328.550341][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.667786][ T9] usb 7-1: config 0 descriptor?? [ 329.508454][ T9] cp210x 7-1:0.0: cp210x converter detected [ 329.593030][ T9595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.960'. [ 330.042837][ T9582] block nbd6: shutting down sockets [ 330.070723][ T9] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 330.082617][ T29] audit: type=1400 audit(1738213021.275:769): avc: denied { mounton } for pid=9580 comm="syz.6.956" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.088233][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 330.136624][ T9] cp210x 7-1:0.0: querying part number failed [ 330.170454][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 330.200654][ T9] usb 7-1: USB disconnect, device number 6 [ 330.296665][ T5898] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 330.352440][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 330.360841][ T9] cp210x 7-1:0.0: device disconnected [ 330.455818][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 330.464697][ T9612] netlink: 'syz.3.964': attribute type 21 has an invalid length. [ 332.038622][ T29] audit: type=1326 audit(1738213023.195:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 332.066732][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 332.096538][ T5898] usb 6-1: config 0 has an invalid interface number: 27 but max is 0 [ 332.104802][ T29] audit: type=1326 audit(1738213023.195:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 332.165358][ T29] audit: type=1326 audit(1738213023.195:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 332.198635][ T5898] usb 6-1: config 0 has no interface number 0 [ 332.205334][ T5898] usb 6-1: config 0 interface 27 has no altsetting 0 [ 332.223003][ T29] audit: type=1326 audit(1738213023.195:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 332.271811][ T9624] wg1 speed is unknown, defaulting to 1000 [ 332.284683][ T5898] usb 6-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=27.b5 [ 332.309916][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.311785][ T29] audit: type=1326 audit(1738213023.195:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 332.330010][ T5898] usb 6-1: Product: syz [ 332.399138][ T5898] usb 6-1: Manufacturer: syz [ 332.416744][ T5898] usb 6-1: SerialNumber: syz [ 332.467637][ T5898] usb 6-1: config 0 descriptor?? [ 332.513756][ T5898] usb 6-1: bad CDC descriptors [ 332.528949][ T5898] cdc_acm 6-1:0.27: Zero length descriptor references [ 332.534023][ T29] audit: type=1326 audit(1738213023.195:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 332.549074][ T5898] cdc_acm 6-1:0.27: probe with driver cdc_acm failed with error -22 [ 332.559974][ T29] audit: type=1326 audit(1738213023.195:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 332.609852][ T29] audit: type=1326 audit(1738213023.195:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 333.185580][ T29] audit: type=1326 audit(1738213023.195:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd58a58cda9 code=0x7ffc0000 [ 333.189861][ T5898] usb 6-1: USB disconnect, device number 14 [ 333.306876][ T974] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 333.314605][ T9625] binder: 9623:9625 ioctl c0306201 20004a40 returned -14 [ 333.469924][ T974] usb 7-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ce.1a [ 333.543593][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.332673][ T974] usb 7-1: Product: syz [ 334.338886][ T974] usb 7-1: Manufacturer: syz [ 334.343489][ T974] usb 7-1: SerialNumber: syz [ 334.353429][ T974] usb 7-1: config 0 descriptor?? [ 334.484817][ T9653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.847258][ T9654] netlink: 60 bytes leftover after parsing attributes in process `syz.6.972'. [ 335.129716][ T974] usb 7-1: USB disconnect, device number 7 [ 335.267063][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 335.267078][ T29] audit: type=1400 audit(1738213026.425:782): avc: denied { setopt } for pid=9655 comm="syz.5.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 335.547369][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 335.556357][ T9668] netlink: 'syz.3.978': attribute type 21 has an invalid length. [ 336.477846][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 336.717944][ T9685] fuse: Unknown parameter '0x0000000000000003' [ 336.737163][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 336.770411][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.797253][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.971232][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 336.981621][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 336.993865][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.008025][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.017275][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.025262][ T9] usb 6-1: Manufacturer: syz [ 337.556083][ T9] usb 6-1: config 0 descriptor?? [ 338.147384][ T9] rc_core: IR keymap rc-hauppauge not found [ 338.174650][ T9] Registered IR keymap rc-empty [ 338.194492][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.321091][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.428194][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 338.464168][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 338.482025][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.518062][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.567240][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.580475][ T9706] netlink: 'syz.6.989': attribute type 4 has an invalid length. [ 338.618990][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.657228][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.682073][ T9710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.988'. [ 338.707498][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.718730][ T9708] can: request_module (can-proto-0) failed. [ 338.747227][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.803701][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.840343][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.877334][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.939732][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 338.978379][ T9] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 339.124815][ T9714] wg1 speed is unknown, defaulting to 1000 [ 339.280375][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 339.289516][ T9717] netlink: 'syz.2.992': attribute type 21 has an invalid length. [ 339.307505][ T9717] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 339.320259][ T9717] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 339.328654][ T9717] CPU: 1 UID: 0 PID: 9717 Comm: syz.2.992 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 339.338870][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 339.348897][ T9717] RIP: 0010:skb_segment+0x193b/0x40b0 [ 339.354259][ T9717] Code: 00 00 fe e9 54 eb ff ff e8 22 b1 8c f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 44 c6 ef f8 48 8b 84 24 d0 [ 339.373858][ T9717] RSP: 0018:ffffc9000bdc68d8 EFLAGS: 00010202 [ 339.379906][ T9717] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc9000cb7b000 [ 339.387868][ T9717] RDX: 000000000000000e RSI: ffffffff892cfd8e RDI: 0000000000000070 [ 339.395822][ T9717] RBP: ffffc9000bdc6a80 R08: 0000000000000005 R09: 000000000000ffff [ 339.403766][ T9717] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88802275c140 [ 339.411713][ T9717] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 339.419672][ T9717] FS: 00007fd58b3d06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 339.428600][ T9717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.435180][ T9717] CR2: 0000000000000000 CR3: 0000000029e84000 CR4: 00000000003526f0 [ 339.443142][ T9717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.451102][ T9717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.459049][ T9717] Call Trace: [ 339.462319][ T9717] [ 339.465252][ T9717] ? die_addr+0x3b/0xa0 [ 339.469940][ T9717] ? exc_general_protection+0x155/0x230 [ 339.475480][ T9717] ? asm_exc_general_protection+0x26/0x30 [ 339.481179][ T9717] ? skb_segment+0x191e/0x40b0 [ 339.485937][ T9717] ? skb_segment+0x193b/0x40b0 [ 339.490684][ T9717] ? skb_segment+0x191e/0x40b0 [ 339.495437][ T9717] ? __pfx_lock_release+0x10/0x10 [ 339.500459][ T9717] ? trace_lock_acquire+0x14e/0x1f0 [ 339.505649][ T9717] ? __pfx_skb_segment+0x10/0x10 [ 339.510568][ T9717] ? hlock_class+0x4e/0x130 [ 339.515065][ T9717] ? mark_lock+0xb5/0xc60 [ 339.519384][ T9717] tcp_gso_segment+0x3ca/0x1940 [ 339.524229][ T9717] ? __pfx_tcp_wfree+0x10/0x10 [ 339.528980][ T9717] tcp6_gso_segment+0x207/0x1570 [ 339.533906][ T9717] ? __pfx_flow_hash_from_keys+0x10/0x10 [ 339.539531][ T9717] ? __pfx___lock_acquire+0x10/0x10 [ 339.544721][ T9717] ipv6_gso_segment+0x80b/0x1d90 [ 339.549651][ T9717] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 339.555030][ T9717] ? lock_acquire+0x2f/0xb0 [ 339.559527][ T9717] ? skb_mac_gso_segment+0x1a7/0x650 [ 339.564801][ T9717] skb_mac_gso_segment+0x2a6/0x650 [ 339.570417][ T9717] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 339.575771][ T9717] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 339.581383][ T9717] __skb_gso_segment+0x36e/0x700 [ 339.586299][ T9717] cake_enqueue+0x2c61/0x3ef0 [ 339.590976][ T9717] ? lock_acquire.part.0+0x11b/0x380 [ 339.596245][ T9717] ? __pfx_cake_enqueue+0x10/0x10 [ 339.601258][ T9717] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.606600][ T9717] ? lock_acquire+0x2f/0xb0 [ 339.611080][ T9717] ? __dev_queue_xmit+0x1fe5/0x43e0 [ 339.616260][ T9717] __dev_queue_xmit+0x2152/0x43e0 [ 339.621275][ T9717] ? __pfx___dev_queue_xmit+0x10/0x10 [ 339.626632][ T9717] ? __pfx_hlock_class+0x10/0x10 [ 339.631565][ T9717] ? find_held_lock+0x2d/0x110 [ 339.636318][ T9717] ? ip6_finish_output+0x3f9/0x1360 [ 339.641513][ T9717] ? __pfx_lock_release+0x10/0x10 [ 339.646526][ T9717] ? mark_held_locks+0x9f/0xe0 [ 339.651284][ T9717] ip6_finish_output2+0xed9/0x20a0 [ 339.656382][ T9717] ip6_finish_output+0x3f9/0x1360 [ 339.661385][ T9717] ip6_output+0x1f8/0x540 [ 339.665699][ T9717] ? __pfx_ip6_output+0x10/0x10 [ 339.670529][ T9717] ip6_xmit+0x1234/0x2130 [ 339.674864][ T9717] ? __pfx_ip6_xmit+0x10/0x10 [ 339.679539][ T9717] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 339.685174][ T9717] ? rcu_is_watching+0x12/0xc0 [ 339.689920][ T9717] ? trace_lock_acquire+0x14e/0x1f0 [ 339.695119][ T9717] ? inet6_csk_xmit+0x18a/0x740 [ 339.699957][ T9717] inet6_csk_xmit+0x3ce/0x740 [ 339.704635][ T9717] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 339.709815][ T9717] ? csum_ipv6_magic+0x296/0x310 [ 339.714739][ T9717] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 339.719923][ T9717] __tcp_transmit_skb+0x1b02/0x3e10 [ 339.725115][ T9717] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 339.730643][ T9717] ? mark_held_locks+0x9f/0xe0 [ 339.735396][ T9717] ? kasan_quarantine_put+0x10a/0x240 [ 339.740755][ T9717] ? lockdep_hardirqs_on+0x7c/0x110 [ 339.745955][ T9717] ? kfree_skbmem+0x16c/0x1f0 [ 339.750614][ T9717] tcp_write_xmit+0x12b1/0x8560 [ 339.755496][ T9717] __tcp_push_pending_frames+0xaf/0x390 [ 339.761036][ T9717] tcp_rcv_established+0x868/0x20d0 [ 339.766219][ T9717] ? ip6_dst_check+0x352/0x940 [ 339.770970][ T9717] ? __pfx_tcp_rcv_established+0x10/0x10 [ 339.776581][ T9717] ? __release_sock+0xd4/0x400 [ 339.781326][ T9717] tcp_v6_do_rcv+0x897/0x1740 [ 339.785998][ T9717] ? __local_bh_enable_ip+0xa4/0x120 [ 339.791271][ T9717] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 339.796368][ T9717] __release_sock+0x14c/0x400 [ 339.801036][ T9717] ? __sk_flush_backlog+0x1f/0xc0 [ 339.806040][ T9717] __sk_flush_backlog+0x27/0xc0 [ 339.810870][ T9717] tcp_sendmsg_locked+0x2f6e/0x37c0 [ 339.816060][ T9717] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 339.821581][ T9717] ? tcp_sendmsg+0x20/0x50 [ 339.825990][ T9717] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.831356][ T9717] ? mark_held_locks+0x9f/0xe0 [ 339.836104][ T9717] ? __local_bh_enable_ip+0xa4/0x120 [ 339.841386][ T9717] tcp_sendmsg+0x2e/0x50 [ 339.845644][ T9717] ? __pfx_tcp_sendmsg+0x10/0x10 [ 339.850575][ T9717] inet6_sendmsg+0xb9/0x140 [ 339.855079][ T9717] __sys_sendto+0x374/0x4f0 [ 339.859561][ T9717] ? __pfx___sys_sendto+0x10/0x10 [ 339.864563][ T9717] ? rcu_is_watching+0x12/0xc0 [ 339.869313][ T9717] ? trace_tasklet_exit+0xf0/0x140 [ 339.874411][ T9717] ? __pfx___x64_sys_futex+0x10/0x10 [ 339.879690][ T9717] __x64_sys_sendto+0xe0/0x1c0 [ 339.884435][ T9717] ? do_syscall_64+0x91/0x250 [ 339.889098][ T9717] ? lockdep_hardirqs_on+0x7c/0x110 [ 339.894291][ T9717] do_syscall_64+0xcd/0x250 [ 339.898775][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.904657][ T9717] RIP: 0033:0x7fd58a58cda9 [ 339.909046][ T9717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.928633][ T9717] RSP: 002b:00007fd58b3d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 339.937023][ T9717] RAX: ffffffffffffffda RBX: 00007fd58a7a5fa0 RCX: 00007fd58a58cda9 [ 339.944981][ T9717] RDX: ffffffffffffff1d RSI: 00000000200000c0 RDI: 0000000000000004 [ 339.952929][ T9717] RBP: 00007fd58a60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.960972][ T9717] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 339.968926][ T9717] R13: 0000000000000000 R14: 00007fd58a7a5fa0 R15: 00007ffd67c92258 [ 339.976884][ T9717] [ 339.979894][ T9717] Modules linked in: [ 339.983839][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.989862][ T9717] ---[ end trace 0000000000000000 ]--- [ 339.995300][ T9717] RIP: 0010:skb_segment+0x193b/0x40b0 [ 340.000683][ T9717] Code: 00 00 fe e9 54 eb ff ff e8 22 b1 8c f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 44 c6 ef f8 48 8b 84 24 d0 [ 340.020287][ T9717] RSP: 0018:ffffc9000bdc68d8 EFLAGS: 00010202 [ 340.026334][ T9717] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc9000cb7b000 [ 340.034303][ T9717] RDX: 000000000000000e RSI: ffffffff892cfd8e RDI: 0000000000000070 [ 340.042273][ T9717] RBP: ffffc9000bdc6a80 R08: 0000000000000005 R09: 000000000000ffff [ 340.050231][ T9717] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88802275c140 [ 340.058182][ T9717] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 340.066153][ T9717] FS: 00007fd58b3d06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 340.075682][ T9717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.082258][ T9717] CR2: 0000000000000000 CR3: 0000000029e84000 CR4: 00000000003526f0 [ 340.090219][ T9717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.098191][ T9717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 340.106145][ T9717] Kernel panic - not syncing: Fatal exception in interrupt [ 340.113534][ T9717] Kernel Offset: disabled [ 340.117836][ T9717] Rebooting in 86400 seconds..