last executing test programs: 2m38.39173663s ago: executing program 4 (id=879): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) writev(r0, &(0x7f0000001500)=[{&(0x7f0000001740)='z', 0x1}], 0x1) (fail_nth: 6) 2m38.384872731s ago: executing program 4 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0xffffffffffffff8c) 2m37.492601049s ago: executing program 4 (id=883): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r1 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbcf, 0x10100, 0x0, 0x242, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000240)={0x1, 0x6, 0x8}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20050001) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900010028bd700000003dc02d"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800b0001006f626a72656600001800028008000140000000030900020073797a31000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0xcf36ae537ebbcc5c, 0x0, r6, 0x0, &(0x7f0000000480)="63ebaeb33745f53ec41cff05f7d923d10c3f1e6c07b225cdcd2533a84d4c8295847e1e03245ef1142cfe9b0de258d372640e1c3ed7d2324edc8408929cda1f813c0acfab820ca577695d19a355061d0b5bbdb976c48a2e420e98f797b4bb1973245acb827dddb2b94bb02e215163e73cedb288247906aa8f4f90ac4e9fc79fb3093ea10099ee62f1a2c05690261e9486a5920f5318dfa76e048a843a5a93ebc53db1f748aeb9a3a1190f6baeb756b80b7f35a34e4c76d4b1d4a760facd4ef746f713b945d5335637fd97c73974f5c97a36592bf145ad5b8f2749e278", 0xdc, 0x10000, 0x1}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000002340), 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) r8 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) ftruncate(0xffffffffffffffff, 0x0) fchmod(r8, 0x1) clock_gettime(0x0, &(0x7f0000000000)) 2m36.546897315s ago: executing program 4 (id=886): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) r1 = getpgid(r0) sched_setscheduler(r1, 0x0, &(0x7f0000000080)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000004040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x8000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r9, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) userfaultfd(0x80001) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x48380, 0x0) r11 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r11, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) recvmsg(r11, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x12020) ioctl$FS_IOC_SETFLAGS(r10, 0x40186f40, &(0x7f0000000440)=0x80000000) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m36.077633131s ago: executing program 4 (id=887): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f000000a200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x78, 0x0, r0, {0x0, 0xc, 0x0, {0x0, 0x0, 0x6, 0x2, 0x0, 0x7}}}, 0x78) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan0\x00', 0x3}, 0x18) 2m34.92480873s ago: executing program 4 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb7400000000000004016547eb108e494c1f3a3c6e9d37414ab2bf8ab0ffda9cb7bcd38fab603aa4647d88e9fc6d918bf5dea9e9e3d9d7691d002ccec142871dca5766e168dd0b8e80875ebba3d8830e53a6ab27fe471310c943efb1011fb699859ee88575476167df3d2caee9bb9a9db048c6ded82c2d6e032c9d1fa30d5d394d6824899c77e557cd413918374e7600f69df5909b30e15996374b47380c64bf2afdd6e6d26cbfeaea624f76d55cc8281acec20d116274177f60a9d18536bc40451d8b7089700c3ba43026508f47100bdf54c6497478e6cdf912be0eed39100a6531bd3f"], 0x14) syz_clone3(&(0x7f0000000640)={0x10003d000, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000003c0)=0x0, {0x28}, &(0x7f0000000480)=""/160, 0xa0, &(0x7f00000005c0)=""/81, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) r4 = syz_open_procfs(r3, &(0x7f0000000540)='net/hci\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) close(r2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) read$FUSE(r6, &(0x7f0000000e00)={0x2020}, 0x2020) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r9 = dup3(r8, r7, 0x0) setresuid(0x0, 0x0, 0xee01) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffefffd}]}) close_range(r11, r2, 0x0) connect$ax25(r4, &(0x7f00000006c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000"]) 2m19.544532654s ago: executing program 32 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb7400000000000004016547eb108e494c1f3a3c6e9d37414ab2bf8ab0ffda9cb7bcd38fab603aa4647d88e9fc6d918bf5dea9e9e3d9d7691d002ccec142871dca5766e168dd0b8e80875ebba3d8830e53a6ab27fe471310c943efb1011fb699859ee88575476167df3d2caee9bb9a9db048c6ded82c2d6e032c9d1fa30d5d394d6824899c77e557cd413918374e7600f69df5909b30e15996374b47380c64bf2afdd6e6d26cbfeaea624f76d55cc8281acec20d116274177f60a9d18536bc40451d8b7089700c3ba43026508f47100bdf54c6497478e6cdf912be0eed39100a6531bd3f"], 0x14) syz_clone3(&(0x7f0000000640)={0x10003d000, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000003c0)=0x0, {0x28}, &(0x7f0000000480)=""/160, 0xa0, &(0x7f00000005c0)=""/81, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) r4 = syz_open_procfs(r3, &(0x7f0000000540)='net/hci\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) close(r2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) read$FUSE(r6, &(0x7f0000000e00)={0x2020}, 0x2020) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r9 = dup3(r8, r7, 0x0) setresuid(0x0, 0x0, 0xee01) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffefffd}]}) close_range(r11, r2, 0x0) connect$ax25(r4, &(0x7f00000006c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000"]) 12.056362331s ago: executing program 2 (id=1369): bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_OPEN(r2, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x20002000, 0x6c, 0xfffa, 0x5, 0x7, 0x0, 0x0, 0x100, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@cache_readahead}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 10.202689345s ago: executing program 2 (id=1374): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xfffff000) 9.931047338s ago: executing program 2 (id=1379): r0 = io_uring_setup(0x1612, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000015c0)=""/231, 0xe7}], 0x0, 0x2}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004040) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x14, 0xbf, 0x20, 0xac8, 0xc301, 0x82d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x53, 0x8, 0x98}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="10180000075005004c0012800b00010062726964676500003c00028005001900020000000500170000000000080004008400000005001600010000000a0014"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) 7.563423462s ago: executing program 3 (id=1388): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r7, 0x60b, 0x2000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x8000) 6.656438918s ago: executing program 0 (id=1391): syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000023c7cb082505a4a4c237000000010902120001000000000904"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000084e040b1200000000000109022400010000200f090400040103000200092100000001220b0009058103"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000000c0)=0x3ff, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x100010, 0xffffffffffffffff, 0x98820000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x7d, 0x4, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x1d}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005b00)=ANY=[@ANYBLOB="2c00000012009702000000000000000007000000", @ANYRESHEX=r3], 0x2c}}, 0x400) socket(0x10, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000037b8000000f2ffffff61194404000d00009500010000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x20}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r4, 0x289e0cb5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.856363004s ago: executing program 2 (id=1392): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x5f1ecdbaf581ef0b}, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) mlockall(0x7) munlockall() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x20}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001c00010002000000fbdbdf2507000000", @ANYRES32=r5, @ANYBLOB="400000060a000200aaaaaaaaaa0c00005dff69a063d2c0085d2638677cc246181ccdc8adda6cce786bd27e98003793a78d00e82ab17f8c503b1297200b02a612ddcd01872249bc6f120b3ceb0660e7ae95ec1178538f81fe1ca9cf70910cd568da6bb42731885d5b05b1164d64a8140f0d09a5f03519b70ffff971c2a224eb639961b6f8303a9e3a13cc0265020c74fa6cae6f1858"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x10, 0x80, 0x7, 0x3e, {{0x40, 0x4, 0x1, 0x2, 0x100, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, {[@noop, @generic={0x94, 0xb, "4d2d3ebd6ee7d57aab"}, @cipso={0x86, 0x49, 0xfffffffffffffffe, [{0x7, 0x4, "ba99"}, {0x5, 0x6, "fda756e9"}, {0x1, 0x4, "d717"}, {0x1, 0x7, "3bbfc21a92"}, {0x6, 0xd, "b73e68f6c646bdcdc9a62a"}, {0x1, 0x7, "c95e0dbefb"}, {0x5, 0x2}, {0x7, 0x11, "14789fb05c53c84bf3e79259c91168"}, {0x0, 0x7, "42f510be0d"}]}, @timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x1, [{@multicast2, 0x101}, {@local, 0x7ff}, {@rand_addr=0x64010100, 0x67dd}]}, @cipso={0x86, 0x59, 0xfffffffffffffffe, [{0x7, 0x5, "f6205d"}, {0xbc75f007da137f9, 0xe, "5cbd161c7570edd602fc51c2"}, {0x7, 0x12, "db47f4fe5366d08c2f6cee1cc2adca07"}, {0x0, 0x6, "581fdcd9"}, {0x12865454ecad7bda, 0x12, "3ecfa57ae1bb93dd6f073a9af16ce8a5"}, {0x7, 0xa, "5db56c39ec9d5786"}, {0x1, 0xc, "f978a77a05c912fd6880"}]}, @lsrr={0x83, 0x1b, 0x2a, [@broadcast, @remote, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setattr(0x0, 0x0, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r7, r8, 0x80000) write$char_usb(r7, 0x0, 0xffffffffffffff55) syz_usb_disconnect(r6) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000), &(0x7f0000000000)) 5.759598345s ago: executing program 3 (id=1394): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x3) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f000000a200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x78, 0x0, r1, {0x0, 0xc, 0x0, {0x0, 0x0, 0x6, 0x2, 0x0, 0x7}}}, 0x78) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan0\x00', 0x3}, 0x18) 5.708991761s ago: executing program 1 (id=1395): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0x101, 0x3c6, 0x7, 0x7, 0xf70, 0x3, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x3, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x5, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x3, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x7, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xec9b, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x0, 0x1}, {0x2}}, {{0x0, 0x0, 0x0, 0x1}, {0x3}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0xea60}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x107201, 0x0) move_mount(r2, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, 0x0, 0x240) 5.69045906s ago: executing program 3 (id=1396): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x42df, &(0x7f00000000c0)={0x0, 0xaee4, 0x4000, 0x0, 0x34b}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_dev$usbfs(0x0, 0x77, 0x600) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40bc5311, &(0x7f0000000100)={0x80}) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @random="8e39743fe8b2"}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 4.3523843s ago: executing program 5 (id=1397): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 4.115010237s ago: executing program 5 (id=1398): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 3.978406374s ago: executing program 0 (id=1399): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.962051166s ago: executing program 1 (id=1400): io_setup(0x5, &(0x7f0000000640)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_getevents(r0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6020, r1, 0x0, 0x0, 0x3, 0x0, 0x2, r1}]) 3.756643844s ago: executing program 0 (id=1401): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x103, 0x3, {0x6, 0xffffffff, 0x0, 0xffffffff}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r3, &(0x7f0000000180)="3a84db07bacf3f562618", 0xa) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setreuid(0x0, 0xee01) prctl$PR_CAPBSET_DROP(0x18, 0x18) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000580)='msdos\x00', 0x1) 3.711513888s ago: executing program 1 (id=1402): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x26, 0xa, 0x2, &(0x7f0000000000)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b000000080003000f0661784a5ba9a78fd5", @ANYRES32=r3, @ANYBLOB="180050800500020000000000090001007ee5d52ffd000000"], 0x34}}, 0x0) 3.084403732s ago: executing program 1 (id=1403): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES16=r1, @ANYRES8=r0], 0x20) r6 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r6, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000080)={0x0, 0x1, @stop_pts=0x7e}) semget$private(0x0, 0x5, 0x0) 3.022912427s ago: executing program 5 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000004000000010000000400000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) bind$can_raw(r4, &(0x7f0000000000), 0x10) 2.885726392s ago: executing program 0 (id=1405): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r7, 0x60b, 0x2000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x8000) 2.507419455s ago: executing program 2 (id=1406): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES16=r1, @ANYRES8=r0], 0x20) r6 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r6, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000080)={0x0, 0x1, @stop_pts=0x7e}) semget$private(0x0, 0x5, 0x0) 2.461221957s ago: executing program 5 (id=1407): socket$kcm(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a10000001c000104000023150000000002000000", @ANYRES32=0x0, @ANYBLOB="000000000a000100aaaaaaaaaabb0000080008"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffe, r7, 0x1) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) 2.144293883s ago: executing program 3 (id=1408): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x1) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x128) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 1.334109584s ago: executing program 5 (id=1409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x954, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c4, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'wg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x580, 0x4, [@m_ife={0xe4, 0x7, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7fffffff, 0x7fffffff, 0x20000000, 0x8, 0x7fffffff}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x7, 0xbb1, 0x6}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x83, 0x3, 0x5, 0x7, 0x7b1}, 0x1}}]}, {0x65, 0x6, "9c1fba93631785e860aa8a28ddc1b786442e73ad536d9ef58743491fdcb9e40c066e5d22896e18b6c1cce74f467fb70f22e7febc9dc96a798b88cd1c73e454b275edb6bcefa1464f3bf1948835222c0b0edf7d4e1561058ddd47f41759a995013b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xe8, 0x19, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x20000000, 0x8, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fff}]}, {0x6d, 0x6, "73aafac8023fdf608e4021440074a41d297019bda812b7e3fd57ef9878aafe5800177fcd7dbab5cb695df7053ae250b55007eace47cafb6237dfa399fbd9a1db287e1f1f3f650dfb403cc818d892d224fcf6e2666891c998b67fed595a6a96115d32d8281335eb597e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x190, 0x13, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x7ff, 0x4, 0x9, 0x2}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7fffffff, 0x20000000, 0x7, 0x8}, @multicast2, @loopback, 0xffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x10000, 0xfffffffffffffffc, 0xa5b, 0x5}, @local, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x20000000, 0x2, 0x9}, @multicast1, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x10, 0x20000000, 0x4, 0x9}, @multicast1, @multicast2, 0xff}}]}, {0x9d, 0x6, "5a7e373b7e356f91733e134cb329f71578b6295b323d3232062efc4ea587cf69b21129796d7b050090870f510e8265a14f95bb5d5b20dc0c9d693d19f1ada2a3258e7f1992bc82595ffbcd962e06cf3286b037651b8b9ce17882ca8cc0d83e896a74856ae365e7887843408d50a8ce21736c1eba82c82a0003166000e13e38051f653a9efb6d88ed7ec1ec09904bb8bef69027ab19e52320f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x90, 0x1a, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x55, 0x6, "2d84a6ebabb32f2dc79c27b6b5aa1e67c20a407773e0ad151c742c2416eebb6b8ecafb0950717e8b510a4b630fa8992ace86c73c286e344ba3ad48c697e042833f905ccee76540333598c7e71588d526b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x120, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0xf2, 0x6, "88d66cc9f7e8c398ad0dc4af68185f7ea7c752e5ef6c70d715ac2bf6fae2640d17c7522fd0487c2b9a0ceeacb2fa90cc2377e5098cb82f082e41337218f2711b56cbc94dc6ce26f46cbb0322a812bc996d396e3c8c1a6e2ac4db67ff325bc8ccd3e50ac9cd9d4ee8adf463caeb05c60ad2954a63f56bb00ff642803c3ab544c7d27339b654db13898b5191f8b7f55bc9ee8a4c3d103aea6c8155a185c4556103e5379d6fd175cea020b556fec9a5b0217de5496fa722541569a892041982186b1db5b5ffe264705a38402d673a5a2cbde754a2f2c913fca62475a04a15b688215f43e21f9cb1bff6bc66c63959b4"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x40, 0xb, 0x0, 0x0, {{0xd}, {0x4}, {0xd, 0x6, "8182dbe89fed943d4f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x15c, 0x2, [@TCA_FLOWER_ACT={0x118, 0x3, [@m_bpf={0x6c, 0x14, 0x0, 0x0, {{0x8}, {0x4}, {0x43, 0x6, "00c3f0876e94149d3a336c36ff62dfe98e1613ada1c4f7ff265ce4cc53a62fdcefda58d6f84090a1ad758f385db03f28572b3252f22dd5893d61cc514bc221"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xa8, 0x11, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x10}]}, {0x6d, 0x6, "daea1cfbcd5ad1fca578e22ebaf4245f37e0760afdd2c826d2965523a5d4ff2cfc94fc6a2e825195ad37f3c1beff551e123c1fd6beeefe022c5a8b0c51fea0dd55bd304378e24e2e30471ca0e9f214bfad065664e3f75acb7d9f10ff373e1ffc2891c046176d24eca5"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1d}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @filter_kind_options=@f_basic={{0xa}, {0x1d8, 0x2, [@TCA_BASIC_EMATCHES={0x1d4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{}, {0xffffffffffffffff, 0x2, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x800, 0x2, 0x7}, {0x8, 0x5, 0x1, "d3f6a41f66"}}}, @TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x10, 0x0, 0x1ff}, "9ae5eb0bedb6ce2ba4516a7f9466a7336f75854a364f6c45d154204cbc509a68d94233ab94058de0a9e98f1940dabeed00135572396ec7b8d243d0f90de407ff4795a5303dca7e3b50a9ce60c6d761920f08219d69d39afb38be21f6711437b025998790b76c28dcc9c463459a1516d8a4a73ecc0aaa3d57c4fc2a05ecaa9da84ede31fefd591a5eb901e37ebde7d3b9ce55e6f6b372b28f8ac8c63b3c450fafa33c4a8476a32b55d9c2c896e0900f5fe6e5449443"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x65f4, 0x2, 0x7}, {0x9, 0x1, 0x2, '?'}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x8}, {0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x3}, {0x0, 0x1, 0x2, "9c"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x1}, {0x10, 0x5, 0x0, "325e0e24da"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x7fff}, {0x6, 0x1, 0x2, "c6"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7}, {0x5, 0x1, 0x2, '1'}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x4}, {0x6, 0x1, 0x2, 'x'}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x6}, {0x3, 0x6, 0x81, 0x5}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x954}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 1.17921855s ago: executing program 5 (id=1410): syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000023c7cb082505a4a4c237000000010902120001000000000904"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000084e040b1200000000000109022400010000200f090400040103000200092100000001220b0009058103"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000000c0)=0x3ff, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x100010, 0xffffffffffffffff, 0x98820000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x7d, 0x4, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x1d}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005b00)=ANY=[@ANYBLOB="2c00000012009702000000000000000007000000", @ANYRESHEX=r3], 0x2c}}, 0x400) socket(0x10, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000037b8000000f2ffffff61194404000d00009500010000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x20}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r4, 0x289e0cb5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.142019799s ago: executing program 3 (id=1411): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 945.926291ms ago: executing program 1 (id=1412): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03"], 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x8, 0x7f, 0x9a73, {{0x16, 0x4, 0x0, 0x24, 0x58, 0x66, 0x0, 0x2, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@end, @timestamp_addr={0x44, 0x1c, 0x15, 0x1, 0x0, [{@multicast2, 0x8}, {@multicast1, 0x80}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7fff}]}, @rr={0x7, 0x23, 0xc9, [@rand_addr=0x64010102, @remote, @loopback, @empty, @broadcast, @rand_addr=0x64010100, @multicast2, @loopback]}, @ra={0x94, 0x4}]}}}}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1442}, &(0x7f00000003c0), &(0x7f0000001480)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x6, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x4, 0x3, 0x7, 0x3, 0x10, '\x00', 0x28, 0x80000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 307.187637ms ago: executing program 0 (id=1413): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x20000177, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) listen(r0, 0x3) close(0x3) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xa2, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x200000000000008c, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x826061f5748d8722, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5, {r3}}, './file0\x00'}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0xa, 0x6, 0x7, 0x8, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x10001, 0xe0, &(0x7f0000000300)=""/224, 0x40f00, 0x10, '\x00', r9, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xb, 0x7, 0x6}, 0x10, r10, r2, 0xa, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, r11, r12, r0, r13], &(0x7f0000000500)=[{0x5, 0x4, 0x7, 0x3}, {0x0, 0x3, 0xe, 0x5}, {0x2, 0x1, 0xc}, {0x5, 0x3, 0xe, 0xa}, {0x1, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xd, 0x2}, {0x5, 0x2, 0x9, 0x5}, {0x0, 0x3, 0x7, 0x9}, {0x2, 0x1, 0x9, 0xa}, {0x0, 0x4, 0xf, 0xc}], 0x10, 0x3, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x1000, 0x101, {"43ddea3dd342ada7b860afaa1362f39f"}, 0xc5c5, 0x8d5, 0x6}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x118) 159.28297ms ago: executing program 3 (id=1414): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 60.674378ms ago: executing program 1 (id=1415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x7, 0x2, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x68, 0x0, 0x7f, 0x2f, 0x0, @private=0xa010101, @empty, {[@timestamp_prespec={0x44, 0xc, 0xf9, 0x3, 0x8, [{@empty, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0x7, [{@remote, 0x1}, {@broadcast, 0x7c}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@empty, 0xcc}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0x7}]}, @cipso={0x86, 0x14, 0x3, [{0x2, 0xe, "592cb0e797167c4b3471aaa9"}]}, @ssrr={0x89, 0xf, 0x8b, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003f00)={'syztnl2\x00', &(0x7f0000003e80)={'syztnl1\x00', r1, 0x2f, 0x9, 0x9, 0x9, 0x9, @empty, @empty, 0x7, 0x7800, 0xd76, 0x101}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="5c8ce9d494dd1899dae0258268cbdbe2cb4d2bf889608a38ba692492136b85efea890e837a0886cf980e644416888654aecebc90a714cc8af2d862eab07832ae36475a5f1159149335d573202cede14bc01bf7cd02b41d86559af266c65fcd53da22701e3c3c1591562ff68db52232eab12c85ada6e72b9b30874af5cafb196b6bb89038b35c33fe6da3fd925309d7c67c67df87406b4db359ab46c58273c789e5e3b15d9860", 0xa6}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x28, 0x29, 0x4, {0xc, 0x2, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x344d}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffff}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2, 0x1, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x1}]}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5762f6baef0a5f544e08c9363f33991996ff0d6efc50d5965d6ba5222fd24d0ad1cc1e45657d6608ef6653c5fff02c142d084205fb59dfa007b6bbc2e8fa7e10c566cf962fff0dc7a8d0338a2cc722f5161fb34580f4f93970d0e2dbf5f5f685d661ad8e326ccc9ef67834e833474d88f8ba13b52d49a135630491376edf47cdd8c6d2c3f13281661ca370d3f47d632716607710031b57971c14f4a32a8aed31ff9f378c36ea5552ae93d925d7c369b18257f3d63a00be1ac1864c4748dcd41e57df1b832667", 0xc6}, {&(0x7f00000000c0)="42ae33d3f97864b2184648872e8e02f38e532879562e13104f59f71bd79d4a1144b98066d5c3afd64799847836442294", 0x30}, {&(0x7f00000004c0)="7c59f15e80586037b7d48f2c22d2e1dd15bcc164c4297cc7955a30716313b12070b3e129e75005c12d5fc807a02aa7713169767b2c6a3caa3cc3d4fb3a8e95b1dfc38f223cb6e79fdc21276f6e7e78ef6e0d7da801e932841b9cbf49b624dc735a2cad0d4734502908ae2b1a51f94b2e0f7121b146318ab2dc77279b7d62e93a4b2e", 0x82}, {&(0x7f0000000580)="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", 0xfd}], 0x4, &(0x7f0000000780)=[@hopopts_2292={{0xe8, 0x29, 0x36, {0x2b, 0x19, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0x8001, [0x0, 0x3, 0x4, 0x2, 0xf]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x99}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xc00}, @pad1, @generic={0x7, 0x73, "6dcc97d881bdd73f2fca9faf42a27c3cdbec45d29038f2e85bd11efcc16fa62f9d3ed1be5b87b889ede8d4a3607800344eb2c9fa156d5cbf67a2c7dfe253340e183a2a7a4654fe6c4872cd5f1233395f597fa5398affc718610d6c5fb907bce5ea2c45b0c4d1ac5412dc62ffa5f5b5afad8277"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @dstopts_2292={{0x1a8, 0x29, 0x4, {0x53, 0x31, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @pad1, @generic={0x1, 0xc5, "b0eaf037d8cf237318d85b236212981831e13bf57d1a75cd2238a243e94245502efca88b8043c40585e877fa26cc8b6dfe550a45f1af73450cdb3c62c620aa83a32a09ba0e13bed0ba7dc8c7729d3e05bcb609bf0ad2fe7c8626fcb0e3dfc760f2ec04dafc89a72188ba5d7181d53762ab14bc017139da4ad504eea3b6fc2fbf748b4b0bcaf22fb2efd1ed1a630e8a550fbeb70598687fd53b37d2b5789ff228084225347a23cb60293992b82720b77d39fa7aeae375d8f868344ba032366d0e4c370ce208"}, @pad1, @ra={0x5, 0x2, 0x8}, @generic={0x5, 0xa4, "e0485d443ec6024d04d259c3ce1ed6d897f5bd941781abbd85717be375426ef71c796add6d6f0c9f0b1f88d9919ce7c49c34de43039a411526340cd49bfa6963c064a8c7f9161c1662d60ac703ba80a5da958c23c9699c6d423445336e1647099236b37e866fa081f0acc487e15e4be058a00efaea7d74b5c7bf84322f03baeb7984ae870454497af31f8344f0add9122d48c586031eec471e735ef409bda77742e5d37b"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xba4}}], 0x2f0}}, {{&(0x7f0000000ac0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000b00)="94d1389e1b04dbee9585f23d7f7ac17026702eb1bb583ee22a63c415341b7f24f1bf898f5c680a7968a54ededd41a4dc5564f363aa0e72e7c3dd7a5b82517ad001717620694cb3a943d56f42424459d72ea84a536bca24f0226d7baf972708b9e3258c37cb7080c133658531147d3303bbd8c941", 0x74}, {&(0x7f0000000b80)="05d3a64edffce5cc58c35e19d17ef25862dc8ee8f4e6e156eb7bad5787530919fce0aebd53b5ae8fa5054f17676ba8116237c3d11fbddb209df8b0aad54f2aadbf41a9960aeef91419e2c3f7dfeeaa225154d2fb1d2ca59d56321c5d228e1507aa633b5425568f8b08b5a34438b94f02c328988055313e79ce5d7e124b0e52cf0193fe3d5b87696177245fb45cfd5e945a296424112967ee4f12d3d7f45425c4e6c0930178647c2aa44fedd1219ec0333a6bd2854dd0918d00f9282135a319697cb242f024e3cce55ad8852468eef6193ddaf3906a2c6f6bdede8bc785df2152", 0xe0}], 0x2, &(0x7f0000000cc0)=[@hoplimit={{0x14, 0x29, 0x34, 0xcf80}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x87, 0x12, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @generic={0x5, 0x64, "370b5ded66601e663a28e71678fe22e9574710b9325ebdd33d1bab73755e3ab5a61a55ea42ebb3afae4acb2d5feafed791f83068103a200a887b91865f88217c3fa432ddbec9fba877894c9199eb5e8c024544d81f142d21ee7dbe6043af0fca194de917"}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x8, {0x0, 0x0, 0xf9, 0x1}}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0xff}, @enc_lim={0x4, 0x1, 0xf}]}}}], 0xc8}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000dc0)="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", 0xfb}, {&(0x7f0000000ec0)="bc7913cec5fdf7bfe4ed00142c87d926348892886aab25690ba9a13451196ac83715dd4be4142974b98ef1260fc70e2cd0c4c1e9087d4b8ca42cdd9164c79ca5ce9f36914b8b454780ffb891f0bc8fb490f3b25d7587830af5fa40ed56d8d7953422b642c9977e58f7d3880c7e084ea1cf7bd37d65a64ee0d40d13c6704cdf0fdffb8827d4944e6948fa1199cd1897b77106faaacd07146515f9ee957a883d28c0da563cce03758c0e4a0c391a36", 0xae}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="1a87457ba7529581db8e5a5a00cf750eed63b6cc5faef0ad7024d69c0b0f8367e3d569de79282e98bab0ad24b674e72ae7aa0cc00b1d8050868eac2a88e947d2c9470e6e3b2c7cc087350478afe9f516f61b350f2bcea6dc6e38be8899c4c60ebf40", 0x62}, {&(0x7f0000002000)="e4abac360c59e14d23276a242c4e3d09dd4446cf33ef61f360029bbc7dd700543325f7809eb84481e2d5025fadbeeac0aa2ac34e0d374cda7d53e4fb46899fd842253b71833c65cc7f58dd050b4dd48e79a33815700fb05f826d0dae1c2ff3615e2c2eb07332ac8fab27daef959cd66c5290b1c638340a82b0bcd9a5971b79e7f779c078a2a420dff35428a1ea4be941103af60b4d217996f256e10425ebfc8ff8691bc268e9300ed37b0eb449d8f8591e05b0d48cac946208db001e44", 0xbd}], 0x5, &(0x7f0000002140)}}, {{&(0x7f0000002180)={0xa, 0x4e23, 0x2, @loopback, 0xa}, 0x1c, &(0x7f0000002300)=[{&(0x7f00000021c0)="a294325a42eeadec0c5425428884a572b761becf271435e936adf0da2a69217f962052e2bcb501838752519ea43f1bea8cf60524f38d7fc8a7ca4cb810e9e8f2662c605ab7cad8916bd953d1a84c46138c8113e9a659708843eaadcbcec2e8544ce872e8a1c9d378dfd44821da21f2be098ecc082259d69411f06da987109d11bf610d5f9efcf45604f884bf0cdff618206d01664878e5a153f141469b456ec9fd3a5b3cc735f183a0be41201f49d9e3c46ec6", 0xb3}, {&(0x7f0000002280)="0d7aa5670720085ae15b47b35cf0e568bcab709cc28d728ccd86c9d5269c8d6d06e5f99505a96711212218e119069fc41fa0934cc01d93a9bc2ca54f7754ff14d53427e152c46f885b572217dbdf8818e99f3fd61212c086", 0x58}], 0x2, &(0x7f0000002340)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x0, 0xfa}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff6}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x32, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xd}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe}, @ra={0x5, 0x2, 0xfffb}, @enc_lim={0x4, 0x1, 0x30}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0xffff4703}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1000}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x1d, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0xa}, @enc_lim]}}}, @hopopts_2292={{0xf0, 0x29, 0x36, {0x33, 0x1a, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x36, [0x100, 0x8000]}}, @enc_lim={0x4, 0x1, 0x10}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x5}, @generic={0xff, 0x8, "fab1f59bae630c4e"}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x3a, 0x8b, "5c6e2660b424b9673dbaf7354fa9b1339c22eb50f3d68343cc80cf6512284579db13a0cd4af2d1afa2753072314412f8519e2b6ce97ff40f7078fbcdade859f5688f684eab4ab9c52b7259f9d935e15f34391da40634c3cc607f754aee0651f95d238d961556cfc51f0efbda8c2f8c142bcae872ccf5c351c3c283529da1ba5bce976633b6212d3f9ff028"}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x0, 0x3d, 0x0, [@remote, @private2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0xea, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffff001}, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x3a, 0x7, '\x00', [@generic={0x4, 0x15, "40a2e834133a11e83bd2ce29d570f684e76f492a2d"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x3, 0xbb, [0x9, 0x4, 0x2]}}]}}}], 0x278}}, {{&(0x7f00000025c0)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000002600)="7ef3a134b508624f4aebaf02073a9e2de71eca959cc354ec01bfe67a2dd0503a66646edff3afb90b7f45a5782f5c6e893eaf8e264c4c20bde7f78dc1444ac26698f6ab33f06529e329ef884a9200b657898f674e6ec9d68796ea3a0198816e3c4b994e71dbabf1", 0x67}, {&(0x7f0000002680)="8ea60e5f44132bb47e83d2731521b6e2bbac0052de2458cfa8b0b6e6ce290a26bb3b8766cb13a1e30bfe0988db6b0347355602a4ebb4d97b7f2d0acf9944d826dbbd228a9de66e4bd5157457e58814ba7f76199f07ecc7704890b277644a2900af4532106ed77e28ab0067878cc9f9bbb91048fc31336903ab46f78b172be6ea55c9e8747b1488cae86dc8346ec1869c7d9da1ad2949d92fa6343dc2bc9e6681b89845bd240698ce93810d4065d076ab9fd3bc6f7858241d6d7347d06076", 0xbe}, {&(0x7f0000002740)="bdfd709cd10acb7796246c8bcdab4c8f9749deffe3bab1e1d339459ebee954e00db553bb3b6266a3938de5ceb94b789bd204572c28b183699d30cefd10a43bf06fc464e2edb2958755c3d50914f3c0d4e476d47f520f0641ad0fe79fdf0928afb16f5215a1a8ab6d4a6a11b4668f3ddcdd68c705bb3b1840c2150a6c155445394242599eff18bbc6b72bf235bd8a64b9f4ec93facae53995caf411a3d64f1cad1cbcb5e227204363b8ea99375f9870ad3a8174", 0xb3}, {&(0x7f0000002800)}, {&(0x7f0000002840)="769eea7625bea853948600b7a0daae9962698f0dac45c2846fb94c29e498cd5c8309d757f69ad68e86dd80f773af9f9db9243106c89366", 0x37}, {&(0x7f0000002880)="249172db0ea10b6edc5f505c6d615614d2a968204c41dc04e3f3b0e40fa8fac92c4df32d22cb05052bd5aa495335c6e1c293dc8be154386a87c93fd92f909ae3bb392f039b599cf03518a4fa7ba30ca28513477c19056084baffcf8bb51d3f159f495220757b057ce0885998380341e45ebd019d2d8efa2fa486d797e9f3fb32b8ae9753df5eb094f5dd5518886edd1e1f8f4aa367af8cec9102ff8f47d1c4b096e998672da1621c595f7b180bc85330a7257f64bd683e0a325ab80ac8ad6e9bd93af7c9f41a9eb9c2428554ab35a04d87", 0xd1}], 0x6, &(0x7f0000002a00)=[@hopopts_2292={{0x10b8, 0x29, 0x36, {0x73, 0x213, '\x00', [@ra={0x5, 0x2, 0x1}, @ra, @pad1, @generic={0xb, 0xe, "0da0ba75baae42b36891ec127511"}, @generic={0xb, 0x52, "141d6f5b0678d899ccb8a9a2ba1edb76289737d61a0a6db65d87473cad146743ccf430c9dd06aef81c75deb418dc9aeb0074c6b27127e7f5e3f02b9cc382c01f16f409ee4bf871744dbee95407c284a89902"}, @generic={0x3, 0x1000, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0xc, [0x5]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x2, [0x8, 0x1, 0x0, 0x0]}}, @ra={0x5, 0x2, 0x7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}, @dstopts={{0x88, 0x29, 0x37, {0x3c, 0xd, '\x00', [@generic={0x1, 0x5c, "c5498b43ac1499dc29d091a730b8a6d99496cad8e6433617a5b7fef24787fb89c906b07cfec9b3312fdf987ebee9bff11584e9476801123198c80ca9af43d5d7a6c2c274bef3ce167dbe6d0761244d9863f5a35147a5460cb7d10594"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x87, 0x10, 0x0, 0x7, 0x0, [@mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private1, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @empty}]}}}], 0x1268}}, {{&(0x7f0000003c80)={0xa, 0x6, 0xa, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000003cc0)="37c354c069de607506e6ddb96c606f2e4921a9416ac3fa2cd84b4a4e552192e42c8ba0ee609d3f1adee7d55d01e061aa8625d8c405be9ddde7a2e8d88c88abb66e13aeab709f63306dbd1a71724cc78e653efe7f1c1a45df05492f3bbcd06b7acd64ea11b1ea22b17527c2cc8abef2fd1e2ff404690b5815028f66c52a87973bc96fe4d762a4602f8bfb26b49f342eb6a55c47b50ba7fcccf608d7f620f48e7df0118db0d7a7b932a8", 0xa9}, {&(0x7f0000003d80)="1439b9ad450a8394f56259d00a9fd839ccfff4b4cd6d1d9b54107ed46ad99d5d1984f527884bf5f4937132cef7e90dc30941c04314d2c955dd9c6c6472b19a42fc53d0ed00adb22adf0cb75190c5d3831db1c50f4f3d3255b68106d588a8454bac1991f0a30fadf13cc481306d58fcdcf50435e6a02f67bb6556c114476009bedb4a4811076fed9ec9", 0x89}], 0x2, &(0x7f0000005a00)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x1, 0xa, 0x1, 0x8, 0x0, [@local, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @mcast1]}}}, @hopopts_2292={{0x190, 0x29, 0x36, {0x3a, 0x2e, '\x00', [@ra={0x5, 0x2, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x7f, 0x2, [0x395e, 0x400, 0x40000, 0xc1a, 0x80000000, 0x5, 0x0]}}, @ra={0x5, 0x2, 0x21d}, @generic={0x82, 0x67, "1187dc66971aded0d75f1300d19b3542774bbaff93bf158a00ea3757f8b6bfe5ca525764035522af6c33e5470d5d5acdcd4b0e6ab28740484bb65615242d8e58a60a751a9d83e2791b44b62fccef73fac20c76f3d6ae524c2c8ca9443f7809a25559721c85b6a4"}, @generic={0x0, 0xba, "d7b4ef23a6b7a35fd0b10a4d86f688b221516a1728bf74711ac62728bdd51fbf08ef8e473efb30aa4274c287a3c750ea76c9e364b4fa2b6844c4ab3f2453dd97fbb92c8a29e9fc18ba04a49984a891b7a63b17c6eb61f2148b457f0134a36d5a3234414619dc9a10404de5eeebf4ad8a15541a03366a3984393a1429dc3a03e103f1bbeef8f0c32898cdc1dd699f3e8a07629ed04034a99ebf312bbea8bbd4b0658c1e425476227c91f1b1b6048a00206baa1d65b10522ac739a"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r2}}}], 0x220}}, {{&(0x7f00000040c0)={0xa, 0x4e21, 0x4, @mcast1, 0x8}, 0x1c, &(0x7f0000005400)=[{&(0x7f0000004100)="55b45776750afa8e3b89fa34cbc20f6dc42926b52352927f0832897ce2092592402ac37a59ed976a5575cd03b9e27580c87a6e04a4a7ff46222601564e925368cbfb988d50bacb54f89a2c9dbec39953716c50240bebd4181966b061de8ff18855af2ab9086384aeaa92e7847b3b13ff2915011a11af54365022ac7709b2aa7f6a34ba4dc257b68b8e29cdcb69859db80545a06c56307e5ceb04c57544342dd71072f4c62c038a0e45d51dd876bdd820ab2626ee6a8f9f98d870edf5a178a2e0f4456160f9da7c5ff9bf21a47c4c335b71c6aef3e026f80c6a752cbf31feadee646e41075771", 0xe6}, {&(0x7f0000004200)="80867f095f9b9fa9c7cec75a8b6a78ef68e9254405d8ebf2a667710de34baadbf1bc675c13d448564252214350a3e358a46e335a520bd09bbbcb99defe82ffcb3525bdce445fae5c6d559c10e972c6e028e5511f32ff784b14d7ab3b", 0x5c}, {&(0x7f0000004280)="83dfcf31b3085c67d2e1d4636d000d7ff02a858d03a561eab522d105d9a3511ec909c00ed102bd6d9f5f68b32005fce00a3bff036b97c58fee119f633952884afceaa0d34fa41abb06469a5267a0288deba2299e679ec81404bf45342b6bbb7e46235cbe2b031af72a67d6f71c4fb3f6422a1c2a35d08ba66cb991d976abd8eb4e2e8611232fd1", 0x87}, {&(0x7f0000004340)="bfccd104c02b98fb79cea2dcc8a183102755f77503d489f92b7089821a38adb7d7e7cc6916c1c8bff6458cfa24a6d1f97947bcec9136ba9cb2bd3a9e25f367c9de798be6045fd61b80ded31067b5446a", 0x50}, {&(0x7f0000004400)="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", 0x1000}], 0x5, &(0x7f0000005840)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r1}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x2f, 0x1a, '\x00', [@generic={0xf7, 0x75, "cec78e1c733749c2d229fbc5fa8117f963638d23d57b684434ae909968667b5cbc6e48536cf3e5cf428700e3f28f8062aedbf614c75baea8347a3d00b81778facceeb8c87705f13180cd13009f686063e14fda29ab2374c01708726b6704776dbecd5364b1dfb099f2e1c3b59fb586029e8bb2449a"}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0xfd, 0x53f9, [0x8, 0x8, 0x9, 0x8000000000000000, 0x9, 0xc64]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1ff}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x89, 0xb, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x200, [0x9, 0x3b00000000000000, 0xc57]}}, @enc_lim={0x4, 0x1, 0xd}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x1c0}}], 0x8, 0x20040040) shutdown(r0, 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073113b0000000000851000000200000085a200007600000095000810000000009500a50500000000e2044545cfbd17576630aefe992b9b4b024760c6ca8428c2d720800b30744162c6c1d68c0859292af9d33dda349f59fe5229ba70f85aa1e78cbd0b64df7aae833db746747ad713088544922241e6faecd35737bacf2916b29ba4c624ccbd7f6eb43098cdccdb01aec0f5687be55f9c47"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) readv(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) 59.194581ms ago: executing program 2 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000e067000100480000004800000002000800000005000085020000000500000004000000f85400000b00000005000000010001000200000003000000850800000800000000000000c57000000e00000005000000040000000000eb0da0318cd6af9ca78cfe012e"], 0x0, 0x62, 0x0, 0x1, 0x3, 0x10000, @value}, 0x28) syz_open_dev$MSR(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) r1 = syz_io_uring_setup(0x64e, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) setresuid(0x0, 0x0, 0xee01) syz_emit_ethernet(0x98, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0011000028a98b9600f8fd10a5801bbf6475b519fbff5076444abc8ed2bcb336f33023ce4695469abac5fbbafbba985e7821145e878f17c02a4bdad47c50c388ca8479c7df756e713c6ef1021a513051928f74f1bedcdfcb1924b1a7c461942b10f2d8e65c3f3ae04dd51a092f9a36a53b8239db2e057c482d432aacb4e863417dfcc9e76f0883f68461e082"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r4}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) 0s ago: executing program 0 (id=1417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x7fff) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x8398}], 0x1, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000640)=0x0) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) io_getevents(r5, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6020, r7, 0x0, 0x0, 0x3, 0x0, 0x2, r7}]) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): omm="syz.2.1023" path="/202" dev="tmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 391.433755][ T9585] xt_cgroup: invalid path, errno=-2 [ 391.581349][ T9588] new mount options do not match the existing superblock, will be ignored [ 391.897086][ T9596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.805633][ T5868] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 392.963594][ T5868] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 392.989954][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.000295][ T30] audit: type=1400 audit(1748578346.083:680): avc: denied { create } for pid=9603 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 393.025373][ T5868] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 393.041767][ T5868] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 393.050983][ T5868] usb 1-1: Manufacturer: syz [ 393.076273][ T30] audit: type=1326 audit(1748578346.153:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.107389][ T5868] usb 1-1: config 0 descriptor?? [ 393.119975][ T30] audit: type=1326 audit(1748578346.153:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.175651][ T30] audit: type=1326 audit(1748578346.183:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.241981][ T30] audit: type=1326 audit(1748578346.183:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.265788][ T5868] rc_core: IR keymap rc-hauppauge not found [ 393.271696][ T5868] Registered IR keymap rc-empty [ 393.277280][ T30] audit: type=1326 audit(1748578346.183:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.331719][ T5868] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 393.345741][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 393.351560][ T5868] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 393.373113][ T30] audit: type=1326 audit(1748578346.183:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.455902][ T5868] usb 1-1: USB disconnect, device number 25 [ 393.480726][ T30] audit: type=1326 audit(1748578346.183:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.552063][ T30] audit: type=1326 audit(1748578346.183:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.1.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 393.554852][ T9619] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1033'. [ 393.675678][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 393.700936][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 393.725164][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 393.759476][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.793994][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 393.829673][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 393.873285][ T5896] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 393.885407][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.902170][ T5896] usb 6-1: Product: syz [ 393.913890][ T5896] usb 6-1: Manufacturer: syz [ 393.927672][ T5896] usb 6-1: SerialNumber: syz [ 393.950002][ T5896] usb 6-1: config 0 descriptor?? [ 393.961061][ T9608] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 393.993833][ T5896] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 394.028651][ T5170] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 394.076349][ T5170] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 394.163077][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 394.395057][ T5170] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 394.447782][ T1159] tipc: Subscription rejected, illegal request [ 394.535736][ T9604] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 394.564129][ T5170] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 394.740300][ T5896] usb 6-1: USB disconnect, device number 2 [ 395.844158][ T9644] bio_check_eod: 14 callbacks suppressed [ 395.844169][ T9644] syz.1.1043: attempt to access beyond end of device [ 395.844169][ T9644] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 395.866460][ T9644] syz.1.1043: attempt to access beyond end of device [ 395.866460][ T9644] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 395.891402][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 395.902145][ T9644] syz.1.1043: attempt to access beyond end of device [ 395.902145][ T9644] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 395.946407][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 395.975043][ T9644] syz.1.1043: attempt to access beyond end of device [ 395.975043][ T9644] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 395.983489][ T9648] No such timeout policy "syz1" [ 396.085142][ T9653] openvswitch: netlink: Multiple metadata blocks provided [ 396.931969][ T9644] syz.1.1043: attempt to access beyond end of device [ 396.931969][ T9644] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 396.949056][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 396.958745][ T9644] syz.1.1043: attempt to access beyond end of device [ 396.958745][ T9644] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 396.966870][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 396.966885][ T30] audit: type=1400 audit(1748578350.043:694): avc: denied { create } for pid=9646 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 396.971846][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 397.008684][ T9644] syz.1.1043: attempt to access beyond end of device [ 397.008684][ T9644] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 397.306282][ T9644] syz.1.1043: attempt to access beyond end of device [ 397.306282][ T9644] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 397.326846][ T30] audit: type=1400 audit(1748578350.153:695): avc: denied { read append } for pid=9654 comm="syz.5.1046" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 397.400902][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 397.415446][ T30] audit: type=1400 audit(1748578350.153:696): avc: denied { open } for pid=9654 comm="syz.5.1046" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 397.466135][ T9644] syz.1.1043: attempt to access beyond end of device [ 397.466135][ T9644] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 397.480819][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 397.506684][ T9644] syz.1.1043: attempt to access beyond end of device [ 397.506684][ T9644] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 397.525659][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 397.538212][ T9644] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 397.551484][ T9644] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 397.571445][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 397.586781][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 397.601730][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 397.614966][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 397.629492][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 397.639719][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 397.653228][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 397.663380][ T9647] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 397.672986][ T9647] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 397.765736][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 397.925806][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 397.936155][ T5896] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 397.945438][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.974191][ T5896] usb 1-1: config 0 descriptor?? [ 398.267195][ T30] audit: type=1400 audit(1748578351.343:697): avc: denied { mounton } for pid=9676 comm="syz.2.1054" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 398.322101][ T5896] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 398.887567][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 398.993327][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.029201][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 399.066376][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.138957][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 399.162651][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.174075][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 399.191362][ T9688] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.205319][ T9688] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 399.421347][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 399.432931][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.445668][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 399.459453][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.473199][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 399.483477][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.496187][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 399.506745][ T9692] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 399.516463][ T9692] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 399.516503][ T5866] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 399.807149][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 399.816381][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.920474][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 399.941206][ T5866] usb 3-1: config 0 descriptor?? [ 400.523370][ T5896] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 400.705192][ T5896] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 400.859649][ T5896] asix 1-1:0.0: probe with driver asix failed with error -71 [ 400.921659][ T5866] usbtest 3-1:0.0: Linux user mode test driver [ 400.926306][ T5896] usb 1-1: USB disconnect, device number 26 [ 400.927888][ T5866] usbtest 3-1:0.0: low-speed {control} tests [ 401.199954][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.245977][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.425686][ T5900] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 401.549837][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1059'. [ 402.230587][ T9719] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 402.273192][ T30] audit: type=1400 audit(1748578355.273:698): avc: denied { create } for pid=9720 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.468520][ T30] audit: type=1400 audit(1748578355.303:699): avc: denied { bind } for pid=9720 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.736480][ T30] audit: type=1400 audit(1748578355.303:700): avc: denied { name_bind } for pid=9720 comm="syz.0.1066" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 402.743683][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 403.010321][ T30] audit: type=1400 audit(1748578355.303:701): avc: denied { node_bind } for pid=9720 comm="syz.0.1066" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 403.632134][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.012718][ T5900] usb 2-1: config 0 descriptor?? [ 404.348108][ T5896] usb 3-1: USB disconnect, device number 34 [ 404.426293][ T5900] usb 2-1: can't set config #0, error -71 [ 404.472250][ T5900] usb 2-1: USB disconnect, device number 29 [ 406.389050][ T9759] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 406.395600][ T9759] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.439003][ T9759] vhci_hcd vhci_hcd.0: Device attached [ 406.492940][ T9761] vhci_hcd: connection closed [ 406.494104][ T6585] vhci_hcd: stop threads [ 406.536490][ T6585] vhci_hcd: release socket [ 406.762673][ T6585] vhci_hcd: disconnect device [ 406.827222][ T10] vhci_hcd: vhci_device speed not set [ 407.245832][ T30] audit: type=1326 audit(1748578360.293:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.505708][ T30] audit: type=1326 audit(1748578360.293:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.534330][ T30] audit: type=1326 audit(1748578360.313:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.562978][ T30] audit: type=1326 audit(1748578360.343:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.641572][ T30] audit: type=1326 audit(1748578360.393:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.758834][ T30] audit: type=1326 audit(1748578360.393:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.786573][ T30] audit: type=1326 audit(1748578360.393:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.814473][ T30] audit: type=1326 audit(1748578360.413:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 407.842739][ T30] audit: type=1326 audit(1748578360.413:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 408.462554][ T30] audit: type=1326 audit(1748578360.423:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 408.489623][ T30] audit: type=1326 audit(1748578360.433:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdac7b8e969 code=0x7ffc0000 [ 409.172424][ T9788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.650022][ T9815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 410.650047][ T9815] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 410.650101][ T9815] vhci_hcd vhci_hcd.0: Device attached [ 410.655716][ T9816] vhci_hcd: connection closed [ 410.724533][ T5810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5810 comm=kworker/1:3 [ 410.725287][ T9820] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 410.733573][ T6400] vhci_hcd: stop threads [ 410.733589][ T6400] vhci_hcd: release socket [ 410.733601][ T6400] vhci_hcd: disconnect device [ 411.098482][ T973] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 411.167025][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 411.259816][ T973] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 411.269742][ T973] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 411.282496][ T973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 411.292884][ T973] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 411.307452][ T973] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 411.325816][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 411.364306][ T973] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 411.374614][ T973] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 411.388130][ T973] usb 6-1: Product: syz [ 411.392545][ T973] usb 6-1: Manufacturer: syz [ 411.405896][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 411.486639][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 411.853881][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.867198][ T10] usb 4-1: Product: syz [ 411.872528][ T973] cdc_wdm 6-1:1.0: skipping garbage [ 411.877815][ T10] usb 4-1: Manufacturer: syz [ 411.882410][ T10] usb 4-1: SerialNumber: syz [ 411.887062][ T973] cdc_wdm 6-1:1.0: skipping garbage [ 411.893709][ T973] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 411.901418][ T973] cdc_wdm 6-1:1.0: Unknown control protocol [ 411.908130][ T10] usb 4-1: config 0 descriptor?? [ 411.916197][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 411.924211][ T10] usb 4-1: setting power ON [ 411.930579][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 411.941616][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.951945][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 411.955631][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.958056][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 411.974099][ T10] usb 4-1: media controller created [ 411.991754][ T43] usb 2-1: config 0 has no interface number 0 [ 411.992189][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.026731][ T10] usb 4-1: selecting invalid altsetting 6 [ 412.035908][ T10] usb 4-1: digital interface selection failed (-22) [ 412.044110][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 412.145512][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.158467][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.168443][ T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 412.177600][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.193620][ T43] usb 2-1: config 0 descriptor?? [ 412.219481][ T10] usb 4-1: setting power OFF [ 412.388092][ T9840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.679860][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 412.801356][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 412.830535][ T10] (NULL device *): no alternate interface [ 412.890093][ C0] wdm_int_callback: 15 callbacks suppressed [ 412.890115][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 412.908330][ C0] wdm_int_callback: 15 callbacks suppressed [ 412.908348][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 412.921017][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 412.927621][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 412.934038][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 412.940633][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 412.947041][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 412.953636][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 412.961121][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 412.967722][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 412.975998][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 412.982604][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 412.991514][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 412.998128][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 413.004664][ T5868] usb 6-1: USB disconnect, device number 3 [ 413.010549][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 413.010569][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 413.010586][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 413.586966][ T43] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0006/input/input14 [ 413.633889][ T9853] veth0: entered promiscuous mode [ 413.640691][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 413.640704][ T30] audit: type=1400 audit(1748578366.713:716): avc: denied { getopt } for pid=9844 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 413.672407][ T43] uclogic 0003:28BD:0094.0006: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 413.697474][ T43] usb 2-1: USB disconnect, device number 30 [ 413.734857][ T9854] fido_id[9854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 413.792233][ T9844] veth0: left promiscuous mode [ 413.848082][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 413.863002][ T10] usb 4-1: USB disconnect, device number 20 [ 414.577542][ T9859] syz.0.1105 (9859) used greatest stack depth: 19480 bytes left [ 414.692869][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1106'. [ 414.702455][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1106'. [ 415.024625][ T30] audit: type=1400 audit(1748578368.093:717): avc: denied { bind } for pid=9862 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.047813][ T9863] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 415.106682][ T9869] new mount options do not match the existing superblock, will be ignored [ 415.488106][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 415.528621][ T9879] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 415.535175][ T9879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 415.553023][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 415.561193][ T30] audit: type=1400 audit(1748578368.623:718): avc: denied { ioctl } for pid=9877 comm="syz.1.1110" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 415.573062][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 415.592503][ T9879] vhci_hcd vhci_hcd.0: Device attached [ 415.741864][ T9881] vhci_hcd: connection closed [ 415.781621][ T6400] vhci_hcd: stop threads [ 415.819602][ T43] vhci_hcd: vhci_device speed not set [ 415.855522][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 415.900205][ T43] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 415.913484][ T5900] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 416.242602][ T6400] vhci_hcd: release socket [ 416.251840][ T6400] vhci_hcd: disconnect device [ 416.344474][ T9900] openvswitch: netlink: Multiple metadata blocks provided [ 417.184418][ T9904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1118'. [ 417.416180][ T9910] new mount options do not match the existing superblock, will be ignored [ 417.489450][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.561953][ T5900] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 417.574108][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.585995][ T5900] usb 2-1: Product: syz [ 417.590633][ T5900] usb 2-1: Manufacturer: syz [ 417.595933][ T5900] usb 2-1: SerialNumber: syz [ 417.607711][ T5900] usb 2-1: config 0 descriptor?? [ 417.913826][ T5810] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 417.923145][ T5900] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 417.985611][ T5900] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 418.008316][ T5900] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 418.135706][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 418.149266][ T5810] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 418.199290][ T5900] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 418.206567][ T5900] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 418.213876][ T5810] usb 3-1: config 0 has no interface number 0 [ 418.224230][ T5810] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 418.235510][ T5810] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 418.256134][ T5810] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.268182][ T973] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 418.276688][ T5810] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.292114][ T5900] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 418.319961][ T5810] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.387719][ T5900] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 418.453299][ T9921] new mount options do not match the existing superblock, will be ignored [ 418.465759][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.625180][ T5900] usb 2-1: USB disconnect, device number 31 [ 418.633698][ T5810] usb 3-1: config 0 descriptor?? [ 418.660862][ T5810] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 418.690032][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 418.698918][ T973] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.733112][ T973] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 418.856602][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.899018][ T973] usb 4-1: Product: syz [ 418.903213][ T973] usb 4-1: Manufacturer: syz [ 419.197837][ T973] usb 4-1: SerialNumber: syz [ 419.207605][ T973] usb 4-1: config 0 descriptor?? [ 419.339462][ T30] audit: type=1400 audit(1748578372.403:719): avc: denied { ioctl } for pid=9903 comm="syz.2.1119" path="socket:[23274]" dev="sockfs" ino=23274 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.443139][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 419.450663][ T973] gs_usb 4-1:0.0: Couldn't get device config: (err=-32) [ 419.452020][ T9906] overlayfs: failed to resolve './file0/file0': -2 [ 419.457726][ T973] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 419.554590][ T973] usb 4-1: USB disconnect, device number 21 [ 419.566049][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 419.957408][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 420.746466][ T5810] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 420.997117][ T5810] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 421.041767][ T9953] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 421.048319][ T9953] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 421.065818][ T5810] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 421.098745][ T5900] usb 3-1: USB disconnect, device number 35 [ 421.105974][ T9945] syzkaller0: entered promiscuous mode [ 421.111552][ T5810] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 421.111856][ T9945] syzkaller0: entered allmulticast mode [ 421.127570][ T9953] vhci_hcd vhci_hcd.0: Device attached [ 421.128272][ T5900] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 421.136756][ T9947] veth0: entered promiscuous mode [ 421.143105][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 421.156578][ T9951] veth0: left promiscuous mode [ 421.164480][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 421.196197][ T5810] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.205510][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.259793][ T5810] usb 2-1: Product: syz [ 421.291772][ T5810] usb 2-1: Manufacturer: syz [ 421.317119][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 421.330791][ T5810] cdc_wdm 2-1:1.0: skipping garbage [ 421.340650][ T9964] bio_check_eod: 38 callbacks suppressed [ 421.340666][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.340666][ T9964] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 421.375972][ T5810] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 421.385342][ T9954] vhci_hcd: connection closed [ 421.392357][ T6400] vhci_hcd: stop threads [ 421.401399][ T43] vhci_hcd: vhci_device speed not set [ 421.414897][ T5810] cdc_wdm 2-1:1.0: Unknown control protocol [ 421.431438][ T973] vhci_hcd: vhci_device speed not set [ 421.435572][ T6400] vhci_hcd: release socket [ 421.437773][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.437773][ T9964] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 421.455356][ T6400] vhci_hcd: disconnect device [ 421.495828][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 421.532899][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.532899][ T9964] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 421.570792][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 421.583000][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.589619][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.596033][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.602625][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.608871][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.615461][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.621736][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.628327][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.634717][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.637542][ T973] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 421.641295][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.649085][ T973] usb 43-1: enqueue for inactive port 0 [ 421.655574][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.666882][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.675595][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.682186][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.691801][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.698406][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.704652][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.711234][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.717619][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 421.724204][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 421.730501][ T973] vhci_hcd: vhci_device speed not set [ 421.732058][ T5810] usb 2-1: USB disconnect, device number 32 [ 421.735904][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 421.749679][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.749679][ T9964] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 421.784224][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.784224][ T9964] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 421.797331][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 421.807169][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.807169][ T9964] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 421.820279][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 421.831038][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.831038][ T9964] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 421.846789][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.846789][ T9964] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 421.859864][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 421.903683][ T9968] FAULT_INJECTION: forcing a failure. [ 421.903683][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 421.925899][ T9964] syz.2.1131: attempt to access beyond end of device [ 421.925899][ T9964] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 421.944920][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.0.1133 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 421.944946][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.944954][ T9968] Call Trace: [ 421.944960][ T9968] [ 421.944965][ T9968] dump_stack_lvl+0x16c/0x1f0 [ 421.944988][ T9968] should_fail_ex+0x512/0x640 [ 421.945008][ T9968] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 421.945033][ T9968] should_failslab+0xc2/0x120 [ 421.945049][ T9968] __kmalloc_cache_noprof+0x6a/0x3e0 [ 421.945072][ T9968] ? copy_mount_options+0x55/0x190 [ 421.945090][ T9968] ? _copy_from_user+0x59/0xd0 [ 421.945113][ T9968] copy_mount_options+0x55/0x190 [ 421.945134][ T9968] __x64_sys_mount+0x1ac/0x310 [ 421.945152][ T9968] ? __pfx___x64_sys_mount+0x10/0x10 [ 421.945176][ T9968] do_syscall_64+0xcd/0x4c0 [ 421.945195][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.945210][ T9968] RIP: 0033:0x7f59e378e969 [ 421.945234][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.945249][ T9968] RSP: 002b:00007f59e15f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 421.945264][ T9968] RAX: ffffffffffffffda RBX: 00007f59e39b5fa0 RCX: 00007f59e378e969 [ 421.945274][ T9968] RDX: 0000200000000080 RSI: 0000200000000380 RDI: 0000000000000000 [ 421.945283][ T9968] RBP: 00007f59e15f6090 R08: 0000200000000640 R09: 0000000000000000 [ 421.945292][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.945301][ T9968] R13: 0000000000000000 R14: 00007f59e39b5fa0 R15: 00007fff65f3c048 [ 421.945323][ T9968] [ 421.949313][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 422.132852][ T9964] syz.2.1131: attempt to access beyond end of device [ 422.132852][ T9964] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 422.146785][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 422.160764][ T9964] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 422.170390][ T9964] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 422.427424][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 422.441965][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 422.461288][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 422.473112][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 422.484381][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 422.496889][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 422.850297][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 422.882517][ T9978] openvswitch: netlink: Multiple metadata blocks provided [ 422.892602][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 423.468728][ T9966] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 424.066837][ T9982] NILFS (nullb0): couldn't find nilfs on the device [ 425.014290][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 426.479877][ T9991] veth0: entered promiscuous mode [ 426.496963][T10010] veth0: entered promiscuous mode [ 426.502595][T10012] veth0: left promiscuous mode [ 426.564987][T10000] veth0: left promiscuous mode [ 426.787344][ T973] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 426.882917][T10022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.395723][ T973] usb 3-1: Using ep0 maxpacket: 8 [ 427.411731][ T973] usb 3-1: config index 0 descriptor too short (expected 62482, got 18) [ 427.425901][ T43] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 427.441499][ T973] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 427.461500][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.491493][ T973] pvrusb2: Hardware description: Terratec Grabster AV400 [ 427.500121][ T973] pvrusb2: ********** [ 427.503616][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'. [ 427.514867][ T973] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 427.525492][ T973] pvrusb2: Important functionality might not be entirely working. [ 427.533577][ T973] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 427.545304][ T973] pvrusb2: ********** [ 427.625436][ T30] audit: type=1400 audit(1748578380.693:720): avc: denied { connect } for pid=10028 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 427.670314][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 427.798232][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.813095][ T2335] pvrusb2: Invalid write control endpoint [ 427.820067][ T43] usb 1-1: config 0 descriptor?? [ 427.820703][ T973] usb 3-1: USB disconnect, device number 36 [ 427.827181][ T43] usbtest 1-1:0.0: Linux user mode test driver [ 428.522404][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.532206][ T43] usbtest 1-1:0.0: low-speed {control} tests [ 428.556321][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 428.567968][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.577656][T10027] openvswitch: netlink: Multiple metadata blocks provided [ 428.701518][ T2335] pvrusb2: Invalid write control endpoint [ 428.767218][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 429.638959][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 429.661347][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 429.685669][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 429.958916][ T2335] pvrusb2: Device being rendered inoperable [ 429.971518][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 429.978999][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 429.992145][ T2335] pvrusb2: Attached sub-driver cx25840 [ 430.013721][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 430.025283][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 430.077026][ T30] audit: type=1400 audit(1748578383.153:721): avc: denied { create } for pid=10039 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 430.086039][ T5866] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.105432][ T5866] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 430.142127][ T5866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.178279][ T5866] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 430.181659][ T30] audit: type=1400 audit(1748578383.193:722): avc: denied { ioctl } for pid=10039 comm="syz.1.1151" path="socket:[23412]" dev="sockfs" ino=23412 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 430.218333][ T5866] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 430.271212][ T5866] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.306526][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.413009][T10050] netlink: 'syz.2.1154': attribute type 3 has an invalid length. [ 430.619357][ T5866] usb 4-1: Product: syz [ 430.638790][ T5866] usb 4-1: Manufacturer: syz [ 430.687664][ T5866] usb 4-1: can't set config #1, error -71 [ 430.703928][ T5866] usb 4-1: USB disconnect, device number 22 [ 430.749384][T10052] bio_check_eod: 14 callbacks suppressed [ 430.749401][T10052] syz.1.1156: attempt to access beyond end of device [ 430.749401][T10052] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 430.767008][T10054] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 430.774301][T10054] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 430.785235][T10054] vhci_hcd vhci_hcd.0: Device attached [ 430.794307][T10055] vhci_hcd: connection closed [ 430.795983][T10052] syz.1.1156: attempt to access beyond end of device [ 430.795983][T10052] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 430.799062][ T6400] vhci_hcd: stop threads [ 430.800761][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 430.826454][ T6400] vhci_hcd: release socket [ 430.830540][T10052] syz.1.1156: attempt to access beyond end of device [ 430.830540][T10052] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 430.850003][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 430.855137][ T6400] vhci_hcd: disconnect device [ 430.864769][T10052] syz.1.1156: attempt to access beyond end of device [ 430.864769][T10052] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 430.977495][T10052] syz.1.1156: attempt to access beyond end of device [ 430.977495][T10052] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 430.993675][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 431.009681][ T5866] usb 1-1: USB disconnect, device number 27 [ 431.011597][T10052] syz.1.1156: attempt to access beyond end of device [ 431.011597][T10052] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 431.105516][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 431.181549][T10052] syz.1.1156: attempt to access beyond end of device [ 431.181549][T10052] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 431.198105][T10052] syz.1.1156: attempt to access beyond end of device [ 431.198105][T10052] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 431.213979][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 431.244132][T10052] syz.1.1156: attempt to access beyond end of device [ 431.244132][T10052] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 431.258996][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 431.288290][T10052] syz.1.1156: attempt to access beyond end of device [ 431.288290][T10052] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 431.312641][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 431.327166][T10052] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 431.337145][T10052] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 431.376184][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 431.397183][T10067] veth0: entered promiscuous mode [ 431.525623][ T5866] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 431.631341][T10068] veth0: entered promiscuous mode [ 431.725619][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 431.758849][ T5866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 431.800110][T10057] veth0: left promiscuous mode [ 431.816840][ T5866] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 431.992145][T10045] veth0: left promiscuous mode [ 431.998131][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 432.009955][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 432.061950][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 432.082147][ T5866] usb 1-1: Product: syz [ 432.089348][ T5866] usb 1-1: Manufacturer: syz [ 432.094326][ T5866] usb 1-1: SerialNumber: syz [ 432.118100][ T5866] usb 1-1: config 0 descriptor?? [ 432.128490][T10063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 432.163076][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 432.173555][ T5866] hub 1-1:0.0: bad descriptor, ignoring hub [ 432.180517][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 432.190386][ T5866] hub 1-1:0.0: probe with driver hub failed with error -5 [ 432.217850][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 432.255371][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 432.304572][T10059] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 432.609590][T10059] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 432.648344][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.657800][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.304263][T10087] openvswitch: netlink: Multiple metadata blocks provided [ 433.622377][ T30] audit: type=1400 audit(1748578386.643:723): avc: denied { write } for pid=10085 comm="syz.1.1164" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 433.771082][T10088] random: crng reseeded on system resumption [ 434.006478][ T30] audit: type=1400 audit(1748578386.843:724): avc: denied { open } for pid=10085 comm="syz.1.1164" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 434.048445][ T5866] usb 1-1: USB disconnect, device number 28 [ 434.483107][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1165'. [ 434.877608][ T5866] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 435.332314][ T5866] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 435.615802][ T5866] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 435.665108][ T5866] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 435.694498][ T5866] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 436.014584][ T5866] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 436.058943][ T5866] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 436.156141][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 436.164461][ T5866] usb 6-1: Product: syz [ 436.170578][ T5866] usb 6-1: Manufacturer: syz [ 436.319957][ T5866] cdc_wdm 6-1:1.0: skipping garbage [ 436.338593][ T5866] cdc_wdm 6-1:1.0: skipping garbage [ 436.421838][T10127] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 436.431975][T10127] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 436.506553][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1174'. [ 436.525680][ T30] audit: type=1400 audit(1748578389.573:725): avc: denied { write } for pid=10122 comm="syz.2.1174" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 436.853459][ T5866] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 436.875425][ T5866] cdc_wdm 6-1:1.0: Unknown control protocol [ 437.209802][ T5866] usb 6-1: USB disconnect, device number 4 [ 437.303068][ T30] audit: type=1800 audit(1748578390.373:726): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1176" name="/" dev="9p" ino=2 res=0 errno=0 [ 437.559186][T10142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10142 comm=syz.0.1179 [ 437.656912][T10152] veth0: entered promiscuous mode [ 437.878546][ T30] audit: type=1400 audit(1748578390.933:727): avc: denied { write } for pid=10155 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 438.186519][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 438.429893][T10136] veth0: left promiscuous mode [ 438.435219][ T30] audit: type=1400 audit(1748578391.503:728): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.455138][T10159] xt_connbytes: Forcing CT accounting to be enabled [ 438.459861][ T30] audit: type=1400 audit(1748578391.503:729): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.583021][T10159] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 438.626554][ T5900] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 438.844003][ T5900] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 438.875191][ T30] audit: type=1400 audit(1748578391.503:730): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.959916][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.006612][ T5900] usb 6-1: config 0 descriptor?? [ 439.011857][ T30] audit: type=1400 audit(1748578391.503:731): avc: denied { read } for pid=5480 comm="dhcpcd" name="n106" dev="tmpfs" ino=6783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.165362][ T5900] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 439.206120][ T30] audit: type=1400 audit(1748578391.503:732): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=6783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.242125][ T30] audit: type=1400 audit(1748578391.503:733): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=6783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.522969][ T30] audit: type=1400 audit(1748578392.593:734): avc: denied { read } for pid=10160 comm="syz.5.1185" name="mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 439.550015][ T5900] gspca_cpia1: usb_control_msg 05, error -71 [ 439.572830][ T5900] gspca_cpia1: usb_control_msg 01, error -71 [ 439.632785][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.639258][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.662321][ T5900] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 439.756807][ T5900] usb 6-1: USB disconnect, device number 5 [ 439.781457][ T30] audit: type=1400 audit(1748578392.593:735): avc: denied { open } for pid=10160 comm="syz.5.1185" path="/dev/input/mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 439.994774][ T30] audit: type=1400 audit(1748578392.593:736): avc: denied { ioctl } for pid=10160 comm="syz.5.1185" path="/dev/input/mouse0" dev="devtmpfs" ino=980 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 440.258450][ T30] audit: type=1400 audit(1748578392.623:737): avc: denied { read open } for pid=10180 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.359895][ T30] audit: type=1400 audit(1748578392.623:738): avc: denied { getattr } for pid=10180 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.477730][ T30] audit: type=1800 audit(1748578393.383:739): pid=10187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1189" name="/" dev="9p" ino=2 res=0 errno=0 [ 440.664547][T10198] new mount options do not match the existing superblock, will be ignored [ 442.626062][ T5900] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 442.706152][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 442.881930][ T5900] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.901690][ T5900] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 442.920453][T10238] 9pnet_fd: Insufficient options for proto=fd [ 442.928519][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.950754][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 442.983782][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 443.037333][ T5900] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 443.062422][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 443.089160][ T43] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 443.248279][T10243] binder: 10239:10243 ioctl 400c620e 200000000380 returned -22 [ 443.312554][ T5900] usb 1-1: Product: syz [ 443.340816][ T5900] usb 1-1: Manufacturer: syz [ 443.374924][ T5900] cdc_wdm 1-1:1.0: skipping garbage [ 443.380357][ T5900] cdc_wdm 1-1:1.0: skipping garbage [ 443.402155][ T5900] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 443.415908][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.445279][ T5900] cdc_wdm 1-1:1.0: Unknown control protocol [ 443.454128][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.492834][T10252] xt_cgroup: invalid path, errno=-2 [ 443.608110][ T43] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 443.612336][ T5866] usb 1-1: USB disconnect, device number 29 [ 443.744665][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.929038][ T43] usb 6-1: config 0 descriptor?? [ 444.300213][ T43] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 444.314742][ T43] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 444.417144][ T43] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 444.499769][ T43] hid-steam 0003:28DE:1142.0007: No HID_FEATURE_REPORT submitted - nothing to read [ 444.603598][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 444.603657][ T30] audit: type=1400 audit(1748578397.673:747): avc: denied { read write } for pid=10267 comm="syz.2.1209" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 444.694359][ T43] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 444.731760][ T43] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 444.805680][ T30] audit: type=1400 audit(1748578397.713:748): avc: denied { open } for pid=10267 comm="syz.2.1209" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 444.852803][T10280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10280 comm=syz.3.1212 [ 444.956022][ T43] usb 6-1: USB disconnect, device number 6 [ 445.194009][T10285] bio_check_eod: 14 callbacks suppressed [ 445.194038][T10285] syz.1.1210: attempt to access beyond end of device [ 445.194038][T10285] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 445.503469][T10282] Cannot find set identified by id 0 to match [ 445.553465][ T30] audit: type=1400 audit(1748578398.013:749): avc: denied { ioctl } for pid=10267 comm="syz.2.1209" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 445.556054][T10287] netlink: 'syz.0.1211': attribute type 16 has an invalid length. [ 445.586412][T10287] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1211'. [ 445.873476][ T43] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 446.044304][T10277] fido_id[10277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 446.111343][T10293] 9pnet_fd: Insufficient options for proto=fd [ 446.528931][ T30] audit: type=1400 audit(1748578399.603:750): avc: denied { write } for pid=10295 comm="syz.0.1215" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.655009][ T30] audit: type=1400 audit(1748578399.603:751): avc: denied { ioctl } for pid=10295 comm="syz.0.1215" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 447.261306][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 447.489303][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 447.528743][ T43] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 447.543609][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.579648][ T43] usb 4-1: config 0 has no interface number 0 [ 447.624086][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 447.634480][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.650554][ T43] usb 4-1: Product: syz [ 447.664723][ T43] usb 4-1: Manufacturer: syz [ 447.673290][ T43] usb 4-1: SerialNumber: syz [ 447.697083][ T43] usb 4-1: config 0 descriptor?? [ 447.850173][ T43] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 447.875838][ T30] audit: type=1400 audit(1748578400.943:752): avc: denied { open } for pid=10295 comm="syz.0.1215" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 447.967089][T10329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.442296][ T43] usb 4-1: No valid video chain found. [ 448.467854][T10304] IPv6: Can't replace route, no match found [ 448.474941][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1216'. [ 448.487261][ T43] usb 4-1: USB disconnect, device number 23 [ 448.495272][ T30] audit: type=1400 audit(1748578401.533:753): avc: denied { ioctl } for pid=10295 comm="syz.0.1215" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x560a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 448.790865][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.540131][ T30] audit: type=1400 audit(1748578402.603:754): avc: denied { append } for pid=10338 comm="syz.1.1226" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 449.625635][ T5866] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 449.650573][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 449.815822][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 449.824718][ T5866] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.836247][ T5866] usb 6-1: config 0 has no interface number 0 [ 449.846142][ T5866] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 449.862923][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.899710][ T5866] usb 6-1: Product: syz [ 449.908310][ T5866] usb 6-1: Manufacturer: syz [ 449.923903][ T5866] usb 6-1: SerialNumber: syz [ 449.943528][ T5866] usb 6-1: config 0 descriptor?? [ 449.991981][ T5866] usb 6-1: selecting invalid altsetting 1 [ 450.032649][ T5866] dvb_ttusb_budget: ttusb_init_controller: error [ 450.058131][ T5866] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 450.114347][ T30] audit: type=1400 audit(1748578403.183:755): avc: denied { read } for pid=10345 comm="syz.0.1228" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 450.189443][ T30] audit: type=1400 audit(1748578403.183:756): avc: denied { open } for pid=10345 comm="syz.0.1228" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 450.295875][ T30] audit: type=1400 audit(1748578403.213:757): avc: denied { ioctl } for pid=10345 comm="syz.0.1228" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 450.322020][ T5866] DVB: Unable to find symbol stv0299_attach() [ 450.473550][ T5866] DVB: Unable to find symbol tda8083_attach() [ 450.480451][ T5866] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 450.647509][ T5866] usb 6-1: USB disconnect, device number 7 [ 451.339770][ T5810] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 451.610315][ T30] audit: type=1400 audit(1748578404.682:758): avc: denied { bind } for pid=10371 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 451.644657][ T30] audit: type=1400 audit(1748578404.682:759): avc: denied { name_bind } for pid=10371 comm="syz.3.1234" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 451.763812][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.764417][ T30] audit: type=1400 audit(1748578404.682:760): avc: denied { node_bind } for pid=10371 comm="syz.3.1234" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 451.807447][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.884471][T10376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.359813][ T5810] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 452.370173][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.551500][ T5810] usb 3-1: config 0 descriptor?? [ 452.638959][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 453.159414][ T5810] aquacomputer_d5next 0003:0C70:F00E.0009: item fetching failed at offset 5/7 [ 453.172524][ T5810] aquacomputer_d5next 0003:0C70:F00E.0009: probe with driver aquacomputer_d5next failed with error -22 [ 453.267220][T10391] vivid-000: disconnect [ 453.316841][T10391] vivid-000: reconnect [ 453.732431][ T5810] usb 3-1: USB disconnect, device number 37 [ 454.041816][T10396] vlan2: entered allmulticast mode [ 454.047048][T10396] bond0: entered allmulticast mode [ 454.052171][T10396] bond_slave_0: entered allmulticast mode [ 454.057943][T10396] bond_slave_1: entered allmulticast mode [ 454.065569][T10396] bridge0: port 3(vlan2) entered blocking state [ 454.071895][T10396] bridge0: port 3(vlan2) entered disabled state [ 454.080450][T10396] vlan2: entered promiscuous mode [ 454.085670][T10396] bond0: entered promiscuous mode [ 454.090769][T10396] bond_slave_0: entered promiscuous mode [ 454.096873][T10396] bond_slave_1: entered promiscuous mode [ 454.115029][T10396] bridge0: port 3(vlan2) entered blocking state [ 454.121836][T10396] bridge0: port 3(vlan2) entered forwarding state [ 454.184906][T10400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.672449][ T5867] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 454.865291][ T5867] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.922906][T10406] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1243'. [ 455.135933][T10403] xt_cgroup: invalid path, errno=-2 [ 455.145889][ T5867] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 455.178912][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 455.190814][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 455.204020][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 455.253980][ T5867] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 455.275323][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 455.283766][ T5867] usb 2-1: Product: syz [ 455.294972][ T5867] usb 2-1: Manufacturer: syz [ 455.309427][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 455.315469][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1246'. [ 455.348815][T10410] 8021q: VLANs not supported on gre0 [ 455.355176][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 455.378550][ T5867] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 455.384477][ T5867] cdc_wdm 2-1:1.0: Unknown control protocol [ 455.603864][ C1] wdm_int_callback: 5 callbacks suppressed [ 455.603884][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.616303][ C1] wdm_int_callback: 5 callbacks suppressed [ 455.616321][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.628586][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.635188][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.642432][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.649039][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.655553][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.662147][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.669159][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.675761][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.682731][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.689325][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.696007][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.702610][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.709712][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.716319][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.720765][T10422] syz.2.1250: attempt to access beyond end of device [ 455.720765][T10422] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 455.722667][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.741724][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.748432][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 455.755033][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 455.774934][ T43] usb 2-1: USB disconnect, device number 33 [ 455.780931][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 455.783673][T10422] syz.2.1250: attempt to access beyond end of device [ 455.783673][T10422] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 455.868266][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 455.886037][T10422] syz.2.1250: attempt to access beyond end of device [ 455.886037][T10422] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 455.949107][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 455.964636][T10422] syz.2.1250: attempt to access beyond end of device [ 455.964636][T10422] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 455.980763][T10422] syz.2.1250: attempt to access beyond end of device [ 455.980763][T10422] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 455.996022][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.006441][T10422] syz.2.1250: attempt to access beyond end of device [ 456.006441][T10422] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 456.021604][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.036307][T10422] syz.2.1250: attempt to access beyond end of device [ 456.036307][T10422] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 456.050901][T10422] syz.2.1250: attempt to access beyond end of device [ 456.050901][T10422] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 456.064625][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.074933][T10422] syz.2.1250: attempt to access beyond end of device [ 456.074933][T10422] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 456.091325][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.104958][T10422] syz.2.1250: attempt to access beyond end of device [ 456.104958][T10422] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 456.119750][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.130704][T10422] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.142153][T10422] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 456.157274][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.170465][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.199850][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.211160][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.228065][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.239165][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.255631][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.267032][T10423] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.276647][T10423] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 456.850857][ T30] audit: type=1400 audit(1748578409.922:761): avc: denied { shutdown } for pid=10433 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.959841][ T30] audit: type=1400 audit(1748578410.022:762): avc: denied { setattr } for pid=10433 comm="syz.1.1253" name="NETLINK" dev="sockfs" ino=25914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 457.307694][ T30] audit: type=1400 audit(1748578410.132:763): avc: denied { getattr } for pid=10437 comm="syz.2.1254" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.355632][ T5866] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 457.520824][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 457.536594][ T5866] usb 2-1: config 0 has an invalid interface number: 78 but max is 2 [ 457.546129][ T5810] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 457.549039][ T5866] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 457.564590][ T5866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 457.579237][ T5866] usb 2-1: config 0 has no interface number 0 [ 457.591329][ T5866] usb 2-1: config 0 interface 78 altsetting 5 endpoint 0x3 has invalid maxpacket 36523, setting to 1024 [ 457.605907][ T5866] usb 2-1: config 0 interface 78 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 457.620655][ T5866] usb 2-1: config 0 interface 78 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.659805][ T5866] usb 2-1: config 0 interface 78 has no altsetting 0 [ 457.677161][ T5866] usb 2-1: New USB device found, idVendor=12d1, idProduct=45dd, bcdDevice=b5.19 [ 457.696772][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.714987][ T5866] usb 2-1: Product: 濽隔쀐똪㯄鷖걡엖”绣Ჴⷅለ郚㽃⮺렀⢹鵾颈ᵚ映塜叾᧔岆즉芠奍罳♺殺挒뱘瀋땏僑錝螢ⶴ㹠Œ穴草ᘵᣌ匦儦﹋뼵攦噗⢋䤇뺕甴백춝錻甏⍰䄞⊥火㤦ࣈ [ 457.725932][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 457.765553][ T5866] usb 2-1: Manufacturer: я [ 457.770076][ T5866] usb 2-1: SerialNumber: ᑞ [ 457.806085][ T5866] usb 2-1: config 0 descriptor?? [ 457.826049][T10436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 457.834180][ T5810] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 457.842365][ T5810] usb 6-1: config 0 has no interface number 0 [ 457.852949][ T5810] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.864196][ T5810] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 457.885080][ T5810] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.899524][ T5810] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.095591][ T5810] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 458.104973][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.116883][ T5810] usb 6-1: config 0 descriptor?? [ 458.166486][ T5810] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 458.397209][T10454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.851864][T10456] FAULT_INJECTION: forcing a failure. [ 458.851864][T10456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.918440][T10456] CPU: 0 UID: 0 PID: 10456 Comm: syz.0.1259 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 458.918466][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.918476][T10456] Call Trace: [ 458.918483][T10456] [ 458.918489][T10456] dump_stack_lvl+0x16c/0x1f0 [ 458.918511][T10456] should_fail_ex+0x512/0x640 [ 458.918536][T10456] _copy_from_user+0x2e/0xd0 [ 458.918562][T10456] ____sys_sendmsg+0x607/0xc70 [ 458.918589][T10456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.918623][T10456] ___sys_sendmsg+0x134/0x1d0 [ 458.918640][T10456] ? rcu_is_watching+0x12/0xc0 [ 458.918658][T10456] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.918673][T10456] ? __lock_acquire+0x622/0x1c90 [ 458.918724][T10456] __sys_sendmsg+0x16d/0x220 [ 458.918743][T10456] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.918771][T10456] ? rcu_is_watching+0x12/0xc0 [ 458.918787][T10456] do_syscall_64+0xcd/0x4c0 [ 458.918807][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.918824][T10456] RIP: 0033:0x7f59e378e969 [ 458.918837][T10456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.918855][T10456] RSP: 002b:00007f59e15f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.918872][T10456] RAX: ffffffffffffffda RBX: 00007f59e39b5fa0 RCX: 00007f59e378e969 [ 458.918884][T10456] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 458.918894][T10456] RBP: 00007f59e15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 458.918905][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.918914][T10456] R13: 0000000000000000 R14: 00007f59e39b5fa0 R15: 00007fff65f3c048 [ 458.918938][T10456] [ 459.177436][ T5866] option 2-1:0.78: GSM modem (1-port) converter detected [ 459.189906][ T5866] usb 2-1: USB disconnect, device number 34 [ 459.198101][ T5866] option 2-1:0.78: device disconnected [ 459.296698][T10443] overlayfs: failed to resolve './file0/file0': -2 [ 459.300392][T10460] 9pnet_fd: Insufficient options for proto=fd [ 459.396467][T10462] new mount options do not match the existing superblock, will be ignored [ 460.760698][T10480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.018932][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 461.028056][T10486] netlink: 'syz.1.1266': attribute type 5 has an invalid length. [ 461.035935][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1266'. [ 461.093302][T10486] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 461.102759][T10486] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 461.112195][T10486] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 461.120909][T10486] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 461.130256][T10486] geneve2: entered promiscuous mode [ 461.135712][T10486] geneve2: entered allmulticast mode [ 461.523742][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-1) [ 461.536428][ T5866] usb 6-1: USB disconnect, device number 8 [ 461.749474][ T5866] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 461.876386][T10492] xt_cgroup: invalid path, errno=-2 [ 461.982167][T10498] 9pnet_fd: Insufficient options for proto=fd [ 462.308825][T10514] veth0: entered promiscuous mode [ 462.853686][T10502] veth0: left promiscuous mode [ 463.119770][ T30] audit: type=1326 audit(1748578416.192:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 463.205570][ T30] audit: type=1326 audit(1748578416.192:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 463.404840][ T30] audit: type=1326 audit(1748578416.222:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 463.446297][ T30] audit: type=1326 audit(1748578416.222:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 463.821064][ T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 463.953740][ T30] audit: type=1326 audit(1748578416.222:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 464.056037][ T30] audit: type=1326 audit(1748578416.242:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 464.083012][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 464.113381][ T10] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 464.127259][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.143638][ T30] audit: type=1326 audit(1748578416.252:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 464.169588][ T10] usb 1-1: config 0 descriptor?? [ 464.192047][T10523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 464.215597][ T30] audit: type=1326 audit(1748578416.252:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e378e969 code=0x7ffc0000 [ 464.334056][ T30] audit: type=1326 audit(1748578416.272:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59e378d2d0 code=0x7ffc0000 [ 464.367245][ T30] audit: type=1326 audit(1748578416.272:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59e378e56b code=0x7ffc0000 [ 464.598314][T10536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.949399][T10541] xt_cgroup: invalid path, errno=-2 [ 467.115889][ T10] a4tech 0003:09DA:022B.000A: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.0-1/input0 [ 467.439038][T10555] FAULT_INJECTION: forcing a failure. [ 467.439038][T10555] name failslab, interval 1, probability 0, space 0, times 0 [ 467.455339][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.5.1286 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 467.455363][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.455373][T10555] Call Trace: [ 467.455379][T10555] [ 467.455386][T10555] dump_stack_lvl+0x16c/0x1f0 [ 467.455409][T10555] should_fail_ex+0x512/0x640 [ 467.455431][T10555] ? __kmalloc_noprof+0xbf/0x510 [ 467.455449][T10555] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 467.455477][T10555] should_failslab+0xc2/0x120 [ 467.455496][T10555] __kmalloc_noprof+0xd2/0x510 [ 467.455515][T10555] ? __pfx___mutex_lock+0x10/0x10 [ 467.455539][T10555] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 467.455572][T10555] genl_start+0x18f/0x980 [ 467.455601][T10555] __netlink_dump_start+0x60e/0x990 [ 467.455627][T10555] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 467.455655][T10555] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 467.455685][T10555] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.455704][T10555] ? __pfx_genl_start+0x10/0x10 [ 467.455727][T10555] ? __pfx_genl_dumpit+0x10/0x10 [ 467.455750][T10555] ? __pfx_genl_done+0x10/0x10 [ 467.455786][T10555] genl_rcv_msg+0x46e/0x800 [ 467.455814][T10555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.455840][T10555] ? __pfx_ethnl_default_start+0x10/0x10 [ 467.455859][T10555] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 467.455878][T10555] ? __pfx_ethnl_default_done+0x10/0x10 [ 467.455900][T10555] ? rcu_is_watching+0x12/0xc0 [ 467.455916][T10555] ? irqentry_exit+0x3b/0x90 [ 467.455942][T10555] netlink_rcv_skb+0x155/0x420 [ 467.455965][T10555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.455992][T10555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.456034][T10555] genl_rcv+0x28/0x40 [ 467.456056][T10555] netlink_unicast+0x53d/0x7f0 [ 467.456083][T10555] ? __pfx_netlink_unicast+0x10/0x10 [ 467.456114][T10555] netlink_sendmsg+0x8d1/0xdd0 [ 467.456142][T10555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.456169][T10555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.456197][T10555] ____sys_sendmsg+0xa98/0xc70 [ 467.456222][T10555] ? copy_msghdr_from_user+0x10a/0x160 [ 467.456240][T10555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.456267][T10555] ? __lock_acquire+0xb8a/0x1c90 [ 467.456297][T10555] ___sys_sendmsg+0x134/0x1d0 [ 467.456317][T10555] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.456371][T10555] __sys_sendmsg+0x16d/0x220 [ 467.456390][T10555] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.456406][T10555] ? __pfx___schedule+0x10/0x10 [ 467.456441][T10555] do_syscall_64+0xcd/0x4c0 [ 467.456463][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.456481][T10555] RIP: 0033:0x7f8824f8e969 [ 467.456495][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.456511][T10555] RSP: 002b:00007f8825e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.456528][T10555] RAX: ffffffffffffffda RBX: 00007f88251b6080 RCX: 00007f8824f8e969 [ 467.456539][T10555] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 467.456548][T10555] RBP: 00007f8825e37090 R08: 0000000000000000 R09: 0000000000000000 [ 467.456559][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.456569][T10555] R13: 0000000000000000 R14: 00007f88251b6080 R15: 00007ffcc84449d8 [ 467.456593][T10555] [ 468.553857][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 468.553895][ T30] audit: type=1400 audit(1748578421.082:819): avc: denied { remount } for pid=10557 comm="syz.1.1288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 468.561492][T10561] new mount options do not match the existing superblock, will be ignored [ 468.723083][ T5900] usb 1-1: USB disconnect, device number 30 [ 469.175553][T10579] veth0: entered promiscuous mode [ 469.656060][T10568] veth0: left promiscuous mode [ 469.831773][ T30] audit: type=1326 audit(1748578422.902:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.5.1293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8824f8e969 code=0x0 [ 469.886853][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1293'. [ 470.162273][T10588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.917762][T10600] xt_hashlimit: max too large, truncated to 1048576 [ 471.366071][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 471.374963][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 471.383870][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 471.892078][T10610] usb usb8: usbfs: process 10610 (syz.3.1302) did not claim interface 0 before use [ 472.072655][T10615] netlink: 'syz.2.1303': attribute type 13 has an invalid length. [ 472.220158][T10615] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.228205][T10615] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.643798][T10615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.740553][T10615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.857648][T10635] binder: 10634:10635 ioctl c0306201 200000000640 returned -22 [ 473.906974][T10615] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.945778][T10615] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.122827][ T30] audit: type=1400 audit(1748578427.192:821): avc: denied { bind } for pid=10640 comm="syz.5.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 474.149750][T10642] netlink: 'syz.5.1313': attribute type 8 has an invalid length. [ 474.159971][T10615] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.200828][T10615] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.252588][ T30] audit: type=1400 audit(1748578427.302:822): avc: denied { read } for pid=10636 comm="syz.3.1310" path="socket:[26694]" dev="sockfs" ino=26694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 474.263955][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1313'. [ 474.310974][T10644] virtio-fs: tag not found [ 474.420025][T10649] xt_cgroup: invalid path, errno=-2 [ 474.777381][ T30] audit: type=1400 audit(1748578427.752:823): avc: denied { write } for pid=10640 comm="syz.5.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 474.831737][T10615] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 474.848322][T10615] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 474.880285][T10615] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 474.890043][T10615] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 475.069812][ T30] audit: type=1400 audit(1748578428.132:824): avc: denied { append } for pid=10659 comm="syz.2.1318" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.220281][T10661] loop6: detected capacity change from 0 to 63 [ 475.644764][T10662] new mount options do not match the existing superblock, will be ignored [ 476.117541][T10680] NILFS (nullb0): couldn't find nilfs on the device [ 476.201475][ T5867] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 476.452885][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 476.553564][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.786491][ T5867] usb 4-1: config 0 descriptor?? [ 476.906491][ T5867] usbtest 4-1:0.0: Linux user mode test driver [ 476.950945][ T5867] usbtest 4-1:0.0: low-speed {control} tests [ 477.092067][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.116687][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.265764][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 477.283422][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 477.528081][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 477.573983][ T10] usb 3-1: no configurations [ 477.650073][ T10] usb 3-1: can't read configurations, error -22 [ 477.876534][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 478.116368][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 478.192192][ T10] usb 3-1: no configurations [ 478.242971][ T10] usb 3-1: can't read configurations, error -22 [ 478.313633][ T10] usb usb3-port1: attempt power cycle [ 478.355731][ T5866] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 478.586839][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 478.638407][ T5866] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 478.697979][ T5866] usb 1-1: config 0 has no interface number 0 [ 478.705812][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 478.770280][ T5866] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.792781][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 478.833280][ T10] usb 3-1: no configurations [ 478.891531][ T10] usb 3-1: can't read configurations, error -22 [ 478.898721][ T5866] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 478.969211][ T5900] usb 4-1: USB disconnect, device number 24 [ 479.004525][ T5866] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.186123][ T5866] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 479.199334][ T5866] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 479.214123][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.235768][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 479.259013][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 479.266927][ T10] usb 3-1: no configurations [ 479.271579][ T10] usb 3-1: can't read configurations, error -22 [ 479.301962][T10694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.209576][ T5866] usb 1-1: config 0 descriptor?? [ 480.217237][ T10] usb usb3-port1: unable to enumerate USB device [ 480.283811][ T5866] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 481.061518][T10699] xt_hashlimit: max too large, truncated to 1048576 [ 481.110955][ T5810] usb 1-1: USB disconnect, device number 31 [ 481.313367][ T5810] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 481.390819][ T30] audit: type=1400 audit(1748578434.432:825): avc: denied { map } for pid=10698 comm="syz.3.1330" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 482.427994][T10706] new mount options do not match the existing superblock, will be ignored [ 482.638039][ T30] audit: type=1400 audit(1748578434.432:826): avc: denied { execute } for pid=10698 comm="syz.3.1330" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 482.669632][T10708] veth0: entered promiscuous mode [ 482.880772][T10700] veth0: left promiscuous mode [ 483.631949][T10727] FAULT_INJECTION: forcing a failure. [ 483.631949][T10727] name failslab, interval 1, probability 0, space 0, times 0 [ 483.729746][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 484.099736][T10727] CPU: 0 UID: 0 PID: 10727 Comm: syz.0.1336 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 484.099765][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.099775][T10727] Call Trace: [ 484.099781][T10727] [ 484.099788][T10727] dump_stack_lvl+0x16c/0x1f0 [ 484.099812][T10727] should_fail_ex+0x512/0x640 [ 484.099837][T10727] should_failslab+0xc2/0x120 [ 484.099856][T10727] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 484.099884][T10727] ? skb_clone+0x190/0x3f0 [ 484.099907][T10727] skb_clone+0x190/0x3f0 [ 484.099925][T10727] netlink_deliver_tap+0xabd/0xd30 [ 484.099952][T10727] netlink_unicast+0x5df/0x7f0 [ 484.099976][T10727] ? __pfx_netlink_unicast+0x10/0x10 [ 484.100006][T10727] netlink_sendmsg+0x8d1/0xdd0 [ 484.100033][T10727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.100065][T10727] ____sys_sendmsg+0xa98/0xc70 [ 484.100088][T10727] ? copy_msghdr_from_user+0x10a/0x160 [ 484.100106][T10727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.100140][T10727] ___sys_sendmsg+0x134/0x1d0 [ 484.100160][T10727] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.100175][T10727] ? __lock_acquire+0x622/0x1c90 [ 484.100226][T10727] __sys_sendmsg+0x16d/0x220 [ 484.100243][T10727] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.100277][T10727] do_syscall_64+0xcd/0x4c0 [ 484.100297][T10727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.100313][T10727] RIP: 0033:0x7f59e378e969 [ 484.100327][T10727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.100344][T10727] RSP: 002b:00007f59e15f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.100361][T10727] RAX: ffffffffffffffda RBX: 00007f59e39b5fa0 RCX: 00007f59e378e969 [ 484.100373][T10727] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 484.100383][T10727] RBP: 00007f59e15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 484.100392][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.100402][T10727] R13: 0000000000000000 R14: 00007f59e39b5fa0 R15: 00007fff65f3c048 [ 484.100426][T10727] [ 484.664428][T10730] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 484.885631][ T30] audit: type=1400 audit(1748578437.872:827): avc: denied { mount } for pid=10729 comm="syz.3.1337" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 485.225619][ T5866] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 485.726000][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 486.167223][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 486.378758][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 486.890489][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.176658][ T10] usb 3-1: config 0 descriptor?? [ 487.185961][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 487.307816][ T5866] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 487.385350][ T10] gp8psk: usb in 128 operation failed. [ 487.392302][ T10] gp8psk: usb in 137 operation failed. [ 487.398052][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.409010][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 487.418223][ T5867] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 487.427164][ T10] usb 3-1: media controller created [ 487.450093][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.466134][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 487.476391][ T5866] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 487.484703][ T10] gp8psk_fe: Frontend attached [ 487.489575][ T5868] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 487.491910][T10768] 9pnet_fd: Insufficient options for proto=fd [ 487.497673][ T5866] usb 6-1: config 0 has no interface number 0 [ 487.510052][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 487.521310][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 487.530377][ T5866] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.550317][ T5866] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 487.562017][ T5867] usb 4-1: device descriptor read/64, error -71 [ 487.578485][ T5866] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.586695][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'. [ 487.599622][ T5866] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.613562][ T5866] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 487.623486][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.632077][ T10] gp8psk: usb in 138 operation failed. [ 487.637600][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 487.647180][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 487.657383][ T5866] usb 6-1: config 0 descriptor?? [ 487.663959][ T10] usb 3-1: USB disconnect, device number 42 [ 487.671295][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 487.695628][ T5866] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 487.706280][ T5868] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 487.715295][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.766295][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 487.777387][ T5868] usb 1-1: config 0 descriptor?? [ 487.835613][ T5867] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 487.845587][ T5900] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 487.975751][ T5867] usb 4-1: device descriptor read/64, error -71 [ 488.009621][ T5900] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 488.018290][ T5900] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 488.029120][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 488.039052][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 488.050003][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 488.062351][ T5900] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 488.071457][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 488.079467][ T5900] usb 2-1: Product: syz [ 488.083612][ T5900] usb 2-1: Manufacturer: syz [ 488.085863][ T5867] usb usb4-port1: attempt power cycle [ 488.095182][ T5900] cdc_wdm 2-1:1.0: skipping garbage [ 488.100434][ T5900] cdc_wdm 2-1:1.0: skipping garbage [ 488.107185][ T5900] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 488.113096][ T5900] cdc_wdm 2-1:1.0: Unknown control protocol [ 488.189846][ T5868] glorious 0003:258A:0036.000B: reserved main item tag 0xd [ 488.198066][ T5868] glorious 0003:258A:0036.000B: item fetching failed at offset 4/5 [ 488.206757][ T5868] glorious 0003:258A:0036.000B: probe with driver glorious failed with error -22 [ 488.300092][ T5868] usb 2-1: USB disconnect, device number 35 [ 488.506503][ T5867] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 488.619807][T10776] netlink: 'syz.0.1345': attribute type 39 has an invalid length. [ 488.748461][ T5867] usb 4-1: device descriptor read/8, error -71 [ 488.861501][ T5866] usb 1-1: USB disconnect, device number 33 [ 488.985723][ T5867] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 489.016266][ T5867] usb 4-1: device descriptor read/8, error -71 [ 489.127328][ T5867] usb usb4-port1: unable to enumerate USB device [ 489.191359][ T5900] usb 6-1: USB disconnect, device number 9 [ 489.303464][ T5900] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 489.438092][ T5866] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 489.656956][T10788] new mount options do not match the existing superblock, will be ignored [ 489.773752][T10792] bio_check_eod: 14 callbacks suppressed [ 489.773768][T10792] syz.0.1356: attempt to access beyond end of device [ 489.773768][T10792] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 489.799118][T10792] syz.0.1356: attempt to access beyond end of device [ 489.799118][T10792] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 489.813797][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 489.824169][T10792] syz.0.1356: attempt to access beyond end of device [ 489.824169][T10792] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 489.863034][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 489.873371][ T5868] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 489.892294][T10792] syz.0.1356: attempt to access beyond end of device [ 489.892294][T10792] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 489.909339][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 489.922823][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.969809][ T5866] usb 3-1: config 0 has no interfaces? [ 489.979928][T10792] syz.0.1356: attempt to access beyond end of device [ 489.979928][T10792] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 489.993665][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.005710][T10792] syz.0.1356: attempt to access beyond end of device [ 490.005710][T10792] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 490.020145][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.053504][T10792] syz.0.1356: attempt to access beyond end of device [ 490.053504][T10792] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 490.068586][T10792] syz.0.1356: attempt to access beyond end of device [ 490.068586][T10792] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 490.083739][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.094252][T10792] syz.0.1356: attempt to access beyond end of device [ 490.094252][T10792] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 490.107828][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.124006][T10792] syz.0.1356: attempt to access beyond end of device [ 490.124006][T10792] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 490.140271][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.152591][T10792] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.162469][T10792] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 490.184483][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.195314][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.225119][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.238678][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.255410][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.266023][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 490.274449][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.296825][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.310225][T10793] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.320096][T10793] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 490.369943][ T5866] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 490.417472][ T5868] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 490.429241][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.437573][ T5868] usb 2-1: config 179 has no interface number 0 [ 490.444102][ T5866] usb 3-1: Product: syz [ 490.448600][ T5868] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 490.459745][ T5866] usb 3-1: Manufacturer: syz [ 490.469945][ T5866] usb 3-1: SerialNumber: syz [ 490.480698][ T5868] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 490.612453][ T5866] usb 3-1: config 0 descriptor?? [ 490.628330][ T5868] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 490.641284][ T5868] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 490.675635][ T5868] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 490.716960][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.778974][T10785] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 490.813552][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1360'. [ 491.139886][T10807] new mount options do not match the existing superblock, will be ignored [ 491.198619][ T30] audit: type=1400 audit(1748578444.272:828): avc: denied { read } for pid=10803 comm="syz.5.1360" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 491.232843][ T5134] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 491.330677][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 491.446915][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'. [ 491.595310][ T30] audit: type=1400 audit(1748578444.662:829): avc: denied { getopt } for pid=10814 comm="syz.3.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 491.671949][T10819] loop6: detected capacity change from 0 to 524287999 [ 491.684715][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.718278][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.729123][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.738107][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.747996][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.756278][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.764494][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.772782][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.780912][T10819] ldm_validate_partition_table(): Disk read failed. [ 491.797992][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.806827][T10819] Buffer I/O error on dev loop6, logical block 0, async page read [ 491.815402][T10819] Dev loop6: unable to read RDB block 0 [ 491.824481][T10819] loop6: unable to read partition table [ 491.831513][T10819] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 492.215332][ T5868] usb 3-1: USB disconnect, device number 43 [ 492.498847][T10825] veth0: entered promiscuous mode [ 493.100363][T10822] veth0: left promiscuous mode [ 493.225757][ T5827] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 493.305732][T10805] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 493.318564][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.786207][ T30] audit: type=1400 audit(1748578446.542:830): avc: denied { execute } for pid=10826 comm="syz.2.1365" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 493.812820][T10805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.819785][ T30] audit: type=1400 audit(1748578446.652:831): avc: denied { create } for pid=10826 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 493.823254][T10805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.840626][ T30] audit: type=1400 audit(1748578446.732:832): avc: denied { sys_admin } for pid=10826 comm="syz.2.1365" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 493.848692][T10805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.874264][T10805] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 493.880808][T10805] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 493.898426][T10805] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 493.944792][ T5900] usb 2-1: USB disconnect, device number 36 [ 493.944866][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 493.959317][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 493.996155][ T30] audit: type=1400 audit(1748578447.062:833): avc: denied { bind } for pid=10832 comm="syz.1.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 494.225676][ T5810] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 494.720473][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 494.722853][T10840] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1368'. [ 495.301728][T10850] new mount options do not match the existing superblock, will be ignored [ 495.425176][ T5134] Bluetooth: hci2: command 0x0c1a tx timeout [ 495.732135][T10856] new mount options do not match the existing superblock, will be ignored [ 495.911240][ T5134] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.919290][ T5134] Bluetooth: hci4: command 0x0c1a tx timeout [ 495.942090][ T30] audit: type=1800 audit(1748578449.002:834): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1369" name="/" dev="9p" ino=2 res=0 errno=0 [ 495.968433][ T5134] Bluetooth: hci5: command 0x206a tx timeout [ 496.159446][ T30] audit: type=1400 audit(1748578449.232:835): avc: denied { append } for pid=10859 comm="syz.3.1375" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 497.195648][ T5810] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 497.328876][ T30] audit: type=1400 audit(1748578450.402:836): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 497.445555][ T30] audit: type=1400 audit(1748578450.512:837): avc: denied { map } for pid=10881 comm="syz.0.1383" path="socket:[27345]" dev="sockfs" ino=27345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 497.469323][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 497.469471][ T30] audit: type=1400 audit(1748578450.512:838): avc: denied { read } for pid=10881 comm="syz.0.1383" path="socket:[27345]" dev="sockfs" ino=27345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 497.483999][ T5810] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 497.513705][ T30] audit: type=1400 audit(1748578450.582:839): avc: denied { getopt } for pid=10881 comm="syz.0.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 497.543715][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.563995][ T5810] usb 3-1: Product: syz [ 497.568253][ T5810] usb 3-1: Manufacturer: syz [ 497.580963][ T5810] usb 3-1: SerialNumber: syz [ 497.597331][ T5810] usb 3-1: config 0 descriptor?? [ 497.606373][ T5810] hub 3-1:0.0: bad descriptor, ignoring hub [ 497.622428][ T5810] hub 3-1:0.0: probe with driver hub failed with error -5 [ 497.731452][ T5810] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 498.347506][ T5827] Bluetooth: hci5: command 0x206a tx timeout [ 498.354692][ T5810] gspca_vc032x: reg_w err -110 [ 498.361735][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 498.370819][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.377745][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.384125][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.389686][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.395018][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.400418][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.406519][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.411890][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.417300][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.422646][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.428116][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.433478][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.438926][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.444251][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.449627][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.454971][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.559427][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.564752][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.570217][ T5810] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.575529][ T5810] gspca_vc032x: Unknown sensor... [ 498.581584][ T5810] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 499.014767][T10900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.375868][ T5868] usb 3-1: USB disconnect, device number 44 [ 499.806029][ T5868] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 500.187117][ T30] audit: type=1400 audit(1748578453.162:840): avc: denied { bind } for pid=10908 comm="syz.5.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.269353][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 500.279843][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.312698][ T5868] usb 1-1: config 0 descriptor?? [ 500.324520][ T5868] usbtest 1-1:0.0: Linux user mode test driver [ 500.340364][ T5868] usbtest 1-1:0.0: low-speed {control} tests [ 500.426612][ T5827] Bluetooth: hci5: command 0x206a tx timeout [ 500.489182][T10917] xt_cgroup: invalid path, errno=-2 [ 500.526675][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.539207][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.610379][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 501.576190][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.582583][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.591057][T10927] openvswitch: netlink: Multiple metadata blocks provided [ 501.640959][ T5868] usb 1-1: USB disconnect, device number 35 [ 501.844882][T10928] input: syz1 as /devices/virtual/input/input15 [ 501.855584][ T5810] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 501.867137][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 502.007637][T10931] binder: 10930:10931 ioctl c0306201 200000000540 returned -22 [ 502.017206][ T5810] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 502.028936][T10931] binder: 10930:10931 ioctl c0306201 200000000640 returned -22 [ 502.037146][ T5810] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 502.055591][ T5810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 502.079720][T10926] veth0: entered promiscuous mode [ 502.095698][ T5810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 502.120762][ T5810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 502.145879][ T5810] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 502.155302][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 502.164676][ T5810] usb 3-1: Product: syz [ 502.169095][ T5810] usb 3-1: Manufacturer: syz [ 502.196592][ T5810] cdc_wdm 3-1:1.0: skipping garbage [ 502.201891][ T5810] cdc_wdm 3-1:1.0: skipping garbage [ 502.208614][ T5810] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 502.224226][ T5810] cdc_wdm 3-1:1.0: Unknown control protocol [ 502.461582][ T5810] usb 3-1: USB disconnect, device number 45 [ 502.505636][ T5827] Bluetooth: hci5: command 0x206a tx timeout [ 502.602378][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 502.699395][T10945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.119142][T10921] veth0: left promiscuous mode [ 503.765590][T10957] openvswitch: netlink: Multiple metadata blocks provided [ 504.091761][T10960] bio_check_eod: 14 callbacks suppressed [ 504.091773][T10960] syz.3.1408: attempt to access beyond end of device [ 504.091773][T10960] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 504.114944][T10960] syz.3.1408: attempt to access beyond end of device [ 504.114944][T10960] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 504.130061][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.140470][T10960] syz.3.1408: attempt to access beyond end of device [ 504.140470][T10960] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 504.160868][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.171984][T10960] syz.3.1408: attempt to access beyond end of device [ 504.171984][T10960] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 504.186692][T10960] syz.3.1408: attempt to access beyond end of device [ 504.186692][T10960] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 504.202850][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.213677][T10960] syz.3.1408: attempt to access beyond end of device [ 504.213677][T10960] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 504.238681][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.251245][T10960] syz.3.1408: attempt to access beyond end of device [ 504.251245][T10960] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 504.265093][T10960] syz.3.1408: attempt to access beyond end of device [ 504.265093][T10960] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 504.278583][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.289568][T10960] syz.3.1408: attempt to access beyond end of device [ 504.289568][T10960] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 504.303125][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.321170][T10960] syz.3.1408: attempt to access beyond end of device [ 504.321170][T10960] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 504.335798][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.346599][T10960] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.356172][T10960] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 504.380283][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.393540][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.417280][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.429501][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.441236][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.450988][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.461447][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 504.471295][T10961] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 504.480892][T10961] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 505.345667][ T5868] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 505.366912][T10976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 505.527224][ T5868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 505.916770][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.942048][ T5868] usb 6-1: config 0 descriptor?? [ 505.948959][ T5868] usbtest 6-1:0.0: Linux user mode test driver [ 505.955737][ T5868] usbtest 6-1:0.0: low-speed {control} tests [ 506.154010][T10969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.177244][T10969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.272225][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1410'. [ 507.702078][ T31] INFO: task syz.4.890:9117 blocked for more than 143 seconds. [ 507.833787][ T31] Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 [ 508.135035][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 508.235955][ T10] usb 6-1: USB disconnect, device number 10 [ 508.249884][ T31] task:syz.4.890 state:D stack:28344 pid:9117 tgid:9106 ppid:5814 task_flags:0x400740 flags:0x00004004 [ 508.263582][ T31] Call Trace: [ 508.271973][ T31] [ 508.274964][ T31] __schedule+0x116a/0x5de0 [ 508.279714][ T31] ? __lock_acquire+0x622/0x1c90 [ 508.284847][ T31] ? __pfx___schedule+0x10/0x10 [ 508.292789][ T31] ? find_held_lock+0x2b/0x80 [ 508.297554][ T31] ? schedule+0x2d7/0x3a0 [ 508.301935][ T31] schedule+0xe7/0x3a0 [ 508.309970][ T31] schedule_timeout+0x257/0x290 [ 508.314883][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 508.320348][ T31] ? rcu_is_watching+0x12/0xc0 [ 508.325154][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 508.333502][ T31] __wait_for_common+0x2ff/0x4e0 [ 508.338647][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 508.344076][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 508.352635][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 508.360316][ T31] wait_for_completion_state+0x1c/0x40 [ 508.368929][ T31] do_coredump+0x8fa/0x4f10 [ 508.373496][ T31] ? lock_acquire+0x100/0x350 [ 508.378839][ T31] ? __pfx_do_coredump+0x10/0x10 [ 508.383838][ T31] ? find_held_lock+0x2b/0x80 [ 508.388629][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 508.393815][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 508.401567][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 508.406778][ T31] ? kernel_text_address+0x8d/0x100 [ 508.412780][ T31] ? __kernel_text_address+0xd/0x40 [ 508.418123][ T31] ? unwind_get_return_address+0x59/0xa0 [ 508.423779][ T31] ? arch_stack_walk+0xa6/0x100 [ 508.428682][ T31] ? stack_depot_save_flags+0x28/0xa40 [ 508.434130][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 508.439069][ T31] ? kasan_save_stack+0x42/0x60 [ 508.443914][ T31] ? kasan_save_stack+0x33/0x60 [ 508.449141][ T31] ? kasan_save_track+0x14/0x30 [ 508.453984][ T31] ? kasan_save_free_info+0x3b/0x60 [ 508.459199][ T31] ? __kasan_slab_free+0x51/0x70 [ 508.464128][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 508.469157][ T31] ? __sigqueue_free+0xba/0x2a0 [ 508.474012][ T31] ? get_signal+0xcba/0x26d0 [ 508.478618][ T31] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 508.484355][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 508.489976][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 508.495970][ T31] ? rcu_is_watching+0x12/0xc0 [ 508.500726][ T31] get_signal+0x22e3/0x26d0 [ 508.505213][ T31] ? __pfx_get_signal+0x10/0x10 [ 508.510486][ T5148] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 508.519037][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 508.524640][ T31] ? __pfx___seccomp_filter+0x10/0x10 [ 508.530333][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 508.536525][ T31] exit_to_user_mode_loop+0x84/0x110 [ 508.541813][ T31] do_syscall_64+0x3f6/0x4c0 [ 508.546395][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.552266][ T31] RIP: 0033:0x7f700538e969 [ 508.556823][ T31] RSP: 002b:00007f70061f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 508.565234][ T31] RAX: 00000000000000ca RBX: 00007f70055b6168 RCX: 00007f700538e969 [ 508.573202][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f70055b616c [ 508.581177][ T31] RBP: 00007f70055b6160 R08: 00007f7006237000 R09: 0000000000000000 [ 508.589160][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70055b616c [ 508.597576][ T31] R13: 0000000000000000 R14: 00007ffd04c50a40 R15: 00007ffd04c50b28 [ 508.605568][ T31] [ 508.608588][ T31] [ 508.608588][ T31] Showing all locks held in the system: [ 508.617075][ T31] 3 locks held by kworker/u8:1/13: [ 508.622193][ T31] #0: ffff8880b843bd18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 508.632202][ T31] #1: ffff8880b8424048 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 508.655532][ T31] #2: ffff888037778768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x550 [ 508.674469][ T31] 1 lock held by khungtaskd/31: [ 508.685291][ T31] #0: ffffffff8e3c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 508.699569][ T5148] usb 1-1: Using ep0 maxpacket: 8 [ 508.711088][ T31] 3 locks held by kworker/1:2/5148: [ 508.722071][ T5148] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 508.725587][ T31] 2 locks held by getty/5571: [ 508.732709][ T5148] usb 1-1: config 0 has no interface number 0 [ 508.745027][ T5148] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.755887][ T5148] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 508.758843][ T31] #0: [ 508.767431][ T5148] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 508.767466][ T5148] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.767505][ T5148] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 508.767525][ T5148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.769346][ T5148] usb 1-1: config 0 descriptor?? [ 508.804192][ T31] ffff8880328dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 508.834446][ T5148] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 508.839625][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 508.857267][ T31] 1 lock held by syz.3.1414/10984: [ 508.862357][ T31] #0: ffffffff8e3cfc40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 508.872359][ T31] [ 508.874710][ T31] ============================================= [ 508.874710][ T31] [ 508.884767][ T31] NMI backtrace for cpu 1 [ 508.884777][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 508.884790][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.884797][ T31] Call Trace: [ 508.884800][ T31] [ 508.884804][ T31] dump_stack_lvl+0x116/0x1f0 [ 508.884820][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 508.884837][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 508.884850][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 508.884867][ T31] watchdog+0xf70/0x12c0 [ 508.884885][ T31] ? __pfx_watchdog+0x10/0x10 [ 508.884899][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.884912][ T31] ? __kthread_parkme+0x19e/0x250 [ 508.884925][ T31] ? __pfx_watchdog+0x10/0x10 [ 508.884940][ T31] kthread+0x3c2/0x780 [ 508.884953][ T31] ? __pfx_kthread+0x10/0x10 [ 508.884968][ T31] ? rcu_is_watching+0x12/0xc0 [ 508.884978][ T31] ? __pfx_kthread+0x10/0x10 [ 508.884992][ T31] ret_from_fork+0x5d4/0x6f0 [ 508.885003][ T31] ? __pfx_kthread+0x10/0x10 [ 508.885017][ T31] ret_from_fork_asm+0x1a/0x30 [ 508.885034][ T31] [ 508.885038][ T31] Sending NMI from CPU 1 to CPUs 0: [ 509.006237][ C0] NMI backtrace for cpu 0 [ 509.006250][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 509.006266][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.006275][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 509.006293][ C0] Code: 93 55 02 e9 53 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 50 0e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 509.006305][ C0] RSP: 0018:ffffffff8e007e08 EFLAGS: 000002c6 [ 509.006317][ C0] RAX: 00000000027ea061 RBX: 0000000000000000 RCX: ffffffff8b7bb449 [ 509.006326][ C0] RDX: 0000000000000000 RSI: ffffffff8dc0590b RDI: ffffffff8bf52ec0 [ 509.006335][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed101708663d [ 509.006343][ C0] R10: ffff8880b84331eb R11: 0000000000000001 R12: 0000000000000000 [ 509.006351][ C0] R13: ffffffff8e097740 R14: ffffffff90878750 R15: 0000000000000000 [ 509.006360][ C0] FS: 0000000000000000(0000) GS:ffff888124970000(0000) knlGS:0000000000000000 [ 509.006377][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.006386][ C0] CR2: 00007f9714380178 CR3: 0000000076cdf000 CR4: 00000000003526f0 [ 509.006394][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.006402][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.006410][ C0] Call Trace: [ 509.006414][ C0] [ 509.006418][ C0] default_idle+0x13/0x20 [ 509.006435][ C0] default_idle_call+0x6d/0xb0 [ 509.006450][ C0] do_idle+0x391/0x510 [ 509.006463][ C0] ? __pfx_do_idle+0x10/0x10 [ 509.006475][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 509.006491][ C0] cpu_startup_entry+0x4f/0x60 [ 509.006503][ C0] rest_init+0x16b/0x2b0 [ 509.006518][ C0] ? acpi_subsystem_init+0x133/0x180 [ 509.006532][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 509.006549][ C0] start_kernel+0x3e9/0x4d0 [ 509.006565][ C0] x86_64_start_reservations+0x18/0x30 [ 509.006580][ C0] x86_64_start_kernel+0x130/0x190 [ 509.006596][ C0] common_startup_64+0x13e/0x148 [ 509.006617][ C0] [ 509.007356][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 509.221478][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 509.232930][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.242973][ T31] Call Trace: [ 509.246240][ T31] [ 509.249157][ T31] dump_stack_lvl+0x3d/0x1f0 [ 509.253741][ T31] panic+0x71c/0x800 [ 509.257624][ T31] ? __pfx_panic+0x10/0x10 [ 509.262027][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 509.267393][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 509.273361][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 509.278725][ T31] ? watchdog+0xdda/0x12c0 [ 509.283135][ T31] ? watchdog+0xdcd/0x12c0 [ 509.287552][ T31] watchdog+0xdeb/0x12c0 [ 509.291798][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.296471][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.301673][ T31] ? __kthread_parkme+0x19e/0x250 [ 509.306694][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.311366][ T31] kthread+0x3c2/0x780 [ 509.315425][ T31] ? __pfx_kthread+0x10/0x10 [ 509.320004][ T31] ? rcu_is_watching+0x12/0xc0 [ 509.324751][ T31] ? __pfx_kthread+0x10/0x10 [ 509.329332][ T31] ret_from_fork+0x5d4/0x6f0 [ 509.333910][ T31] ? __pfx_kthread+0x10/0x10 [ 509.338490][ T31] ret_from_fork_asm+0x1a/0x30 [ 509.343252][ T31] [ 509.346444][ T31] Kernel Offset: disabled [ 509.350748][ T31] Rebooting in 86400 seconds..