last executing test programs: 2m42.018934029s ago: executing program 2 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00400000000000001c0012800b000100000100010000001400030067656e65766531000000000000000000"], 0x50}}, 0x2040000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x0, 0x0) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9801) (async) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000000)={0xd5c70000, 0x10000}) 2m41.490563391s ago: executing program 2 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000060010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2m40.494387193s ago: executing program 2 (id=837): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x5, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) syz_emit_ethernet(0x18c, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x3, 0x6, "627cce", 0x156, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, {[@dstopts={0x0, 0xf, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x2, 0x0, "07bcc0d87f23d7d53e40b28c301e9f8b9dfc1f8a73af8858a2958340147de02db576f963"}, @ra={0x5, 0x2, 0x9}]}, @fragment={0x89, 0x0, 0x8, 0x1, 0x0, 0x0, 0x65}, @fragment={0x84, 0x0, 0xfe, 0x1, 0x0, 0x8, 0x65}, @fragment={0x2c, 0x0, 0x3, 0x1, 0x0, 0x14, 0x66}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x8, 0xf, 0x0, 0x3, {[@window={0x3, 0x3, 0x3}]}}, {"e0cfe102aad3ee06671c764808907df2898df678e6b9e59b78ed3d10200570e09a43f7899a93028682d4dfd31cde566073218a6bb9a7229b8e326d182293fa93655ffb2e8bb9e4c5a6fa9dca9a3d3c35c7abdb0edff633b87f658392ffb09a240345391e610524ef3e998a708055f171a65804ba86411c4bd141d80419da79bf672423813d43c3e79647b653699c47b47713110b6fc227a675a69407b421"}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\a\x00'/13], 0x48) 2m37.939257127s ago: executing program 2 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000012c0)=0x0, &(0x7f00000005c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getxattr(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004840) syz_open_procfs(0x0, &(0x7f0000000240)='net/udplite6\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0xbd, 0x4) iopl(0x3) mlockall(0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x400003a) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 2m37.358759677s ago: executing program 2 (id=848): creat(&(0x7f0000000b00)='./file0\x00', 0xecf86c37d5304970) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x338, 0x3a8, 0x3a8, 0x338, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x0, 0x19}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1, @mcast2, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 'dvmrp0\x00', 'sit0\x00', {}, {0xff}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'rose0\x00', {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) truncate(&(0x7f0000000240)='./file0\x00', 0x6) 2m37.078058761s ago: executing program 2 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a312536331c2b", 0x4c, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0xc23, 0x80) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000180)) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f00000002c0)=""/30, 0x1e}], 0x2}, 0x3}, {{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/179, 0xb3}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/215, 0xd7}], 0x5, &(0x7f0000000a80)=""/119, 0x77}, 0x2}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/101, 0x65}, {&(0x7f00000005c0)=""/56, 0x38}], 0x3, &(0x7f0000000bc0)=""/77, 0x4d}, 0x4}, {{&(0x7f0000000c40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003500)=[{&(0x7f0000000cc0)=""/66, 0x42}, {&(0x7f0000000d40)=""/193, 0xc1}, {&(0x7f0000000e40)=""/58, 0x3a}, {&(0x7f0000002380)=""/139, 0x8b}, {&(0x7f0000000e80)=""/22, 0x16}, {&(0x7f0000002440)=""/141, 0x8d}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x7, &(0x7f0000004180)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000003580)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/177, 0xb1}, {&(0x7f00000036c0)=""/72, 0x48}], 0x2, &(0x7f0000003780)=""/115, 0x73}, 0x9}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/106, 0x6a}, {&(0x7f0000003980)=""/113, 0x71}, {&(0x7f0000003a00)=""/82, 0x52}, {&(0x7f0000003a80)=""/70, 0x46}], 0x5, &(0x7f0000003b80)=""/255, 0xff}, 0x6}, {{&(0x7f0000003c80)=@x25={0x9, @remote}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003d00)=""/187, 0xbb}, {&(0x7f0000003dc0)=""/5, 0x5}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/146, 0x92}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/138, 0x8a}, {&(0x7f0000003f80)=""/239, 0xef}], 0x7, &(0x7f0000007180)=""/115, 0x73}, 0x3}, {{&(0x7f0000007200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007540)=[{&(0x7f0000004100)=""/31, 0x1f}, {&(0x7f0000007280)=""/226, 0xe2}, {&(0x7f0000007380)=""/177, 0xb1}, {&(0x7f0000007440)=""/210, 0xd2}], 0x4, &(0x7f0000007580)=""/185, 0xb9}, 0x1}, {{&(0x7f0000007640)=@tipc=@name, 0x80, &(0x7f0000007780)=[{&(0x7f00000076c0)=""/39, 0x27}, {&(0x7f0000007700)=""/95, 0x5f}], 0x2, &(0x7f00000077c0)=""/4096, 0x1000}}], 0x9, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)=';', 0x1}], 0x2}], 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x248, 0x5c, 0x160, 0x0, 0x3e0, 0x358, 0x228, 0x25a, 0x358, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @remote, [], [], 'veth0_to_batadv\x00', 'batadv_slave_0\x00'}, 0x5002, 0x208, 0x248, 0x52020000, {0x0, 0x6802000000000000}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x10, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @local, @private1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @empty, @rand_addr=' \x01\x00']}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@dev, @empty, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x800) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000280)={0x3, 0x5, 0x1}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) ioctl$VIDIOC_G_FBUF(r8, 0x8030560a, &(0x7f00000000c0)={0xc3, 0x2, &(0x7f0000000200)="f62c9646f8a88baa22c31ddf93fc304ffa3680ba7ec926ff75a060fba46aaf649a751954bb8ab83cb9b4273ead33428bdd57d8089b961b48f1758e5b4d73de7d5bfc568cfb8dc12b2556e3a68463404cbc990bd1ab2195f2e0879a3b42dbeba2ce7ca26dc563f01a58d4463960a12b25", {0x2, 0x1, 0x3132564e, 0x6, 0x3, 0x5, 0x4, 0xc7b}}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007b01"]) 2m21.499998324s ago: executing program 32 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a312536331c2b", 0x4c, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0xc23, 0x80) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000180)) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f00000002c0)=""/30, 0x1e}], 0x2}, 0x3}, {{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/179, 0xb3}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/215, 0xd7}], 0x5, &(0x7f0000000a80)=""/119, 0x77}, 0x2}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/101, 0x65}, {&(0x7f00000005c0)=""/56, 0x38}], 0x3, &(0x7f0000000bc0)=""/77, 0x4d}, 0x4}, {{&(0x7f0000000c40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003500)=[{&(0x7f0000000cc0)=""/66, 0x42}, {&(0x7f0000000d40)=""/193, 0xc1}, {&(0x7f0000000e40)=""/58, 0x3a}, {&(0x7f0000002380)=""/139, 0x8b}, {&(0x7f0000000e80)=""/22, 0x16}, {&(0x7f0000002440)=""/141, 0x8d}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x7, &(0x7f0000004180)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000003580)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/177, 0xb1}, {&(0x7f00000036c0)=""/72, 0x48}], 0x2, &(0x7f0000003780)=""/115, 0x73}, 0x9}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/106, 0x6a}, {&(0x7f0000003980)=""/113, 0x71}, {&(0x7f0000003a00)=""/82, 0x52}, {&(0x7f0000003a80)=""/70, 0x46}], 0x5, &(0x7f0000003b80)=""/255, 0xff}, 0x6}, {{&(0x7f0000003c80)=@x25={0x9, @remote}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003d00)=""/187, 0xbb}, {&(0x7f0000003dc0)=""/5, 0x5}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/146, 0x92}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/138, 0x8a}, {&(0x7f0000003f80)=""/239, 0xef}], 0x7, &(0x7f0000007180)=""/115, 0x73}, 0x3}, {{&(0x7f0000007200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007540)=[{&(0x7f0000004100)=""/31, 0x1f}, {&(0x7f0000007280)=""/226, 0xe2}, {&(0x7f0000007380)=""/177, 0xb1}, {&(0x7f0000007440)=""/210, 0xd2}], 0x4, &(0x7f0000007580)=""/185, 0xb9}, 0x1}, {{&(0x7f0000007640)=@tipc=@name, 0x80, &(0x7f0000007780)=[{&(0x7f00000076c0)=""/39, 0x27}, {&(0x7f0000007700)=""/95, 0x5f}], 0x2, &(0x7f00000077c0)=""/4096, 0x1000}}], 0x9, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)=';', 0x1}], 0x2}], 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x248, 0x5c, 0x160, 0x0, 0x3e0, 0x358, 0x228, 0x25a, 0x358, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @remote, [], [], 'veth0_to_batadv\x00', 'batadv_slave_0\x00'}, 0x5002, 0x208, 0x248, 0x52020000, {0x0, 0x6802000000000000}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x10, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @local, @private1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @empty, @rand_addr=' \x01\x00']}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@dev, @empty, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x800) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000280)={0x3, 0x5, 0x1}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) ioctl$VIDIOC_G_FBUF(r8, 0x8030560a, &(0x7f00000000c0)={0xc3, 0x2, &(0x7f0000000200)="f62c9646f8a88baa22c31ddf93fc304ffa3680ba7ec926ff75a060fba46aaf649a751954bb8ab83cb9b4273ead33428bdd57d8089b961b48f1758e5b4d73de7d5bfc568cfb8dc12b2556e3a68463404cbc990bd1ab2195f2e0879a3b42dbeba2ce7ca26dc563f01a58d4463960a12b25", {0x2, 0x1, 0x3132564e, 0x6, 0x3, 0x5, 0x4, 0xc7b}}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007b01"]) 14.523899521s ago: executing program 1 (id=1291): socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000005c0)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x100000001, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x5fa, 0x400, 0x2, {0x1, @pix_mp={0xcf6, 0x1c00, 0x32525942, 0x3, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7ffe0, 0x10001}, {0x2, 0xfffffffd}, {0x6, 0x5}, {0x9, 0x8}, {0x8, 0x10000}], 0x81, 0x5, 0x2, 0x1, 0x4}}, 0x7f}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0422"], 0x66) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @private}, 0x4}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f045}) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000300)) ppoll(&(0x7f0000000040)=[{r1, 0x80db}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) syz_io_uring_submit(0x0, 0x0, 0x0) 11.670461195s ago: executing program 0 (id=1298): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x181) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x4b, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, &(0x7f0000001300)={0x10, 0x2}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x24001004) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c000) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000001480)=""/197, 0xc5}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x10008000}}, 0x0, 0x2, 0x3, 0xfffffffd, 0x4}}, &(0x7f0000000100)=0xb0) read$FUSE(r8, &(0x7f0000004100)={0x2020}, 0x2020) 10.737979503s ago: executing program 0 (id=1300): r0 = socket$inet6(0xa, 0x3, 0x7) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x300, @in6=@loopback, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) 10.41808295s ago: executing program 0 (id=1302): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r3 = syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, 0x0) 10.321716861s ago: executing program 5 (id=1303): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xff, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) epoll_create1(0x80000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001140)=@req={0x6f, 0x10001, 0x5, 0x8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') accept4$unix(r7, 0x0, &(0x7f0000000180), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010027bd7000400000000a501480000000031600000014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 9.778160278s ago: executing program 1 (id=1304): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = socket(0x10, 0x3, 0xfffffffc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x9}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={r1, 0xbe, "51fd2cbf960494098ed4288341ed11131c23ec30c59eb204c1797b6dbd5accd156005dfdd5c3b85e59196bf1d9c283202b5ed3f13760d5ff2839d35d36474a6a4d9ee405843954d875d9a09ce6da510ceb80d8d7ee8c52d5a3cfbd022d0938a31561e58c9956228e2a29433cb6387da06410102b8462bcdfe5144c9cfecd96e8035074db015a333f97c409eb1274a60baa353a775e84fe5f85e8b1402dadbc54347e680871a34131e8248b661f805aff6df7cacf0665dd2930c4bf6ee9d7"}, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000010700000000000000000000181100001a7765796f787407b3c93a01c264bd5aef2334ad0a009ce86d0abe400a8abe84340c11ac801b3147b7866d038f82313a1387ef5dc7ac1a2da5da", @ANYRES64, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa201000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000958a0b0c11776a5b434244df91f551d38b7827845d40aa27a6d56190cb6f0961e59e40f4160280838cf88cb8e045f1d6b48f8693cb8cf5110cb9c5c78aeec68c5470702c4db7b2675d16791ef7698805084543d31529700f305df6bc07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 9.634627412s ago: executing program 0 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) (async) setpriority(0x2, 0x0, 0xe184) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) 8.612152908s ago: executing program 4 (id=1308): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x50}}, 0x0) 8.552932587s ago: executing program 5 (id=1309): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3512a0a634f8adae, 0x300) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000740)=ANY=[], 0x60) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev, 0x0, r6}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x441004e, r6}) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000b00000002"], 0x30}, 0x1, 0x11}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) 8.474745174s ago: executing program 4 (id=1310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4400}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 8.273209119s ago: executing program 1 (id=1312): syz_io_uring_setup(0xd1, &(0x7f00000005c0)={0x0, 0x8, 0x8, 0x1, 0x34f}, &(0x7f0000000040), &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03ef0000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x4a00000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x60c01, 0x89e6f601a18fb345) io_setup(0x7fff, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r5, &(0x7f0000000380)='j', 0x1, 0xd00}]) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r5, r3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.874298865s ago: executing program 0 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000001c00001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff}, 0x38) 6.873632918s ago: executing program 5 (id=1314): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="98ad2e40204cc2ac6faf2571d9bfdc37724b27cb6754ea", 0x17}, 0x1, 0x0, 0x0, 0x24000054}, 0x4) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = open(0x0, 0x8080, 0x40) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x16f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, r3, 0x0, &(0x7f0000000380)='./file1\x00'}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x24, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) sendmmsg$nfc_llcp(r3, &(0x7f0000000440)=[{&(0x7f0000000000)={0x27, r8, 0x1, 0x7, 0x28, 0xff, "ad3fbdec670d707d4a513d867f44ff6e5f9a6b9ba4630f84030fb0300a1a03b43a6eb20bfaefbd87432b356ee13b13758e314b25689487d536dfefcdd2786c", 0x1c}, 0x60, &(0x7f0000000800)=[{&(0x7f00000001c0)="87e2634a300d", 0x6}, {&(0x7f0000000500)="8c36060820ccc61dc14c8588d492cfbc81246c702f3d767e93c2a4819df8597ef49d40c7cb682973bcc4ee64de37ffab2e8c00c804cdbc35b4b0b692b721485033640f7649f37a08782bf98c329e04dbdc5d4e9faee0d20a9862fad8dda7585d764ccef7fb4f20666fca9d0b160d7475731f60d684892470c3d5cf1bb9bcd0fb9b5f5ea53b074bf979c0505ae0efae4e85738a2efe19b9763b9c37512e071875239f1b5fa19ec514e658e3f816a5d1649f018fbc04df", 0xb6}, {&(0x7f00000005c0)="00166552a96bcc269878e65d19c5bb76bca93ee95bc3aa307802f6f22d2ccbb062ff655d43486cddd7efade01bbeaac9e3b7de9083b9dcfec4c0e63fa43cfe0a67ffb24bcdf1fa67e2fb0ce385d583414bea67235e43b9a8d9d06f49cdfe5c9812d0d5e38aa37e16f421bb4cafeabe2cd6b7a706bbae1296169a1162da1f432a505099735ec7cb556134c3f1c9224e99e8cd551a0bf03e", 0x97}, {&(0x7f0000000340)="f011cbfd5d82ec", 0x7}, {&(0x7f0000000680)="180d3a3f44564f160c536be230791415ae7dd0deeda83966e468eb57bb09fe2860a51a690581ab03cb99b188fbe9d6ca990d54a3828a8453a54e51adccfcd78a4a87fb9e433744a429c670a9b4c8aaf27af24e561b13db49109d8b5caff5726036eff8eb1d470071a3e97e3627003681257e31b2b0ca7599bd0d0cd9e1a0fafe96461bf7557a1bf97a9bd073f6f25b6ece24cff32ea25c24bdf68e4f7b41b6f9e4373bf57ea13947eaefebab4925ec1a583e6e", 0xb3}, {&(0x7f00000003c0)="828b288443e2dcb7850c866dc8bdb88a017a64d0b29707c5dbcfd3482bc2412a", 0x20}, {&(0x7f0000000740)="c35f4d5d22dc0f9b428349760567e3db47a4685b24bf469320d439302b2da4f75104b2e419da02b5c27d75044828bcd8e9bfa90775fb7183d58e5fabb4868c8d8ae72e86b1170c6f2c726e1fb574a1905824af451fe736270bd3a66ace8578bf004e623f8ea1f712e940b9b2f9d477cdadc77ca6592f758f266359ede3e62476345ed3a48da5524a", 0x88}], 0x7, &(0x7f0000000880)={0x110, 0x107, 0x5, "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"}, 0x110, 0x24000805}], 0x1, 0x4084) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000034000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 6.705674015s ago: executing program 4 (id=1316): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e7000905", @ANYRES64], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="380000002d000100fcffffff0000000008001100", @ANYRES32], 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)={[{0x1, 0x4e00, "c7"}]}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0x105, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x6, &(0x7f0000000140)=""/6, 0x40f00, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x5, 0x9, 0x7}, {0x0, 0x2, 0x5}, {0x3, 0x4, 0x7, 0x6}, {0x3, 0x4, 0xb, 0xa}, {0x4, 0x4, 0x7}], 0x10, 0x12f, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x7, 0x10, 0x0, 0x926, {{0x34, 0x4, 0x3, 0x2b, 0xd0, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x10, 0xe1, 0x0, 0xb, [0x7ff, 0x9, 0x3]}, @ssrr={0x89, 0x23, 0xd0, [@loopback, @private=0xa010102, @broadcast, @local, @multicast1, @multicast2, @multicast1, @broadcast]}, @lsrr={0x83, 0xf, 0x45, [@multicast2, @private=0xa010100, @remote]}, @ssrr={0x89, 0xb, 0xa2, [@empty, @remote]}, @noop, @cipso={0x86, 0x4f, 0x1, [{0x5, 0xf, "d2e0b85bf5dfe703fa14aa40e9"}, {0x2, 0x7, "38d10e5a99"}, {0x2, 0x8, "9e14b8ff5812"}, {0x0, 0x8, "1747b1c005d7"}, {0x2, 0x11, "fe037abea3cdc2f3633896142cab25"}, {0x6, 0x12, "323ae51c6f52220584e446d41d2609cf"}]}, @rr={0x7, 0xf, 0x1c, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}]}, @noop, @ssrr={0x89, 0xf, 0x8c, [@rand_addr=0x64010101, @rand_addr=0x64010101, @local]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x59, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x8, @val=@target_btf_id=r4}, 0x14) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.561215648s ago: executing program 3 (id=1317): syz_io_uring_setup(0xd1, &(0x7f00000005c0)={0x0, 0x8, 0x8, 0x1, 0x350}, &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="22529c7f3b689ba7da31515ab05c390b0a585c27b9ee64bc91b64dcc00bf0314"], 0x1c}}, 0x2000c0c0) r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1000}], 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x7fff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x8, 0x96, 0xfffffff9, 0x101, 0x0, 0x102, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x0, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x9, 0x67, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0x19ea10f3, 0x3, 0x4, 0x5, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x409, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xd, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) 4.979031775s ago: executing program 0 (id=1318): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/3, 0x3, 0x0, 0x4, 0x9, 0x4, 0xc08}}, 0x120) (async) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/3, 0x3, 0x0, 0x4, 0x9, 0x4, 0xc08}}, 0x120) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2) read$FUSE(r0, &(0x7f0000006b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000010400)={0x7, 0x616, 0x7, 0xffffffff, 0x3, "972c700500141000000000002000052c707400"}) io_setup(0x6, &(0x7f0000001380)=0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x4, r4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r4}]) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x4, r4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r4}]) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000", @ANYRES16=r6, @ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000", @ANYRES16=r6, @ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0xc6b3, 0x101, 0x8000000000000000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f086", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f086", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x2, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 4.805469927s ago: executing program 3 (id=1319): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xff, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) epoll_create1(0x80000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001140)=@req={0x6f, 0x10001, 0x5, 0x8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) readv(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') accept4$unix(r7, 0x0, &(0x7f0000000180), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010027bd7000400000000a501480000000031600000014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 4.489866036s ago: executing program 3 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x0, 0x18c, 0x203, 0x348, 0x1903b100, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {0x80}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5be) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102398, 0x18ffe) fsmount(0xffffffffffffffff, 0x1, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff, 0x800800}, 0x7) 4.374502618s ago: executing program 3 (id=1321): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0xffffffffffffffff, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0xfeff000000000000}, 0x0) 4.052583582s ago: executing program 5 (id=1322): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x2, 0x4) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r2, 0x12) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x1, 0x4002) 3.768167909s ago: executing program 1 (id=1323): socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0xd804000000000000, 0x0, 0x0) 3.434521245s ago: executing program 5 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000700000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r4 = socket(0x2, 0x3, 0x6) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) 3.433800538s ago: executing program 4 (id=1325): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x2, 0x21839723, 0x4c47504a, 0x1, 0x4, [{0x8, 0xfffff024}, {0x80000000, 0x20080}, {0x800, 0x4}, {0x57b2965, 0x7}, {0xfdfffffe, 0x7ff}, {0xffff, 0x7}, {0x800, 0x3657480b}, {0x10000, 0x800}], 0xce, 0xf, 0x4, 0x1, 0x3}}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x800000, 0x2000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x3, 0x1, 0x0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, 0x0, &(0x7f0000000480), 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x4, 0x0) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x10, 0x3e5c02) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000b00)=0x6) io_submit(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000100)=0xf5) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r7, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r7, &(0x7f00000058c0)=[{{&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)=""/155, 0x9b}], 0x1}, 0x81}, {{&(0x7f0000000400)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000480)}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/179, 0xb3}, {&(0x7f0000000780)=""/7, 0x7}], 0x6}, 0xd7}, {{&(0x7f0000001f00)=@sco, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001f80)=""/102, 0x66}], 0x1, &(0x7f0000000dc0)=""/84, 0x54}, 0x2}, {{&(0x7f0000002080)=@tipc=@id, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002100)=""/254, 0xfe}, {&(0x7f0000002200)=""/205, 0xcd}, {&(0x7f0000002300)=""/159, 0x9f}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/180, 0xb4}, {&(0x7f0000003480)=""/145, 0x91}, {&(0x7f0000003540)=""/215, 0xd7}, {&(0x7f0000003640)=""/69, 0x45}, {&(0x7f00000036c0)=""/244, 0xf4}], 0x9, &(0x7f0000003880)=""/110, 0x6e}, 0x81}, {{&(0x7f0000003900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004e80), 0x0, &(0x7f0000004f00)=""/35, 0x23}, 0x1c00}, {{&(0x7f0000004f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004fc0)=""/239, 0xef}, {&(0x7f00000050c0)=""/255, 0xff}], 0x2, &(0x7f0000005200)=""/99, 0x63}}, {{&(0x7f0000005280)=@qipcrtr, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005300)=""/85, 0x55}, {&(0x7f0000005380)=""/202, 0xca}, {&(0x7f0000005480)=""/56, 0x38}, {&(0x7f00000054c0)=""/193, 0xc1}, {&(0x7f00000055c0)=""/22, 0x16}, {&(0x7f0000005600)=""/172, 0xac}, {&(0x7f00000056c0)=""/231, 0xe7}], 0x7, &(0x7f0000005840)=""/111, 0x6f}, 0x8}], 0x7, 0x0, 0x0) 3.351711099s ago: executing program 3 (id=1326): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) fanotify_init(0xf00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a26bd7000000000001400000008000300", @ANYRES32=r3, @ANYBLOB="0600360000200000ff"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4042000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xd}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESDEC=r6, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESDEC=r6, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16], 0x0) 2.02080988s ago: executing program 5 (id=1327): msgget(0x0, 0x2c4) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0xd0, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, &(0x7f0000000300)) 1.268770761s ago: executing program 1 (id=1328): open(&(0x7f0000000240)='./file0\x00', 0x2040, 0xd4) syz_emit_ethernet(0x173, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60000000013d3afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800000000ffff0000fdffff686d5326f3a58e46598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500001298f1a7da"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000680000000000069078ac1414bbac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000030374050ef16155890b749d75605c82f5e846b523fa5e2ebcfe0cf98978df117bafb900b90402080a0000000200000004fe04f989131238afe9b066f04c"], 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='attr/prev\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7f) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbb0cbbbbbbaaaaaaaaaabb0800e14e003000120020fc0290780000b01cf30700000000000001010e97fac69d4cebd7823dc8e1cb00009023b7cdaa05759de9520e9d05d01235968c87db85e8efe9847bfeca0c0d08edce9d828bb45ba5690f893b5b4fc6c10481860ff63c53c4ab3d429880c31e7127e92f553c04af00285a44ffabb0766f949054ff22837e63c1af8326fefe57778d5f00"], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r2, 0x26, 0x1, 0xffff7fe8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85, 0x3}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007", @ANYBLOB], 0x28}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732, 0x0, 0x0, 0xb00000000000000}) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='afs\x00', 0x10010, &(0x7f0000000480)='\x00') 910.990016ms ago: executing program 4 (id=1329): pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) 605.406661ms ago: executing program 4 (id=1330): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4}, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000300)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r2, 0x5, &(0x7f0000000100)=0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r5 = syz_init_net_socket$llc(0x1a, 0xae1bfb7980865b34, 0x0) getsockopt$llc_int(r5, 0x10c, 0x8, 0x0, &(0x7f0000003540)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_AIE_ON(r6, 0x7001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240017da5ee29d340a71040000000001000005000000000000000000000000000000000000009d8d96094ee681ccbcbfca1979c2bf47df0ea5a6e7498a440817ca0f748609d17a733657c126ef75a4045d8f8ed2ebc08ec5275e04d7ebec1ac4c90581295b"], 0x0, 0x40, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r7 = socket(0x10, 0x3, 0x2) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 70.784219ms ago: executing program 1 (id=1331): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, 0x0) 0s ago: executing program 3 (id=1332): socket$inet6_sctp(0xa, 0x5, 0x84) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2080) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8010800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0200f80d20"], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}, 0x1, 0x700000000000000}, 0x0) socket$inet6(0xa, 0x3, 0x7) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) kernel console output (not intermixed with test programs): T5862] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 291.275857][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 291.285041][ T5862] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 291.294433][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.302504][ T5862] usb 5-1: Product: syz [ 291.306776][ T5862] usb 5-1: Manufacturer: syz [ 291.311367][ T5862] usb 5-1: SerialNumber: syz [ 291.318148][ T5862] usb 5-1: config 0 descriptor?? [ 291.326425][ T5862] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 292.373427][ T9088] wg2: entered promiscuous mode [ 292.385584][ T9088] wg2: entered allmulticast mode [ 292.773838][ T24] usb 5-1: USB disconnect, device number 34 [ 294.638426][ T30] audit: type=1400 audit(2000000075.140:648): avc: denied { create } for pid=9130 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 295.136734][ T9131] lo speed is unknown, defaulting to 1000 [ 295.442227][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 296.015042][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 296.475217][ T9157] dummy0: entered promiscuous mode [ 296.546755][ T9157] erspan0: entered promiscuous mode [ 296.610916][ T9157] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 296.715748][ T3076] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 296.845131][ T9157] Cannot create hsr debugfs directory [ 296.882947][ T3076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.933652][ T3076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.997817][ T3076] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 297.079532][ T3076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.141411][ T3076] usb 2-1: config 0 descriptor?? [ 297.356127][ T9186] wg2: left promiscuous mode [ 297.361244][ T9186] wg2: left allmulticast mode [ 297.635213][ T5862] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 297.689883][ T9167] lo speed is unknown, defaulting to 1000 [ 297.855955][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 297.905864][ T5862] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 297.947082][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.978216][ T5862] usb 4-1: Product: syz [ 297.999187][ T5862] usb 4-1: Manufacturer: syz [ 298.019161][ T5862] usb 4-1: SerialNumber: syz [ 298.066632][ T5862] usb 4-1: config 0 descriptor?? [ 298.103358][ T5862] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 298.384339][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 298.529379][ T9214] input: syz1 as /devices/virtual/input/input15 [ 298.819235][ T9186] wg2: entered promiscuous mode [ 298.838843][ T9186] wg2: entered allmulticast mode [ 298.881308][ T873] usb 4-1: USB disconnect, device number 22 [ 298.998482][ T3076] usbhid 2-1:0.0: can't add hid device: -71 [ 299.020112][ T3076] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 299.046639][ T3076] usb 2-1: USB disconnect, device number 30 [ 300.505733][ T5893] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 300.685721][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 300.693943][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.705936][ T873] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 300.782481][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.896760][ T873] usb 4-1: Using ep0 maxpacket: 16 [ 300.906709][ T873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.925844][ T873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.960114][ T873] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 301.028436][ T873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.081636][ T873] usb 4-1: config 0 descriptor?? [ 301.193374][ T5893] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 301.235211][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.332747][ T5893] usb 1-1: config 0 descriptor?? [ 301.593571][ T873] playstation 0003:054C:05C4.0012: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 301.768704][ T873] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 18: -32 [ 301.794909][ T873] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 pairing info: -32 [ 301.819472][ T873] playstation 0003:054C:05C4.0012: Failed to get MAC address from DualShock4 [ 301.845149][ T873] playstation 0003:054C:05C4.0012: Failed to create dualshock4. [ 301.864851][ T5893] playstation 0003:054C:05C4.0013: hidraw1: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 301.944867][ T873] playstation 0003:054C:05C4.0012: probe with driver playstation failed with error -32 [ 302.032893][ T873] usb 4-1: USB disconnect, device number 23 [ 302.058778][ T5893] playstation 0003:054C:05C4.0013: Failed to retrieve feature with reportID 18: -32 [ 302.140873][ T5893] playstation 0003:054C:05C4.0013: Failed to retrieve DualShock4 pairing info: -32 [ 302.182861][ T5893] playstation 0003:054C:05C4.0013: Failed to get MAC address from DualShock4 [ 302.212266][ T5893] playstation 0003:054C:05C4.0013: Failed to create dualshock4. [ 302.430463][ T5893] playstation 0003:054C:05C4.0013: probe with driver playstation failed with error -32 [ 302.536589][ T5893] usb 1-1: USB disconnect, device number 36 [ 302.588659][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 302.631297][ T30] audit: type=1400 audit(2000000083.130:649): avc: denied { name_bind } for pid=9271 comm="syz.3.883" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 302.702668][ T30] audit: type=1400 audit(2000000083.130:650): avc: denied { ioctl } for pid=9271 comm="syz.3.883" path="socket:[19925]" dev="sockfs" ino=19925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 302.956140][ T5862] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 303.557996][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 303.591152][ T5862] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 303.603991][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.283680][ T9296] input: syz1 as /devices/virtual/input/input16 [ 304.293960][ T5862] usb 4-1: config 0 descriptor?? [ 304.392971][ T9293] tipc: Started in network mode [ 304.398073][ T9293] tipc: Node identity 7f000001, cluster identity 4711 [ 304.405134][ T9293] tipc: Enabling of bearer rejected, failed to enable media [ 304.903396][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.920850][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.833700][ T25] block nbd3: Possible stuck request ffff88802690e000: control (read@0,1024B). Runtime 30 seconds [ 305.845514][ T25] block nbd3: Possible stuck request ffff88802690e1c0: control (read@1024,1024B). Runtime 30 seconds [ 305.870342][ T25] block nbd3: Possible stuck request ffff88802690e380: control (read@2048,1024B). Runtime 30 seconds [ 306.142641][ T25] block nbd3: Possible stuck request ffff88802690e540: control (read@3072,1024B). Runtime 30 seconds [ 306.751319][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 306.779731][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 306.839930][ T5862] usb 4-1: USB disconnect, device number 24 [ 307.028516][ T30] audit: type=1400 audit(2000000087.510:651): avc: denied { connect } for pid=9319 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.094150][ T30] audit: type=1400 audit(2000000087.580:652): avc: denied { accept } for pid=9319 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.206469][ T9326] netlink: 248 bytes leftover after parsing attributes in process `syz.4.893'. [ 307.231675][ T9334] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.239511][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.893'. [ 307.380502][ T9337] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.477469][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.489523][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.501533][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.512287][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.522283][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.535733][ T30] audit: type=1400 audit(2000000088.030:653): avc: denied { mounton } for pid=9338 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 307.675493][ T9338] lo speed is unknown, defaulting to 1000 [ 307.702627][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 308.000626][ T9360] input: syz1 as /devices/virtual/input/input17 [ 308.859138][ T9363] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 309.446636][ T9338] chnl_net:caif_netlink_parms(): no params data found [ 309.575832][ T5830] Bluetooth: hci5: command tx timeout [ 309.826075][ T5862] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 309.904581][ T9402] bridge1: entered promiscuous mode [ 310.073211][ T9406] blk_print_req_error: 54 callbacks suppressed [ 310.073224][ T9406] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.088780][ T9406] buffer_io_error: 54 callbacks suppressed [ 310.088789][ T9406] Buffer I/O error on dev nbd4, logical block 0, async page read [ 310.102765][ T9406] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.111999][ T9406] Buffer I/O error on dev nbd4, logical block 1, async page read [ 310.119839][ T9406] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.129393][ T9406] Buffer I/O error on dev nbd4, logical block 2, async page read [ 310.137262][ T9406] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.146349][ T9406] Buffer I/O error on dev nbd4, logical block 3, async page read [ 310.154175][ T9406] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.163279][ T9406] Buffer I/O error on dev nbd4, logical block 0, async page read [ 310.171132][ T9406] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.180197][ T9406] Buffer I/O error on dev nbd4, logical block 1, async page read [ 310.188017][ T9406] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.197112][ T9406] Buffer I/O error on dev nbd4, logical block 2, async page read [ 310.204928][ T9406] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.214196][ T9406] Buffer I/O error on dev nbd4, logical block 3, async page read [ 310.222172][ T9406] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.232150][ T9406] Buffer I/O error on dev nbd4, logical block 0, async page read [ 310.240025][ T9406] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.249089][ T9406] Buffer I/O error on dev nbd4, logical block 1, async page read [ 310.258967][ T9406] ldm_validate_partition_table(): Disk read failed. [ 310.266579][ T9406] Dev nbd4: unable to read RDB block 0 [ 310.273147][ T9406] nbd4: unable to read partition table [ 310.278860][ T9406] befs: (nbd4): No write support. Marking filesystem read-only [ 310.286780][ T9406] befs: (nbd4): unable to read superblock [ 311.003464][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 311.225833][ T5893] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 311.490889][ T9431] input: syz1 as /devices/virtual/input/input18 [ 311.655924][ T5830] Bluetooth: hci5: command tx timeout [ 311.863355][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'. [ 311.892577][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.909439][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 311.924488][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.946192][ T5893] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 311.969802][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.995030][ T5893] usb 4-1: Product: syz [ 312.002669][ T5893] usb 4-1: Manufacturer: syz [ 312.012675][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.021267][ T5893] usb 4-1: SerialNumber: syz [ 312.044002][ T9338] bridge_slave_0: entered allmulticast mode [ 312.052618][ T5893] usb 4-1: config 0 descriptor?? [ 312.065894][ T9338] bridge_slave_0: entered promiscuous mode [ 312.074106][ T5893] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.089986][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.100352][ T5893] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 312.107851][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.115216][ T9338] bridge_slave_1: entered allmulticast mode [ 312.140469][ T9338] bridge_slave_1: entered promiscuous mode [ 312.225826][ T5862] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 312.381014][ T30] audit: type=1400 audit(2000000092.870:654): avc: denied { accept } for pid=9439 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 312.546641][ T5862] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 312.633524][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.654251][ T5862] usb 2-1: config 0 has no interface number 0 [ 312.681854][ T5862] usb 2-1: too many endpoints for config 0 interface 76 altsetting 133: 31, using maximum allowed: 30 [ 312.692806][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.765958][ T5862] usb 2-1: config 0 interface 76 altsetting 133 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.777690][ T5862] usb 2-1: config 0 interface 76 altsetting 133 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 312.791416][ T5862] usb 2-1: config 0 interface 76 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 312.805188][ T5862] usb 2-1: config 0 interface 76 has no altsetting 0 [ 312.813354][ T5862] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 312.822595][ T5893] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 312.828914][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=244, SerialNumber=0 [ 312.838092][ T5862] usb 2-1: Product: syz [ 312.839197][ T9338] team0: Port device team_slave_0 added [ 312.851233][ T5862] usb 2-1: config 0 descriptor?? [ 312.882475][ T9434] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 312.884568][ T9338] team0: Port device team_slave_1 added [ 312.932054][ T30] audit: type=1400 audit(2000000093.430:655): avc: denied { mount } for pid=9447 comm="syz.4.914" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 312.932342][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.963783][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.991142][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.002200][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 313.038927][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.051396][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.078836][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.110720][ T5862] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.76/input/input19 [ 313.178670][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 313.199698][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.234326][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.259677][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 313.278773][ C0] usbtouchscreen 2-1:0.76: usbtouch_irq - usb_submit_urb failed with result: -1 [ 313.497320][ T9338] hsr_slave_0: entered promiscuous mode [ 313.606031][ T9338] hsr_slave_1: entered promiscuous mode [ 313.612816][ T9338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.612938][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.655774][ T9338] Cannot create hsr debugfs directory [ 313.667293][ T5862] usb 2-1: USB disconnect, device number 31 [ 313.688396][ T24] usb 1-1: config 0 descriptor?? [ 313.735854][ T5830] Bluetooth: hci5: command tx timeout [ 313.876297][ T9338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.948776][ T9338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.961533][ T9338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.972314][ T9338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.614881][ T24] playstation 0003:054C:05C4.0014: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 314.636334][ T5893] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 314.644506][ T5893] em28xx 4-1:0.0: board has no eeprom [ 314.696259][ T24] playstation 0003:054C:05C4.0014: Failed to retrieve feature with reportID 18: -32 [ 314.715803][ T5893] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 314.725197][ T24] playstation 0003:054C:05C4.0014: Failed to retrieve DualShock4 pairing info: -32 [ 314.736857][ T5893] em28xx 4-1:0.0: dvb set to bulk mode. [ 314.742511][ T5862] em28xx 4-1:0.0: Binding DVB extension [ 314.758381][ T24] playstation 0003:054C:05C4.0014: Failed to get MAC address from DualShock4 [ 314.785766][ T24] playstation 0003:054C:05C4.0014: Failed to create dualshock4. [ 314.808279][ T24] playstation 0003:054C:05C4.0014: probe with driver playstation failed with error -32 [ 315.375247][ T24] usb 1-1: USB disconnect, device number 38 [ 315.419574][ T9459] fido_id[9459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 315.443023][ T5862] em28xx 4-1:0.0: Registering input extension [ 315.472468][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.493256][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.505469][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.512614][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.528954][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.536115][ T8649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.788553][ T5862] usb 4-1: USB disconnect, device number 25 [ 315.795490][ T5862] em28xx 4-1:0.0: Disconnecting em28xx [ 315.815914][ T5862] em28xx 4-1:0.0: Closing input extension [ 315.816384][ T5830] Bluetooth: hci5: command tx timeout [ 315.833867][ T5862] em28xx 4-1:0.0: Freeing device [ 316.047795][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 316.251938][ T9486] wg2: left promiscuous mode [ 316.280907][ T9486] wg2: left allmulticast mode [ 316.596245][ T5901] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 316.700580][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.735303][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.817798][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 316.835438][ T5901] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 316.894159][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.902414][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.030366][ T5901] usb 2-1: Product: syz [ 317.030460][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 317.034540][ T5901] usb 2-1: Manufacturer: syz [ 317.034556][ T5901] usb 2-1: SerialNumber: syz [ 317.067238][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.095322][ T24] usb 1-1: Product: syz [ 317.109008][ T5901] usb 2-1: config 0 descriptor?? [ 317.115249][ T24] usb 1-1: Manufacturer: syz [ 317.118924][ T5901] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 317.152713][ T24] usb 1-1: SerialNumber: syz [ 317.191613][ T24] usb 1-1: config 0 descriptor?? [ 317.222169][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 317.234054][ T30] audit: type=1400 audit(2000000097.730:656): avc: denied { setopt } for pid=9501 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 317.531630][ T9502] veth1_to_batadv: entered promiscuous mode [ 317.579228][ T9502] macsec1: entered promiscuous mode [ 317.582363][ T24] usb 1-1: Detected FT2232HP [ 317.587345][ T30] audit: type=1400 audit(2000000098.070:657): avc: denied { accept } for pid=9501 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.592298][ T9472] netlink: 'syz.0.919': attribute type 2 has an invalid length. [ 317.639435][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 317.658464][ T9487] wg2: entered promiscuous mode [ 317.673512][ T9487] wg2: entered allmulticast mode [ 317.697089][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 317.708452][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 317.718917][ T5862] usb 2-1: USB disconnect, device number 32 [ 317.749878][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 317.794383][ T24] usb 1-1: USB disconnect, device number 39 [ 317.836456][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 317.853217][ T24] ftdi_sio 1-1:0.0: device disconnected [ 317.972276][ T9338] veth0_vlan: entered promiscuous mode [ 317.984516][ T9338] veth1_vlan: entered promiscuous mode [ 318.020337][ T9338] veth0_macvtap: entered promiscuous mode [ 318.029862][ T9338] veth1_macvtap: entered promiscuous mode [ 318.049449][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.069334][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.084026][ T9338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.094886][ T9338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.104433][ T9338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.114597][ T9338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.145989][ T5865] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 318.285255][ T8651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.294465][ T5865] usb 5-1: device descriptor read/64, error -71 [ 318.308435][ T8653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.343812][ T8651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.363168][ T8653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.445544][ T30] audit: type=1400 audit(2000000098.940:658): avc: denied { mounton } for pid=9338 comm="syz-executor" path="/root/syzkaller.oPbsIe/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 318.480547][ T30] audit: type=1400 audit(2000000098.980:659): avc: denied { mount } for pid=9338 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 318.505140][ T30] audit: type=1400 audit(2000000098.980:660): avc: denied { mounton } for pid=9338 comm="syz-executor" path="/root/syzkaller.oPbsIe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 318.534031][ T30] audit: type=1400 audit(2000000098.980:661): avc: denied { mounton } for pid=9338 comm="syz-executor" path="/root/syzkaller.oPbsIe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 318.562013][ T30] audit: type=1400 audit(2000000099.000:662): avc: denied { mounton } for pid=9338 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 318.588997][ T5865] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 318.597765][ T30] audit: type=1400 audit(2000000099.000:663): avc: denied { mount } for pid=9338 comm="syz-executor" name="/" dev="gadgetfs" ino=5918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 318.622955][ T30] audit: type=1400 audit(2000000099.000:664): avc: denied { mounton } for pid=9338 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 318.716485][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 318.741055][ T5865] usb 5-1: device descriptor read/64, error -71 [ 318.804727][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 318.846846][ T9530] 9pnet_fd: Insufficient options for proto=fd [ 318.862389][ T5865] usb usb5-port1: attempt power cycle [ 318.906031][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 319.040931][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.147027][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.241879][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.256819][ T5865] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 319.296230][ T9] usb 2-1: Product: syz [ 319.303375][ T9] usb 2-1: Manufacturer: syz [ 319.309505][ T9] usb 2-1: SerialNumber: syz [ 319.322256][ T5865] usb 5-1: device descriptor read/8, error -71 [ 319.333053][ T9] usb 2-1: config 0 descriptor?? [ 319.348729][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 319.359436][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 319.395686][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 319.403287][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.415954][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.425235][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.433987][ T24] usb 1-1: Product: syz [ 319.438570][ T24] usb 1-1: Manufacturer: syz [ 319.444429][ T24] usb 1-1: SerialNumber: syz [ 319.451854][ T24] usb 1-1: config 0 descriptor?? [ 319.466489][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 319.481136][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 319.630485][ T5865] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 319.680422][ T5865] usb 5-1: device descriptor read/8, error -71 [ 319.817111][ T5865] usb usb5-port1: unable to enumerate USB device [ 320.093432][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 320.155136][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 321.022277][ T9553] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 321.036594][ T9553] qnx6: wrong signature (magic) in superblock #1. [ 321.044326][ T9553] qnx6: unable to read the first superblock [ 321.285405][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.938'. [ 321.453295][ T9553] : entered promiscuous mode [ 321.875137][ T5893] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 322.125752][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 322.140728][ T5893] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 322.178443][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.256183][ T5893] usb 6-1: Product: syz [ 322.285577][ T5893] usb 6-1: Manufacturer: syz [ 322.324297][ T5893] usb 6-1: SerialNumber: syz [ 322.416547][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 322.474701][ T5893] usb 6-1: config 0 descriptor?? [ 322.593153][ T24] em28xx 1-1:0.0: board has no eeprom [ 322.654796][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 322.685713][ T9] em28xx 2-1:0.0: board has no eeprom [ 322.900068][ T5893] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 323.390151][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 323.398081][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 323.413492][ T5901] em28xx 2-1:0.0: Binding DVB extension [ 323.505003][ T9571] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.576034][ T5901] em28xx 2-1:0.0: Registering input extension [ 323.715671][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 323.841661][ T5901] usb 2-1: USB disconnect, device number 33 [ 323.877383][ T5901] em28xx 2-1:0.0: Disconnecting em28xx [ 323.908095][ T5901] em28xx 2-1:0.0: Closing input extension [ 323.965777][ T5901] em28xx 2-1:0.0: Freeing device [ 324.003730][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.939'. [ 324.059331][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 324.064965][ T5893] em28xx 1-1:0.0: Binding DVB extension [ 324.090476][ T9568] wg2: entered promiscuous mode [ 324.185127][ T9568] wg2: entered allmulticast mode [ 324.215457][ T9583] 9pnet_fd: Insufficient options for proto=fd [ 324.229015][ T24] usb 1-1: USB disconnect, device number 40 [ 324.337375][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 324.390228][ T9] usb 6-1: USB disconnect, device number 2 [ 324.562385][ T5893] em28xx 1-1:0.0: Registering input extension [ 324.647821][ T5901] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 324.711015][ T24] em28xx 1-1:0.0: Closing input extension [ 324.726575][ T9589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9589 comm=syz.3.946 [ 325.196570][ T5901] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 325.205943][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.293874][ T30] audit: type=1400 audit(2000000105.790:665): avc: denied { watch } for pid=9588 comm="syz.3.946" path="/188" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 325.331411][ T5901] usb 2-1: config 0 descriptor?? [ 325.333644][ T24] em28xx 1-1:0.0: Freeing device [ 325.380206][ T5901] cp210x 2-1:0.0: cp210x converter detected [ 325.567556][ T5901] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 325.665336][ T5901] cp210x 2-1:0.0: querying part number failed [ 325.772109][ T5901] usb 2-1: cp210x converter now attached to ttyUSB0 [ 325.915681][ T24] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 326.561626][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.771790][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.796490][ T24] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 326.822933][ T24] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 326.870316][ T24] usb 5-1: Manufacturer: syz [ 326.894121][ T24] usb 5-1: config 0 descriptor?? [ 327.153659][ T9626] xt_CT: No such helper "snmp" [ 328.353606][ T3076] usb 2-1: USB disconnect, device number 34 [ 328.422877][ T3076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 328.448970][ T3076] cp210x 2-1:0.0: device disconnected [ 328.536724][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 328.686227][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 328.755874][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 328.781839][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 328.829340][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 328.863232][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.028229][ T24] usb 6-1: Product: syz [ 329.090105][ T24] usb 6-1: Manufacturer: syz [ 329.120924][ T24] usb 6-1: SerialNumber: syz [ 329.914831][ T5865] usb 5-1: USB disconnect, device number 39 [ 329.982128][ T24] usb 6-1: config 0 descriptor?? [ 330.307454][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 331.125731][ T24] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 331.381552][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 331.744969][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 333.522896][ T9731] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.538428][ T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 334.493168][ T24] em28xx 6-1:0.0: board has no eeprom [ 334.625688][ T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 334.675015][ T24] em28xx 6-1:0.0: dvb set to bulk mode. [ 334.709139][ T5862] em28xx 6-1:0.0: Binding DVB extension [ 334.768559][ T24] usb 6-1: USB disconnect, device number 3 [ 334.775579][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 334.893760][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 335.623580][ T5862] em28xx 6-1:0.0: Registering input extension [ 335.695518][ T24] em28xx 6-1:0.0: Closing input extension [ 335.811305][ T24] em28xx 6-1:0.0: Freeing device [ 335.943543][ T6112] block nbd3: Possible stuck request ffff88802690e000: control (read@0,1024B). Runtime 60 seconds [ 335.961756][ T6112] block nbd3: Possible stuck request ffff88802690e1c0: control (read@1024,1024B). Runtime 60 seconds [ 336.444974][ T6112] block nbd3: Possible stuck request ffff88802690e380: control (read@2048,1024B). Runtime 60 seconds [ 336.455884][ T6112] block nbd3: Possible stuck request ffff88802690e540: control (read@3072,1024B). Runtime 60 seconds [ 336.833221][ T9773] FAULT_INJECTION: forcing a failure. [ 336.833221][ T9773] name failslab, interval 1, probability 0, space 0, times 0 [ 336.846131][ T9773] CPU: 1 UID: 0 PID: 9773 Comm: syz.0.977 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 336.846156][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.846167][ T9773] Call Trace: [ 336.846173][ T9773] [ 336.846180][ T9773] dump_stack_lvl+0x16c/0x1f0 [ 336.846211][ T9773] should_fail_ex+0x512/0x640 [ 336.846235][ T9773] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 336.846264][ T9773] should_failslab+0xc2/0x120 [ 336.846283][ T9773] __kmalloc_cache_noprof+0x6a/0x3e0 [ 336.846309][ T9773] ? resv_map_alloc+0x7e/0x400 [ 336.846332][ T9773] resv_map_alloc+0x7e/0x400 [ 336.846354][ T9773] hugetlbfs_get_inode+0x33f/0x730 [ 336.846376][ T9773] ? security_capable+0x7e/0x260 [ 336.846401][ T9773] hugetlb_file_setup+0x38c/0x620 [ 336.846427][ T9773] newseg+0xa74/0xe60 [ 336.846458][ T9773] ? __pfx_newseg+0x10/0x10 [ 336.846486][ T9773] ? ksys_write+0x190/0x240 [ 336.846517][ T9773] ipcget+0xec/0xda0 [ 336.846547][ T9773] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.846579][ T9773] ? __pfx_ipcget+0x10/0x10 [ 336.846606][ T9773] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 336.846633][ T9773] __x64_sys_shmget+0x13b/0x1b0 [ 336.846650][ T9773] ? __pfx___x64_sys_shmget+0x10/0x10 [ 336.846681][ T9773] ? rcu_is_watching+0x12/0xc0 [ 336.846711][ T9773] do_syscall_64+0xcd/0x260 [ 336.846739][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.846757][ T9773] RIP: 0033:0x7fa901b8e969 [ 336.846771][ T9773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.846788][ T9773] RSP: 002b:00007fa8ff9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 336.846806][ T9773] RAX: ffffffffffffffda RBX: 00007fa901db6080 RCX: 00007fa901b8e969 [ 336.846817][ T9773] RDX: 0000000000004800 RSI: fffffffffeffffff RDI: 0000000000000000 [ 336.846829][ T9773] RBP: 00007fa8ff9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 336.846840][ T9773] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 336.846851][ T9773] R13: 0000000000000000 R14: 00007fa901db6080 R15: 00007ffd94182618 [ 336.846877][ T9773] [ 337.796755][ T5862] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 338.262720][ T5862] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 338.534339][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.600708][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 338.759369][ T5862] usb 2-1: config 0 descriptor?? [ 340.040349][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 340.127691][ T5862] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 342.104282][ T9843] wg2: left promiscuous mode [ 342.115956][ T9843] wg2: left allmulticast mode [ 342.234489][ T5865] usb 2-1: USB disconnect, device number 35 [ 342.267646][ T30] audit: type=1400 audit(2000000122.770:666): avc: denied { bind } for pid=9845 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 342.295135][ T30] audit: type=1400 audit(2000000122.790:667): avc: denied { append } for pid=9845 comm="syz.4.986" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 342.395756][ T5901] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 342.600775][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 342.676182][ T5901] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 342.687440][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.696878][ T5901] usb 6-1: Product: syz [ 342.701314][ T5901] usb 6-1: Manufacturer: syz [ 342.708073][ T5901] usb 6-1: SerialNumber: syz [ 342.729883][ T5901] usb 6-1: config 0 descriptor?? [ 342.745780][ T5901] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 343.628944][ T9843] wg2: entered promiscuous mode [ 343.641558][ T9843] wg2: entered allmulticast mode [ 343.700624][ T3076] usb 6-1: USB disconnect, device number 4 [ 344.058744][ T5901] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 344.125718][ T5865] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 344.216039][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 344.277774][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.076919][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.102555][ T5901] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 345.111923][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.120852][ T5865] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 345.139339][ T5901] usb 5-1: config 0 descriptor?? [ 345.148412][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.156941][ T5865] usb 1-1: Product: syz [ 345.175818][ T5865] usb 1-1: Manufacturer: syz [ 345.183396][ T5865] usb 1-1: SerialNumber: syz [ 345.193119][ T9877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.994'. [ 345.220206][ T5865] usb 1-1: config 0 descriptor?? [ 345.236980][ T5865] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 345.269784][ T5865] usb 1-1: Detected FT2232HP [ 345.470071][ T9868] netlink: 'syz.0.992': attribute type 2 has an invalid length. [ 346.465296][ T5901] uclogic 0003:5543:0004.0015: No inputs registered, leaving [ 346.484689][ T5901] uclogic 0003:5543:0004.0015: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0 [ 347.067910][ T5865] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 347.075415][ T5865] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 347.092265][ T5901] usb 5-1: USB disconnect, device number 40 [ 347.113282][ T5865] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 347.233600][ T5865] usb 1-1: USB disconnect, device number 41 [ 347.259762][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 347.308883][ T5865] ftdi_sio 1-1:0.0: device disconnected [ 347.788574][ T9887] fido_id[9887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 348.548581][ T9897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9897 comm=syz.0.999 [ 348.563807][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 348.644043][ T9909] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.656709][ T3076] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 348.845445][ T3076] usb 6-1: no configurations [ 349.405416][ T3076] usb 6-1: can't read configurations, error -22 [ 349.500233][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 349.570433][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 349.575661][ T3076] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 349.793940][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 349.807624][ T3076] usb 6-1: no configurations [ 349.812323][ T3076] usb 6-1: can't read configurations, error -22 [ 349.875980][ T3076] usb usb6-port1: attempt power cycle [ 349.885757][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 349.905561][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 349.916466][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 350.007438][ T24] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 350.060473][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.097863][ T24] usb 4-1: Product: syz [ 350.120544][ T24] usb 4-1: Manufacturer: syz [ 350.183365][ T24] usb 4-1: SerialNumber: syz [ 350.373743][ T5901] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 350.399337][ T5901] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 350.476542][ T24] usb 4-1: config 0 descriptor?? [ 350.495524][ T24] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 350.521089][ T3076] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 350.966831][ T3076] usb 6-1: no configurations [ 350.982311][ T9913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 350.989012][ T9913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 350.996840][ T3076] usb 6-1: can't read configurations, error -22 [ 351.017346][ T9950] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 351.032028][ T9913] vhci_hcd vhci_hcd.0: Device attached [ 351.123996][ T9939] fido_id[9939]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 351.146470][ T3076] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 351.198445][ T9950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.218385][ T5893] vhci_hcd: vhci_device speed not set [ 351.370214][ T3076] usb 6-1: device descriptor read/8, error -71 [ 351.465171][ T30] audit: type=1400 audit(2000000131.940:668): avc: denied { ioctl } for pid=9956 comm="syz.4.1014" path="pid:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 351.516563][ T9961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1014'. [ 351.848353][ T5893] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 351.862719][ T9913] vlan3: entered allmulticast mode [ 351.923491][ T9913] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 351.952597][ T9913] bond2: (slave vlan3): making interface the new active one [ 351.960269][ T30] audit: type=1326 audit(2000000131.960:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332778e969 code=0x7ffc0000 [ 351.988907][ T3076] usb usb6-port1: unable to enumerate USB device [ 351.993639][ T9913] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 352.019684][ T30] audit: type=1326 audit(2000000131.960:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f332778e969 code=0x7ffc0000 [ 352.032745][ T9959] lo speed is unknown, defaulting to 1000 [ 352.057095][ T30] audit: type=1400 audit(2000000132.470:671): avc: denied { watch_reads } for pid=9963 comm="syz.0.1016" path="/209" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 352.140758][ T9964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=131072 (262144 ns) > initial count (28 ns). Using initial count to start timer. [ 352.162254][ T9948] vhci_hcd: connection reset by peer [ 352.185748][ T24] scsi host1: usb-storage 4-1:0.0 [ 352.189970][ T9964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 352.212621][ T8649] vhci_hcd: stop threads [ 352.234372][ T24] usb 4-1: USB disconnect, device number 26 [ 352.253763][ T8649] vhci_hcd: release socket [ 352.312037][ T8649] vhci_hcd: disconnect device [ 352.387618][ T9974] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.364520][ T30] audit: type=1400 audit(2000000134.860:672): avc: denied { ioctl } for pid=10000 comm="syz.4.1022" path="socket:[22731]" dev="sockfs" ino=22731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.535260][ T30] audit: type=1400 audit(2000000135.030:673): avc: denied { read } for pid=10000 comm="syz.4.1022" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.064712][ T30] audit: type=1400 audit(2000000135.550:674): avc: denied { validate_trans } for pid=10014 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 355.162209][T10027] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.385672][ T5901] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 355.537313][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.946648][ T5901] usb 4-1: config 0 has no interfaces? [ 355.974066][ T5901] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 355.984030][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.096832][ T5901] usb 4-1: Product: syz [ 356.113826][ T5901] usb 4-1: Manufacturer: syz [ 356.145286][ T5901] usb 4-1: SerialNumber: syz [ 356.166698][ T5901] usb 4-1: config 0 descriptor?? [ 356.485787][ T3076] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 356.735068][ T30] audit: type=1400 audit(2000000137.230:675): avc: denied { getopt } for pid=10047 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 357.148938][ T3076] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 357.159316][T10055] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 357.175809][ T5893] vhci_hcd: vhci_device speed not set [ 358.036977][ T3076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.092639][ T3076] usb 2-1: Product: syz [ 358.111506][ T3076] usb 2-1: Manufacturer: syz [ 358.130715][ T3076] usb 2-1: SerialNumber: syz [ 358.184225][ T3076] usb 2-1: config 0 descriptor?? [ 358.535198][ T3076] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 358.604700][ T3076] usb 2-1: Detected FT2232HP [ 358.642866][T10068] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.762034][T10046] netlink: 'syz.1.1028': attribute type 2 has an invalid length. [ 359.699853][ T5865] usb 4-1: USB disconnect, device number 27 [ 360.227771][ T3076] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 360.277358][ T3076] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 360.321907][ T3076] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 360.397416][ T3076] usb 2-1: USB disconnect, device number 36 [ 360.572751][ T3076] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 360.587164][ T3076] ftdi_sio 2-1:0.0: device disconnected [ 361.198491][T10104] openvswitch: netlink: Unknown key attributes 2 [ 363.217774][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 364.895360][T10138] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.415837][ T5865] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 365.608567][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.638952][ T5865] usb 1-1: config 0 has no interfaces? [ 365.666649][ T5865] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 365.685652][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.720024][ T5865] usb 1-1: Product: syz [ 365.744269][ T5865] usb 1-1: Manufacturer: syz [ 365.819123][ T5865] usb 1-1: SerialNumber: syz [ 365.866372][ T5865] usb 1-1: config 0 descriptor?? [ 365.996385][ T6112] block nbd3: Possible stuck request ffff88802690e000: control (read@0,1024B). Runtime 90 seconds [ 366.007672][ T6112] block nbd3: Possible stuck request ffff88802690e1c0: control (read@1024,1024B). Runtime 90 seconds [ 366.020899][T10156] wg2: left promiscuous mode [ 366.115989][T10156] wg2: left allmulticast mode [ 366.195715][ T5865] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 366.346869][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 366.357630][ T5865] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 366.381174][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.421287][ T5865] usb 6-1: Product: syz [ 366.425451][ T5865] usb 6-1: Manufacturer: syz [ 366.455213][ T5865] usb 6-1: SerialNumber: syz [ 366.467210][ T6112] block nbd3: Possible stuck request ffff88802690e380: control (read@2048,1024B). Runtime 90 seconds [ 366.478123][ T6112] block nbd3: Possible stuck request ffff88802690e540: control (read@3072,1024B). Runtime 90 seconds [ 366.559268][ T5865] usb 6-1: config 0 descriptor?? [ 366.606892][ T5865] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 366.788281][T10173] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 366.955790][T10175] input: syz1 as /devices/virtual/input/input26 [ 367.391607][T10156] wg2: entered promiscuous mode [ 367.445964][T10156] wg2: entered allmulticast mode [ 367.586373][ T5865] usb 6-1: USB disconnect, device number 9 [ 368.870183][ T5893] usb 1-1: USB disconnect, device number 42 [ 368.965673][ T3076] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 369.655662][ T3076] usb 5-1: Using ep0 maxpacket: 16 [ 369.931203][ T3076] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 369.961863][ T3076] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 369.977210][ T3076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.047494][ T3076] usb 5-1: Product: syz [ 370.065703][ T3076] usb 5-1: Manufacturer: syz [ 370.085705][ T3076] usb 5-1: SerialNumber: syz [ 370.106151][ T3076] usb 5-1: config 0 descriptor?? [ 370.128619][ T3076] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 370.165852][ T3076] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 370.191449][ T5865] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 370.324524][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1059'. [ 370.393233][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.205691][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.224561][ T5865] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 371.236464][ T5865] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 371.245305][ T5865] usb 1-1: Manufacturer: syz [ 371.268891][ T5865] usb 1-1: config 0 descriptor?? [ 371.363577][T10226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.653850][ T5865] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 371.665252][ T3076] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 372.160094][ T30] audit: type=1400 audit(2000000152.660:676): avc: denied { read } for pid=10229 comm="syz.1.1061" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 372.434030][ T30] audit: type=1400 audit(2000000152.710:677): avc: denied { open } for pid=10229 comm="syz.1.1061" path="/236/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 372.656194][T10230] orangefs_mount: mount request failed with -4 [ 373.447638][ T3076] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 373.481864][ T3076] em28xx 5-1:0.0: board has no eeprom [ 373.511511][T10251] wg2: left promiscuous mode [ 373.521507][T10251] wg2: left allmulticast mode [ 373.585835][ T3076] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 373.605212][ T3076] em28xx 5-1:0.0: dvb set to bulk mode. [ 373.615345][ T5893] em28xx 5-1:0.0: Binding DVB extension [ 373.683938][ T5865] usb 1-1: USB disconnect, device number 43 [ 373.756334][ T5901] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 373.813344][ T3076] usb 5-1: USB disconnect, device number 41 [ 374.289193][ T3076] em28xx 5-1:0.0: Disconnecting em28xx [ 374.355790][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 374.368953][ T5901] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 374.383454][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.401803][ T5901] usb 4-1: Product: syz [ 374.407001][ T5901] usb 4-1: Manufacturer: syz [ 374.411879][ T5901] usb 4-1: SerialNumber: syz [ 374.423747][ T5901] usb 4-1: config 0 descriptor?? [ 374.434398][ T5893] em28xx 5-1:0.0: Registering input extension [ 374.451041][ T5901] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 374.822156][ T3076] em28xx 5-1:0.0: Closing input extension [ 374.849736][T10251] wg2: entered promiscuous mode [ 374.854623][T10251] wg2: entered allmulticast mode [ 374.891096][ T3076] em28xx 5-1:0.0: Freeing device [ 375.209172][ T5901] usb 4-1: USB disconnect, device number 28 [ 375.505738][ T5893] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 375.696597][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 375.775684][ T5893] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 375.775712][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.775730][ T5893] usb 6-1: Product: syz [ 375.775743][ T5893] usb 6-1: Manufacturer: syz [ 375.775758][ T5893] usb 6-1: SerialNumber: syz [ 375.891663][ T5893] usb 6-1: config 0 descriptor?? [ 375.924388][ T5893] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 376.915796][ T3076] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 377.101731][ T3076] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.116982][ T3076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.237146][ T3076] usb 4-1: Product: syz [ 377.241891][ T3076] usb 4-1: Manufacturer: syz [ 377.246764][ T3076] usb 4-1: SerialNumber: syz [ 377.273412][ T3076] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.292120][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.824423][ T5862] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 377.851953][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.891000][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.943307][ T3076] usb 4-1: USB disconnect, device number 29 [ 378.031775][ T5893] gspca_topro: Sensor soi763a [ 378.055943][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 378.063849][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 378.091394][ T5862] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.122114][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.162670][ T5862] usb 5-1: Product: syz [ 378.174175][ T5862] usb 5-1: Manufacturer: syz [ 378.336280][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.438376][ T5862] usb 5-1: SerialNumber: syz [ 378.513464][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.237806][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 379.259025][ T5862] usb 5-1: config 0 descriptor?? [ 379.268498][ T24] ath9k_htc: Failed to initialize the device [ 379.301720][ T5862] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 379.336708][ T3076] usb 4-1: ath9k_htc: USB layer deinitialized [ 379.362764][ T5862] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 379.567264][T10349] lo speed is unknown, defaulting to 1000 [ 380.170456][ T5862] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 380.219577][ T3076] usb 6-1: USB disconnect, device number 10 [ 381.260704][T10376] netlink: 'syz.1.1090': attribute type 5 has an invalid length. [ 381.282283][T10376] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.294609][T10378] netlink: 'syz.1.1090': attribute type 5 has an invalid length. [ 381.751268][T10384] 9pnet: Could not find request transport: fd0x0000000000000004 [ 382.045199][ T5862] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 382.075153][ T5862] em28xx 5-1:0.0: board has no eeprom [ 382.167387][ T5862] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 382.175326][ T5862] em28xx 5-1:0.0: dvb set to bulk mode. [ 382.445470][ T3076] em28xx 5-1:0.0: Binding DVB extension [ 382.693778][ T5862] usb 5-1: USB disconnect, device number 42 [ 382.715009][ T5862] em28xx 5-1:0.0: Disconnecting em28xx [ 382.811198][ T3076] em28xx 5-1:0.0: Registering input extension [ 382.830043][ T5862] em28xx 5-1:0.0: Closing input extension [ 382.852164][ T5862] em28xx 5-1:0.0: Freeing device [ 383.365673][ T5862] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 383.945735][ T5865] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 384.160466][ T5862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.167181][ T5865] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 384.218636][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.260892][ T5862] usb 5-1: config 0 has no interface number 0 [ 384.283933][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 384.314344][ T5862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.325290][ T5865] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 384.325317][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.412534][ T5865] usb 4-1: config 0 descriptor?? [ 385.703570][ T5865] usb 4-1: string descriptor 0 read error: -71 [ 385.718211][ T5865] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 385.744337][ T5865] usb 4-1: USB disconnect, device number 30 [ 385.746040][ T5862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.887600][ T5862] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 385.941049][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.997870][ T5862] usb 5-1: config 0 descriptor?? [ 386.036901][ T5862] usb 5-1: can't set config #0, error -71 [ 386.047121][ T5901] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 386.074648][ T5862] usb 5-1: USB disconnect, device number 43 [ 386.275840][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 386.325967][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.500787][ T5901] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 386.810026][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.830687][ T5901] usb 1-1: config 0 descriptor?? [ 387.118231][ T5862] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 387.163174][T10455] Driver unsupported XDP return value 0 on prog (id 305) dev N/A, expect packet loss! [ 387.368528][T10460] netlink: 'syz.1.1110': attribute type 11 has an invalid length. [ 388.010403][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 388.036835][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 388.149347][ T5862] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 388.189659][ T873] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 388.201610][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.271408][ T5862] usb 5-1: Product: syz [ 388.339281][ T5862] usb 5-1: Manufacturer: syz [ 388.355367][ T873] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 388.436666][ T5862] usb 5-1: SerialNumber: syz [ 388.595909][ T5862] usb 5-1: config 0 descriptor?? [ 388.658057][ T5862] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 388.706947][ T5862] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 389.226102][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 389.247416][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 389.301653][ T5901] usb 1-1: USB disconnect, device number 44 [ 389.419950][ T5862] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 389.529060][T10491] 9pnet_fd: Insufficient options for proto=fd [ 389.560996][ T63] wlan0: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 389.645770][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.653632][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.822815][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'. [ 391.252202][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1123'. [ 391.751454][ T873] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 391.811596][ T5862] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 391.917917][ T5862] em28xx 5-1:0.0: board has no eeprom [ 392.058636][ T5862] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 392.091331][ T5862] em28xx 5-1:0.0: dvb set to bulk mode. [ 392.096995][ T873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 392.097023][ T873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 392.097045][ T873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 392.097064][ T873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 392.152459][ T3076] em28xx 5-1:0.0: Binding DVB extension [ 392.169457][T10533] 9pnet_fd: Insufficient options for proto=fd [ 392.185761][ T873] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 392.199453][ T5862] usb 5-1: USB disconnect, device number 44 [ 392.207381][ T873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.243502][ T5862] em28xx 5-1:0.0: Disconnecting em28xx [ 392.296597][ T3076] em28xx 5-1:0.0: Registering input extension [ 392.335718][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 392.363942][ T5901] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 392.388686][ T5862] em28xx 5-1:0.0: Closing input extension [ 392.389342][ T873] usb 2-1: config 0 descriptor?? [ 392.481393][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1127'. [ 392.522891][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 392.582647][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.642809][ T5862] em28xx 5-1:0.0: Freeing device [ 392.726257][ T24] usb 4-1: Product: syz [ 392.821335][ T24] usb 4-1: Manufacturer: syz [ 392.870918][ T873] usb 2-1: can't set config #0, error -71 [ 392.900219][ T24] usb 4-1: SerialNumber: syz [ 392.928669][ T24] usb 4-1: config 0 descriptor?? [ 392.938122][T10538] wg2: left promiscuous mode [ 392.954877][ T873] usb 2-1: USB disconnect, device number 37 [ 392.978580][ T5901] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 392.981114][T10538] wg2: left allmulticast mode [ 392.987667][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.987688][ T5901] usb 1-1: Product: syz [ 392.987702][ T5901] usb 1-1: Manufacturer: syz [ 392.987716][ T5901] usb 1-1: SerialNumber: syz [ 393.014873][ T5901] usb 1-1: config 0 descriptor?? [ 393.037414][ T5901] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 393.040339][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 393.053453][ T5901] usb 1-1: Detected FT2232HP [ 393.105088][ T24] usb 4-1: Detected FT2232HP [ 393.165795][T10530] netlink: 'syz.3.1129': attribute type 2 has an invalid length. [ 393.228580][T10527] netlink: 'syz.0.1128': attribute type 2 has an invalid length. [ 393.261271][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 393.287559][ T24] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 393.306377][ T24] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 393.316405][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 393.325390][ T5901] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 393.331542][ T24] usb 4-1: USB disconnect, device number 31 [ 393.355249][ T24] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 393.374047][ T24] ftdi_sio 4-1:0.0: device disconnected [ 393.396348][ T5901] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 393.409313][ T3076] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 393.448849][ T5901] usb 1-1: USB disconnect, device number 45 [ 393.499331][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 393.548387][ T5901] ftdi_sio 1-1:0.0: device disconnected [ 393.600977][ T3076] usb 6-1: Using ep0 maxpacket: 16 [ 393.628733][ T3076] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 393.656108][ T3076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.664125][ T3076] usb 6-1: Product: syz [ 393.701396][ T3076] usb 6-1: Manufacturer: syz [ 393.713633][ T3076] usb 6-1: SerialNumber: syz [ 393.737075][ T3076] usb 6-1: config 0 descriptor?? [ 393.975023][ T3076] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 394.167732][T10560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.349172][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1131'. [ 394.818097][ T5901] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 394.876800][ T9] usb 6-1: USB disconnect, device number 11 [ 394.987736][ T5901] usb 1-1: config 0 has no interfaces? [ 394.993238][ T5901] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 395.225315][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.226985][T10573] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 395.396418][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 395.412297][ T5901] usb 1-1: config 0 descriptor?? [ 395.708243][T10561] team_slave_0: entered promiscuous mode [ 395.714785][T10561] team_slave_1: entered promiscuous mode [ 395.807977][T10561] vlan2: entered promiscuous mode [ 395.828666][T10561] team0: entered promiscuous mode [ 395.964658][T10588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=10588 comm=syz.5.1150 [ 396.012397][ T3076] usb 1-1: USB disconnect, device number 46 [ 396.076779][ T6112] block nbd3: Possible stuck request ffff88802690e000: control (read@0,1024B). Runtime 120 seconds [ 396.087988][ T6112] block nbd3: Possible stuck request ffff88802690e1c0: control (read@1024,1024B). Runtime 120 seconds [ 396.495731][ T5901] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 396.516128][ T6112] block nbd3: Possible stuck request ffff88802690e380: control (read@2048,1024B). Runtime 120 seconds [ 396.527205][ T6112] block nbd3: Possible stuck request ffff88802690e540: control (read@3072,1024B). Runtime 120 seconds [ 396.699480][ T5901] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 397.569674][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.585559][ T5901] usb 2-1: Product: syz [ 397.590007][ T5901] usb 2-1: Manufacturer: syz [ 397.594660][ T5901] usb 2-1: SerialNumber: syz [ 397.604760][ T5901] usb 2-1: config 0 descriptor?? [ 398.138848][ T5901] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 398.154399][ T5901] usb 2-1: Detected FT2232HP [ 398.349046][T10592] netlink: 'syz.1.1151': attribute type 2 has an invalid length. [ 398.380225][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 398.401720][ T5901] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 398.437532][ T5901] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 398.475762][ T5901] usb 2-1: USB disconnect, device number 38 [ 398.546228][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 398.637123][T10621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10621 comm=syz.5.1162 [ 398.666560][ T5901] ftdi_sio 2-1:0.0: device disconnected [ 398.677899][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1162'. [ 399.245248][T10634] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1160'. [ 399.863396][ T30] audit: type=1326 audit(2000000180.020:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10630 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644638e969 code=0x7ffc0000 [ 399.868097][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 399.926810][ T30] audit: type=1326 audit(2000000180.020:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10630 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644638e969 code=0x7ffc0000 [ 399.955743][ T5901] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 399.975701][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 400.115750][ T5901] usb 5-1: device descriptor read/64, error -71 [ 400.125992][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 256 [ 400.137397][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.137440][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 400.137462][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.166278][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 400.182302][ T24] usb 2-1: config 3 has an invalid interface number: 27 but max is 0 [ 400.182333][ T24] usb 2-1: config 3 has no interface number 0 [ 400.182368][ T24] usb 2-1: config 3 interface 27 altsetting 6 has an endpoint descriptor with address 0x2E, changing to 0xE [ 400.182392][ T24] usb 2-1: config 3 interface 27 altsetting 6 endpoint 0xE has invalid maxpacket 45042, setting to 64 [ 400.182418][ T24] usb 2-1: config 3 interface 27 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 400.182437][ T24] usb 2-1: config 3 interface 27 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 400.182457][ T24] usb 2-1: config 3 interface 27 has no altsetting 0 [ 400.184482][ T24] usb 2-1: Dual-Role OTG device on HNP port [ 400.184789][ T24] usb 2-1: New USB device found, idVendor=1044, idProduct=800b, bcdDevice= b.b5 [ 400.184814][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.184834][ T24] usb 2-1: Product: በ[ 400.184854][ T24] usb 2-1: Manufacturer: à  [ 400.184868][ T24] usb 2-1: SerialNumber: Л [ 400.194562][T10631] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 400.198860][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.199477][ T9] usb 1-1: invalid MIDI out EP 0 [ 400.236892][T10628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 400.359876][ T5901] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 400.446740][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 400.513276][ T9] usb 1-1: USB disconnect, device number 47 [ 400.536346][ T5901] usb 5-1: device descriptor read/64, error -71 [ 400.582604][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.698710][ T5901] usb usb5-port1: attempt power cycle [ 401.071834][ T24] usb 2-1: USB disconnect, device number 39 [ 401.120145][ T5901] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 401.183937][T10656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.210133][ T5901] usb 5-1: device descriptor read/8, error -71 [ 401.495804][ T5901] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 401.537977][ T5901] usb 5-1: device descriptor read/8, error -71 [ 401.646605][T10661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=896 (1792 ns) > initial count (1280 ns). Using initial count to start timer. [ 401.709769][ T5901] usb usb5-port1: unable to enumerate USB device [ 401.889020][T10667] FAULT_INJECTION: forcing a failure. [ 401.889020][T10667] name failslab, interval 1, probability 0, space 0, times 0 [ 401.903253][T10667] CPU: 1 UID: 0 PID: 10667 Comm: syz.1.1174 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 401.903279][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.903290][T10667] Call Trace: [ 401.903297][T10667] [ 401.903304][T10667] dump_stack_lvl+0x16c/0x1f0 [ 401.903336][T10667] should_fail_ex+0x512/0x640 [ 401.903359][T10667] ? __kmalloc_noprof+0xbf/0x510 [ 401.903378][T10667] ? sel_write_validatetrans+0x228/0x4d0 [ 401.903400][T10667] should_failslab+0xc2/0x120 [ 401.903418][T10667] __kmalloc_noprof+0xd2/0x510 [ 401.903435][T10667] ? _copy_from_user+0x59/0xd0 [ 401.903464][T10667] sel_write_validatetrans+0x228/0x4d0 [ 401.903487][T10667] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 401.903523][T10667] vfs_write+0x25f/0x1180 [ 401.903548][T10667] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 401.903574][T10667] ? __pfx___mutex_lock+0x10/0x10 [ 401.903598][T10667] ? __pfx_vfs_write+0x10/0x10 [ 401.903631][T10667] ? __fget_files+0x20e/0x3c0 [ 401.903656][T10667] ksys_write+0x12a/0x240 [ 401.903680][T10667] ? __pfx_ksys_write+0x10/0x10 [ 401.903704][T10667] ? rcu_is_watching+0x12/0xc0 [ 401.903732][T10667] do_syscall_64+0xcd/0x260 [ 401.903760][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.903778][T10667] RIP: 0033:0x7f3a0cd8e969 [ 401.903793][T10667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.903809][T10667] RSP: 002b:00007f3a0db4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.903826][T10667] RAX: ffffffffffffffda RBX: 00007f3a0cfb5fa0 RCX: 00007f3a0cd8e969 [ 401.903837][T10667] RDX: 000000000000006c RSI: 0000200000000040 RDI: 0000000000000003 [ 401.903848][T10667] RBP: 00007f3a0db4e090 R08: 0000000000000000 R09: 0000000000000000 [ 401.903857][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.903867][T10667] R13: 0000000000000000 R14: 00007f3a0cfb5fa0 R15: 00007ffe70277948 [ 401.903897][T10667] [ 402.835702][ T5862] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 402.898945][T10692] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1181'. [ 402.936917][T10695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.031208][ T30] audit: type=1326 audit(2000000183.530:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cd8e969 code=0x7ffc0000 [ 403.059280][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1186'. [ 403.110806][ T30] audit: type=1326 audit(2000000183.560:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f3a0cd8e969 code=0x7ffc0000 [ 403.150556][ T5830] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 403.161111][ T5830] Bluetooth: hci5: Injecting HCI hardware error event [ 403.171260][ T55] Bluetooth: hci5: hardware error 0x00 [ 403.183716][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 403.197243][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 403.202202][ T30] audit: type=1326 audit(2000000183.560:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cd8e969 code=0x7ffc0000 [ 403.217811][ T5862] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 403.822382][ T30] audit: type=1326 audit(2000000183.560:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cd8e969 code=0x7ffc0000 [ 403.869674][ T5862] usb 6-1: Product: syz [ 403.874124][ T5862] usb 6-1: Manufacturer: syz [ 403.879019][ T5862] usb 6-1: SerialNumber: syz [ 403.885299][ T30] audit: type=1326 audit(2000000183.560:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a0cd8e969 code=0x7ffc0000 [ 403.909614][ T30] audit: type=1326 audit(2000000183.580:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cd8e969 code=0x7ffc0000 [ 403.934094][ T30] audit: type=1326 audit(2000000183.580:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10699 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cd8e969 code=0x7ffc0000 [ 403.967095][ T5862] usb 6-1: config 0 descriptor?? [ 403.987427][ T5862] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 404.845779][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 405.060028][ T24] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 405.104547][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 405.181401][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 405.247620][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.254134][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 405.268613][ T5862] gspca_zc3xx: reg_w_i err -71 [ 405.273958][ T5862] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 405.348731][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.367989][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.378503][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 405.410026][T10716] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 405.415903][ T5862] usb 6-1: USB disconnect, device number 12 [ 405.417727][ T30] audit: type=1400 audit(2000000185.900:687): avc: denied { read } for pid=10737 comm="syz.3.1195" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 405.424667][ T5893] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 405.478232][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.480452][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.516973][ T24] usb 5-1: Product: syz [ 405.521172][ T24] usb 5-1: Manufacturer: syz [ 405.531027][ T30] audit: type=1400 audit(2000000185.900:688): avc: denied { open } for pid=10737 comm="syz.3.1195" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 405.538793][ T24] usb 5-1: SerialNumber: syz [ 405.612077][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'. [ 405.671815][ T30] audit: type=1400 audit(2000000186.100:689): avc: denied { ioctl } for pid=10739 comm="syz.5.1196" path="socket:[25693]" dev="sockfs" ino=25693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.716802][ T5893] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 405.733885][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 405.743501][T10743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1196'. [ 405.752770][ T30] audit: type=1400 audit(2000000186.100:690): avc: denied { setopt } for pid=10739 comm="syz.5.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.895939][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 405.997035][T10746] fido_id[10746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 406.159310][ T9] usb 1-1: USB disconnect, device number 48 [ 406.330354][ T24] usb 5-1: config 0 descriptor?? [ 406.407252][T10716] hsr0 speed is unknown, defaulting to 1000 [ 406.413238][T10716] hsr0 speed is unknown, defaulting to 1000 [ 406.899352][T10716] hsr0 speed is unknown, defaulting to 1000 [ 406.922315][T10716] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 406.958626][T10716] hsr0 speed is unknown, defaulting to 1000 [ 407.006526][T10716] hsr0 speed is unknown, defaulting to 1000 [ 407.029773][T10716] hsr0 speed is unknown, defaulting to 1000 [ 407.038604][T10716] hsr0 speed is unknown, defaulting to 1000 [ 407.052763][T10716] hsr0 speed is unknown, defaulting to 1000 [ 407.091978][T10716] hsr0 speed is unknown, defaulting to 1000 [ 407.107939][T10761] SELinux: Context Z; is not valid (left unmapped). [ 407.172954][T10762] kAFS: No cell specified [ 408.587393][ T30] audit: type=1400 audit(2000000189.040:691): avc: denied { execute_no_trans } for pid=10776 comm="syz.5.1205" path="/57/file1" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 408.938300][T10783] FAULT_INJECTION: forcing a failure. [ 408.938300][T10783] name failslab, interval 1, probability 0, space 0, times 0 [ 408.951495][T10783] CPU: 0 UID: 0 PID: 10783 Comm: syz.0.1204 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 408.951521][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.951531][T10783] Call Trace: [ 408.951537][T10783] [ 408.951544][T10783] dump_stack_lvl+0x16c/0x1f0 [ 408.951575][T10783] should_fail_ex+0x512/0x640 [ 408.951599][T10783] ? __kmalloc_node_noprof+0xc5/0x500 [ 408.951620][T10783] should_failslab+0xc2/0x120 [ 408.951638][T10783] __kmalloc_node_noprof+0xd8/0x500 [ 408.951653][T10783] ? crypto_alg_lookup+0x113/0x1e0 [ 408.951673][T10783] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 408.951693][T10783] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 408.951717][T10783] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 408.951737][T10783] crypto_create_tfm_node+0x83/0x320 [ 408.951761][T10783] ? trace_kmalloc+0x2b/0xd0 [ 408.951783][T10783] crypto_alloc_tfm_node+0x102/0x260 [ 408.951800][T10783] ? hpsa_cmd_partial_init.isra.0+0xf0/0x110 [ 408.951823][T10783] __keyctl_dh_compute+0x45d/0x10e0 [ 408.951843][T10783] ? rcu_is_watching+0x12/0xc0 [ 408.951865][T10783] ? trace_sched_exit_tp+0xde/0x130 [ 408.951890][T10783] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 408.951931][T10783] keyctl_dh_compute+0xd2/0x140 [ 408.951944][T10783] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 408.951962][T10783] ? __do_sys_keyctl+0x2a/0x590 [ 408.951983][T10783] __do_sys_keyctl+0x4df/0x590 [ 408.952002][T10783] do_syscall_64+0xcd/0x260 [ 408.952025][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.952039][T10783] RIP: 0033:0x7fa901b8e969 [ 408.952052][T10783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.952066][T10783] RSP: 002b:00007fa8ff9d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 408.952081][T10783] RAX: ffffffffffffffda RBX: 00007fa901db6080 RCX: 00007fa901b8e969 [ 408.952091][T10783] RDX: 0000200000000440 RSI: 00002000000001c0 RDI: 0000000000000017 [ 408.952099][T10783] RBP: 00007fa8ff9d5090 R08: 0000200000000400 R09: 0000000000000000 [ 408.952108][T10783] R10: 00000000000000fb R11: 0000000000000246 R12: 0000000000000002 [ 408.952117][T10783] R13: 0000000000000000 R14: 00007fa901db6080 R15: 00007ffd94182618 [ 408.952135][T10783] [ 409.246481][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 409.513852][ T9] IPVS: starting estimator thread 0... [ 409.554083][ T9] usb 5-1: USB disconnect, device number 49 [ 409.617839][T10790] IPVS: using max 43 ests per chain, 103200 per kthread [ 410.938905][ T30] audit: type=1400 audit(2000000191.430:692): avc: denied { append } for pid=10802 comm="syz.4.1211" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 411.083107][T10810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.890689][T10810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.396066][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 412.465745][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 412.525693][ T9] usb 2-1: device descriptor read/64, error -71 [ 412.575103][ T30] audit: type=1400 audit(2000000193.070:693): avc: denied { ioctl } for pid=10820 comm="syz.5.1217" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.687636][ T30] audit: type=1400 audit(2000000193.170:694): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.715346][ T30] audit: type=1400 audit(2000000193.170:695): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.716211][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.753270][ T30] audit: type=1400 audit(2000000193.170:696): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.784468][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.790801][ T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 412.795196][ T30] audit: type=1400 audit(2000000193.280:697): avc: denied { create } for pid=10833 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.832420][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 412.967083][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.986176][ T30] audit: type=1400 audit(2000000193.320:698): avc: denied { create } for pid=10833 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 413.006681][ T24] usb 6-1: config 0 descriptor?? [ 413.034121][ T30] audit: type=1400 audit(2000000193.320:699): avc: denied { prog_load } for pid=10833 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 413.054382][ T30] audit: type=1400 audit(2000000193.320:700): avc: denied { bpf } for pid=10833 comm="syz.4.1221" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 413.078506][ T30] audit: type=1400 audit(2000000193.330:701): avc: denied { create } for pid=10835 comm="syz.3.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.217056][ T9] usb 2-1: device descriptor read/64, error -71 [ 413.338036][ T9] usb usb2-port1: attempt power cycle [ 414.037183][ T24] sony 0003:054C:024B.0019: unexpected long global item [ 414.044481][ T24] sony 0003:054C:024B.0019: parse failed [ 414.065730][ T24] sony 0003:054C:024B.0019: probe with driver sony failed with error -22 [ 414.295825][ T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 414.329548][T10849] wg2: left promiscuous mode [ 414.345525][T10849] wg2: left allmulticast mode [ 414.370827][ T9] usb 2-1: device descriptor read/8, error -71 [ 414.455689][ T5901] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 414.625685][ T9] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 414.633351][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 414.656413][ T9] usb 2-1: device descriptor read/8, error -71 [ 414.663529][ T5901] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 414.694764][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.721916][ T5901] usb 1-1: Product: syz [ 414.733787][ T5901] usb 1-1: Manufacturer: syz [ 414.738741][ T5901] usb 1-1: SerialNumber: syz [ 414.755233][ T5901] usb 1-1: config 0 descriptor?? [ 414.793128][ T5901] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 414.805324][ T9] usb usb2-port1: unable to enumerate USB device [ 414.857948][ T5901] usb 6-1: USB disconnect, device number 13 [ 415.036989][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 415.073765][T10849] wg2: entered promiscuous mode [ 415.089209][T10849] wg2: entered allmulticast mode [ 415.184920][T10859] wg2: left promiscuous mode [ 415.189715][T10859] wg2: left allmulticast mode [ 415.307467][ T5901] usb 1-1: USB disconnect, device number 49 [ 415.905829][ T5862] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 415.972408][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 415.972425][ T30] audit: type=1400 audit(2000000196.470:738): avc: denied { ioctl } for pid=10865 comm="syz.5.1231" path="socket:[25923]" dev="sockfs" ino=25923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.095753][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 416.109862][ T30] audit: type=1400 audit(2000000196.600:739): avc: denied { sys_module } for pid=10865 comm="syz.5.1231" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 416.155708][ T9] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 416.162500][ T5862] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 416.187917][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.225803][ T5862] usb 5-1: Product: syz [ 416.232715][ T5862] usb 5-1: Manufacturer: syz [ 416.243619][ T5862] usb 5-1: SerialNumber: syz [ 416.281644][ T5862] usb 5-1: config 0 descriptor?? [ 416.309401][ T5862] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 416.334544][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 416.384445][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 416.384475][ T30] audit: type=1400 audit(2000000196.880:740): avc: denied { create } for pid=10882 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.427987][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.454677][ T9] usb 4-1: Product: syz [ 416.472931][ T9] usb 4-1: Manufacturer: syz [ 416.489653][T10885] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1235'. [ 416.495251][ T30] audit: type=1400 audit(2000000196.920:741): avc: denied { connect } for pid=10882 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.532300][ T9] usb 4-1: SerialNumber: syz [ 416.554764][ T9] usb 4-1: config 0 descriptor?? [ 416.570361][T10886] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 416.578372][T10886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1233'. [ 416.625117][ T30] audit: type=1400 audit(2000000196.920:742): avc: denied { write } for pid=10882 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.689824][ T30] audit: type=1400 audit(2000000196.930:743): avc: denied { allowed } for pid=10877 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 416.731141][ T30] audit: type=1400 audit(2000000196.930:744): avc: denied { map } for pid=10877 comm="syz.1.1233" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.759064][ T30] audit: type=1400 audit(2000000196.930:745): avc: denied { read write } for pid=10877 comm="syz.1.1233" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.798876][ T30] audit: type=1400 audit(2000000197.060:746): avc: denied { read } for pid=10877 comm="syz.1.1233" dev="nsfs" ino=4026532955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 416.823657][ T30] audit: type=1400 audit(2000000197.060:747): avc: denied { open } for pid=10877 comm="syz.1.1233" path="net:[4026532955]" dev="nsfs" ino=4026532955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 417.011002][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 417.212713][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.233357][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 417.242689][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.267738][ T9] usb 6-1: config 0 descriptor?? [ 417.499082][T10899] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 417.777396][ T9] corsair-psu 0003:1B1C:1C07.001A: unknown main item tag 0x3 [ 417.787206][ T9] corsair-psu 0003:1B1C:1C07.001A: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.5-1/input0 [ 417.855753][ T9] corsair-psu 0003:1B1C:1C07.001A: unable to initialize device (-38) [ 417.887071][ T9] corsair-psu 0003:1B1C:1C07.001A: probe with driver corsair-psu failed with error -38 [ 417.979622][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.991551][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.003387][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.013860][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.729514][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 418.862231][T10888] wg2: entered promiscuous mode [ 418.867477][T10888] wg2: entered allmulticast mode [ 418.885230][ T3076] usb 6-1: USB disconnect, device number 14 [ 418.900189][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 418.909628][ T5865] usb 5-1: USB disconnect, device number 50 [ 418.950058][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.959002][ T5862] usb 4-1: USB disconnect, device number 32 [ 418.970636][ T9] usb 2-1: Product: syz [ 418.983280][ T9] usb 2-1: Manufacturer: syz [ 418.993403][ T9] usb 2-1: SerialNumber: syz [ 419.008641][ T5901] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 419.031998][ T9] usb 2-1: config 0 descriptor?? [ 419.071516][ T5901] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 419.088115][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 419.110437][ T9] usb 2-1: Detected FT2232HP [ 419.239048][T10914] fido_id[10914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 419.315403][T10907] netlink: 'syz.1.1237': attribute type 2 has an invalid length. [ 419.323319][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 419.593903][ T24] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 419.596288][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 419.615562][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.644769][ T24] usb 1-1: config 0 has no interface number 0 [ 419.663308][ T24] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 419.670052][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 419.675459][ T24] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.712737][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 419.715095][ T24] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 419.769378][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.784173][ T9] usb 2-1: USB disconnect, device number 44 [ 419.793455][ T24] usb 1-1: Product: syz [ 419.811113][ T24] usb 1-1: Manufacturer: syz [ 419.829524][ T24] usb 1-1: SerialNumber: syz [ 419.842516][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 419.843102][ T24] usb 1-1: config 0 descriptor?? [ 419.863873][ T9] ftdi_sio 2-1:0.0: device disconnected [ 419.965806][ T5865] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 420.067605][ T5901] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 420.118250][ T5865] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 64, using maximum allowed: 30 [ 420.155437][ T5865] usb 4-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 420.169657][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.176357][ T5865] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 420.196177][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.226379][ T5865] usb 4-1: config 0 descriptor?? [ 420.246980][ T5901] usb 6-1: config 1 has an invalid interface number: 189 but max is 0 [ 420.255363][ T5901] usb 6-1: config 1 has no interface number 0 [ 420.269303][T10936] wg2: left promiscuous mode [ 420.276267][ T5901] usb 6-1: New USB device found, idVendor=12d1, idProduct=4d68, bcdDevice=cd.6e [ 420.285306][T10936] wg2: left allmulticast mode [ 420.292475][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.301480][ T5901] usb 6-1: Product: syz [ 420.306668][ T5901] usb 6-1: Manufacturer: syz [ 420.311280][ T5901] usb 6-1: SerialNumber: syz [ 420.320223][ T5901] option 6-1:1.189: GSM modem (1-port) converter detected [ 420.506051][ T5865] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 420.526616][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 420.527701][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.555756][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.556765][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1243'. [ 420.680293][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1243'. [ 420.702244][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 420.738632][ T5865] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.741081][ T24] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 420.749103][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.762504][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.867066][ T24] usb 5-1: Product: syz [ 420.871587][ T24] usb 5-1: Manufacturer: syz [ 420.872342][ T5865] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 420.876849][ T24] usb 5-1: SerialNumber: syz [ 420.911208][ T24] usb 5-1: config 0 descriptor?? [ 420.922654][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 420.927872][ T24] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 420.947557][ T5865] usb 2-1: SerialNumber: syz [ 421.138320][T10936] wg2: entered promiscuous mode [ 421.143314][T10936] wg2: entered allmulticast mode [ 421.158664][ T24] usb 5-1: USB disconnect, device number 51 [ 421.217761][T10940] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1247'. [ 421.274824][ T5865] usb 2-1: 0:2 : does not exist [ 421.280210][ T5865] usb 2-1: unit 48 not found! [ 421.297469][ T5865] usb 2-1: USB disconnect, device number 45 [ 421.323290][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.945556][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 421.977267][ T30] audit: type=1400 audit(2000000202.420:774): avc: denied { create } for pid=10941 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 422.178643][ T30] audit: type=1400 audit(2000000202.430:775): avc: denied { setopt } for pid=10941 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 422.300826][ T5862] usb 1-1: USB disconnect, device number 50 [ 422.325760][ T30] audit: type=1400 audit(2000000202.440:776): avc: denied { create } for pid=10941 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 422.395002][ T5901] usb 4-1: USB disconnect, device number 33 [ 422.530182][ T30] audit: type=1400 audit(2000000203.030:777): avc: denied { write } for pid=10949 comm="syz.0.1252" name="wireless" dev="proc" ino=4026533072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 422.685654][ T3076] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 422.882843][ T3076] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.887008][ T5865] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 422.925034][ T3076] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 422.962906][ T3076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.973376][ T5862] usb 6-1: USB disconnect, device number 15 [ 422.998830][ T3076] usb 2-1: Product: syz [ 423.003405][ T3076] usb 2-1: Manufacturer: syz [ 423.012146][ T5862] option 6-1:1.189: device disconnected [ 423.022936][ T3076] usb 2-1: SerialNumber: syz [ 423.044209][ T3076] usb 2-1: config 0 descriptor?? [ 423.062939][ T5865] usb 1-1: config 49 has too many interfaces: 33, using maximum allowed: 32 [ 423.067229][ T30] audit: type=1400 audit(2000000203.560:778): avc: denied { create } for pid=10959 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 423.082231][ T5865] usb 1-1: config 49 has 1 interface, different from the descriptor's value: 33 [ 423.101573][ T5865] usb 1-1: config 49 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.114468][ T5865] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 423.124898][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.255802][ T30] audit: type=1400 audit(2000000203.560:779): avc: denied { setopt } for pid=10959 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 423.279225][ T30] audit: type=1400 audit(2000000203.640:780): avc: denied { write } for pid=10959 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 423.300026][ T30] audit: type=1400 audit(2000000203.740:781): avc: denied { create } for pid=10963 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 423.320006][ T30] audit: type=1400 audit(2000000203.750:782): avc: denied { bind } for pid=10963 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 423.346865][ T30] audit: type=1400 audit(2000000203.760:783): avc: denied { create } for pid=10963 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 423.590776][ T5865] usbhid 1-1:49.0: can't add hid device: -71 [ 423.598496][ T5865] usbhid 1-1:49.0: probe with driver usbhid failed with error -71 [ 424.059915][ T5865] usb 1-1: USB disconnect, device number 51 [ 424.211873][T10984] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 425.453756][ T5862] usb 2-1: USB disconnect, device number 46 [ 426.415814][ T6112] block nbd3: Possible stuck request ffff88802690e000: control (read@0,1024B). Runtime 150 seconds [ 426.426749][ T6112] block nbd3: Possible stuck request ffff88802690e1c0: control (read@1024,1024B). Runtime 150 seconds [ 426.441189][T11021] xt_CT: No such helper "snmp" [ 426.550815][ T6112] block nbd3: Possible stuck request ffff88802690e380: control (read@2048,1024B). Runtime 150 seconds [ 426.562590][ T6112] block nbd3: Possible stuck request ffff88802690e540: control (read@3072,1024B). Runtime 150 seconds [ 426.848992][ T5893] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 428.204249][T11039] syz.1.1277 (11039): drop_caches: 2 [ 428.214079][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 428.214094][ T30] audit: type=1400 audit(2000000208.713:811): avc: denied { ioctl } for pid=11038 comm="syz.1.1277" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25353 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 428.254725][T11039] syz.1.1277 (11039): drop_caches: 2 [ 428.725887][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 428.740365][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 429.755751][ T5865] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 429.902981][ T5893] usb 4-1: string descriptor 0 read error: -71 [ 429.916313][ T5893] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.938669][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.975313][ T5893] usb 4-1: config 0 descriptor?? [ 430.003533][ T5893] usb 4-1: can't set config #0, error -71 [ 430.053686][ T5865] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 430.066265][ T5893] usb 4-1: USB disconnect, device number 34 [ 430.087062][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.108465][ T5865] usb 6-1: Product: syz [ 430.112656][ T5865] usb 6-1: Manufacturer: syz [ 430.122039][ T30] audit: type=1400 audit(2000000210.623:812): avc: denied { create } for pid=11067 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 430.160389][ T5865] usb 6-1: SerialNumber: syz [ 430.308618][ T5865] usb 6-1: config 0 descriptor?? [ 430.318230][T11068] FAULT_INJECTION: forcing a failure. [ 430.318230][T11068] name failslab, interval 1, probability 0, space 0, times 0 [ 430.331164][T11068] CPU: 1 UID: 0 PID: 11068 Comm: syz.4.1285 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 430.331186][T11068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.331197][T11068] Call Trace: [ 430.331203][T11068] [ 430.331209][T11068] dump_stack_lvl+0x16c/0x1f0 [ 430.331239][T11068] should_fail_ex+0x512/0x640 [ 430.331268][T11068] should_failslab+0xc2/0x120 [ 430.331288][T11068] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 430.331305][T11068] ? skb_clone+0x190/0x3f0 [ 430.331328][T11068] skb_clone+0x190/0x3f0 [ 430.331348][T11068] packet_rcv+0x610/0x15a0 [ 430.331377][T11068] ? __pfx_packet_rcv+0x10/0x10 [ 430.331400][T11068] dev_queue_xmit_nit+0x3c8/0xca0 [ 430.331428][T11068] dev_hard_start_xmit+0x5b6/0x740 [ 430.331455][T11068] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 430.331475][T11068] __dev_queue_xmit+0x7eb/0x43e0 [ 430.331520][T11068] ? __pfx___dev_queue_xmit+0x10/0x10 [ 430.331568][T11068] ? __asan_memcpy+0x3c/0x60 [ 430.331595][T11068] ? __asan_memcpy+0x3c/0x60 [ 430.331619][T11068] ? __skb_clone+0x570/0x760 [ 430.331643][T11068] netlink_deliver_tap+0xa87/0xd30 [ 430.331671][T11068] netlink_unicast+0x5df/0x7f0 [ 430.331696][T11068] ? __pfx_netlink_unicast+0x10/0x10 [ 430.331727][T11068] netlink_sendmsg+0x8d1/0xdd0 [ 430.331753][T11068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.331786][T11068] ____sys_sendmsg+0xa95/0xc70 [ 430.331812][T11068] ? copy_msghdr_from_user+0x10a/0x160 [ 430.331830][T11068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.331864][T11068] ___sys_sendmsg+0x134/0x1d0 [ 430.331884][T11068] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.331935][T11068] __sys_sendmsg+0x16d/0x220 [ 430.331954][T11068] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.331990][T11068] do_syscall_64+0xcd/0x260 [ 430.332019][T11068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.332036][T11068] RIP: 0033:0x7f332778e969 [ 430.332050][T11068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.332066][T11068] RSP: 002b:00007f33286b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.332083][T11068] RAX: ffffffffffffffda RBX: 00007f33279b5fa0 RCX: 00007f332778e969 [ 430.332095][T11068] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000014 [ 430.332105][T11068] RBP: 00007f33286b4090 R08: 0000000000000000 R09: 0000000000000000 [ 430.332115][T11068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.332124][T11068] R13: 0000000000000000 R14: 00007f33279b5fa0 R15: 00007ffd493e7d38 [ 430.332149][T11068] [ 430.334345][T11074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11074 comm=syz.0.1287 [ 430.372822][ T30] audit: type=1400 audit(2000000210.793:813): avc: denied { create } for pid=11067 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 430.626232][ T5865] airspy 6-1:0.0: usb_control_msg() failed -32 request 09 [ 430.633396][ T5865] airspy 6-1:0.0: Could not detect board [ 430.642981][ T5865] airspy 6-1:0.0: probe with driver airspy failed with error -32 [ 430.835143][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 431.005065][ T30] audit: type=1400 audit(2000000211.393:814): avc: denied { bind } for pid=11072 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.029714][T11081] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 431.253286][ T30] audit: type=1400 audit(2000000211.713:815): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 431.702033][T11095] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1289'. [ 431.736829][T11092] ip6_vti0: entered promiscuous mode [ 431.800781][ T30] audit: type=1400 audit(2000000211.733:816): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.900718][ T30] audit: type=1400 audit(2000000211.733:817): avc: denied { read } for pid=5482 comm="dhcpcd" name="n117" dev="tmpfs" ino=5420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.947246][ T30] audit: type=1400 audit(2000000211.733:818): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n117" dev="tmpfs" ino=5420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 432.199917][ T30] audit: type=1400 audit(2000000211.733:819): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n117" dev="tmpfs" ino=5420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 432.282023][ T9] usb 6-1: USB disconnect, device number 16 [ 433.370254][ T30] audit: type=1400 audit(2000000212.193:820): avc: denied { write } for pid=11094 comm="syz.1.1289" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.393776][ T30] audit: type=1400 audit(2000000212.193:821): avc: denied { open } for pid=11094 comm="syz.1.1289" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.419332][ T30] audit: type=1400 audit(2000000212.203:822): avc: denied { ioctl } for pid=11094 comm="syz.1.1289" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.445027][ T30] audit: type=1400 audit(2000000212.203:823): avc: denied { open } for pid=11094 comm="syz.1.1289" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 433.489691][ T30] audit: type=1400 audit(2000000212.433:824): avc: denied { write } for pid=11097 comm="syz.1.1291" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.517074][ T30] audit: type=1400 audit(2000000212.453:825): avc: denied { create } for pid=11097 comm="syz.1.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 433.545362][ T30] audit: type=1400 audit(2000000212.453:826): avc: denied { connect } for pid=11097 comm="syz.1.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 433.610653][ T30] audit: type=1400 audit(2000000212.523:827): avc: denied { read } for pid=11103 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.777449][ T30] audit: type=1400 audit(2000000212.523:828): avc: denied { open } for pid=11103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.269738][ T30] audit: type=1400 audit(2000000212.523:829): avc: denied { getattr } for pid=11103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.637873][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1296'. [ 435.792133][T11144] syzkaller0: entered promiscuous mode [ 435.807924][T11144] syzkaller0: entered allmulticast mode [ 435.858820][T11144] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 435.899043][T11153] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 435.905582][T11153] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 436.004700][T11153] vhci_hcd vhci_hcd.0: Device attached [ 436.041728][T11154] vhci_hcd: connection closed [ 436.055199][ T2902] vhci_hcd: stop threads [ 436.209530][ T9] vhci_hcd: vhci_device speed not set [ 436.249933][ T2902] vhci_hcd: release socket [ 436.295697][ T9] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 436.359451][ T2902] vhci_hcd: disconnect device [ 437.326289][T11185] syz.1.1304 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 437.935807][T11198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.151978][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.502608][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 438.512131][T11206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1312'. [ 438.524507][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 438.524522][ T30] audit: type=1400 audit(2000000219.033:841): avc: denied { read write } for pid=11204 comm="syz.1.1312" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 438.554294][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.571071][ T30] audit: type=1400 audit(2000000219.073:842): avc: denied { open } for pid=11204 comm="syz.1.1312" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 438.599092][ T30] audit: type=1400 audit(2000000219.073:843): avc: denied { mount } for pid=11204 comm="syz.1.1312" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 438.620994][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.534201][T11214] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.589882][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.596303][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.111997][T11230] input: syz1 as /devices/virtual/input/input32 [ 441.123673][ T30] audit: type=1400 audit(2000000221.513:844): avc: denied { read write } for pid=11225 comm="syz.3.1317" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 441.272064][ T3076] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 441.280550][ T30] audit: type=1400 audit(2000000221.513:845): avc: denied { open } for pid=11225 comm="syz.3.1317" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 441.311581][ T30] audit: type=1400 audit(2000000221.613:846): avc: denied { ioctl } for pid=11225 comm="syz.3.1317" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 441.337840][ T30] audit: type=1400 audit(2000000221.653:847): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=3609 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.406489][ T9] vhci_hcd: vhci_device speed not set [ 441.445867][ T30] audit: type=1400 audit(2000000221.653:848): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3609 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.472138][ T30] audit: type=1400 audit(2000000221.653:849): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3609 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.527148][ T3076] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 441.538808][ T3076] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 441.623163][ T3076] usb 5-1: config 0 has no interface number 0 [ 441.675640][ T3076] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.715647][ T3076] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 441.776719][ T3076] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.801569][ T3076] usb 5-1: config 0 interface 52 has no altsetting 0 [ 441.824027][ T3076] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 441.843947][ T3076] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 441.863937][ T3076] usb 5-1: Product: syz [ 441.995949][ T3076] usb 5-1: SerialNumber: syz [ 442.007601][ T3076] usb 5-1: config 0 descriptor?? [ 442.590924][ T30] audit: type=1400 audit(2000000222.993:850): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 442.905113][ T3076] usb 5-1: can't set config #0, error -71 [ 442.912850][ T3076] usb 5-1: USB disconnect, device number 52 [ 444.589101][ T5893] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 444.612769][ T873] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 444.626776][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 444.655291][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 444.724609][T11261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1326'. [ 444.775815][ T5893] usb 6-1: device descriptor read/64, error -32 [ 444.918826][T11264] xt_CT: No such helper "snmp" [ 445.153902][ T3076] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 445.161963][ T5893] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 445.185877][ T873] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 445.375672][ T3076] usb 4-1: device descriptor read/64, error -71 [ 445.422478][T11268] fido_id[11268]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 445.457500][ T5893] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 445.481271][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.499799][ T5893] usb 6-1: Product: syz [ 445.527812][ T5893] usb 6-1: Manufacturer: syz [ 445.561134][ T5893] usb 6-1: SerialNumber: syz [ 445.646533][T11276] kAFS: unparsable volume name [ 446.112488][ T3076] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 446.136708][ T5893] usb 6-1: config 0 descriptor?? [ 446.349628][ T5893] airspy 6-1:0.0: usb_control_msg() failed -32 request 09 [ 446.378279][ T873] hid-generic 0000:0004:0009.001D: unknown main item tag 0x0 [ 446.378344][ T5893] airspy 6-1:0.0: Could not detect board [ 446.385880][ T873] hid-generic 0000:0004:0009.001D: unknown main item tag 0x0 [ 446.399961][ T873] hid-generic 0000:0004:0009.001D: unknown main item tag 0x0 [ 446.409740][ T873] hid-generic 0000:0004:0009.001D: hidraw0: HID v0.04 Device [syz0] on syz1 [ 446.434672][ T5893] airspy 6-1:0.0: probe with driver airspy failed with error -32 [ 446.586623][ T30] audit: type=1400 audit(2000000227.050:851): avc: denied { read } for pid=11277 comm="syz.4.1330" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 446.712997][ T31] INFO: task syz.2.849:9076 blocked for more than 143 seconds. [ 446.910453][ T31] Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 [ 446.967444][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.027105][T11289] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 447.070934][ T31] task:syz.2.849 state:D stack:25160 pid:9076 tgid:9075 ppid:5810 task_flags:0x400140 flags:0x00004006 [ 447.766624][ T31] Call Trace: [ 447.770085][ T31] [ 447.773022][ T31] __schedule+0x116f/0x5de0 [ 447.785773][ T31] ? __update_page_owner_handle+0x37c/0x530 [ 447.792026][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 447.800357][ T31] ? __pfx___schedule+0x10/0x10 [ 447.805428][ T31] ? find_held_lock+0x2b/0x80 [ 447.813453][ T31] ? schedule+0x2d7/0x3a0 [ 447.818230][ T31] schedule+0xe7/0x3a0 [ 447.822406][ T31] io_schedule+0xbf/0x130 [ 447.827072][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 447.832918][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 447.839789][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 447.846241][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 447.852425][ T31] ? __pfx___might_resched+0x10/0x10 [ 447.858107][ T31] migrate_pages_batch+0x14d0/0x31a0 [ 447.863401][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 447.868930][ T31] ? __pfx_compaction_free+0x10/0x10 [ 447.874222][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 447.880093][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 447.885137][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 447.890669][ T31] ? __pfx_compaction_free+0x10/0x10 [ 447.896283][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 447.901917][ T31] ? find_held_lock+0x2b/0x80 [ 447.906685][ T31] ? isolate_movable_page+0x124/0x750 [ 447.912114][ T31] migrate_pages+0x1b28/0x2350 [ 447.916985][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 447.922396][ T31] ? __pfx_compaction_free+0x10/0x10 [ 447.927855][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 447.932975][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 447.939321][ T31] ? pfn_to_online_page+0x1b0/0x4d0 [ 447.944984][ T31] compact_zone+0x1f6c/0x45f0 [ 447.949800][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 447.955940][ T31] ? __pfx_compact_zone+0x10/0x10 [ 447.960981][ T31] ? find_held_lock+0x2b/0x80 [ 447.965743][ T31] ? __flush_work+0x938/0xcc0 [ 447.970433][ T31] ? __flush_work+0x4d0/0xcc0 [ 447.975119][ T31] compact_node+0x1a4/0x2d0 [ 447.979691][ T31] ? __pfx_compact_node+0x10/0x10 [ 447.984735][ T31] ? __lru_add_drain_all+0xe7/0x6f0 [ 447.990014][ T31] sysctl_compaction_handler+0x141/0x210 [ 447.995699][ T31] proc_sys_call_handler+0x3c2/0x5c0 [ 448.000980][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 448.006864][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.011629][ T31] ? splice_from_pipe_next+0x1f8/0x5d0 [ 448.017136][ T31] iter_file_splice_write+0x91f/0x1150 [ 448.022608][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 448.028577][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 448.033960][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 448.040070][ T31] direct_splice_actor+0x192/0x6c0 [ 448.045771][ T31] splice_direct_to_actor+0x342/0xa30 [ 448.051156][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 448.057409][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 448.063318][ T31] ? __pfx___might_resched+0x10/0x10 [ 448.068769][ T31] do_splice_direct+0x174/0x240 [ 448.073633][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 448.079049][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 448.084948][ T31] ? rw_verify_area+0xcf/0x680 [ 448.089815][ T31] do_sendfile+0xafd/0xe50 [ 448.094274][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 448.099462][ T31] __x64_sys_sendfile64+0x154/0x220 [ 448.104674][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 448.110490][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.115254][ T31] do_syscall_64+0xcd/0x260 [ 448.119779][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.125756][ T31] RIP: 0033:0x7ff684b8e969 [ 448.130163][ T31] RSP: 002b:00007ff685ac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 448.138608][ T31] RAX: ffffffffffffffda RBX: 00007ff684db5fa0 RCX: 00007ff684b8e969 [ 448.147240][ T31] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 000000000000000b [ 448.155219][ T31] RBP: 00007ff684c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 448.163835][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 448.171869][ T31] R13: 0000000000000000 R14: 00007ff684db5fa0 R15: 00007ffdb72bbb08 [ 448.179977][ T31] [ 448.183006][ T31] [ 448.183006][ T31] Showing all locks held in the system: [ 448.190776][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 448.205608][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 448.225643][ T31] 1 lock held by khungtaskd/31: [ 448.230518][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 448.255646][ T31] 2 locks held by getty/5580: [ 448.260777][ T31] #0: ffff888036cf10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 448.270619][ T31] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 448.280786][ T31] 1 lock held by udevd/6006: [ 448.285383][ T31] #0: ffff8880267fb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 448.294989][ T31] 1 lock held by syz.2.849/9076: [ 448.299996][ T31] #0: ffff888012f74420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 448.310090][ T31] 2 locks held by syz.5.1327/11289: [ 448.315282][ T31] #0: ffffffff8f57c988 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xc2/0x2660 [ 448.324004][ T31] #1: ffffffff90128d68 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x17cd/0x2660 [ 448.332932][ T31] 2 locks held by syz.4.1330/11288: [ 448.338185][ T31] #0: ffffffff90128d68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 448.347656][ T31] #1: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 448.362814][ T31] 1 lock held by syz.3.1332/11296: [ 448.369474][ T31] #0: ffffffff90128d68 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0x980/0x84c0 [ 448.382237][ T31] 1 lock held by syz.3.1332/11297: [ 448.391501][ T31] #0: ffffffff90128d68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 448.401243][ T31] [ 448.403595][ T31] ============================================= [ 448.403595][ T31] [ 448.474484][T11297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.481966][ T31] NMI backtrace for cpu 0 [ 448.481983][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 448.482004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.482014][ T31] Call Trace: [ 448.482020][ T31] [ 448.482027][ T31] dump_stack_lvl+0x116/0x1f0 [ 448.482057][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 448.482076][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 448.482100][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.482119][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 448.482142][ T31] watchdog+0xf70/0x12c0 [ 448.482165][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.482182][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.482205][ T31] ? __kthread_parkme+0x19e/0x250 [ 448.482229][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.482244][ T31] kthread+0x3c2/0x780 [ 448.482259][ T31] ? __pfx_kthread+0x10/0x10 [ 448.482272][ T31] ? __pfx_kthread+0x10/0x10 [ 448.482286][ T31] ? __pfx_kthread+0x10/0x10 [ 448.482300][ T31] ? __pfx_kthread+0x10/0x10 [ 448.482314][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.482332][ T31] ? __pfx_kthread+0x10/0x10 [ 448.482347][ T31] ret_from_fork+0x45/0x80 [ 448.482367][ T31] ? __pfx_kthread+0x10/0x10 [ 448.482381][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.482414][ T31] [ 448.482420][ T31] Sending NMI from CPU 0 to CPUs 1: [ 448.487056][T11297] batadv_slave_0: entered promiscuous mode [ 448.498503][ C1] NMI backtrace for cpu 1 [ 448.498515][ C1] CPU: 1 UID: 0 PID: 11297 Comm: syz.3.1332 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 448.498532][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.498540][ C1] RIP: 0010:io_serial_out+0x8f/0xb0 [ 448.498560][ C1] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 31 0c d1 fc eb a0 e8 ba 0c d1 [ 448.498573][ C1] RSP: 0018:ffffc9000437e9c8 EFLAGS: 00000002 [ 448.498593][ C1] RAX: 0000000000000020 RBX: 00000000000003f8 RCX: 0000000000000000 [ 448.498601][ C1] RDX: 00000000000003f8 RSI: ffffffff854fb975 RDI: ffffffff9adfe5a0 [ 448.498616][ C1] RBP: ffffffff9adfe560 R08: 0000000000000001 R09: 000000000000001f [ 448.498624][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 448.498632][ C1] R13: 0000000000000020 R14: ffffffff9adfe560 R15: ffffffff854fb910 [ 448.498641][ C1] FS: 00007f05da11c6c0(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 448.498654][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.498663][ C1] CR2: 000055557476a5c8 CR3: 0000000035a39000 CR4: 00000000003526f0 [ 448.498672][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.498680][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.498688][ C1] Call Trace: [ 448.498692][ C1] [ 448.498698][ C1] serial8250_console_write+0xfbf/0x1890 [ 448.498721][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 448.498739][ C1] ? lock_acquire+0x179/0x350 [ 448.498763][ C1] console_flush_all+0x801/0xc60 [ 448.498781][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 448.498799][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 448.498817][ C1] console_unlock+0xd8/0x210 [ 448.498832][ C1] ? __pfx_console_unlock+0x10/0x10 [ 448.498850][ C1] vprintk_emit+0x418/0x6d0 [ 448.498865][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 448.498880][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 448.498903][ C1] _printk+0xc7/0x100 [ 448.498921][ C1] ? __pfx__printk+0x10/0x10 [ 448.498940][ C1] ? find_held_lock+0x2b/0x80 [ 448.498956][ C1] ? __dev_close_many+0x632/0x770 [ 448.498976][ C1] __netdev_printk+0x379/0x500 [ 448.498994][ C1] netdev_info+0xe4/0x120 [ 448.499009][ C1] ? __pfx_netdev_info+0x10/0x10 [ 448.499027][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 448.499046][ C1] ? netpoll_poll_enable+0x27/0xf0 [ 448.499063][ C1] __dev_set_promiscuity+0x170/0x590 [ 448.499077][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 448.499095][ C1] __dev_change_flags+0x2d1/0x720 [ 448.499110][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 448.499125][ C1] ? lock_acquire+0x179/0x350 [ 448.499143][ C1] ? __pfx_validate_linkmsg+0x10/0x10 [ 448.499159][ C1] netif_change_flags+0x8d/0x160 [ 448.499174][ C1] do_setlink.constprop.0+0xddf/0x44b0 [ 448.499191][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 448.499211][ C1] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 448.499228][ C1] ? __bpf_trace_contention_end+0xc9/0x110 [ 448.499247][ C1] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 448.499267][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 448.499283][ C1] ? mark_held_locks+0x49/0x80 [ 448.499301][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 448.499317][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.499335][ C1] ? __mutex_lock+0x1ca/0xb90 [ 448.499354][ C1] ? rtnl_newlink+0x600/0x2000 [ 448.499369][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 448.499386][ C1] ? cap_capable+0xb3/0x250 [ 448.499405][ C1] ? netlink_ns_capable+0xfa/0x130 [ 448.499422][ C1] rtnl_newlink+0x1446/0x2000 [ 448.499440][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 448.499456][ C1] ? __rcu_read_unlock+0x2b4/0x580 [ 448.499476][ C1] ? avc_has_perm_noaudit+0x149/0x3b0 [ 448.499493][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 448.499517][ C1] ? find_held_lock+0x2b/0x80 [ 448.499531][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 448.499545][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 448.499558][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 448.499574][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 448.499589][ C1] rtnetlink_rcv_msg+0x95e/0xe90 [ 448.499610][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 448.499627][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 448.499649][ C1] netlink_rcv_skb+0x16d/0x440 [ 448.499665][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 448.499680][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.499696][ C1] ? find_held_lock+0x2b/0x80 [ 448.499720][ C1] netlink_unicast+0x53a/0x7f0 [ 448.499737][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 448.499756][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 448.499774][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.499794][ C1] ____sys_sendmsg+0xa95/0xc70 [ 448.499813][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 448.499827][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.499849][ C1] ___sys_sendmsg+0x134/0x1d0 [ 448.499864][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.499892][ C1] __sys_sendmsg+0x16d/0x220 [ 448.499905][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.499919][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 448.499939][ C1] ? rcu_is_watching+0x12/0xc0 [ 448.499957][ C1] do_syscall_64+0xcd/0x260 [ 448.499976][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.499989][ C1] RIP: 0033:0x7f05d938e969 [ 448.500000][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.500012][ C1] RSP: 002b:00007f05da11c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.500023][ C1] RAX: ffffffffffffffda RBX: 00007f05d95b6240 RCX: 00007f05d938e969 [ 448.500031][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 448.500039][ C1] RBP: 00007f05d9410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 448.500047][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.500054][ C1] R13: 0000000000000000 R14: 00007f05d95b6240 R15: 00007ffc404c2d68 [ 448.500068][ C1] [ 448.540890][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 448.540906][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 448.540925][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.540935][ T31] Call Trace: [ 448.540942][ T31] [ 448.540948][ T31] dump_stack_lvl+0x3d/0x1f0 [ 448.540976][ T31] panic+0x71c/0x800 [ 448.541000][ T31] ? __pfx_panic+0x10/0x10 [ 448.541022][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 448.541042][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.541058][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 448.541074][ T31] ? watchdog+0xdda/0x12c0 [ 448.541090][ T31] ? watchdog+0xdcd/0x12c0 [ 448.541108][ T31] watchdog+0xdeb/0x12c0 [ 448.541128][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.541142][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.541165][ T31] ? __kthread_parkme+0x19e/0x250 [ 448.541189][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.541204][ T31] kthread+0x3c2/0x780 [ 448.541220][ T31] ? __pfx_kthread+0x10/0x10 [ 448.541234][ T31] ? __pfx_kthread+0x10/0x10 [ 448.541248][ T31] ? __pfx_kthread+0x10/0x10 [ 448.541262][ T31] ? __pfx_kthread+0x10/0x10 [ 448.541276][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.541296][ T31] ? __pfx_kthread+0x10/0x10 [ 448.541311][ T31] ret_from_fork+0x45/0x80 [ 448.541326][ T31] ? __pfx_kthread+0x10/0x10 [ 448.541341][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.541378][ T31] [ 448.543790][ T31] Kernel Offset: disabled