last executing test programs: 16m21.95217402s ago: executing program 0 (id=96): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$KVM_GET_MSRS(r1, 0xc0189436, &(0x7f0000000100)) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3ef, 0x7fffffff, 0x3, 0x88, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x2, 0x1, 0xe, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xa7c, 0xffffffffffffffff, 0x0, 0x5c0900a0}, 0xba9) r11 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 16m20.308338794s ago: executing program 0 (id=99): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000080)={0xea, 0x9, 0x100000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0, 0x0) 16m20.020117044s ago: executing program 0 (id=102): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}, 0x11000000}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 16m19.992055001s ago: executing program 0 (id=104): syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) gettid() timer_create(0x1, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f00000002c0)=""/26, 0x1a}], 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) 16m16.439892033s ago: executing program 0 (id=113): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1004, 0xfffffffb}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x100000011, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffc, 0x0, 'dh\x00', 0x10, 0x0, 0x65}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 16m14.784385238s ago: executing program 0 (id=118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0xc2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e1f, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1) 15m59.721088123s ago: executing program 32 (id=118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0xc2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e1f, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1) 13.680916627s ago: executing program 4 (id=3407): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb00102030109022400010004100009047ebd0226d5180809050602ff030000000905a202080000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = timerfd_create(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20010c0000000c21"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) 10.211881527s ago: executing program 4 (id=3420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32], 0x48}}, 0x0) 9.737134805s ago: executing program 1 (id=3423): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, 0x0) (async) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f0000000080)) pipe(0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x804008, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x804008, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r1], 0x0) 9.625574413s ago: executing program 4 (id=3424): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x18, &(0x7f0000000080)={0x0, 0x10, 0x5, {0x5, 0x3, "41f416"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10802, 0xa) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) getsockopt$bt_BT_SNDMTU(r0, 0x12, 0xc, 0x0, &(0x7f0000000080)) 8.224139261s ago: executing program 3 (id=3428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) setitimer(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0xffffffffffffff7f, &(0x7f0000000340)) 6.778127079s ago: executing program 3 (id=3431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x7, 0x7, 0x7b, @local, @mcast1, 0x10, 0x0, 0x5, 0x2}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r8, 0x29, 0x49, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x2, 0xc0, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x700, 0x1, 0xe90, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c8002803800010024000100616374697665706f7274000000000000000000000000000000000000000000000500030003000000080004000498e1f12b05779becce53d2cfa534645adb6ae300e753410d0964c420229d1bc50275c51a6d4cbf9bbcfb96e2077bff6488", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="940002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000001484007000000030003080000000005000a99070000000002070e00000000"], 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x4050) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000740)=0x9) sendmsg$inet(r1, &(0x7f0000000c40)={&(0x7f0000000580)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="c414239a369d1fdbafec5c3f5c3101fe4d202229b3f572e92f0d328c5df7d42740be5d44b7c973439b55902b11a4146f154562074747e1dc96f252b11f590904bf6325204d0d6f026e72023ba1c1b63d5eccc630acd1fd71cb8f33a7f66abcf1b5ba22cc14735756318185dc93be6d95ab5e77dcc76075cd5b3c5d1113924d1a85c4943a0cbaf1407eec1271e4f5056197fed13ae0649058f95c8851ae62bf5aa36babf82455", 0xa6}, {&(0x7f0000000900)="e363d53dba58c80229c5d8b9f254b888ae8c6b46373d6e15e6a5b09200ec773d83ee476db8bc60bec4422a017322c738ba7055407d9654c0028f9f0e78d3e3e4897140d6989b78d3e806b934a351d32e82141b589d77aae1d5f4b20d67949241552999da8123ae39afe874b8f8721a17eca4c0eb6f49984a1daf13b570ea14d5443ef0c3280d3b20f98b733d9ddfe6e84b2426f0e7a9dae23fa1306f5b1909adf7c05cbeb1f3da4ce19cbce389e4712ce5aec99a91b8a53458ee26aa44a4bd12e76ec7c30a4c8f16589c5eb10e31ce7559b2cd4113de2ec67493252cd8fc9bf1debbbc0e429987831b4d3e", 0xeb}, {&(0x7f0000000b40)="f2b69047921dc08f0635743f91f5862f437108673dafafeb927b0e905515fde015924b79c4e57c7e07a7a691df03cb4e6631425ca9f054782f68e8dc8747952d465979e6fd5772c2eb4d6fd5ce3ae76410f26768a59764954a303bd0549cad9ee80ad5dcc5c9f7386de9ad954f597dc5f3d7601b1305ee397b42c2c720b7850281619427f83e0ee57d8aa393e85c0b3a7f237bb0c4e2888a0e9bc0e3c981012f85d0d0da21f73f2771c47310ddc126c9afec7a7a427d9e413a63bdb3a770763334f0039a94f02958b8ef6f7bd35a0264935d88240afa9c9005c55682a11c1d2ed4ca4473cbbe97328d4d", 0xea}, {&(0x7f0000000a40)="272451cc240584c4715582f474297cdb6d0eb5938e4490db15184759eba93c9b4bf95e5865b9cce853d3fdeed3fca4ec62f2f7fbd2a5af5ea76ca0a14c9edaa4c96d53129717280c83521229651e82593f7898a9", 0x54}], 0x4}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x0, @loopback}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="1977000000000000000004040000"], 0x14}}, 0x0) 6.461530669s ago: executing program 1 (id=3432): syz_emit_ethernet(0x42, 0x0, &(0x7f00000000c0)={0x0, 0x4, [0x602, 0xb2c, 0x54f, 0xb57]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @remote}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, @empty, @empty}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40044103, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.196300072s ago: executing program 3 (id=3433): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x24, 0x65, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0x6}}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0xffffffffffff8000, 0x16000, 0x1}) ioctl$TCXONC(r0, 0x540a, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4814) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}, 0x24088854) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000400)=0x13) 5.08665838s ago: executing program 1 (id=3434): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = getpid() removexattr(0x0, &(0x7f0000000200)=@known='user.incfs.id\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x2, 0x10000000, 0x3e, r1, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000c40)={0xf, 0x1, 0x0, "7deb91d437e2dd6fc1432eea703c0bf501ac5a36ff3c7829c2779640450064eb", 0x38303553}) 5.030269892s ago: executing program 3 (id=3436): bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) readv(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd50, 0x8}, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001980)={{}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000600)={0x0, 0x0, 0x10, 0x7fffffffffffffff, 0x100000001, 0x3, 0x0, 0x8, 0x7, 0x0, 0xffff303d, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.920277506s ago: executing program 4 (id=3438): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) write$binfmt_script(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000050bf2920d219acf24f840102030109022f000100000000090400000002060000052406000105240000000d240f0100000000000000e0ff05241a"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x810) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000020f7f755de0000fa3b4d51e1e87c390064b64137fb2a7f5b65dcc8310000"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb863, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='contention_end\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$midi(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f"], 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0xb2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) recvmsg(r0, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) 4.893265675s ago: executing program 1 (id=3439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400c000400040082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x2000000000000069, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xc2040) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000880)={0x0, 0x4, 0x7f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x4ced, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_normal', 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000700)=""/102, 0x66}], 0x5, &(0x7f0000001900)=""/4096, 0x1000}, 0x57a}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 4.236356807s ago: executing program 5 (id=3442): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fallocate(0xffffffffffffffff, 0x0, 0x55d7, 0x2) clock_nanosleep(0xfffffff4, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ptype\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, 0xc81, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) r7 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000001c0)=0xff, 0x12) 3.876561396s ago: executing program 1 (id=3443): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001340)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/80, 0x50}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/156, 0x9c}, {&(0x7f0000001440)=""/119, 0x77}], 0xa, &(0x7f0000000900)=""/146, 0x92}, 0x5eb5}, {{&(0x7f00000009c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0x7}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001580)=""/255, 0xff}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000ac0)=""/38, 0x26}], 0x3, &(0x7f0000000d80)=""/81, 0x51}, 0x98f3a26}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000e00)=""/138, 0x8a}, {&(0x7f0000000ec0)=""/225, 0xe1}, {&(0x7f0000001000)=""/115, 0x73}, {&(0x7f0000001080)=""/116, 0x74}, {&(0x7f0000001100)=""/207, 0xcf}, {&(0x7f0000001200)=""/86, 0x56}], 0x6, &(0x7f0000001300)=""/18, 0x12}, 0xf}], 0x4, 0x10180, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r11, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x40}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_pidfd_open(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.84747279s ago: executing program 2 (id=3444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0xffd8, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 3.616149488s ago: executing program 3 (id=3445): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fallocate(0xffffffffffffffff, 0x0, 0x55d7, 0x2) clock_nanosleep(0xfffffff4, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ptype\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, 0xc81, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 2.932648133s ago: executing program 1 (id=3446): r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0xc4f7, 0x2, 0x3, 0x6, 0x7, r1}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, 0x0, 0x16) times(0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1000, &(0x7f0000000280)={[{@quota}, {@inode32}, {@grpquota}], [{@euid_lt={'euid<', r6}}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x0, "59416d570165203d41bec7080089122c000004002231a11000000900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_usb_connect(0x4, 0x6ff, &(0x7f00000006c0)={{0x12, 0x1, 0x882cbc1b23755189, 0xf4, 0x30, 0x58, 0x97, 0x2040, 0xd900, 0x52bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ed, 0x4, 0x3f, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x3a, 0x3, 0x8, 0x8e, 0xe7, 0x94, 0x4, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "3f6abaf550b1"}, {0x5, 0x24, 0x0, 0xf800}, {0xd, 0x24, 0xf, 0x1, 0xe7, 0x0, 0x401, 0xfd}, {0x6, 0x24, 0x1a, 0xfffd, 0xa}, [@mdlm_detail={0x1f, 0x24, 0x13, 0x2, "8195af517dc3704764330b71e579ecaddfe119adbc3fa24924a069"}, @mbim={0xc, 0x24, 0x1b, 0x40, 0x0, 0x5, 0xe, 0xcc, 0xf}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "27f6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8001, 0xfb}, {0x6, 0x24, 0x1a, 0x1, 0x39}, [@mdlm_detail={0x100, 0x24, 0x13, 0x4, "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"}, @mdlm_detail={0xb1, 0x24, 0x13, 0x1, "8e52559e42f9cb487a611d293eea8d33364eb2be973bad2eb99c2210d6f2762897d312a548bf42170cc5082eae3bc6cbf2357d52c647a80655d4616543ec7779e53eed49669e05b7d268f65e0690198495d7bf972ac069c41f7ed2ec61eb72f2bd50927b9e70f5479065ec5a57065157ee6ff9a614dd97a7fc4c22122aca18a8bf5a453f021506083f73c2b4f67f7eee4a0ad43226116f4515433dc1e28db4746d3512503191dfcceea63519df"}]}], [{{0x9, 0x5, 0x5, 0x1, 0x10, 0x0, 0x72, 0x0, [@generic={0x56, 0x11, "8049d42242d0c6d84d336d9401be54051ee70ed716e33b65164ae4bdd05241cad4831032c8f759df8c55619b461fa13df7f370cded1c1e455a612f4b272c074af8c30992a1d32cfe1cbac0a17d7a5e45aefe45ad"}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0x8f, 0x7ff}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x10, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xd, 0x0, 0x5, [@generic={0x18, 0xf, "322fb5287fcfc2d57faf467c905a302bd1c5ea023b0a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x66, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x10, 0xb, 0x9, [@generic={0x2a, 0x24, "02b5901421e09fa3757f96e08a04ca4ae570d4a9b6e8991bc2772f09aea1759d201799d39ea82e96"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x6, 0x0, 0x7a}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x5f, 0x9c, 0x9, [@generic={0x60, 0xa, "5d2409a12bde4f36d6ef31806bc850c18307a92d9262ab4734f98b41483658da91ee14564965c0547287260fb782743dc6a0a72059d05171f65f2ce564db1c24a38e95e5c5ef9b26132e10e8466a576fdea650c3f54a4f97d763267c29af"}, @generic={0x4, 0xe, "2392"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x4, 0x9c, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfc, 0x3}]}}]}}, {{0x9, 0x4, 0x77, 0xfe, 0x4, 0x51, 0x9f, 0x4a, 0x5, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "db"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x504, 0x7, 0x2, 0x5}, [@acm={0x4, 0x24, 0x2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x81, 0xffff}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6c, 0x4, 0x10, 0x0, '@%'}]}], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x1, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x3}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0xf7, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x9, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x23ef}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xd}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x6, 0x7, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}]}}, {{0x9, 0x4, 0xd7, 0x18, 0x1, 0xc7, 0xcb, 0x47, 0x8c, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x1, 0xe, 0x0, "47ea"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x5, 0x3e, "6e5f2f7f"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x68, 0x1, 0x1, 0x7, "ce868b9c5d7f63"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0xfc, 0x6, "b5"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x80, 0x3}, @as_header={0x7, 0x24, 0x1, 0xfd, 0x46}]}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x2, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xec, 0x1}, @generic={0x9d, 0xb, "f3bcf2fe5bedc6a0d93945e38fa2d9ab1108e142000c4ad26a82d4c74ed6cdd5a1e6c266310cbd8ef7d1d3164f6a356decea6491aff29cd2e5d9897f54b5e7d14825e380118bfb10dcd5f651cce0f29ba6c016594c38ddaeec5fec01068180e800b75a56d6fe606d645eebbaf2ed9b7ce6cdbe673f03f820084c1851dc5e9ce4716902ea7185b68fcf88351bdc482ffcc33ffb27a77e03b557adb2"}]}}]}}, {{0x9, 0x4, 0xd0, 0x6, 0x9, 0xff, 0xff, 0xff, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "298381"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x5, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x6}]}], [{{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x8, 0xb}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x10, 0x7f, 0x8c}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x7, 0xa9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0xa, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x60, 0x6, 0xfe, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x2}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x8b, 0xb, 0xff, [@generic={0xe7, 0x6, "357cb84b5dc7dbfd1616db06442625aa0f3d1262486432bb4b28bd607c4bd5dac346bf4af84d6405ba4452ba35962389df83c8a25211e723da9ae2292f49a3ddaed1eb37327952166f36512705ede6873f8abd79512b876cc7f17e5b3662d507e1af8a8d2d20939f152c951341aaa9be9f1b533d77c82f994bbfbc039fbfd1b6d406d519027d3b5d4789a4ec24bd21e94cfd3f700609bf7141b3087a848ab670105bbc87ebc560bf7112c63dd55ef18227953411f810c6f6e9bf78d8ca4adc663a9e5377ee771222af4a1061646a8d9b76ad3c3ee4e3b4ed985b0181aca5a2e39b5cca4c5a"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xfe, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x800}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x9e, 0xd6}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc0, 0x4, 0x1, [@generic={0x64, 0x69, "12d5751cafc06a6a51dc348f8ce01485d6fca4d0472834dc3b105573b9a1bd0847d9f67dc62607ef4681b495f7cb28e036e43bacd961762b97408296c816b9b8958e9e2a3bc69d411efca96bf695c390dd41f16ebbfc9da2b95c0adc2f55d36afe52"}, @generic={0x4, 0x22, "1f23"}]}}, {{0x9, 0x5, 0x9, 0x27c957ff7a5d7d08, 0x8, 0x4, 0x0, 0x5, [@generic={0x6, 0x22, "3de269af"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0x400}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x3, 0x46, 0x5, 0x40, 0xc}, 0x35, &(0x7f00000001c0)={0x5, 0xf, 0x35, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xfb, 0x58, 0x8, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x10, 0xa6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x5, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "f2ad74b637000fcb59a02fc1e56ec8d9"}]}, 0x2, [{0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="7a0396d872c07757b1e1dca204f6378ddeb9ac0ab6667a65e4160b713837fbe94200f700ec77bcb7fc91205e5755d445b71d99a723f033d894bbd0fa0f2a4ae1d96aa3de2f0e910cdbd74c984f10e1b001a9e589b44aa31c070299b412030293005c1062a86db583d99ef31cdaa91df1eae815e7630325f3ce1b"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x459}}]}) 2.852198966s ago: executing program 5 (id=3447): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fallocate(0xffffffffffffffff, 0x0, 0x55d7, 0x2) clock_nanosleep(0xfffffff4, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ptype\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, 0xc81, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) r7 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000001c0)=0xff, 0x12) 2.812192176s ago: executing program 2 (id=3448): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0xffffff7f00000000, 0x0) 1.512267508s ago: executing program 2 (id=3449): r0 = userfaultfd(0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x81f) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000040), 0xbfaafea3a8346deb, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000280)={0xf, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r7 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r7, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r9, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) 1.487590255s ago: executing program 3 (id=3450): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) utime(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf564}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) syz_open_procfs$userns(r3, &(0x7f0000000300)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000305000000878d9b78d6277415e49481a62ffd70f36bd0cf60771bf291dd03f9129b110d8f0da3c4cb00cd0b4065db19349238ad2e445252c3fa83820633f55aae358694ffbc16f00aa05bf5ad8fb2d826e071dfa8c42cc5e45e1ed5110a771420589d9a42cc0d57568140935f307f34756facdfc3ca68344f0b4ebcc13a1a44f4ac12be36ee87c7a8a91e0bdabbe55da83a462b33ec2f6b5b2e3b2c33dbef6579ad12ba48f7b0112371d955185dc0e700cb6673f4c3864e7010d091f8fa0512f6f52c272a4993d1e136981a033d7285105050c5129b10e4da5f3e7c0b7e3492dc248ce4bdebe03c49b9a19356b7bac01981af6124c7", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b000000000005000c0000000000"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf2516000000050004000100000018000180140002ff76657468305f746f5f62617461647614050002000000000005000200000000000500020001000000050004000000000005000300010000000500020000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) ptrace(0x10, 0x1) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$CEC_G_MODE(r6, 0x80046108, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xeffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 612.933954ms ago: executing program 2 (id=3451): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e800500"], 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 592.576566ms ago: executing program 5 (id=3452): syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00071100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22000090"], 0x0) 496.451967ms ago: executing program 5 (id=3453): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0xfffffffffffff000) 488.360355ms ago: executing program 2 (id=3454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000120000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 478.178344ms ago: executing program 5 (id=3455): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000480)=0x40) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0), 0x4) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x189202) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='freezer.state\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x1d, 0x3, 0x1) 340.396808ms ago: executing program 2 (id=3456): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x52, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000d50d000000006203000601e1dd661b58df28331e"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a14e5f40704000000000000000001000300000000", 0x1c) 177.104081ms ago: executing program 5 (id=3457): syz_usb_connect(0x2, 0x440, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) 155.433254ms ago: executing program 4 (id=3458): r0 = socket$pptp(0x18, 0x1, 0x2) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (rerun: 64) close(r1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) (async, rerun: 64) accept(r0, 0x0, 0x0) 0s ago: executing program 4 (id=3459): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6e0000000000080000000000000000000000000000f408020000006070a6000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='consume_skb\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x4000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) fcntl$setstatus(r5, 0x4, 0x2000) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$evdev(r6, &(0x7f00000001c0)=[{{}, 0x2, 0x8, 0x4}], 0x18) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) read$msr(r7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) write$FUSE_NOTIFY_POLL(r5, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000003c0)={0x0, 0x1b, 0xfffdffc0, 0x3, 0x1, "b904cfc27929a30020000000000009004000", 0x0, 0x87}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) kernel console output (not intermixed with test programs): 0] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.640376][T17410] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 941.646270][T17410] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.651826][T17410] ? rcu_is_watching+0x12/0xc0 [ 941.656591][T17410] ? __rcu_read_unlock+0x2b4/0x580 [ 941.661711][T17410] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.667268][T17410] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 941.673602][T17410] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.679153][T17410] __vmalloc_noprof+0x6d/0x90 [ 941.683834][T17410] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.689388][T17410] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.694763][T17410] ? security_capable+0x7e/0x260 [ 941.699710][T17410] bpf_prog_alloc+0x3b/0x230 [ 941.704301][T17410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 941.710221][T17410] bpf_prog_load+0x1b3f/0x2660 [ 941.714989][T17410] ? __pfx_bpf_prog_load+0x10/0x10 [ 941.720121][T17410] __sys_bpf+0x402b/0x49a0 [ 941.724541][T17410] ? finish_task_switch.isra.0+0x217/0xcc0 [ 941.730342][T17410] ? __switch_to+0x650/0x1180 [ 941.735027][T17410] ? __pfx___sys_bpf+0x10/0x10 [ 941.739788][T17410] ? __schedule+0xe5d/0x5740 [ 941.744386][T17410] ? __pfx___schedule+0x10/0x10 [ 941.749266][T17410] __x64_sys_bpf+0x78/0xc0 [ 941.753682][T17410] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.758885][T17410] do_syscall_64+0xcd/0x250 [ 941.763389][T17410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.769296][T17410] RIP: 0033:0x7f4a2537e719 [ 941.773710][T17410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.775455][ T5823] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 941.793304][T17410] RSP: 002b:00007f4a26129038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 941.793329][T17410] RAX: ffffffffffffffda RBX: 00007f4a25536130 RCX: 00007f4a2537e719 [ 941.793340][T17410] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000005 [ 941.793352][T17410] RBP: 00007f4a26129090 R08: 0000000000000000 R09: 0000000000000000 [ 941.793364][T17410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.793376][T17410] R13: 0000000000000000 R14: 00007f4a25536130 R15: 00007ffc1a8dc2e8 [ 941.793399][T17410] [ 941.854775][T17410] warn_alloc: 1 callbacks suppressed [ 941.854829][T17410] syz.2.2989: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 941.864733][T17028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.885266][T17410] CPU: 0 UID: 0 PID: 17410 Comm: syz.2.2989 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 941.893873][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.896018][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 941.896032][T17410] Call Trace: [ 941.896038][T17410] [ 941.896045][T17410] dump_stack_lvl+0x16c/0x1f0 [ 941.896070][T17410] warn_alloc+0x24d/0x3a0 [ 941.896094][T17410] ? __pfx_warn_alloc+0x10/0x10 [ 941.896115][T17410] ? rcu_is_watching+0x12/0xc0 [ 941.896138][T17410] ? trace_kmalloc+0x2d/0xe0 [ 941.896163][T17410] ? __kasan_kmalloc+0x8a/0xb0 [ 941.896184][T17410] ? __get_vm_area_node+0x1bc/0x2d0 [ 941.896208][T17410] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 941.896230][T17410] ? rcu_is_watching+0x12/0xc0 [ 941.896254][T17410] ? __rcu_read_unlock+0x2b4/0x580 [ 941.896280][T17410] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.896313][T17410] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 941.896341][T17410] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.896366][T17410] __vmalloc_noprof+0x6d/0x90 [ 941.896386][T17410] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.896412][T17410] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 941.896437][T17410] ? security_capable+0x7e/0x260 [ 941.896468][T17410] bpf_prog_alloc+0x3b/0x230 [ 941.896492][T17410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 941.896523][T17410] bpf_prog_load+0x1b3f/0x2660 [ 941.896548][T17410] ? __pfx_bpf_prog_load+0x10/0x10 [ 941.896589][T17410] __sys_bpf+0x402b/0x49a0 [ 941.896609][T17410] ? finish_task_switch.isra.0+0x217/0xcc0 [ 941.896630][T17410] ? __switch_to+0x650/0x1180 [ 941.896653][T17410] ? __pfx___sys_bpf+0x10/0x10 [ 941.896673][T17410] ? __schedule+0xe5d/0x5740 [ 941.896698][T17410] ? __pfx___schedule+0x10/0x10 [ 941.896748][T17410] __x64_sys_bpf+0x78/0xc0 [ 941.896768][T17410] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.896795][T17410] do_syscall_64+0xcd/0x250 [ 941.896819][T17410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.896846][T17410] RIP: 0033:0x7f4a2537e719 [ 941.896862][T17410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.896880][T17410] RSP: 002b:00007f4a26129038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 941.896900][T17410] RAX: ffffffffffffffda RBX: 00007f4a25536130 RCX: 00007f4a2537e719 [ 941.896913][T17410] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000005 [ 941.896926][T17410] RBP: 00007f4a26129090 R08: 0000000000000000 R09: 0000000000000000 [ 941.896937][T17410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.896948][T17410] R13: 0000000000000000 R14: 00007f4a25536130 R15: 00007ffc1a8dc2e8 [ 941.896971][T17410] [ 942.160757][T17410] Mem-Info: [ 942.164030][T17410] active_anon:9409 inactive_anon:0 isolated_anon:0 [ 942.164030][T17410] active_file:10888 inactive_file:49583 isolated_file:0 [ 942.164030][T17410] unevictable:768 dirty:190 writeback:0 [ 942.164030][T17410] slab_reclaimable:8493 slab_unreclaimable:106090 [ 942.164030][T17410] mapped:29351 shmem:4338 pagetables:993 [ 942.164030][T17410] sec_pagetables:0 bounce:0 [ 942.164030][T17410] kernel_misc_reclaimable:0 [ 942.164030][T17410] free:1314507 free_pcp:643 free_cma:0 [ 942.209071][ C1] vkms_vblank_simulate: vblank timer overrun [ 942.216341][T17410] Node 0 active_anon:38236kB inactive_anon:0kB active_file:43508kB inactive_file:198260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117360kB dirty:760kB writeback:0kB shmem:15816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12164kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no [ 942.248825][ C1] vkms_vblank_simulate: vblank timer overrun [ 942.255022][T17410] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 942.285308][ C1] vkms_vblank_simulate: vblank timer overrun [ 942.294176][T17410] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.321594][T17410] lowmem_reserve[]: 0 2461 2461 0 0 [ 942.327518][T17410] Node 0 DMA32 free:1330300kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:39296kB inactive_anon:0kB active_file:43508kB inactive_file:197944kB unevictable:1536kB writepending:760kB present:3129332kB managed:2549172kB mlocked:0kB bounce:0kB free_pcp:1616kB local_pcp:1272kB free_cma:0kB [ 942.358059][T17410] lowmem_reserve[]: 0 0 0 0 0 [ 942.360127][ T5823] usb 6-1: config 0 descriptor?? [ 942.367951][T17410] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 942.395283][T17410] lowmem_reserve[]: 0 0 0 0 0 [ 942.400238][T17410] Node 1 Normal free:3911588kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.429548][T17410] lowmem_reserve[]: 0 0 0 0 0 [ 942.434463][T17410] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 942.447796][T17410] Node 0 DMA32: 249*4kB (UME) 87*8kB (UME) 467*16kB (UME) 348*32kB (UME) 191*64kB (UME) 412*128kB (UME) 201*256kB (UME) 69*512kB (UME) 20*1024kB (UME) 13*2048kB (UME) 272*4096kB (UM) = 1333260kB [ 942.471339][T17410] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 942.483623][T17410] Node 1 Normal: 233*4kB (UME) 84*8kB (UME) 46*16kB (UME) 224*32kB (UME) 110*64kB (UME) 36*128kB (UE) 13*256kB (UM) 10*512kB (UME) 5*1024kB (UM) 5*2048kB (UME) 944*4096kB (M) = 3911588kB [ 942.503507][T17410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 942.513360][T17410] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 942.522775][T17410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 942.532667][T17410] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 942.542033][T17410] 64809 total pagecache pages [ 942.546800][T17410] 0 pages in swap cache [ 942.550991][T17410] Free swap = 124644kB [ 942.555252][T17410] Total swap = 124996kB [ 942.559422][T17410] 2097051 pages RAM [ 942.563250][T17410] 0 pages HighMem/MovableOnly [ 942.568053][T17410] 428036 pages reserved [ 942.572228][T17410] 0 pages cma reserved [ 942.640696][ T5823] hdpvr 6-1:0.0: firmware version 0x0 dated [ 942.647116][ T5823] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 942.716227][ T29] audit: type=1400 audit(1731486848.500:1379): avc: denied { listen } for pid=17429 comm="syz.2.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 942.767258][ T9159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.806753][ T9159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.870312][ T5823] hdpvr 6-1:0.0: device init failed [ 942.876404][ T5823] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 942.895382][ T9159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.900073][ T5823] usb 6-1: USB disconnect, device number 82 [ 943.387095][ T9159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.464754][ T5910] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 943.652255][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 943.669383][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 943.697438][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 943.724758][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 943.752474][ T5910] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 943.787258][ T29] audit: type=1400 audit(1731486849.580:1380): avc: denied { bind } for pid=17455 comm="syz.1.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 943.792931][T17456] netlink: 472 bytes leftover after parsing attributes in process `syz.1.2995'. [ 943.806848][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.806872][ T5910] usb 5-1: Product: syz [ 943.806888][ T5910] usb 5-1: Manufacturer: syz [ 943.806903][ T5910] usb 5-1: SerialNumber: syz [ 943.840517][ T5910] usb 5-1: config 0 descriptor?? [ 943.861172][ T5910] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 943.883059][ T5910] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 944.079480][ T8] usb 5-1: USB disconnect, device number 79 [ 944.109098][ T8] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 944.122451][T17472] openvswitch: netlink: Actions may not be safe on all matching packets [ 944.227084][ T29] audit: type=1400 audit(1731486850.020:1381): avc: denied { append } for pid=17477 comm="syz.5.3000" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 944.943883][ T29] audit: type=1400 audit(1731486850.730:1382): avc: denied { bind } for pid=17477 comm="syz.5.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 945.122662][T17494] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3004'. [ 945.131967][T17494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3004'. [ 945.846924][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 946.090434][T17510] openvswitch: netlink: Actions may not be safe on all matching packets [ 946.109975][T17511] netlink: 'syz.5.3011': attribute type 4 has an invalid length. [ 946.842345][ T35] erspan0: left allmulticast mode [ 946.991114][ T35] erspan0: left promiscuous mode [ 947.017673][ T35] bridge0: port 3(erspan0) entered disabled state [ 947.033182][ T35] bridge_slave_1: left allmulticast mode [ 947.039287][ T35] bridge_slave_1: left promiscuous mode [ 947.063200][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.110333][ T35] bridge_slave_0: left allmulticast mode [ 947.122472][ T35] bridge_slave_0: left promiscuous mode [ 947.155915][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.214856][T16976] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 948.266717][T17545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3021'. [ 948.369007][T17547] syz.2.3021 uses old SIOCAX25GETINFO [ 948.515818][T16976] usb 5-1: Using ep0 maxpacket: 32 [ 948.536402][ T29] audit: type=1400 audit(1731486854.320:1383): avc: denied { shutdown } for pid=17544 comm="syz.2.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.631416][T16976] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 948.704696][T16976] usb 5-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 948.724024][T16976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.734296][T16976] usb 5-1: Product: syz [ 948.738643][T16976] usb 5-1: Manufacturer: syz [ 948.743339][T16976] usb 5-1: SerialNumber: syz [ 948.750954][T16976] usb 5-1: config 0 descriptor?? [ 948.773661][T16976] usb 5-1: bad CDC descriptors [ 948.829539][ T29] audit: type=1400 audit(1731486854.610:1384): avc: denied { unmount } for pid=17028 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 949.887153][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.932637][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.950287][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.992007][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.012408][ T35] bond0 (unregistering): Released all slaves [ 950.029777][ T35] bond1 (unregistering): Released all slaves [ 950.043286][ T35] bond2 (unregistering): Released all slaves [ 950.322468][ T35] bond3 (unregistering): Released all slaves [ 950.333037][T17533] hsr0: entered promiscuous mode [ 950.357323][T17541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3018'. [ 950.368878][T17559] bridge0: port 3(erspan0) entered blocking state [ 950.375509][T17559] bridge0: port 3(erspan0) entered disabled state [ 950.382130][T17559] erspan0: entered allmulticast mode [ 950.387978][T17559] erspan0: entered promiscuous mode [ 950.393503][T17559] bridge0: port 3(erspan0) entered blocking state [ 950.399974][T17559] bridge0: port 3(erspan0) entered forwarding state [ 950.441078][T17539] lo speed is unknown, defaulting to 1000 [ 950.459335][ T5828] Bluetooth: hci0: command 0x0405 tx timeout [ 950.546222][ T35] tipc: Disabling bearer [ 950.563440][ T35] tipc: Left network mode [ 950.671771][ T35] IPVS: stopping master sync thread 9944 ... [ 950.771377][T17579] sp0: Synchronizing with TNC [ 950.778856][ T5910] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 950.802071][T17578] sp0: Found TNC [ 951.672312][T17577] [U] è` [ 951.694770][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 951.711090][ T5910] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 951.722535][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.728326][ T5823] usb 5-1: USB disconnect, device number 80 [ 951.771882][ T5910] usb 2-1: config 0 descriptor?? [ 951.802264][T17586] tipc: Started in network mode [ 951.816747][T17586] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 951.826763][T17586] tipc: Enabling of bearer rejected, failed to enable media [ 952.140678][T17596] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3031'. [ 952.657131][ T5823] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 953.026876][ T35] veth1_macvtap: left promiscuous mode [ 953.032553][ T35] veth0_macvtap: left promiscuous mode [ 953.084875][ T46] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 953.123720][ T35] veth1_vlan: left promiscuous mode [ 953.129359][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 953.137521][ T35] veth0_vlan: left promiscuous mode [ 953.143095][ T5823] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 953.154177][ T5823] usb 5-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 953.171024][T17588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.183961][T17588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.194799][T15212] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 953.198530][ T5910] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 953.215757][ T5910] asix 2-1:0.0: probe with driver asix failed with error -61 [ 953.224857][ T46] usb 3-1: device descriptor read/64, error -71 [ 953.477837][T15212] usb 4-1: Using ep0 maxpacket: 32 [ 953.487347][T17588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.620782][T17588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.625075][T15212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.641128][T15212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.671132][T15212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.708289][ T46] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 953.724916][T15212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 953.738904][T15212] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 953.748182][ T5823] usb 5-1: string descriptor 0 read error: -71 [ 953.754961][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 953.763999][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.773067][T15212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.785777][T15212] usb 4-1: config 0 descriptor?? [ 953.794298][ T5823] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 953.803832][ T5823] usb 5-1: no configuration chosen from 1 choice [ 953.813508][ T5823] usb 5-1: USB disconnect, device number 81 [ 953.864779][ T46] usb 3-1: device descriptor read/64, error -71 [ 953.974954][ T46] usb usb3-port1: attempt power cycle [ 953.991041][T17607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=17607 comm=syz.1.3025 [ 954.241890][T15212] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 954.249420][T15212] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 954.273901][T15212] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 954.302232][T15212] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 954.319461][T15212] ntrig 0003:1B96:000A.001E: unknown main item tag 0x0 [ 954.327036][ T46] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 954.366236][T15212] ntrig 0003:1B96:000A.001E: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 954.384461][ T46] usb 3-1: device descriptor read/8, error -71 [ 954.451548][T15212] ntrig 0003:1B96:000A.001E: Firmware version: 0.12.5.13.0 (b020 a8b1) [ 954.612029][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 954.621187][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 954.625155][ T46] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 954.650240][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 954.667355][T15212] usb 4-1: USB disconnect, device number 95 [ 954.679696][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 954.688925][ T46] usb 3-1: device descriptor read/8, error -71 [ 954.698817][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 954.707737][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 954.837554][ T46] usb usb3-port1: unable to enumerate USB device [ 954.852975][ T35] team0 (unregistering): Port device team_slave_1 removed [ 954.903014][ T35] team0 (unregistering): Port device team_slave_0 removed [ 955.379381][T17615] dummy0: entered promiscuous mode [ 955.382997][ T5910] lo speed is unknown, defaulting to 1000 [ 955.396528][T17615] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 955.427410][ T5910] usb 2-1: USB disconnect, device number 60 [ 955.792073][T17610] chnl_net:caif_netlink_parms(): no params data found [ 955.926706][T17642] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3043'. [ 955.965384][T17646] openvswitch: netlink: Actions may not be safe on all matching packets [ 956.062250][T17610] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.166903][T17610] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.291427][T17610] bridge_slave_0: entered allmulticast mode [ 956.317130][ T5910] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 956.471232][T17610] bridge_slave_0: entered promiscuous mode [ 956.576833][ T35] IPVS: stop unused estimator thread 0... [ 956.578246][T17610] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.604890][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 956.610070][T17610] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.625055][T17610] bridge_slave_1: entered allmulticast mode [ 956.626053][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 956.646453][T17610] bridge_slave_1: entered promiscuous mode [ 956.668288][ T5910] usb 3-1: config 9 has an invalid interface number: 181 but max is 0 [ 956.687278][ T5910] usb 3-1: config 9 has no interface number 0 [ 956.704865][ T5910] usb 3-1: config 9 interface 181 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 956.725014][ T5910] usb 3-1: config 9 interface 181 altsetting 5 endpoint 0x6 has invalid maxpacket 1128, setting to 1024 [ 956.746755][T17610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.754654][ T5910] usb 3-1: config 9 interface 181 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 1024 [ 956.784898][ T5910] usb 3-1: config 9 interface 181 has no altsetting 0 [ 956.787381][T17610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.803074][ T5910] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=1f.a3 [ 956.812424][ T5147] Bluetooth: hci2: command tx timeout [ 956.814749][T15212] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 956.824642][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.843963][ T5910] usb 3-1: Product: syz [ 956.854083][ T5910] usb 3-1: Manufacturer: syz [ 956.861604][ T5910] usb 3-1: SerialNumber: syz [ 956.875003][ T5910] usb 3-1: Interface #181 referenced by multiple IADs [ 956.885658][T17650] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 957.131200][T17648] input: syz0 as /devices/virtual/input/input47 [ 957.320323][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.371944][T17610] team0: Port device team_slave_0 added [ 957.420190][T15212] usb 6-1: Using ep0 maxpacket: 32 [ 957.441011][T15212] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 957.465305][T15212] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 957.481342][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.507088][T15212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.531451][T15212] usb 6-1: Product: syz [ 957.537874][T17610] team0: Port device team_slave_1 added [ 957.549082][T15212] usb 6-1: Manufacturer: syz [ 957.570803][T15212] usb 6-1: SerialNumber: syz [ 957.601414][T15212] usb 6-1: config 0 descriptor?? [ 957.613407][T17652] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 957.622233][T15212] hub 6-1:0.0: bad descriptor, ignoring hub [ 957.628355][T15212] hub 6-1:0.0: probe with driver hub failed with error -5 [ 957.632090][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.653458][T15212] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input48 [ 957.857793][ T46] usb 6-1: USB disconnect, device number 83 [ 957.863790][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 957.956530][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.022137][T17610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.039385][T17610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.085404][T17610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.099980][T17610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.107711][T17610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.134884][T17610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.166011][ T29] audit: type=1400 audit(1731486863.960:1385): avc: denied { create } for pid=17668 comm="syz.1.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 958.209251][T17610] hsr_slave_0: entered promiscuous mode [ 958.240032][T17610] hsr_slave_1: entered promiscuous mode [ 958.273082][T17610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.281299][T17610] Cannot create hsr debugfs directory [ 958.345302][T17672] netlink: 'syz.3.3051': attribute type 2 has an invalid length. [ 958.446367][T17675] netlink: 'syz.3.3051': attribute type 2 has an invalid length. [ 958.547718][T17675] loop2: detected capacity change from 0 to 7 [ 958.567328][T17675] Dev loop2: unable to read RDB block 7 [ 958.573960][T17675] loop2: unable to read partition table [ 958.603411][T17675] loop2: partition table beyond EOD, truncated [ 958.630704][T17675] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 958.642762][ T35] erspan0: left allmulticast mode [ 958.648969][ T35] erspan0: left promiscuous mode [ 958.654074][ T35] bridge0: port 1(erspan0) entered disabled state [ 958.663032][ T35] batman_adv: batadv0: Interface deactivated: geneve3 [ 959.118582][ T5147] Bluetooth: hci2: command tx timeout [ 959.140927][ T5910] option 3-1:9.181: GSM modem (1-port) converter detected [ 959.154477][ T5910] usb 3-1: USB disconnect, device number 93 [ 959.165229][ T5910] option 3-1:9.181: device disconnected [ 959.171233][ T5200] Dev loop2: unable to read RDB block 7 [ 959.198996][ T5200] loop2: unable to read partition table [ 959.209245][ T5200] loop2: partition table beyond EOD, truncated [ 959.341549][T17691] openvswitch: netlink: Actions may not be safe on all matching packets [ 959.769074][ T35] batman_adv: batadv0: Removing interface: geneve3 [ 959.904171][ T8] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 960.113167][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.181009][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.284031][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 960.494142][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 960.595614][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.607144][ T35] bond0 (unregistering): Released all slaves [ 960.611433][ T8] usb 4-1: config 0 descriptor?? [ 960.623399][ T35] bond1 (unregistering): Released all slaves [ 960.635144][ T35] bond2 (unregistering): Released all slaves [ 960.646728][ T35] bond3 (unregistering): Released all slaves [ 960.658842][ T35] bond4 (unregistering): Released all slaves [ 960.687778][ T35] bond5 (unregistering): Released all slaves [ 960.724524][T17706] netlink: 'syz.2.3060': attribute type 10 has an invalid length. [ 961.076746][ T8] logitech 0003:046D:C293.001F: item fetching failed at offset 5/7 [ 961.106974][ T46] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 961.115207][ T8] logitech 0003:046D:C293.001F: parse failed [ 961.131402][ T8] logitech 0003:046D:C293.001F: probe with driver logitech failed with error -22 [ 961.215426][ T5147] Bluetooth: hci2: command tx timeout [ 961.415054][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 961.565495][ T46] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 961.614044][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 961.644961][ T46] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 961.774555][ T8] usb 4-1: USB disconnect, device number 96 [ 961.833918][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.844087][ T46] usb 6-1: Product: syz [ 961.848517][ T46] usb 6-1: Manufacturer: syz [ 961.864727][ T46] usb 6-1: SerialNumber: syz [ 961.870869][ T46] usb 6-1: config 0 descriptor?? [ 961.904666][ T46] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 961.913952][ T46] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 962.405882][ T46] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 962.441222][T17740] openvswitch: netlink: Actions may not be safe on all matching packets [ 962.448310][ T46] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 962.468668][T17610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 962.488029][ T46] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 962.572738][ T46] em28xx 6-1:0.0: No AC97 audio processor [ 962.597150][ T46] usb 6-1: USB disconnect, device number 84 [ 962.608042][ T46] em28xx 6-1:0.0: Disconnecting em28xx [ 962.655773][T17610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 962.657437][ T46] em28xx 6-1:0.0: Freeing device [ 962.705626][T17748] input: syz0 as /devices/virtual/input/input49 [ 962.771177][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'. [ 963.005243][T17610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 963.069128][ T46] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 963.104805][T17610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 963.339256][ T46] usb 6-1: Invalid ep0 maxpacket: 9 [ 963.384733][ T5147] Bluetooth: hci2: command tx timeout [ 963.424056][T17610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.571432][ T46] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 963.798620][ T46] usb 6-1: Invalid ep0 maxpacket: 9 [ 963.957775][ T46] usb usb6-port1: attempt power cycle [ 963.978973][T17610] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.030135][T17771] ax25_connect(): syz.2.3074 uses autobind, please contact jreuter@yaina.de [ 964.066152][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.073248][ T9166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.185336][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.192462][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.364774][ T46] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 964.430301][ T46] usb 6-1: Invalid ep0 maxpacket: 9 [ 964.584736][ T46] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 964.627803][ T46] usb 6-1: Invalid ep0 maxpacket: 9 [ 964.646573][ T46] usb usb6-port1: unable to enumerate USB device [ 964.700251][T17610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.079208][T17804] openvswitch: netlink: Actions may not be safe on all matching packets [ 965.125150][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 965.135058][ T5823] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 965.151934][ T5823] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 965.165793][T17610] veth0_vlan: entered promiscuous mode [ 965.181018][T17610] veth1_vlan: entered promiscuous mode [ 965.217251][T17610] veth0_macvtap: entered promiscuous mode [ 965.227564][T17610] veth1_macvtap: entered promiscuous mode [ 965.291697][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.312535][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.324013][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.342038][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.353050][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.363802][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.373888][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.385074][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.397357][T17610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.439948][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.450942][ T46] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 965.465597][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.505091][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.534769][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.553117][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.574008][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.588353][T17610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.599582][T17610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.610971][T17610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.619482][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.619875][T17811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3082'. [ 965.652825][T17610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.672175][T17610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.681342][ T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 965.699803][T17610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.709793][ T46] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 965.730846][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.737792][T17610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.751841][ T46] usb 3-1: config 0 descriptor?? [ 965.764423][T17816] bridge0: port 3(erspan0) entered disabled state [ 965.771015][T17816] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.778359][T17816] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.789686][T17820] fuse: Bad value for 'group_id' [ 965.795857][T17820] fuse: Bad value for 'group_id' [ 965.807964][T17816] bridge0: entered allmulticast mode [ 966.015789][T16976] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 966.206365][T16976] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 966.224945][T16976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.254043][T16976] usb 6-1: config 0 descriptor?? [ 966.281040][T16976] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 966.427172][ T29] audit: type=1400 audit(1731486872.220:1386): avc: denied { mount } for pid=17823 comm="syz.3.3085" name="/" dev="pstore" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 966.488745][T16976] gp8psk: usb in 128 operation failed. [ 966.500334][T16976] gp8psk: usb in 137 operation failed. [ 966.508518][T16976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.518802][T16976] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 966.528722][T16976] usb 6-1: media controller created [ 966.541341][T16976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.555001][T16976] gp8psk_fe: Frontend attached [ 966.560579][T16976] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 966.569142][T16976] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 966.591839][T16976] gp8psk: usb in 138 operation failed. [ 966.597673][T16976] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 966.608191][T16976] gp8psk: found Genpix USB device pID = 203 (hex) [ 966.621937][T16976] usb 6-1: USB disconnect, device number 89 [ 966.678535][T16976] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 966.970425][T17829] ax25_connect(): syz.1.3086 uses autobind, please contact jreuter@yaina.de [ 967.524801][ T5147] Bluetooth: hci0: command 0x0405 tx timeout [ 967.533805][ T5823] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 967.584091][ T5823] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 967.641182][ T29] audit: type=1400 audit(1731486873.430:1387): avc: denied { append } for pid=17830 comm="syz.1.3087" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 967.750166][T17833] ALSA: seq fatal error: cannot create timer (-22) [ 967.843820][T17835] Dead loop on virtual device ipvlan1, fix it urgently! [ 967.934308][T17836] ptrace attach of "./syz-executor exec"[17028] was attempted by "./syz-executor exec"[17836] [ 968.207865][ T5877] usb 3-1: USB disconnect, device number 94 [ 968.629355][T17845] ax25_connect(): syz.2.3090 uses autobind, please contact jreuter@yaina.de [ 968.691105][T17847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input50 [ 969.685972][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 969.686230][ T5823] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 969.698203][ T5823] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 969.756442][ T29] audit: type=1400 audit(1731486875.540:1388): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 970.133672][T17871] ax25_connect(): syz.3.3096 uses autobind, please contact jreuter@yaina.de [ 970.545020][ T5823] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 970.969286][ T5823] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 971.006067][ T5823] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 971.025253][ T5823] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 971.037756][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.077435][T17839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 971.208835][ T5823] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.318334][ T35] hsr_slave_0: left promiscuous mode [ 971.325025][ T29] audit: type=1400 audit(1731486877.120:1389): avc: denied { create } for pid=17877 comm="syz.1.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 971.352320][ T5823] usb 6-1: USB disconnect, device number 90 [ 971.364129][ T35] hsr_slave_1: left promiscuous mode [ 971.456367][T17889] trusted_key: encrypted_key: insufficient parameters specified [ 971.456565][ T35] veth1_macvtap: left allmulticast mode [ 971.506198][ T29] audit: type=1400 audit(1731486877.140:1390): avc: denied { write } for pid=17883 comm="syz.2.3101" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 971.660863][ T35] veth1_macvtap: left promiscuous mode [ 971.808853][ T35] veth0_macvtap: left promiscuous mode [ 972.034864][ T35] veth1_vlan: left promiscuous mode [ 972.050341][ T35] veth0_vlan: left promiscuous mode [ 972.216645][T17863] udevd[17863]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.235535][T17892] ax25_connect(): syz.1.3103 uses autobind, please contact jreuter@yaina.de [ 973.901946][ T35] vxcan0 (unregistering): left allmulticast mode [ 974.072976][ T9166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.083409][ T9166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.142966][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.173936][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.083414][T17927] ax25_connect(): syz.3.3108 uses autobind, please contact jreuter@yaina.de [ 975.829515][T17937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3111'. [ 976.997531][ T955] kernel write not supported for file /amidi2 (pid: 955 comm: kworker/0:2) [ 978.079321][ T35] IPVS: stop unused estimator thread 0... [ 978.099369][T17961] ax25_connect(): syz.2.3116 uses autobind, please contact jreuter@yaina.de [ 978.800894][T17971] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 978.800894][T17971] ÄUúeâ[¦ÓÎ%#s' [ 978.925176][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 978.936459][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 978.945468][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 978.966257][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 978.973867][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 978.981941][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 980.073141][T17982] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 980.684864][T18006] ax25_connect(): syz.5.3120 uses autobind, please contact jreuter@yaina.de [ 980.835504][T18011] ax25_connect(): syz.2.3128 uses autobind, please contact jreuter@yaina.de [ 980.942400][T16976] IPVS: starting estimator thread 0... [ 980.972216][T17974] chnl_net:caif_netlink_parms(): no params data found [ 981.054748][T18013] IPVS: using max 28 ests per chain, 67200 per kthread [ 981.195884][ T29] audit: type=1400 audit(1731486886.990:1391): avc: denied { watch_mount } for pid=18019 comm="syz.1.3132" path="/38" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 981.197171][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.234891][ T5828] Bluetooth: hci3: command tx timeout [ 981.246466][T17974] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.264348][T17974] bridge_slave_0: entered allmulticast mode [ 981.274875][T17974] bridge_slave_0: entered promiscuous mode [ 981.283988][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.292101][T17974] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.300802][T17974] bridge_slave_1: entered allmulticast mode [ 981.308860][T17974] bridge_slave_1: entered promiscuous mode [ 981.416375][T17974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.553915][T17974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.273874][T18021] ALSA: mixer_oss: invalid OSS volume '' [ 982.329093][T17974] team0: Port device team_slave_0 added [ 982.413554][T17974] team0: Port device team_slave_1 added [ 982.593500][T17974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.629548][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.672906][T17974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.693254][T17974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.741956][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.797611][T17974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.843848][T17974] hsr_slave_0: entered promiscuous mode [ 982.965186][T17974] hsr_slave_1: entered promiscuous mode [ 983.294849][ T5147] Bluetooth: hci3: command tx timeout [ 984.395234][T17974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.006665][T17974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.028769][T18057] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3142'. [ 985.049695][T18057] openvswitch: netlink: Key type 29 is not supported [ 985.156281][ T29] audit: type=1326 audit(1731486890.940:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 985.394807][ T5147] Bluetooth: hci3: command 0x040f tx timeout [ 985.570603][ T29] audit: type=1326 audit(1731486890.940:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 985.574817][T17974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.618945][ T29] audit: type=1326 audit(1731486890.940:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 985.656302][T18067] kAFS: unable to lookup cell '/' [ 985.662692][ T29] audit: type=1326 audit(1731486890.940:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 985.693411][ T29] audit: type=1326 audit(1731486890.940:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 985.736115][T18065] ax25_connect(): syz.5.3143 uses autobind, please contact jreuter@yaina.de [ 985.745663][ T29] audit: type=1326 audit(1731486890.950:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.4.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 985.810161][T17974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.934989][ T5877] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 986.193149][T17974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 986.202548][T17974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 986.213163][T17974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 986.231355][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.243154][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.255685][T17974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 986.262684][ T5877] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 986.280878][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.293535][ T29] audit: type=1800 audit(1731486892.080:1398): pid=18078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3147" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 986.308237][ T5877] usb 2-1: config 0 descriptor?? [ 986.377203][T17974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.408640][T17974] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.423218][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.430379][ T9159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.453363][T17137] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.460489][T17137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.147839][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 987.153839][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 987.233712][ T5877] usb 2-1: USB disconnect, device number 61 [ 987.249318][ T29] audit: type=1400 audit(1731486893.040:1399): avc: denied { read append } for pid=18094 comm="syz.4.3152" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 987.272065][T17974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.310449][ T29] audit: type=1400 audit(1731486893.060:1400): avc: denied { ioctl } for pid=18094 comm="syz.4.3152" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 987.403441][T17974] veth0_vlan: entered promiscuous mode [ 987.428628][T17974] veth1_vlan: entered promiscuous mode [ 987.445424][ T5828] Bluetooth: hci3: command 0x040f tx timeout [ 987.503881][T17974] veth0_macvtap: entered promiscuous mode [ 987.518000][T17974] veth1_macvtap: entered promiscuous mode [ 987.531524][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.542402][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.564854][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.590670][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.618890][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.632462][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.650201][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.662733][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.683042][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.699604][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.711266][T17974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.732857][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.747823][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.758022][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.837057][ T5877] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 987.845320][ T29] audit: type=1400 audit(1731486893.630:1401): avc: denied { setopt } for pid=18101 comm="syz.5.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 987.909256][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.995543][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.024758][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 988.071807][ T5877] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 988.187821][ T5877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 988.215809][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.234652][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.252433][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 988.259511][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.271696][ T5877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 988.282757][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 988.283467][T18115] xt_cluster: node mask cannot exceed total number of nodes [ 988.292936][ T5877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.300305][T17974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.331225][ T5877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 988.334755][T17974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.342309][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.351386][T18115] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3157'. [ 988.377306][T17974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.399440][T17974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.408843][T17974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.417860][T17974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.439211][T17974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.469243][ T5877] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 988.720488][T16976] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 988.737134][ T9166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.761734][ T5877] usb 3-1: USB disconnect, device number 95 [ 988.770625][ T9166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.823420][ T9163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.832300][ T9163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.885209][T16976] usb 2-1: Using ep0 maxpacket: 8 [ 988.900076][T16976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 989.067803][T16976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 989.577470][ T5828] Bluetooth: hci3: command 0x040f tx timeout [ 989.628973][T16976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 989.639689][T16976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.658640][T16976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 989.668355][T16976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.903497][T16976] usb 2-1: GET_CAPABILITIES returned 0 [ 989.931892][T16976] usbtmc 2-1:16.0: can't read capabilities [ 990.046080][T18134] ax25_connect(): syz.3.3162 uses autobind, please contact jreuter@yaina.de [ 990.167983][T18137] openvswitch: netlink: Actions may not be safe on all matching packets [ 990.238020][ T46] usb 2-1: USB disconnect, device number 62 [ 990.362882][T18141] netlink: 'syz.3.3164': attribute type 10 has an invalid length. [ 991.140359][ T29] audit: type=1400 audit(1731486896.930:1402): avc: denied { getopt } for pid=18146 comm="syz.2.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 991.171624][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.777729][T16875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.804871][T16875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.881014][T16875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.919570][T16875] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 991.959141][T18155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 992.118530][T18157] can0: slcan on ttyS3. [ 992.865839][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.162652][T18170] FAULT_INJECTION: forcing a failure. [ 993.162652][T18170] name failslab, interval 1, probability 0, space 0, times 0 [ 993.207910][T18165] can0 (unregistered): slcan off ttyS3. [ 993.229723][ T29] audit: type=1400 audit(1731486899.020:1403): avc: denied { bind } for pid=18169 comm="syz.2.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 993.254230][T18170] CPU: 0 UID: 0 PID: 18170 Comm: syz.2.3172 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 993.265009][T18170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 993.275053][T18170] Call Trace: [ 993.278320][T18170] [ 993.281247][T18170] dump_stack_lvl+0x16c/0x1f0 [ 993.285958][T18170] should_fail_ex+0x497/0x5b0 [ 993.290626][T18170] ? fs_reclaim_acquire+0xae/0x150 [ 993.295738][T18170] should_failslab+0xc2/0x120 [ 993.300430][T18170] __kmalloc_noprof+0xcb/0x400 [ 993.305206][T18170] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 993.310852][T18170] tomoyo_realpath_from_path+0xb9/0x720 [ 993.316406][T18170] ? tomoyo_path_number_perm+0x232/0x590 [ 993.322040][T18170] tomoyo_path_number_perm+0x245/0x590 [ 993.327497][T18170] ? tomoyo_path_number_perm+0x232/0x590 [ 993.333107][T18170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 993.339099][T18170] ? trace_lock_acquire+0x14a/0x1d0 [ 993.344312][T18170] ? lock_acquire+0x2f/0xb0 [ 993.348818][T18170] ? __fget_files+0x40/0x3f0 [ 993.353400][T18170] ? __fget_files+0x244/0x3f0 [ 993.358086][T18170] security_file_ioctl+0x9b/0x240 [ 993.363141][T18170] __x64_sys_ioctl+0xbb/0x220 [ 993.367832][T18170] do_syscall_64+0xcd/0x250 [ 993.372340][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.378249][T18170] RIP: 0033:0x7f4a2537e719 [ 993.382666][T18170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.402842][T18170] RSP: 002b:00007f4a2616b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.411271][T18170] RAX: ffffffffffffffda RBX: 00007f4a25535f80 RCX: 00007f4a2537e719 [ 993.419022][T18148] chnl_net:caif_netlink_parms(): no params data found [ 993.419230][T18170] RDX: 0000000020000840 RSI: 000000000000541b RDI: 0000000000000009 [ 993.433945][T18170] RBP: 00007f4a2616b090 R08: 0000000000000000 R09: 0000000000000000 [ 993.441920][T18170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.449898][T18170] R13: 0000000000000000 R14: 00007f4a25535f80 R15: 00007ffc1a8dc2e8 [ 993.457889][T18170] [ 993.965157][T18155] Bluetooth: hci3: command 0x040f tx timeout [ 994.061217][T18170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 994.084915][ T5147] Bluetooth: hci4: command tx timeout [ 994.167869][T16976] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 994.246004][T18199] openvswitch: netlink: Actions may not be safe on all matching packets [ 994.295745][T18148] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.351547][T16976] usb 2-1: Using ep0 maxpacket: 32 [ 994.356855][T18148] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.364027][T18148] bridge_slave_0: entered allmulticast mode [ 994.389200][T16976] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 994.418694][T18148] bridge_slave_0: entered promiscuous mode [ 994.488458][T16976] usb 2-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 994.513746][T16976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.577459][T16976] usb 2-1: Product: syz [ 994.581663][T16976] usb 2-1: Manufacturer: syz [ 994.592176][T18148] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.662465][T18148] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.864801][ T5877] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 994.949212][T18148] bridge_slave_1: entered allmulticast mode [ 995.144850][T16976] usb 2-1: SerialNumber: syz [ 995.146996][T18148] bridge_slave_1: entered promiscuous mode [ 995.151138][T16976] usb 2-1: config 0 descriptor?? [ 995.166194][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 995.176626][ T29] audit: type=1400 audit(1731486900.970:1404): avc: denied { getopt } for pid=18220 comm="syz.2.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 995.201149][T16976] usb 2-1: can't set config #0, error -71 [ 995.211090][ T5877] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 995.280064][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3181'. [ 995.336016][T16976] usb 2-1: USB disconnect, device number 63 [ 995.339254][ T5877] usb 5-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 995.382193][T18148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.392228][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.431493][ T5877] usb 5-1: Product: syz [ 995.462297][ T5877] usb 5-1: Manufacturer: syz [ 995.466046][T18223] bridge0: port 4(syz_tun) entered blocking state [ 995.539503][ T5877] usb 5-1: SerialNumber: syz [ 995.765503][ T5877] usb 5-1: config 0 descriptor?? [ 995.770617][T18223] bridge0: port 4(syz_tun) entered disabled state [ 995.784339][ T5877] usb 5-1: bad CDC descriptors [ 995.793720][T18223] syz_tun: entered allmulticast mode [ 995.834547][T18223] syz_tun: entered promiscuous mode [ 995.866831][T18148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.974726][ T8] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 996.187455][ T5147] Bluetooth: hci4: command tx timeout [ 996.288289][T18148] team0: Port device team_slave_0 added [ 996.596126][ T8] usb 3-1: device descriptor read/64, error -71 [ 996.643732][T18148] team0: Port device team_slave_1 added [ 997.004758][ T8] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 997.037839][T18216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.046430][T18216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.089888][T18148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.108570][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.218682][ T8] usb 3-1: device descriptor read/64, error -71 [ 997.229566][T18148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.243947][T18148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.251541][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.278184][T18148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.370464][ T8] usb usb3-port1: attempt power cycle [ 997.794511][ T29] audit: type=1400 audit(1731486903.580:1405): avc: denied { getopt } for pid=18222 comm="syz.1.3181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 997.824384][T18232] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 997.874514][T18148] hsr_slave_0: entered promiscuous mode [ 997.880681][T18148] hsr_slave_1: entered promiscuous mode [ 997.886795][T18148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.894368][T18148] Cannot create hsr debugfs directory [ 998.016252][T18148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.114957][ T8] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 998.117227][T18148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.194163][T18262] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3187'. [ 998.245924][ T5147] Bluetooth: hci4: command tx timeout [ 998.455053][ T5877] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 998.690873][ T8] usb 3-1: device descriptor read/8, error -71 [ 998.738340][T18148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.781353][T18264] openvswitch: netlink: Actions may not be safe on all matching packets [ 998.805020][ T5877] usb 2-1: device descriptor read/64, error -71 [ 998.830619][T18148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.899700][T15212] usb 5-1: USB disconnect, device number 82 [ 999.255599][T18270] FAULT_INJECTION: forcing a failure. [ 999.255599][T18270] name failslab, interval 1, probability 0, space 0, times 0 [ 999.300154][T18270] CPU: 0 UID: 0 PID: 18270 Comm: syz.4.3190 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 999.310961][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 999.313789][ T5877] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 999.321016][T18270] Call Trace: [ 999.321029][T18270] [ 999.321037][T18270] dump_stack_lvl+0x16c/0x1f0 [ 999.321061][T18270] should_fail_ex+0x497/0x5b0 [ 999.321079][T18270] ? fs_reclaim_acquire+0xae/0x150 [ 999.321098][T18270] should_failslab+0xc2/0x120 [ 999.321120][T18270] kmem_cache_alloc_node_noprof+0x71/0x310 [ 999.321140][T18270] ? __alloc_skb+0x2b1/0x380 [ 999.364449][T18270] __alloc_skb+0x2b1/0x380 [ 999.368882][T18270] ? __pfx___alloc_skb+0x10/0x10 [ 999.373829][T18270] ? __lock_acquire+0xbdd/0x3ce0 [ 999.378784][T18270] netlink_ack+0x164/0xb90 [ 999.383200][T18270] ? __pfx___lock_acquire+0x10/0x10 [ 999.388391][T18270] ? hlock_class+0x4e/0x130 [ 999.392920][T18270] rdma_nl_rcv_skb.constprop.0.isra.0+0x346/0x450 [ 999.399349][T18270] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 999.406311][T18270] ? netlink_deliver_tap+0x1ae/0xd90 [ 999.411617][T18270] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 999.417046][T18270] netlink_unicast+0x53c/0x7f0 [ 999.421825][T18270] ? __pfx_netlink_unicast+0x10/0x10 [ 999.427143][T18270] netlink_sendmsg+0x8b8/0xd70 [ 999.431918][T18270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.432220][T18148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 999.437200][T18270] ____sys_sendmsg+0xaaf/0xc90 [ 999.437228][T18270] ? copy_msghdr_from_user+0x10b/0x160 [ 999.437249][T18270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.437278][T18270] ? __pfx___lock_acquire+0x10/0x10 [ 999.437299][T18270] ___sys_sendmsg+0x135/0x1e0 [ 999.437323][T18270] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.437353][T18270] ? lock_acquire+0x2f/0xb0 [ 999.437368][T18270] ? __fget_files+0x40/0x3f0 [ 999.437402][T18270] ? fdget+0x176/0x210 [ 999.474731][ T5877] usb 2-1: device descriptor read/64, error -71 [ 999.478945][T18270] __sys_sendmsg+0x117/0x1f0 [ 999.478976][T18270] ? __pfx___sys_sendmsg+0x10/0x10 [ 999.478996][T18270] ? __fget_files+0x244/0x3f0 [ 999.508205][T18270] do_syscall_64+0xcd/0x250 [ 999.512707][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.518600][T18270] RIP: 0033:0x7f178db7e719 [ 999.522997][T18270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.542626][T18270] RSP: 002b:00007f178e906038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.551120][T18270] RAX: ffffffffffffffda RBX: 00007f178dd35f80 RCX: 00007f178db7e719 [ 999.559074][T18270] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 999.567034][T18270] RBP: 00007f178e906090 R08: 0000000000000000 R09: 0000000000000000 [ 999.575009][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.582970][T18270] R13: 0000000000000000 R14: 00007f178dd35f80 R15: 00007fffbc4d9e78 [ 999.585021][ T5877] usb usb2-port1: attempt power cycle [ 999.590930][T18270] [ 999.621604][T18148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 999.648704][T18148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 999.702655][T18148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 999.927530][T18148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.117241][ T955] kernel write not supported for file /61/projid_map (pid: 955 comm: kworker/0:2) [ 1000.634396][ T5147] Bluetooth: hci4: command tx timeout [ 1000.653699][ T5877] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1000.676745][ T5877] usb 2-1: device descriptor read/8, error -71 [ 1000.694927][T16976] kernel write not supported for file /281/projid_map (pid: 16976 comm: kworker/0:6) [ 1000.716022][T18148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.800628][T18148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1000.811434][T18148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.858984][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.866132][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.868919][T18284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1000.915739][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.922889][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.954555][T18282] : entered promiscuous mode [ 1001.104908][ T5877] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1001.326195][ T5877] usb 2-1: device not accepting address 67, error -71 [ 1001.566487][ T5877] usb usb2-port1: unable to enumerate USB device [ 1001.653864][T18301] FAULT_INJECTION: forcing a failure. [ 1001.653864][T18301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.678575][T18148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.687630][T18301] CPU: 0 UID: 0 PID: 18301 Comm: syz.1.3197 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1001.698417][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1001.708481][T18301] Call Trace: [ 1001.711770][T18301] [ 1001.714707][T18301] dump_stack_lvl+0x16c/0x1f0 [ 1001.719395][T18301] should_fail_ex+0x497/0x5b0 [ 1001.724077][T18301] _copy_from_user+0x2e/0xd0 [ 1001.728752][T18301] memdup_user+0x71/0xd0 [ 1001.732992][T18301] snd_ctl_ioctl+0xe12/0x1320 [ 1001.737667][T18301] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1001.742788][T18301] ? trace_lock_acquire+0x14a/0x1d0 [ 1001.748003][T18301] ? selinux_file_ioctl+0x180/0x270 [ 1001.753198][T18301] ? selinux_file_ioctl+0xb4/0x270 [ 1001.758288][T18301] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1001.763402][T18301] __x64_sys_ioctl+0x18f/0x220 [ 1001.763449][T18306] openvswitch: netlink: Actions may not be safe on all matching packets [ 1001.768163][T18301] do_syscall_64+0xcd/0x250 [ 1001.768188][T18301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.768213][T18301] RIP: 0033:0x7f709337e719 [ 1001.768228][T18301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.768246][T18301] RSP: 002b:00007f70917f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.768266][T18301] RAX: ffffffffffffffda RBX: 00007f7093535f80 RCX: 00007f709337e719 [ 1001.768278][T18301] RDX: 0000000020000440 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 1001.768290][T18301] RBP: 00007f70917f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.768302][T18301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.768313][T18301] R13: 0000000000000000 R14: 00007f7093535f80 R15: 00007ffe1ad04b88 [ 1001.768336][T18301] [ 1001.988846][T18311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3201'. [ 1003.433528][T18345] input: syz0 as /devices/virtual/input/input51 [ 1003.474273][T18148] veth0_vlan: entered promiscuous mode [ 1003.516765][T18148] veth1_vlan: entered promiscuous mode [ 1003.555040][ T5823] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1003.770696][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 1003.863633][ T5823] usb 4-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config [ 1004.146472][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.159974][ T5823] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1004.169335][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.181951][T18148] veth0_macvtap: entered promiscuous mode [ 1004.201632][T18148] veth1_macvtap: entered promiscuous mode [ 1004.206176][ T5823] usb 4-1: config 0 descriptor?? [ 1004.240488][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.267802][T18353] openvswitch: netlink: Actions may not be safe on all matching packets [ 1004.312716][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.343075][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.371894][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.392299][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.413593][ T29] audit: type=1326 audit(1731486910.190:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18355 comm="syz.4.3212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x0 [ 1004.437640][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.462878][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.484280][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.508665][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.529490][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.549834][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.574773][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.602331][ T29] audit: type=1400 audit(1731486910.390:1407): avc: denied { mount } for pid=18339 comm="syz.3.3208" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1004.648566][T18148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.678635][T18341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3208'. [ 1005.126850][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.127232][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.127658][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.127946][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.129213][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.129409][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.130127][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.130282][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.130910][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.131139][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.131923][T18148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.132213][T18148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.163967][T18148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.166242][T18148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.166270][T18148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.166291][T18148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.166311][T18148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.508661][T18368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3214'. [ 1005.556732][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.572610][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.589797][ T5823] usb 4-1: string descriptor 0 read error: -71 [ 1005.611791][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.621243][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.630204][ T5823] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1005.689145][ T5823] usb 4-1: USB disconnect, device number 97 [ 1006.060565][T18392] ax25_connect(): syz.2.3220 uses autobind, please contact jreuter@yaina.de [ 1006.084814][T16976] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1006.215030][ T5910] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1006.246760][T16976] usb 6-1: Using ep0 maxpacket: 32 [ 1006.258730][T16976] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1006.269728][T16976] usb 6-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 1006.279011][T16976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.287612][T16976] usb 6-1: Product: syz [ 1006.291828][T16976] usb 6-1: Manufacturer: syz [ 1006.296645][T16976] usb 6-1: SerialNumber: syz [ 1006.303733][T16976] usb 6-1: config 0 descriptor?? [ 1006.310190][T16976] usb 6-1: bad CDC descriptors [ 1006.376397][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.386750][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1006.395995][ T5910] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1006.406354][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.416462][ T5910] usb 5-1: config 0 descriptor?? [ 1006.434867][ T5823] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1006.606061][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 1006.642699][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.725413][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1006.986649][T18396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.006341][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1007.031758][T18396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.064257][T18400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3225'. [ 1007.094271][ T5823] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1007.142449][ T5823] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1007.174351][ T5823] usb 4-1: Manufacturer: syz [ 1007.177118][T18409] No such timeout policy "syz0" [ 1007.186059][ T5823] usb 4-1: config 0 descriptor?? [ 1007.580816][ T5823] usb 4-1: USB disconnect, device number 98 [ 1007.604852][ T29] audit: type=1400 audit(1731486913.390:1408): avc: denied { shutdown } for pid=18410 comm="syz.1.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1007.712354][ T29] audit: type=1400 audit(1731486913.390:1409): avc: denied { write } for pid=18410 comm="syz.1.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1008.245022][ T5910] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1008.681399][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58140, setting to 1024 [ 1009.245206][ T5910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1009.255883][ T5910] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1009.265592][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.281730][ T5910] usb 2-1: config 0 descriptor?? [ 1009.287584][T18421] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1009.297968][ T5910] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1009.342939][ T5874] usb 5-1: USB disconnect, device number 83 [ 1009.442591][ T5910] usb 6-1: USB disconnect, device number 91 [ 1009.564752][ T9] usb 2-1: USB disconnect, device number 68 [ 1009.884722][ T5874] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1010.055273][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1010.087121][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 1010.112168][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.138812][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.170823][ T5874] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1010.184792][ T5910] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1010.202317][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.226292][ T5874] usb 5-1: config 0 descriptor?? [ 1010.365013][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 1010.387160][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.418461][ T5910] usb 4-1: config 0 has no interfaces? [ 1010.432265][ T5910] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1010.464807][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.489195][ T5910] usb 4-1: config 0 descriptor?? [ 1010.661020][ T5874] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0020/input/input52 [ 1010.771067][ T5874] appleir 0003:05AC:8241.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 1010.992913][T18461] sp0: Synchronizing with TNC [ 1011.030518][T18461] sp0: Found TNC [ 1011.407164][T18460] [U] è` [ 1011.635532][T18472] kernel profiling enabled (shift: 7) [ 1011.644686][ T5874] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1011.646670][ T9] usb 4-1: USB disconnect, device number 99 [ 1011.745027][T18470] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 1011.825048][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1011.852789][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.934924][T15212] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 1011.945705][ T29] audit: type=1400 audit(1731486917.730:1410): avc: denied { accept } for pid=18477 comm="syz.1.3245" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1011.973652][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.258893][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1012.341775][ T5874] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1012.399202][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1012.425789][ T5874] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1012.449391][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1012.494251][ T5874] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.510416][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1012.530812][ T5874] usb 6-1: SerialNumber: syz [ 1012.562017][ T5874] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1013.568331][ T9] usb 6-1: USB disconnect, device number 92 [ 1013.909605][ T5910] kernel write not supported for file /225/projid_map (pid: 5910 comm: kworker/0:5) [ 1014.699923][T18504] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3253'. [ 1014.714740][T16976] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1015.016074][T16976] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1015.049876][T16976] usb 4-1: config 0 has no interface number 0 [ 1015.084738][T16976] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1015.105672][T16976] usb 4-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=81.4d [ 1015.127109][T16976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.158107][T16976] usb 4-1: Product: syz [ 1015.162518][T16976] usb 4-1: Manufacturer: syz [ 1015.174680][T16976] usb 4-1: SerialNumber: syz [ 1015.196080][T16976] usb 4-1: config 0 descriptor?? [ 1015.216055][T16976] snd-usb-caiaq 4-1:0.2: can't set alt interface. [ 1015.380450][T16976] usb 4-1: unable to init card! (ret=-5) [ 1015.447296][T16976] snd-usb-caiaq 4-1:0.2: probe with driver snd-usb-caiaq failed with error -5 [ 1015.623759][ T29] audit: type=1400 audit(1731486921.410:1411): avc: denied { write } for pid=18496 comm="syz.3.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1015.656973][T16976] usb 4-1: USB disconnect, device number 100 [ 1015.728265][T18533] trusted_key: encrypted_key: insufficient parameters specified [ 1015.762190][ T5823] usb 5-1: USB disconnect, device number 84 [ 1016.022485][ T29] audit: type=1326 audit(1731486921.810:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.4.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1016.098833][ T29] audit: type=1326 audit(1731486921.810:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.4.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1016.135683][T18539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1016.163160][ T29] audit: type=1326 audit(1731486921.860:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.4.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1016.268639][ T29] audit: type=1326 audit(1731486921.860:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.4.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1016.279652][T18550] openvswitch: netlink: Actions may not be safe on all matching packets [ 1016.292125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.362062][ T29] audit: type=1326 audit(1731486921.860:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.4.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1016.419237][ T29] audit: type=1400 audit(1731486921.990:1417): avc: denied { write } for pid=18540 comm="syz.1.3265" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1016.612300][ T29] audit: type=1400 audit(1731486922.400:1418): avc: denied { map } for pid=18553 comm="syz.3.3270" path="/dev/sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1016.636840][ T29] audit: type=1400 audit(1731486922.400:1419): avc: denied { execute } for pid=18553 comm="syz.3.3270" path="/dev/sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1016.667704][ T5877] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1016.834822][T18562] ptrace attach of "./syz-executor exec"[17028] was attempted by "./syz-executor exec"[18562] [ 1016.835217][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 1016.891333][ T5877] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1016.932438][ T5877] usb 5-1: config 0 has no interface number 0 [ 1016.977090][ T5877] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1016.984092][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1016.994684][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.013893][ T5877] usb 5-1: Product: syz [ 1017.022109][ T5877] usb 5-1: Manufacturer: syz [ 1017.027632][ T5877] usb 5-1: SerialNumber: syz [ 1017.034040][ T5877] usb 5-1: config 0 descriptor?? [ 1017.052939][T18567] netlink: 'syz.5.3273': attribute type 1 has an invalid length. [ 1017.271059][T18545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.280483][T18545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.293940][ T5877] radio-si470x 5-1:0.35: this is not a si470x device. [ 1017.327362][ T5877] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1017.406434][T18572] trusted_key: encrypted_key: insufficient parameters specified [ 1017.419838][ T5823] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1017.619598][ T5823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1017.638782][T18545] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.647921][T18545] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.656796][T18545] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.665495][T18545] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.685478][ T5823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.736908][ T5823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1017.746557][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.760917][T18545] vxlan0: entered promiscuous mode [ 1017.808766][T18545] vxlan0: entered allmulticast mode [ 1017.904798][T18545] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.913791][T18545] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.922755][T18545] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.931630][T18545] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.975044][ T5877] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 1018.059054][ T5823] usb 4-1: usb_control_msg returned -32 [ 1018.085143][T18576] netlink: 'syz.4.3266': attribute type 4 has an invalid length. [ 1018.100690][ T5823] usbtmc 4-1:16.0: can't read capabilities [ 1018.125283][ T5823] usb 4-1: USB disconnect, device number 101 [ 1018.131331][T18577] netlink: 'syz.4.3266': attribute type 4 has an invalid length. [ 1018.299122][T16976] usb 5-1: USB disconnect, device number 85 [ 1018.322172][T16976] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 1019.577348][ T29] audit: type=1326 audit(1731486925.370:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18591 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1019.602477][ T29] audit: type=1326 audit(1731486925.370:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18591 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1019.699138][T18601] bridge0: port 3(erspan0) entered blocking state [ 1019.705868][T18601] bridge0: port 3(erspan0) entered disabled state [ 1019.713206][T18601] erspan0: entered allmulticast mode [ 1019.723758][T18601] erspan0: entered promiscuous mode [ 1019.730326][T18601] bridge0: port 3(erspan0) entered blocking state [ 1019.736805][T18601] bridge0: port 3(erspan0) entered forwarding state [ 1020.085396][ T29] audit: type=1326 audit(1731486925.370:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18591 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1020.121851][ T29] audit: type=1326 audit(1731486925.370:1423): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18591 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1020.174231][ T29] audit: type=1326 audit(1731486925.370:1424): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18591 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1021.252024][ T8] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1021.253832][T18621] openvswitch: netlink: Actions may not be safe on all matching packets [ 1021.636323][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1021.646150][ T8] usb 6-1: not running at top speed; connect to a high speed hub [ 1021.655749][ T8] usb 6-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 1021.669851][ T8] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1021.688315][ T8] usb 6-1: config 1 has no interface number 1 [ 1021.694505][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1021.710944][ T8] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 1021.730455][ T8] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 1021.771021][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1021.804111][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.815687][ T8] usb 6-1: Product: syz [ 1021.820263][ T8] usb 6-1: Manufacturer: syz [ 1021.825604][ T8] usb 6-1: SerialNumber: syz [ 1022.115085][ T5823] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1022.627725][ T8] hub 6-1:1.0: bad descriptor, ignoring hub [ 1022.668123][ T8] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1022.713181][ T5823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1022.714320][ T8] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1022.882670][ T5823] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.896094][ T5823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1022.906582][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.463808][ T8] usb 6-1: USB disconnect, device number 93 [ 1023.896318][ T7030] udevd[7030]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.954026][T18653] trusted_key: encrypted_key: insufficient parameters specified [ 1024.116617][ T5823] usb 2-1: usb_control_msg returned -32 [ 1024.122413][ T5823] usbtmc 2-1:16.0: can't read capabilities [ 1024.183024][ T5823] usb 2-1: USB disconnect, device number 69 [ 1024.306237][T18671] bridge_slave_1: left allmulticast mode [ 1024.311985][T18671] bridge_slave_1: left promiscuous mode [ 1024.320447][T18671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.414468][T18672] ax25_connect(): syz.3.3300 uses autobind, please contact jreuter@yaina.de [ 1025.395766][T18682] ax25_connect(): syz.5.3304 uses autobind, please contact jreuter@yaina.de [ 1025.819271][T18683] binder: 18675:18683 ioctl 400c620e 200002c0 returned -22 [ 1026.176688][ T5823] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1026.351164][ T29] audit: type=1400 audit(1731486932.140:1425): avc: denied { mount } for pid=18694 comm="syz.5.3309" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1026.352761][ T8] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1026.392986][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 1026.442972][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.464315][ T5823] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1026.490313][ T5823] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cc.ff [ 1026.508688][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.528084][ T5823] usb 3-1: Product: syz [ 1026.538618][ T5823] usb 3-1: Manufacturer: syz [ 1026.554867][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1026.557298][ T5823] usb 3-1: SerialNumber: syz [ 1026.564331][ T8] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1026.582254][ T5823] usb 3-1: config 0 descriptor?? [ 1026.585367][ T8] usb 5-1: config 179 has no interface number 0 [ 1026.611431][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1026.636650][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1026.660910][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1026.684952][ T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1026.709336][ T8] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1026.751608][ T8] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1026.772095][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.790912][T18686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1026.834730][ T8] usb 3-1: USB disconnect, device number 100 [ 1027.006406][T18686] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3306'. [ 1027.038324][ T46] usb 5-1: USB disconnect, device number 86 [ 1027.038368][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1027.053389][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1027.996396][T18718] trusted_key: encrypted_key: insufficient parameters specified [ 1029.198960][T18721] ax25_connect(): syz.4.3312 uses autobind, please contact jreuter@yaina.de [ 1029.222967][T18722] ax25_connect(): syz.2.3313 uses autobind, please contact jreuter@yaina.de [ 1030.098237][T18729] openvswitch: netlink: Actions may not be safe on all matching packets [ 1030.907740][T18744] ax25_connect(): syz.3.3319 uses autobind, please contact jreuter@yaina.de [ 1031.564710][ T5823] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1031.745779][ T5823] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 1031.791847][ T5823] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.858034][ T29] audit: type=1326 audit(1731486937.580:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18754 comm="syz.4.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1031.869202][ T5823] usb 2-1: config 8 has no interface number 0 [ 1032.047575][ T5823] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1032.077045][ T5823] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1032.094253][ T29] audit: type=1326 audit(1731486937.580:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18754 comm="syz.4.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1032.098899][ T5823] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1032.225310][ T5823] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=0 [ 1032.235174][ T5823] usb 2-1: Product: syz [ 1032.239346][ T5823] usb 2-1: Manufacturer: syz [ 1032.249252][ T29] audit: type=1326 audit(1731486937.580:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18754 comm="syz.4.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1032.278421][ T5823] usb 2-1: NFC: intf ffff888027c88000 id ffffffff8f0fc580 [ 1032.290104][ T29] audit: type=1326 audit(1731486937.580:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18754 comm="syz.4.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1032.331199][ T29] audit: type=1326 audit(1731486937.580:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18754 comm="syz.4.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x7ffc0000 [ 1032.647337][ T5874] usb 2-1: USB disconnect, device number 70 [ 1032.696967][T18771] openvswitch: netlink: Actions may not be safe on all matching packets [ 1033.392239][ T8] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1033.654969][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1033.661358][ T8] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1033.676273][ T8] usb 6-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 1033.694755][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.719918][ T8] usb 6-1: Product: syz [ 1033.737899][ T8] usb 6-1: Manufacturer: syz [ 1033.742536][ T8] usb 6-1: SerialNumber: syz [ 1033.764918][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3338'. [ 1033.768488][ T8] usb 6-1: config 0 descriptor?? [ 1033.788555][T18797] ax25_connect(): syz.2.3336 uses autobind, please contact jreuter@yaina.de [ 1033.826750][ T8] usb 6-1: bad CDC descriptors [ 1035.738457][ T29] audit: type=1326 audit(1731486941.530:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18814 comm="syz.3.3342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x0 [ 1036.089740][T18782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.101424][T18782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.245417][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 1036.679835][T18840] ax25_connect(): syz.2.3350 uses autobind, please contact jreuter@yaina.de [ 1037.304862][ T46] usb 6-1: USB disconnect, device number 94 [ 1037.394743][ T29] audit: type=1326 audit(1731486943.150:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1038.120125][ T29] audit: type=1326 audit(1731486943.150:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1038.178166][T16976] Dead loop on virtual device ipvlan1, fix it urgently! [ 1039.811360][ T29] audit: type=1326 audit(1731486943.150:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1039.839001][ T29] audit: type=1326 audit(1731486943.150:1435): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1039.867598][ T29] audit: type=1326 audit(1731486943.150:1436): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1039.899322][ T29] audit: type=1326 audit(1731486943.160:1437): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1040.363702][T16976] Dead loop on virtual device ipvlan1, fix it urgently! [ 1040.533052][ T29] audit: type=1326 audit(1731486943.160:1438): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1040.556912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.616341][T18879] netlink: 'syz.4.3360': attribute type 29 has an invalid length. [ 1040.640737][ T29] audit: type=1326 audit(1731486943.160:1439): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18841 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709337e719 code=0x7ffc0000 [ 1040.655821][T18879] netlink: 'syz.4.3360': attribute type 29 has an invalid length. [ 1040.751249][T18881] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1040.768332][ T29] audit: type=1326 audit(1731486945.660:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18847 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1040.876814][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1041.091797][ T29] audit: type=1326 audit(1731486945.660:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18847 comm="syz.3.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1041.494966][ T5823] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1041.654416][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1041.764256][ T5823] usb 5-1: not running at top speed; connect to a high speed hub [ 1041.799381][ T5823] usb 5-1: config 64 has an invalid interface number: 16 but max is 0 [ 1042.695317][ T5823] usb 5-1: config 64 has no interface number 0 [ 1042.731494][ T5823] usb 5-1: config 64 interface 16 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1042.862899][ T5823] usb 5-1: config 64 interface 16 altsetting 6 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1042.878593][ T5823] usb 5-1: config 64 interface 16 altsetting 6 endpoint 0x8F has invalid maxpacket 57417, setting to 64 [ 1042.930543][ T5823] usb 5-1: config 64 interface 16 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1042.955765][ T5823] usb 5-1: config 64 interface 16 has no altsetting 0 [ 1042.996404][ T5823] usb 5-1: string descriptor 0 read error: -22 [ 1043.003189][ T5823] usb 5-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=3c.11 [ 1043.024464][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.035421][T16976] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1043.074525][T18891] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1043.334125][T16976] usb 2-1: device descriptor read/64, error -71 [ 1043.444785][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1043.444801][ T29] audit: type=1326 audit(1731486949.200:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1043.510930][ T29] audit: type=1326 audit(1731486949.200:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1043.515516][ T5823] rc_core: IR keymap rc-xbox-dvd not found [ 1043.598289][ T29] audit: type=1326 audit(1731486949.210:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1043.629812][T16976] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1043.632525][ T5823] Registered IR keymap rc-empty [ 1043.645769][ T5823] rc rc0: Xbox DVD USB Remote Control(040b,6521) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:64.16/rc/rc0 [ 1043.753278][ T29] audit: type=1326 audit(1731486949.210:1453): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1043.782653][ T5823] input: Xbox DVD USB Remote Control(040b,6521) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:64.16/rc/rc0/input53 [ 1044.378276][ T5823] usb 5-1: USB disconnect, device number 87 [ 1044.378316][ C1] xbox_remote 5-1:64.16: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1044.394633][T16976] usb 2-1: device descriptor read/64, error -71 [ 1044.414896][ T29] audit: type=1326 audit(1731486949.210:1454): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1044.438722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.483404][ T29] audit: type=1326 audit(1731486949.220:1455): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1044.627774][ T29] audit: type=1326 audit(1731486949.220:1456): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1044.632941][T16976] usb usb2-port1: attempt power cycle [ 1044.651623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.888690][ T29] audit: type=1326 audit(1731486949.220:1457): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18913 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2537e719 code=0x7ffc0000 [ 1045.224720][T16976] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1045.249424][T16976] usb 2-1: device descriptor read/8, error -71 [ 1045.260333][ T29] audit: type=1326 audit(1731486951.050:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.4.3379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f178db7e719 code=0x0 [ 1045.684967][T16976] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1045.842919][T16976] usb 2-1: device descriptor read/8, error -71 [ 1045.993116][T16976] usb usb2-port1: unable to enumerate USB device [ 1046.261741][ T5823] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1047.632582][ T5823] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1047.702645][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.754081][T18972] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1047.864907][ T5823] usb 3-1: Product: syz [ 1047.869123][ T5823] usb 3-1: Manufacturer: syz [ 1047.873724][ T5823] usb 3-1: SerialNumber: syz [ 1048.579085][T18976] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 1048.798822][ T5823] usb 3-1: config 0 descriptor?? [ 1048.996654][ T5823] usb 3-1: USB disconnect, device number 101 [ 1049.348641][T18985] ax25_connect(): syz.5.3391 uses autobind, please contact jreuter@yaina.de [ 1049.370959][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.747732][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1049.974724][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1049.988492][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.169048][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.179626][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1050.190990][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.210332][ T9] usb 5-1: config 0 descriptor?? [ 1050.343415][ T29] audit: type=1326 audit(1731486956.130:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18998 comm="syz.5.3397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2486b7e719 code=0x0 [ 1050.410522][ T29] audit: type=1400 audit(1731486956.200:1460): avc: denied { watch } for pid=19003 comm="syz.3.3398" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1050.523286][ T29] audit: type=1400 audit(1731486956.200:1461): avc: denied { watch_sb watch_reads } for pid=19003 comm="syz.3.3398" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1050.650476][ T9] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1050.684558][ T9] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1050.759847][ T9] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x4 [ 1051.044261][ T9] cp2112 0003:10C4:EA90.0021: item fetching failed at offset 3/5 [ 1051.157050][ T9] cp2112 0003:10C4:EA90.0021: parse failed [ 1051.163072][ T9] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -22 [ 1051.468023][T19035] trusted_key: encrypted_key: insufficient parameters specified [ 1051.814618][T19036] trusted_key: encrypted_key: insufficient parameters specified [ 1052.156121][ T9] usb 5-1: USB disconnect, device number 88 [ 1052.369063][T19042] ax25_connect(): syz.5.3404 uses autobind, please contact jreuter@yaina.de [ 1053.048019][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3408'. [ 1053.093205][ T29] audit: type=1326 audit(1731486958.880:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1053.240059][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1053.264887][ T29] audit: type=1326 audit(1731486958.880:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1053.331465][ T29] audit: type=1326 audit(1731486958.880:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1053.369095][ T29] audit: type=1326 audit(1731486958.880:1465): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1053.398829][ T29] audit: type=1326 audit(1731486958.880:1466): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1053.428178][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1053.434893][ T29] audit: type=1326 audit(1731486958.880:1467): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1053.567032][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1053.614971][ T9] usb 5-1: config 0 has no interface number 0 [ 1053.634518][ T9] usb 5-1: config 0 interface 126 altsetting 189 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1053.647292][ T29] audit: type=1326 audit(1731486958.880:1468): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67db37e719 code=0x7ffc0000 [ 1053.694287][ T9] usb 5-1: config 0 interface 126 altsetting 189 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 1053.724086][ T9] usb 5-1: config 0 interface 126 altsetting 189 bulk endpoint 0x82 has invalid maxpacket 8 [ 1053.789584][ T9] usb 5-1: config 0 interface 126 has no altsetting 0 [ 1053.807235][ T9] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1053.829954][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.005830][ T9] usb 5-1: Product: syz [ 1054.026657][ T9] usb 5-1: Manufacturer: syz [ 1054.045154][ T9] usb 5-1: SerialNumber: syz [ 1054.072339][ T9] usb 5-1: config 0 descriptor?? [ 1054.090517][T19043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1054.098243][T19043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1054.166837][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.561391][T19070] misc userio: The device must be registered before sending interrupts [ 1054.611340][T19075] misc userio: The device must be registered before sending interrupts [ 1054.774742][ T9] ir_usb 5-1:0.126: IR Dongle converter detected [ 1054.901115][ T9] usb 5-1: IRDA class descriptor not found, device not bound [ 1055.153583][ T9] usb 5-1: USB disconnect, device number 89 [ 1055.466828][T19082] trusted_key: encrypted_key: insufficient parameters specified [ 1055.699187][T19085] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1056.205395][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'. [ 1056.358554][T19098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.398995][T19098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.644499][T15212] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1056.884896][ T955] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1057.097889][ T955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1057.176937][ T955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1057.330116][ T955] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1057.434281][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.559307][ T955] usb 5-1: config 0 descriptor?? [ 1057.598889][T15212] usb 2-1: device descriptor read/64, error -71 [ 1058.051208][T15212] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1058.891173][ T955] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x4 [ 1059.166752][ T955] mcp2221 0003:04D8:00DD.0022: item fetching failed at offset 4/5 [ 1059.177418][ T955] mcp2221 0003:04D8:00DD.0022: can't parse reports [ 1059.184074][ T955] mcp2221 0003:04D8:00DD.0022: probe with driver mcp2221 failed with error -22 [ 1059.224809][T15212] usb 2-1: device descriptor read/64, error -71 [ 1059.365921][T15212] usb usb2-port1: attempt power cycle [ 1059.451835][T19130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19130 comm=syz.3.3431 [ 1059.504974][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1059.505013][ T29] audit: type=1326 audit(1731487221.280:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1059.688397][T19130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=19130 comm=syz.3.3431 [ 1059.689437][ T29] audit: type=1326 audit(1731487221.290:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1060.105043][ T29] audit: type=1326 audit(1731487221.300:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1060.257278][ T29] audit: type=1326 audit(1731487221.300:1474): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1060.281898][ T29] audit: type=1326 audit(1731487221.300:1475): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1060.306483][ T29] audit: type=1326 audit(1731487221.300:1476): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1060.872597][ T29] audit: type=1326 audit(1731487221.300:1477): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1060.928497][T15212] usb 5-1: USB disconnect, device number 90 [ 1060.971548][ T29] audit: type=1326 audit(1731487221.300:1478): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19120 comm="syz.5.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2486b7e719 code=0x7ffc0000 [ 1061.466247][T19154] netlink: 'syz.1.3439': attribute type 1 has an invalid length. [ 1061.473989][T19154] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1061.695096][T15212] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1062.074265][T15212] usb 5-1: Using ep0 maxpacket: 32 [ 1062.131454][T15212] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1062.350913][T15212] usb 5-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 1062.364240][T15212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.397665][T15212] usb 5-1: Product: syz [ 1062.493858][T15212] usb 5-1: Manufacturer: syz [ 1062.594294][T15212] usb 5-1: SerialNumber: syz [ 1062.767352][T15212] usb 5-1: config 0 descriptor?? [ 1062.836774][T15212] usb 5-1: bad CDC descriptors [ 1063.537882][T19179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.548563][T19179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.385661][T19198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1065.426360][T19198] ptrace attach of "./syz-executor exec"[17974] was attempted by "./syz-executor exec"[19198] [ 1065.516423][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'. [ 1065.769409][ T5910] usb 5-1: USB disconnect, device number 91 [ 1066.028597][T19220] [ 1066.030941][T19220] ===================================================== [ 1066.037857][T19220] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1066.045301][T19220] 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 Not tainted [ 1066.052394][T19220] ----------------------------------------------------- [ 1066.059308][T19220] syz.4.3459/19220 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1066.067016][T19220] ffff88805ec7b210 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x138/0x520 [ 1066.075741][T19220] [ 1066.075741][T19220] and this task is already holding: [ 1066.083619][T19220] ffff88802af91230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xa4/0x370 [ 1066.093290][T19220] which would create a new lock dependency: [ 1066.099158][T19220] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 1066.107080][T19220] [ 1066.107080][T19220] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1066.116519][T19220] (&dev->event_lock#2){..-.}-{2:2} [ 1066.116549][T19220] [ 1066.116549][T19220] ... which became SOFTIRQ-irq-safe at: [ 1066.129430][T19220] lock_acquire.part.0+0x11b/0x380 [ 1066.134622][T19220] _raw_spin_lock_irqsave+0x3a/0x60 [ 1066.139901][T19220] input_event+0x70/0xa0 [ 1066.144210][T19220] hidinput_report_event+0xb2/0x100 [ 1066.149476][T19220] hid_report_raw_event+0x274/0x11c0 [ 1066.154827][T19220] __hid_input_report.constprop.0+0x341/0x440 [ 1066.160985][T19220] hid_ctrl+0x49f/0x550 [ 1066.165211][T19220] __usb_hcd_giveback_urb+0x389/0x6e0 [ 1066.170649][T19220] usb_hcd_giveback_urb+0x396/0x450 [ 1066.175913][T19220] dummy_timer+0x17f0/0x3930 [ 1066.180570][T19220] __hrtimer_run_queues+0x20a/0xae0 [ 1066.185834][T19220] hrtimer_run_softirq+0x17d/0x350 [ 1066.191010][T19220] handle_softirqs+0x213/0x8f0 [ 1066.195841][T19220] irq_exit_rcu+0xbb/0x120 [ 1066.200324][T19220] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1066.206027][T19220] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1066.212091][T19220] finish_task_switch.isra.0+0x220/0xcc0 [ 1066.217792][T19220] __schedule+0xe5d/0x5740 [ 1066.222277][T19220] schedule+0xe7/0x350 [ 1066.226430][T19220] schedule_timeout+0x258/0x2a0 [ 1066.231349][T19220] __wait_for_common+0x3e1/0x600 [ 1066.236356][T19220] rdmsr_safe_on_cpu+0x1de/0x210 [ 1066.241364][T19220] msr_read+0x19e/0x250 [ 1066.245587][T19220] vfs_read+0x1df/0xbe0 [ 1066.249814][T19220] ksys_read+0x12f/0x260 [ 1066.254129][T19220] do_syscall_64+0xcd/0x250 [ 1066.258724][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.264692][T19220] [ 1066.264692][T19220] to a SOFTIRQ-irq-unsafe lock: [ 1066.271683][T19220] (tasklist_lock){.+.+}-{2:2} [ 1066.271703][T19220] [ 1066.271703][T19220] ... which became SOFTIRQ-irq-unsafe at: [ 1066.284286][T19220] ... [ 1066.284297][T19220] lock_acquire.part.0+0x11b/0x380 [ 1066.292028][T19220] _raw_read_lock+0x5f/0x70 [ 1066.296600][T19220] __do_wait+0x105/0x890 [ 1066.300913][T19220] do_wait+0x219/0x570 [ 1066.305064][T19220] kernel_wait+0xa0/0x160 [ 1066.309465][T19220] call_usermodehelper_exec_work+0xf1/0x170 [ 1066.315428][T19220] process_one_work+0x9c5/0x1ba0 [ 1066.320431][T19220] worker_thread+0x6c8/0xf00 [ 1066.325084][T19220] kthread+0x2c1/0x3a0 [ 1066.329221][T19220] ret_from_fork+0x45/0x80 [ 1066.333706][T19220] ret_from_fork_asm+0x1a/0x30 [ 1066.338543][T19220] [ 1066.338543][T19220] other info that might help us debug this: [ 1066.338543][T19220] [ 1066.348745][T19220] Chain exists of: [ 1066.348745][T19220] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1066.348745][T19220] [ 1066.361678][T19220] Possible interrupt unsafe locking scenario: [ 1066.361678][T19220] [ 1066.369988][T19220] CPU0 CPU1 [ 1066.375373][T19220] ---- ---- [ 1066.380801][T19220] lock(tasklist_lock); [ 1066.385066][T19220] local_irq_disable(); [ 1066.391808][T19220] lock(&dev->event_lock#2); [ 1066.399078][T19220] lock(&new->fa_lock); [ 1066.405825][T19220] [ 1066.409348][T19220] lock(&dev->event_lock#2); [ 1066.414190][T19220] [ 1066.414190][T19220] *** DEADLOCK *** [ 1066.414190][T19220] [ 1066.422321][T19220] 6 locks held by syz.4.3459/19220: [ 1066.427496][T19220] #0: ffff88802bcca118 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x207/0x750 [ 1066.436619][T19220] #1: ffff88802af91230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xa4/0x370 [ 1066.446693][T19220] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xca/0x370 [ 1066.456341][T19220] #3: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8b/0x880 [ 1066.465885][T19220] #4: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x3d/0xa30 [ 1066.475957][T19220] #5: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x6d/0x520 [ 1066.484987][T19220] [ 1066.484987][T19220] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1066.495362][T19220] -> (&dev->event_lock#2){..-.}-{2:2} { [ 1066.500913][T19220] IN-SOFTIRQ-W at: [ 1066.504872][T19220] lock_acquire.part.0+0x11b/0x380 [ 1066.511621][T19220] _raw_spin_lock_irqsave+0x3a/0x60 [ 1066.518540][T19220] input_event+0x70/0xa0 [ 1066.524413][T19220] hidinput_report_event+0xb2/0x100 [ 1066.531339][T19220] hid_report_raw_event+0x274/0x11c0 [ 1066.538254][T19220] __hid_input_report.constprop.0+0x341/0x440 [ 1066.545951][T19220] hid_ctrl+0x49f/0x550 [ 1066.551736][T19220] __usb_hcd_giveback_urb+0x389/0x6e0 [ 1066.558734][T19220] usb_hcd_giveback_urb+0x396/0x450 [ 1066.565558][T19220] dummy_timer+0x17f0/0x3930 [ 1066.571775][T19220] __hrtimer_run_queues+0x20a/0xae0 [ 1066.578604][T19220] hrtimer_run_softirq+0x17d/0x350 [ 1066.585343][T19220] handle_softirqs+0x213/0x8f0 [ 1066.591735][T19220] irq_exit_rcu+0xbb/0x120 [ 1066.597779][T19220] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1066.605056][T19220] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1066.612670][T19220] finish_task_switch.isra.0+0x220/0xcc0 [ 1066.619929][T19220] __schedule+0xe5d/0x5740 [ 1066.625988][T19220] schedule+0xe7/0x350 [ 1066.631688][T19220] schedule_timeout+0x258/0x2a0 [ 1066.638169][T19220] __wait_for_common+0x3e1/0x600 [ 1066.644740][T19220] rdmsr_safe_on_cpu+0x1de/0x210 [ 1066.651322][T19220] msr_read+0x19e/0x250 [ 1066.657107][T19220] vfs_read+0x1df/0xbe0 [ 1066.662897][T19220] ksys_read+0x12f/0x260 [ 1066.668774][T19220] do_syscall_64+0xcd/0x250 [ 1066.674910][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.682435][T19220] INITIAL USE at: [ 1066.686327][T19220] lock_acquire.part.0+0x11b/0x380 [ 1066.692978][T19220] _raw_spin_lock_irqsave+0x3a/0x60 [ 1066.699721][T19220] input_inject_event+0xa4/0x370 [ 1066.706199][T19220] led_set_brightness+0x211/0x290 [ 1066.712765][T19220] kbd_led_trigger_activate+0xcb/0x110 [ 1066.719769][T19220] led_trigger_set+0x59a/0xc60 [ 1066.726081][T19220] led_trigger_set_default+0x1bd/0x2a0 [ 1066.733084][T19220] led_classdev_register_ext+0x78c/0x9e0 [ 1066.740347][T19220] input_leds_connect+0x552/0x8e0 [ 1066.746918][T19220] input_attach_handler.isra.0+0x181/0x260 [ 1066.754263][T19220] input_register_device+0xa84/0x1110 [ 1066.761174][T19220] atkbd_connect+0x5e2/0xa20 [ 1066.767310][T19220] serio_driver_probe+0x74/0xa0 [ 1066.773698][T19220] really_probe+0x23e/0xa90 [ 1066.779748][T19220] __driver_probe_device+0x1de/0x440 [ 1066.786580][T19220] driver_probe_device+0x4c/0x1b0 [ 1066.793149][T19220] __driver_attach+0x283/0x580 [ 1066.799473][T19220] bus_for_each_dev+0x13c/0x1d0 [ 1066.805867][T19220] serio_handle_event+0x2bb/0xa90 [ 1066.812441][T19220] process_one_work+0x9c5/0x1ba0 [ 1066.818920][T19220] worker_thread+0x6c8/0xf00 [ 1066.825062][T19220] kthread+0x2c1/0x3a0 [ 1066.830675][T19220] ret_from_fork+0x45/0x80 [ 1066.836632][T19220] ret_from_fork_asm+0x1a/0x30 [ 1066.842941][T19220] } [ 1066.845417][T19220] ... key at: [] __key.7+0x0/0x40 [ 1066.852524][T19220] [ 1066.852524][T19220] the dependencies between the lock to be acquired [ 1066.852530][T19220] and SOFTIRQ-irq-unsafe lock: [ 1066.865994][T19220] -> (tasklist_lock){.+.+}-{2:2} { [ 1066.871268][T19220] HARDIRQ-ON-R at: [ 1066.875397][T19220] lock_acquire.part.0+0x11b/0x380 [ 1066.882484][T19220] _raw_read_lock+0x5f/0x70 [ 1066.888967][T19220] __do_wait+0x105/0x890 [ 1066.895195][T19220] do_wait+0x219/0x570 [ 1066.901245][T19220] kernel_wait+0xa0/0x160 [ 1066.907556][T19220] call_usermodehelper_exec_work+0xf1/0x170 [ 1066.915425][T19220] process_one_work+0x9c5/0x1ba0 [ 1066.922338][T19220] worker_thread+0x6c8/0xf00 [ 1066.928903][T19220] kthread+0x2c1/0x3a0 [ 1066.934952][T19220] ret_from_fork+0x45/0x80 [ 1066.941340][T19220] ret_from_fork_asm+0x1a/0x30 [ 1066.948082][T19220] SOFTIRQ-ON-R at: [ 1066.952212][T19220] lock_acquire.part.0+0x11b/0x380 [ 1066.959298][T19220] _raw_read_lock+0x5f/0x70 [ 1066.965780][T19220] __do_wait+0x105/0x890 [ 1066.972006][T19220] do_wait+0x219/0x570 [ 1066.978065][T19220] kernel_wait+0xa0/0x160 [ 1066.984375][T19220] call_usermodehelper_exec_work+0xf1/0x170 [ 1066.992244][T19220] process_one_work+0x9c5/0x1ba0 [ 1066.999157][T19220] worker_thread+0x6c8/0xf00 [ 1067.005722][T19220] kthread+0x2c1/0x3a0 [ 1067.011768][T19220] ret_from_fork+0x45/0x80 [ 1067.018161][T19220] ret_from_fork_asm+0x1a/0x30 [ 1067.024905][T19220] INITIAL USE at: [ 1067.028951][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.035950][T19220] _raw_write_lock_irq+0x36/0x50 [ 1067.042781][T19220] copy_process+0x4181/0x8cb0 [ 1067.049353][T19220] kernel_clone+0xfd/0x960 [ 1067.055660][T19220] user_mode_thread+0xb4/0xf0 [ 1067.062228][T19220] rest_init+0x23/0x2b0 [ 1067.068272][T19220] start_kernel+0x3e4/0x4d0 [ 1067.074665][T19220] x86_64_start_reservations+0x18/0x30 [ 1067.082013][T19220] x86_64_start_kernel+0xb2/0xc0 [ 1067.088839][T19220] common_startup_64+0x13e/0x148 [ 1067.095666][T19220] INITIAL READ USE at: [ 1067.100152][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.107583][T19220] _raw_read_lock+0x5f/0x70 [ 1067.114411][T19220] __do_wait+0x105/0x890 [ 1067.120981][T19220] do_wait+0x219/0x570 [ 1067.127375][T19220] kernel_wait+0xa0/0x160 [ 1067.134032][T19220] call_usermodehelper_exec_work+0xf1/0x170 [ 1067.142281][T19220] process_one_work+0x9c5/0x1ba0 [ 1067.149571][T19220] worker_thread+0x6c8/0xf00 [ 1067.156496][T19220] kthread+0x2c1/0x3a0 [ 1067.162896][T19220] ret_from_fork+0x45/0x80 [ 1067.169641][T19220] ret_from_fork_asm+0x1a/0x30 [ 1067.176737][T19220] } [ 1067.179386][T19220] ... key at: [] tasklist_lock+0x18/0x40 [ 1067.187265][T19220] ... acquired at: [ 1067.191217][T19220] _raw_read_lock+0x5f/0x70 [ 1067.195878][T19220] send_sigurg+0xf3/0xc80 [ 1067.200363][T19220] sk_send_sigurg+0x76/0x360 [ 1067.205106][T19220] tcp_urg+0x343/0xb80 [ 1067.209333][T19220] tcp_rcv_established+0x8a6/0x21c0 [ 1067.214700][T19220] tcp_v6_do_rcv+0x83c/0x16e0 [ 1067.219531][T19220] __release_sock+0x14c/0x400 [ 1067.224360][T19220] release_sock+0x5a/0x220 [ 1067.228929][T19220] sk_stream_wait_memory+0x65e/0x10e0 [ 1067.234452][T19220] tcp_sendmsg_locked+0xa65/0x3750 [ 1067.239718][T19220] tcp_sendmsg+0x2e/0x50 [ 1067.244113][T19220] inet6_sendmsg+0xb9/0x140 [ 1067.248767][T19220] __sys_sendto+0x36b/0x4d0 [ 1067.253423][T19220] __x64_sys_sendto+0xe0/0x1c0 [ 1067.258338][T19220] do_syscall_64+0xcd/0x250 [ 1067.262993][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.269049][T19220] [ 1067.271349][T19220] -> (&f_owner->lock){....}-{2:2} { [ 1067.276632][T19220] INITIAL USE at: [ 1067.280589][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.287415][T19220] _raw_write_lock_irq+0x36/0x50 [ 1067.294075][T19220] __f_setown+0x67/0x3c0 [ 1067.300035][T19220] fcntl_dirnotify+0x92f/0xcb0 [ 1067.306520][T19220] do_fcntl+0xe00/0x1510 [ 1067.312477][T19220] __x64_sys_fcntl+0x176/0x210 [ 1067.318959][T19220] do_syscall_64+0xcd/0x250 [ 1067.325178][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.332804][T19220] INITIAL READ USE at: [ 1067.337202][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.344493][T19220] _raw_read_lock_irqsave+0x74/0x90 [ 1067.351851][T19220] send_sigurg+0x65/0xc80 [ 1067.358361][T19220] sk_send_sigurg+0x76/0x360 [ 1067.365114][T19220] tcp_urg+0x343/0xb80 [ 1067.371348][T19220] tcp_rcv_established+0x8a6/0x21c0 [ 1067.378714][T19220] tcp_v6_do_rcv+0x83c/0x16e0 [ 1067.385551][T19220] __release_sock+0x14c/0x400 [ 1067.392382][T19220] release_sock+0x5a/0x220 [ 1067.398958][T19220] sk_stream_wait_memory+0x65e/0x10e0 [ 1067.406494][T19220] tcp_sendmsg_locked+0xa65/0x3750 [ 1067.413761][T19220] tcp_sendmsg+0x2e/0x50 [ 1067.420168][T19220] inet6_sendmsg+0xb9/0x140 [ 1067.427085][T19220] __sys_sendto+0x36b/0x4d0 [ 1067.433737][T19220] __x64_sys_sendto+0xe0/0x1c0 [ 1067.440653][T19220] do_syscall_64+0xcd/0x250 [ 1067.447327][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.455395][T19220] } [ 1067.457959][T19220] ... key at: [] __key.1+0x0/0x40 [ 1067.465141][T19220] ... acquired at: [ 1067.469009][T19220] _raw_read_lock_irqsave+0x74/0x90 [ 1067.474364][T19220] send_sigio+0x31/0x3e0 [ 1067.478761][T19220] kill_fasync+0x21a/0x520 [ 1067.483330][T19220] sock_wake_async+0x132/0x160 [ 1067.488250][T19220] sock_def_readable+0x520/0x610 [ 1067.493341][T19220] tcp_urg+0x656/0xb80 [ 1067.497566][T19220] tcp_rcv_established+0x8a6/0x21c0 [ 1067.502917][T19220] tcp_v6_do_rcv+0x83c/0x16e0 [ 1067.507754][T19220] __release_sock+0x14c/0x400 [ 1067.512583][T19220] release_sock+0x5a/0x220 [ 1067.517152][T19220] sk_stream_wait_memory+0x65e/0x10e0 [ 1067.522677][T19220] tcp_sendmsg_locked+0xa65/0x3750 [ 1067.527942][T19220] tcp_sendmsg+0x2e/0x50 [ 1067.532335][T19220] inet6_sendmsg+0xb9/0x140 [ 1067.536991][T19220] __sys_sendto+0x36b/0x4d0 [ 1067.541657][T19220] __x64_sys_sendto+0xe0/0x1c0 [ 1067.546574][T19220] do_syscall_64+0xcd/0x250 [ 1067.551245][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.557296][T19220] [ 1067.559599][T19220] -> (&new->fa_lock){....}-{2:2} { [ 1067.564716][T19220] INITIAL USE at: [ 1067.568587][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.575240][T19220] _raw_write_lock_irq+0x36/0x50 [ 1067.581736][T19220] fasync_remove_entry+0xb9/0x1e0 [ 1067.588308][T19220] fasync_helper+0xaf/0xd0 [ 1067.594281][T19220] sock_fasync+0x92/0x140 [ 1067.600159][T19220] __fput+0x958/0xb60 [ 1067.605683][T19220] task_work_run+0x14e/0x250 [ 1067.611813][T19220] do_exit+0xadd/0x2d70 [ 1067.617517][T19220] do_group_exit+0xd3/0x2a0 [ 1067.623565][T19220] get_signal+0x25fb/0x2770 [ 1067.629621][T19220] arch_do_signal_or_restart+0x90/0x7e0 [ 1067.636715][T19220] syscall_exit_to_user_mode+0x150/0x2a0 [ 1067.643902][T19220] do_syscall_64+0xda/0x250 [ 1067.649950][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.657394][T19220] INITIAL READ USE at: [ 1067.661700][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.668786][T19220] _raw_read_lock_irqsave+0x74/0x90 [ 1067.675973][T19220] kill_fasync+0x138/0x520 [ 1067.682372][T19220] sock_wake_async+0x132/0x160 [ 1067.689114][T19220] sk_wake_async+0x102/0x2e0 [ 1067.695685][T19220] tcp_rcv_state_process+0x320d/0x4f30 [ 1067.703118][T19220] tcp_v6_do_rcv+0x435/0x16e0 [ 1067.709787][T19220] __release_sock+0x14c/0x400 [ 1067.716443][T19220] release_sock+0x5a/0x220 [ 1067.722838][T19220] tcp_sendmsg+0x38/0x50 [ 1067.729055][T19220] inet6_sendmsg+0xb9/0x140 [ 1067.735535][T19220] __sys_sendto+0x36b/0x4d0 [ 1067.742026][T19220] __x64_sys_sendto+0xe0/0x1c0 [ 1067.748772][T19220] do_syscall_64+0xcd/0x250 [ 1067.755266][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.763142][T19220] } [ 1067.765631][T19220] ... key at: [] __key.0+0x0/0x40 [ 1067.772724][T19220] ... acquired at: [ 1067.776503][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.781766][T19220] _raw_read_lock_irqsave+0x74/0x90 [ 1067.787123][T19220] kill_fasync+0x138/0x520 [ 1067.791695][T19220] mousedev_notify_readers+0x6d9/0xa30 [ 1067.797326][T19220] mousedev_event+0x84e/0x1490 [ 1067.802242][T19220] input_handle_events_default+0x116/0x1b0 [ 1067.808208][T19220] input_pass_values+0x738/0x880 [ 1067.813299][T19220] input_handle_event+0xf0b/0x14d0 [ 1067.818563][T19220] input_inject_event+0x1bb/0x370 [ 1067.823740][T19220] evdev_write+0x44f/0x750 [ 1067.828311][T19220] vfs_write+0x24c/0x1150 [ 1067.832798][T19220] ksys_write+0x1fa/0x260 [ 1067.837279][T19220] do_syscall_64+0xcd/0x250 [ 1067.841933][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.847987][T19220] [ 1067.850293][T19220] [ 1067.850293][T19220] stack backtrace: [ 1067.856166][T19220] CPU: 1 UID: 0 PID: 19220 Comm: syz.4.3459 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 1067.866915][T19220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1067.876972][T19220] Call Trace: [ 1067.880236][T19220] [ 1067.883154][T19220] dump_stack_lvl+0x116/0x1f0 [ 1067.887817][T19220] check_irq_usage+0xf22/0x1290 [ 1067.892657][T19220] ? is_bpf_text_address+0x30/0x1a0 [ 1067.897848][T19220] ? __pfx_check_irq_usage+0x10/0x10 [ 1067.903150][T19220] ? hlock_conflict+0x58/0x200 [ 1067.907909][T19220] ? __bfs+0x2fa/0x670 [ 1067.911964][T19220] ? __pfx_hlock_conflict+0x10/0x10 [ 1067.917176][T19220] ? lockdep_lock+0xc6/0x200 [ 1067.921770][T19220] ? __pfx_lockdep_lock+0x10/0x10 [ 1067.926783][T19220] ? __lock_acquire+0x2521/0x3ce0 [ 1067.931791][T19220] __lock_acquire+0x2521/0x3ce0 [ 1067.936630][T19220] ? __pfx___lock_acquire+0x10/0x10 [ 1067.941808][T19220] ? __pfx___lock_acquire+0x10/0x10 [ 1067.946991][T19220] lock_acquire.part.0+0x11b/0x380 [ 1067.952090][T19220] ? kill_fasync+0x138/0x520 [ 1067.956668][T19220] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1067.962280][T19220] ? rcu_is_watching+0x12/0xc0 [ 1067.967027][T19220] ? trace_lock_acquire+0x14a/0x1d0 [ 1067.972216][T19220] ? kill_fasync+0x138/0x520 [ 1067.976790][T19220] ? lock_acquire+0x2f/0xb0 [ 1067.981269][T19220] ? kill_fasync+0x138/0x520 [ 1067.985845][T19220] _raw_read_lock_irqsave+0x74/0x90 [ 1067.991031][T19220] ? kill_fasync+0x138/0x520 [ 1067.995620][T19220] kill_fasync+0x138/0x520 [ 1068.000020][T19220] mousedev_notify_readers+0x6d9/0xa30 [ 1068.005469][T19220] mousedev_event+0x84e/0x1490 [ 1068.010226][T19220] ? __pfx_mousedev_event+0x10/0x10 [ 1068.015410][T19220] ? rcu_is_watching+0x12/0xc0 [ 1068.020503][T19220] ? trace_lock_acquire+0x14a/0x1d0 [ 1068.025687][T19220] input_handle_events_default+0x116/0x1b0 [ 1068.031486][T19220] input_pass_values+0x738/0x880 [ 1068.036407][T19220] input_handle_event+0xf0b/0x14d0 [ 1068.041502][T19220] input_inject_event+0x1bb/0x370 [ 1068.046511][T19220] evdev_write+0x44f/0x750 [ 1068.050910][T19220] ? __pfx_evdev_write+0x10/0x10 [ 1068.055831][T19220] ? bpf_lsm_file_permission+0x9/0x10 [ 1068.061182][T19220] ? security_file_permission+0x71/0x210 [ 1068.066800][T19220] ? __pfx_evdev_write+0x10/0x10 [ 1068.071717][T19220] vfs_write+0x24c/0x1150 [ 1068.076052][T19220] ? __fget_files+0x23a/0x3f0 [ 1068.080715][T19220] ? __pfx_lock_release+0x10/0x10 [ 1068.085756][T19220] ? trace_lock_acquire+0x14a/0x1d0 [ 1068.090936][T19220] ? __pfx_vfs_write+0x10/0x10 [ 1068.095686][T19220] ? lock_acquire+0x2f/0xb0 [ 1068.100167][T19220] ? __fget_files+0x40/0x3f0 [ 1068.104744][T19220] ? __fget_files+0x244/0x3f0 [ 1068.109414][T19220] ksys_write+0x1fa/0x260 [ 1068.113721][T19220] ? __pfx_ksys_write+0x10/0x10 [ 1068.118563][T19220] do_syscall_64+0xcd/0x250 [ 1068.123047][T19220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.128939][T19220] RIP: 0033:0x7f178db7e719 [ 1068.133334][T19220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.152940][T19220] RSP: 002b:00007f178e8e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1068.161346][T19220] RAX: ffffffffffffffda RBX: 00007f178dd36058 RCX: 00007f178db7e719 [ 1068.169299][T19220] RDX: 0000000000000918 RSI: 0000000020000040 RDI: 0000000000000008 [ 1068.177251][T19220] RBP: 00007f178dbf1616 R08: 0000000000000000 R09: 0000000000000000 [ 1068.185225][T19220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.193276][T19220] R13: 0000000000000000 R14: 00007f178dd36058 R15: 00007fffbc4d9e78 [ 1068.201232][T19220] [ 1068.312199][ T5877] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1068.575705][ T5877] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1068.583817][ T5877] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.595191][ T5877] usb 6-1: config 8 has no interface number 0 [ 1068.601266][ T5877] usb 6-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.612655][ T5877] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1068.627464][ T5877] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1068.636573][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 1068.644547][ T5877] usb 6-1: Product: syz [ 1068.652104][ T5877] usb 6-1: NFC: intf ffff88801b1b8000 id ffffffff8f0fc580 [ 1068.829712][ T5877] usb 6-1: USB disconnect, device number 95